This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
File:                     Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft (raw, json)
Hash identifier:          DoDlDY56Jr+290FEZJE+Prk0QBiGlpxGlK+ZG9D7KxQ=
Subject key identifier:   95:32:4E:43:A9:D8:9D:1A:31:D1:CF:A3:5C:34:EB:63:0F:91:29:EB
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Certificate issuer:       /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial:       019B45EEB37D2400DCE89AE9749942DCEB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
Manifest number:          06AB
Signing time:             Mon 22 Dec 2025 12:00:29 +0000
Manifest this update:     Mon 22 Dec 2025 12:00:29 +0000
Manifest next update:     Tue 23 Dec 2025 12:00:29 +0000
Files and hashes:         1: 1-mKTp_9x4jSxLfMrjZRYWSL2w4Y.roa (hash: DC2p78SiJuzIaXxQwV5e0jB7M1ooOawXmJPpEB8RdBQ=)
                          2: FVztUFkhUmgNammrig4lq2khRec.roa (hash: MBe/F0X2e05UmIZ71xdZyQkumN8ul5YjBsp/xc1ECtg=)
                          3: Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl (hash: m/kn6giWzD8DP5Pd/UsXojoJuYp+kre0XVYYM4CNqms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:45:ee:b3:7d:24:00:dc:e8:9a:e9:74:99:42:dc:eb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
        Validity
            Not Before: Dec 22 12:00:29 2025 GMT
            Not After : Dec 23 12:00:29 2025 GMT
        Subject: CN=95324e43a9d89d1a31d1cfa35c34eb630f9129eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:e8:10:8e:7f:73:44:e9:09:5f:5d:79:2f:
                    c7:d0:63:2f:5d:a3:e8:8e:d6:c0:6a:fd:f8:2e:c2:
                    a8:84:06:50:ba:ca:fd:c0:cd:1f:e6:ff:e5:3a:da:
                    71:1f:45:8e:63:04:d6:b8:bf:70:72:c0:c2:ad:6e:
                    4b:62:d1:83:6c:8d:34:45:6e:7d:d7:0d:60:34:fa:
                    48:73:53:60:6f:51:af:bc:f6:22:ee:ee:a6:0a:2f:
                    58:78:66:63:74:1b:eb:69:03:05:5e:23:95:18:7b:
                    a2:46:ac:fb:eb:02:fa:dc:dc:dd:2a:5e:9f:bd:7e:
                    56:60:6c:f5:b1:e7:03:39:fc:86:73:9b:8f:93:41:
                    98:2e:a9:2d:df:32:56:b5:3c:10:a3:00:23:8d:3a:
                    2d:c3:dd:2a:8a:df:d0:9e:96:d3:44:a2:9a:36:ed:
                    99:6e:b1:77:1b:03:37:97:d5:f7:a9:39:69:0d:e6:
                    53:a6:72:fc:ba:5e:06:9a:83:4d:84:7d:56:df:35:
                    c7:92:81:27:d5:7f:9b:a3:c6:4c:05:a6:6e:a8:b9:
                    8b:59:8c:ee:52:84:86:fe:d2:76:8c:1d:da:f3:7e:
                    85:c4:04:a7:d5:05:0d:9f:ca:7f:76:1c:5d:aa:89:
                    e1:ad:b5:34:c2:0c:1e:d0:e6:fe:82:e0:8a:63:7e:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:32:4E:43:A9:D8:9D:1A:31:D1:CF:A3:5C:34:EB:63:0F:91:29:EB
            X509v3 Authority Key Identifier:
                keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:99:43:5c:69:51:4d:f4:57:7c:fa:86:bf:57:0a:f2:04:ce:
         91:4d:b5:80:96:e5:1a:ed:d5:05:90:8b:34:66:c7:69:1d:3d:
         19:a9:f7:22:cc:9d:5a:bc:0b:86:6a:07:d8:6c:2f:b4:68:04:
         93:f8:d6:94:3b:7f:a5:e7:3e:ad:61:fa:37:fb:f6:ea:8b:7b:
         5f:1f:5d:c1:f7:fc:d5:6f:e5:91:e8:57:1b:66:f4:e5:7e:e1:
         e4:f0:d7:14:6d:b7:53:e8:da:ac:ee:f4:ea:41:10:ec:39:07:
         99:08:7a:ef:8f:d6:dc:af:5f:eb:96:e5:31:b3:74:71:1c:2a:
         92:c4:4f:4d:a9:41:ed:5d:64:06:f2:f8:3a:b5:67:b7:90:87:
         f2:9c:9b:43:b0:16:fe:b2:23:35:20:f2:38:bb:98:4f:66:18:
         66:e1:9c:ad:20:c9:27:8a:b7:dc:79:19:e7:d3:e9:3d:c7:97:
         65:5b:3c:cb:b7:43:2d:12:60:ec:db:3d:ce:d3:0e:72:94:16:
         d4:68:04:6c:48:30:a4:cc:37:51:bd:47:98:18:43:c0:ab:26:
         03:f3:50:29:ba:7b:c3:d4:14:24:d1:09:78:6d:fd:87:12:22:
         6f:b5:11:26:ed:a4:08:23:6e:ce:d3:f0:f4:9c:11:5b:a6:86:
         1e:e1:86:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtF7rN9JADc6JrpdJlC3Ot9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZWZmZTk4YzI0YzNkNmQ2MDg3YzhkMWQzZjkwMWI4Y2Nk
NDAwODgwHhcNMjUxMjIyMTIwMDI5WhcNMjUxMjIzMTIwMDI5WjAzMTEwLwYDVQQD
Eyg5NTMyNGU0M2E5ZDg5ZDFhMzFkMWNmYTM1YzM0ZWI2MzBmOTEyOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXDoEI5/c0TpCV9deS/H0GMvXaPo
jtbAav34LsKohAZQusr9wM0f5v/lOtpxH0WOYwTWuL9wcsDCrW5LYtGDbI00RW59
1w1gNPpIc1Ngb1GvvPYi7u6mCi9YeGZjdBvraQMFXiOVGHuiRqz76wL63NzdKl6f
vX5WYGz1secDOfyGc5uPk0GYLqkt3zJWtTwQowAjjTotw90qit/QnpbTRKKaNu2Z
brF3GwM3l9X3qTlpDeZTpnL8ul4GmoNNhH1W3zXHkoEn1X+bo8ZMBaZuqLmLWYzu
UoSG/tJ2jB3a836FxASn1QUNn8p/dhxdqonhrbU0wgwe0Ob+guCKY342+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUyTkOp2J0aMdHPo1w062MPkSnrMB8GA1UdIwQY
MBaAFEXv/pjCTD1tYIfI0dP5AbjM1ACIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAt
ZGViN2I5MTg5MTY5LzEvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAtZGViN2I5MTg5MTY5
LzEvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZlDXGlR
TfRXfPqGv1cK8gTOkU21gJblGu3VBZCLNGbHaR09Gan3IsydWrwLhmoH2GwvtGgE
k/jWlDt/pec+rWH6N/v26ot7Xx9dwff81W/lkehXG2b05X7h5PDXFG23U+jarO70
6kEQ7DkHmQh674/W3K9f65blMbN0cRwqksRPTalB7V1kBvL4OrVnt5CH8pybQ7AW
/rIjNSDyOLuYT2YYZuGcrSDJJ4q33HkZ59PpPceXZVs8y7dDLRJg7Ns9ztMOcpQW
1GgEbEgwpMw3Ub1HmBhDwKsmA/NQKbp7w9QUJNEJeG39hxIib7URJu2kCCNuztPw
9JwRW6aGHuGGKA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 14:18:38 2025 by rpki-client