This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          gaCb9ll/4ypFgvBKW6LZKDEl7vwdRzqo9e/IRl/S7vk=
Subject key identifier:   49:0E:F2:3B:F5:DE:77:CB:43:B5:E9:1F:2C:DC:25:A4:2E:A0:B8:54
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       019B3CEC829A93F30D1A8EE71194E7B51A04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          1347
Signing time:             Sat 20 Dec 2025 18:01:31 +0000
Manifest this update:     Sat 20 Dec 2025 18:01:31 +0000
Manifest next update:     Sun 21 Dec 2025 18:01:31 +0000
Files and hashes:         1: 4GuL2X1E_SLrYnVSCwy_ST-59To.roa (hash: B3Rr2GuOh+LH8USBqPds0Fj4yZirNfUVWUO2icWF5X4=)
                          2: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: aHJaPCK8va0ZhF5yv0ZpP5gzBvoSaHothBrYRrgzEfo=)
                          3: Ww3QFrBBPhpwAl7mRt-Itp0xrdE.roa (hash: sog2kRkfH6oiAs3g2Z8X0J+7kikKM+3VZnFZGtK1Mj0=)
                          4: ZrwqrohL9iM53Sm0L32LtVEZ960.roa (hash: 7oEynZg573qxaJLTtHy8ld55GTPVxhY3d4qewpnFsjs=)
                          5: _b0z6FtQr_-kzugLqg8I9Bk1i60.roa (hash: wcGQMCEvkyuwbezuT9c/jFgmFbPZsuwa534V81cijII=)
                          6: s6hj31TUX8s-wcJUAy7yqXkixiY.roa (hash: Mp4dNxXIlsBREcr9I+ebDJif7lStdzMecgBPONGzVs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 18:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:ec:82:9a:93:f3:0d:1a:8e:e7:11:94:e7:b5:1a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Dec 20 18:01:31 2025 GMT
            Not After : Dec 21 18:01:31 2025 GMT
        Subject: CN=490ef23bf5de77cb43b5e91f2cdc25a42ea0b854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:3d:83:32:89:f6:2d:52:ed:a7:f3:d2:de:
                    89:15:ca:b1:d3:e7:8f:61:00:0d:12:90:cd:3e:f8:
                    68:d2:ac:c8:40:d8:89:4b:38:16:0b:16:94:7b:14:
                    5c:c6:54:d2:d9:d7:98:52:f3:6f:0c:81:f7:f4:95:
                    78:bb:99:8f:e3:ef:10:1f:c3:b7:3f:64:11:1b:ac:
                    db:49:f7:80:2d:e7:18:e0:56:fa:bd:70:bc:72:53:
                    61:e6:c8:67:74:6b:1b:e1:1a:43:69:fb:ac:e2:93:
                    aa:7c:a0:48:88:39:f0:52:cb:74:5f:4e:b4:e0:fa:
                    61:3a:33:ee:d0:1c:38:89:ee:bc:a6:8e:8d:08:64:
                    a3:d1:f1:2b:24:16:c2:be:fb:41:02:15:c0:9a:11:
                    4a:49:d3:2c:68:40:44:c0:28:0f:a4:10:03:06:31:
                    2f:86:d8:09:99:0a:87:ad:b1:4e:d2:49:8d:9a:ba:
                    33:86:1a:c9:d3:80:fa:c7:a6:54:c1:e4:d5:28:45:
                    74:05:28:9f:67:79:21:1b:e8:7c:84:0a:b1:83:85:
                    51:d3:32:be:2d:7b:58:aa:7c:93:43:48:bd:90:ed:
                    f4:34:aa:be:14:01:17:d8:5f:1c:f1:ce:5d:90:94:
                    92:66:26:33:e7:cd:a2:5f:6c:db:e3:6f:45:59:cb:
                    77:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0E:F2:3B:F5:DE:77:CB:43:B5:E9:1F:2C:DC:25:A4:2E:A0:B8:54
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0f:66:7e:76:bb:95:65:1c:6b:2f:76:4b:7a:46:64:c6:60:
         ac:49:f0:d3:46:b3:40:b5:e3:42:9a:c9:85:39:30:ad:ec:c8:
         2f:fd:4a:67:d0:85:35:ee:0c:43:93:1f:bf:5e:c5:72:00:4e:
         3a:8a:03:f4:4d:63:f0:1e:07:1a:99:ee:bb:e3:81:5d:70:0a:
         4b:f1:cf:58:30:be:89:ea:8f:f1:1e:f7:1d:44:f5:93:a7:97:
         81:68:4b:1e:1b:07:68:e9:6b:5a:4e:75:7a:c8:a5:00:62:36:
         16:6d:38:84:86:6e:9e:26:d5:d8:4c:02:29:c2:ef:f3:55:52:
         dc:c8:4e:b1:d7:da:6f:ed:30:3d:84:bc:41:77:87:2d:00:bc:
         d4:84:f7:1f:b1:65:7a:5b:4a:94:29:b3:0b:26:27:7b:75:f6:
         7c:19:dd:bf:b2:7d:9f:20:a2:40:d4:42:37:ed:90:81:18:16:
         bf:ff:ca:41:6a:36:b5:20:12:d4:e5:2e:4f:11:7c:ab:af:0a:
         c8:54:74:2e:b0:f3:42:97:28:92:a3:9c:d0:f4:2b:65:48:92:
         40:3d:75:ab:f0:de:56:ad:0a:2a:84:aa:ab:78:76:0d:d6:92:
         42:07:62:f3:27:af:8d:02:cb:3a:90:2b:ea:90:0b:5c:7b:7c:
         be:48:f0:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs87IKak/MNGo7nEZTntRoEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzZkOWEwYjU1YmQ0OTVhMWJlM2M1YzAzZmEyNTFkM2Rl
OGI4YzUwHhcNMjUxMjIwMTgwMTMxWhcNMjUxMjIxMTgwMTMxWjAzMTEwLwYDVQQD
Eyg0OTBlZjIzYmY1ZGU3N2NiNDNiNWU5MWYyY2RjMjVhNDJlYTBiODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzM9gzKJ9i1S7afz0t6JFcqx0+eP
YQANEpDNPvho0qzIQNiJSzgWCxaUexRcxlTS2deYUvNvDIH39JV4u5mP4+8QH8O3
P2QRG6zbSfeALecY4Fb6vXC8clNh5shndGsb4RpDafus4pOqfKBIiDnwUst0X060
4PphOjPu0Bw4ie68po6NCGSj0fErJBbCvvtBAhXAmhFKSdMsaEBEwCgPpBADBjEv
htgJmQqHrbFO0kmNmrozhhrJ04D6x6ZUweTVKEV0BSifZ3khG+h8hAqxg4VR0zK+
LXtYqnyTQ0i9kO30NKq+FAEX2F8c8c5dkJSSZiYz582iX2zb429FWct3OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkO8jv13nfLQ7XpHyzcJaQuoLhUMB8GA1UdIwQY
MBaAFFd22aC1W9SVob48XAP6JR096LjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUt
YzBiYTJmM2ZjNzJhLzEvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUtYzBiYTJmM2ZjNzJh
LzEvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkA9mfna7
lWUcay92S3pGZMZgrEnw00azQLXjQprJhTkwrezIL/1KZ9CFNe4MQ5Mfv17FcgBO
OooD9E1j8B4HGpnuu+OBXXAKS/HPWDC+ieqP8R73HUT1k6eXgWhLHhsHaOlrWk51
esilAGI2Fm04hIZunibV2EwCKcLv81VS3MhOsdfab+0wPYS8QXeHLQC81IT3H7Fl
eltKlCmzCyYne3X2fBndv7J9nyCiQNRCN+2QgRgWv//KQWo2tSAS1OUuTxF8q68K
yFR0LrDzQpcokqOc0PQrZUiSQD11q/DeVq0KKoSqq3h2DdaSQgdi8yevjQLLOpAr
6pALXHt8vkjwwA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 02:01:37 2025 by rpki-client