This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          215xnU7nH1Vkz/5GQQGhhsAr/tT2EwbSYelmkjEUCDE=
Subject key identifier:   62:8C:7F:04:38:9F:F3:91:F8:D8:02:55:39:37:B8:DA:B5:F4:8E:81
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       019B465D3EA71058F3BBD6FDAB37F70EA309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          15D0
Signing time:             Mon 22 Dec 2025 14:01:14 +0000
Manifest this update:     Mon 22 Dec 2025 14:01:14 +0000
Manifest next update:     Tue 23 Dec 2025 14:01:14 +0000
Files and hashes:         1: 2vth8JCO_Wyd-5uRLg3PTDr-fFg.roa (hash: 9LUpst7vMTMHTa3hQ4R9T7kLec7gteJsYM3fKAc8ccE=)
                          2: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: nV0f/E9MOMfuJ3xPP5qzMx7yaU7QK1nrBoAVLTa0S/M=)
                          3: LNIMITYAbnJvMYE5J7ei8eACNa0.roa (hash: TvpR/eCPWYxWewvW/DN1BJNGxjnk3BZ6oYY2B4jFvf8=)
                          4: TLJiRRlOwtTTUz20TZKNV_ibyho.roa (hash: nl+gTrTAcZwj7M8TY8eq7Uo7CmcdFRJEseyL47O4t3o=)
                          5: vd7D-3mdClrE2pBAFW5I8DbmNHQ.roa (hash: XeWgnqjmy+ysQNojNpVwYywd9xnz6oTic5jOkSU+sTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 14:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:46:5d:3e:a7:10:58:f3:bb:d6:fd:ab:37:f7:0e:a3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Dec 22 14:01:14 2025 GMT
            Not After : Dec 23 14:01:14 2025 GMT
        Subject: CN=628c7f04389ff391f8d802553937b8dab5f48e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:11:10:db:02:41:6e:d6:3d:31:71:3d:62:
                    70:db:88:a5:8f:3f:4b:38:27:b2:61:04:b2:ac:89:
                    68:4d:0a:22:80:f2:d3:76:33:b5:ee:83:1c:b4:32:
                    b7:12:a6:d6:cb:c9:f1:d1:d4:bb:42:b2:7f:9c:71:
                    21:6e:ba:d5:6d:65:ce:5f:39:91:5b:db:ed:2f:92:
                    0c:4f:9f:54:87:b1:c0:76:de:cd:04:45:d6:5b:3d:
                    06:09:7f:cf:aa:e9:b3:94:f1:0e:19:5f:26:a9:c1:
                    b4:e9:c7:c8:a4:3a:4e:a4:4b:e9:59:db:1f:44:2a:
                    32:25:57:c8:34:f0:67:6d:20:c2:78:ba:e6:39:31:
                    7e:ad:43:e3:ae:8c:eb:1e:a1:9a:60:86:b1:2d:46:
                    e4:20:7a:ba:57:9f:be:18:03:09:59:d7:9f:db:ac:
                    90:22:a9:e3:0c:0a:6b:9c:0d:4b:15:a7:df:be:c5:
                    8e:9f:36:f5:97:33:f4:aa:f5:bd:ae:53:c3:c3:90:
                    99:0b:bb:4e:f8:96:d8:e2:41:75:20:f6:4c:e7:93:
                    15:c2:cc:d1:38:7a:d0:95:df:72:6d:0f:45:5d:41:
                    19:fd:75:9b:93:fc:f0:8f:af:0f:f6:3a:3f:31:51:
                    f0:d7:10:e9:4f:08:83:9b:90:88:9b:56:77:80:0b:
                    d2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8C:7F:04:38:9F:F3:91:F8:D8:02:55:39:37:B8:DA:B5:F4:8E:81
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:51:ec:02:87:c5:4d:4e:5f:98:86:e8:09:81:ec:ba:e9:68:
         d4:5d:1b:24:24:49:12:e4:7b:15:45:b8:66:01:c9:fc:9d:a9:
         a8:3e:79:4c:51:bb:47:c4:eb:cc:99:d0:30:81:a9:56:f2:8c:
         9d:f8:85:96:f9:54:98:8b:b5:16:a5:40:2d:1e:26:4b:42:9e:
         ec:a6:73:3b:de:ab:25:d1:ee:61:b0:81:96:2a:1e:5c:4a:ad:
         68:5a:42:bc:76:a6:9a:7f:44:a3:f0:27:56:43:a8:a4:f4:62:
         f7:f4:92:2f:b2:4d:fd:11:4d:73:94:b5:47:eb:02:e2:6c:43:
         43:4f:1c:bf:d4:ab:49:04:cc:f9:e3:6c:96:9d:e0:68:4b:01:
         99:25:ea:80:e6:12:05:51:40:be:23:bf:f5:17:b6:00:ee:e4:
         45:8b:1f:88:3f:fa:37:4d:d5:ab:a7:de:56:68:bd:33:04:76:
         a5:e6:0a:d5:b7:1e:44:d3:bb:e0:2e:bc:8f:2c:26:5b:63:67:
         d4:df:8f:92:fa:43:a3:3f:a7:33:59:d4:d7:12:ea:6d:e4:a3:
         e0:aa:d1:ec:c8:08:07:4f:df:44:0c:9f:75:3d:8f:78:a7:64:
         45:1e:f4:3f:a9:d0:eb:fc:99:36:4c:65:40:4d:29:c9:68:8f:
         32:9d:77:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtGXT6nEFjzu9b9qzf3DqMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmZlODgyZDEzZTgwM2ZjMTk0MzczZWE0MGQ4YTVhOWU2
OWYzMDQwHhcNMjUxMjIyMTQwMTE0WhcNMjUxMjIzMTQwMTE0WjAzMTEwLwYDVQQD
Eyg2MjhjN2YwNDM4OWZmMzkxZjhkODAyNTUzOTM3YjhkYWI1ZjQ4ZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoERENsCQW7WPTFxPWJw24iljz9L
OCeyYQSyrIloTQoigPLTdjO17oMctDK3EqbWy8nx0dS7QrJ/nHEhbrrVbWXOXzmR
W9vtL5IMT59Uh7HAdt7NBEXWWz0GCX/PqumzlPEOGV8mqcG06cfIpDpOpEvpWdsf
RCoyJVfINPBnbSDCeLrmOTF+rUPjrozrHqGaYIaxLUbkIHq6V5++GAMJWdef26yQ
IqnjDAprnA1LFaffvsWOnzb1lzP0qvW9rlPDw5CZC7tO+JbY4kF1IPZM55MVwszR
OHrQld9ybQ9FXUEZ/XWbk/zwj68P9jo/MVHw1xDpTwiDm5CIm1Z3gAvS5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKMfwQ4n/OR+NgCVTk3uNq19I6BMB8GA1UdIwQY
MBaAFAG/6ILRPoA/wZQ3PqQNilqeafMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjIt
MmE1NTM5OWE4MGIwLzEvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjItMmE1NTM5OWE4MGIw
LzEvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFHsAofF
TU5fmIboCYHsuulo1F0bJCRJEuR7FUW4ZgHJ/J2pqD55TFG7R8TrzJnQMIGpVvKM
nfiFlvlUmIu1FqVALR4mS0Ke7KZzO96rJdHuYbCBlioeXEqtaFpCvHammn9Eo/An
VkOopPRi9/SSL7JN/RFNc5S1R+sC4mxDQ08cv9SrSQTM+eNslp3gaEsBmSXqgOYS
BVFAviO/9Re2AO7kRYsfiD/6N03Vq6feVmi9MwR2peYK1bceRNO74C68jywmW2Nn
1N+PkvpDoz+nM1nU1xLqbeSj4KrR7MgIB0/fRAyfdT2PeKdkRR70P6nQ6/yZNkxl
QE0pyWiPMp13JQ==
-----END CERTIFICATE-----
Generated at Mon Dec 22 19:30:09 2025 by rpki-client