This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File:                     mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier:          05B7nPK5XEuxWusJ9Dud+vGcU79YHg6fdD+HfD3qf7Q=
Subject key identifier:   69:8C:15:F0:CE:22:DD:54:BC:E4:63:4B:37:1C:A0:BC:7A:4E:84:22
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer:       /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial:       019B7290CF8F733886FDA9572C31B05AC765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number:          14A1
Signing time:             Wed 31 Dec 2025 04:00:51 +0000
Manifest this update:     Wed 31 Dec 2025 04:00:51 +0000
Manifest next update:     Thu 01 Jan 2026 04:00:51 +0000
Files and hashes:         1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
                          2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
                          3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
                          4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
                          5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: 0Ja9U9rFYEsQWZToJXjIgtIknk5KGKDifsCntQUj/PU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Jan 2026 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:72:90:cf:8f:73:38:86:fd:a9:57:2c:31:b0:5a:c7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
        Validity
            Not Before: Dec 31 04:00:51 2025 GMT
            Not After : Jan  1 04:00:51 2026 GMT
        Subject: CN=698c15f0ce22dd54bce4634b371ca0bc7a4e8422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:74:9f:89:e4:74:ad:4a:77:5d:f0:ef:e3:
                    60:ff:71:96:ba:74:b1:17:a8:ee:78:b2:1a:1e:09:
                    b5:8b:91:70:86:26:1d:95:fc:ba:39:30:2e:83:b0:
                    c2:be:02:28:4f:76:69:a7:ac:41:fb:75:c7:4c:47:
                    f8:ff:b4:09:b8:64:10:0c:40:fb:87:e0:98:b3:30:
                    38:cc:08:07:f7:1f:2b:8b:81:cd:7e:d5:85:7d:a3:
                    16:75:e5:bd:83:bf:0b:0e:22:14:3b:f9:32:12:34:
                    a4:f0:09:d1:62:e8:56:b1:3b:48:7d:a8:d7:49:c6:
                    c9:9f:0f:16:ed:2f:9c:4d:25:50:46:b5:9b:f1:be:
                    a2:1c:b9:2e:eb:de:a4:da:9e:ac:39:84:6f:31:70:
                    c2:f9:93:c4:ff:a3:c3:c8:49:82:c2:28:3d:56:d4:
                    1a:d2:b7:c5:eb:ea:d0:7e:9b:da:7a:d1:81:5c:1e:
                    a7:d0:53:42:c2:6e:56:22:8d:83:53:10:09:fa:a2:
                    64:69:71:b6:d8:f8:e8:56:b8:1e:6f:7c:1b:f5:e0:
                    0a:77:9a:e2:e0:2d:1e:8d:a8:0a:f7:cd:cc:39:6f:
                    83:01:6c:4e:0b:3a:fa:31:9a:a9:cc:3e:6a:89:be:
                    cb:50:b7:b2:e6:fe:85:5e:bc:8c:eb:a4:30:cc:37:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8C:15:F0:CE:22:DD:54:BC:E4:63:4B:37:1C:A0:BC:7A:4E:84:22
            X509v3 Authority Key Identifier:
                keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:47:5f:cc:5e:7b:d9:72:4b:30:ee:1e:2e:26:0b:24:70:6f:
         56:27:0a:44:42:c3:c4:aa:7b:fe:ef:9b:6f:8f:84:7c:fe:47:
         5c:f3:57:d9:4e:7f:60:f0:46:93:f0:53:69:f1:52:f3:dc:35:
         6b:f3:f2:18:0a:43:a0:86:00:5d:91:00:7a:61:56:cc:5e:d3:
         6f:9e:45:55:2f:fb:5e:04:47:34:48:ae:d2:fe:ec:ba:d2:9e:
         0c:1a:70:1e:d2:3e:5c:3d:21:20:cf:53:dd:cc:28:01:c5:22:
         fd:19:a8:1c:8f:99:fb:a7:57:77:c7:82:1d:b1:3f:bf:ee:e1:
         5b:bd:b4:84:6e:25:e2:c7:b3:cc:bf:37:40:08:05:a1:da:28:
         c6:c5:8c:20:51:2c:c4:84:c7:8f:cd:7e:2d:f9:2a:8a:1b:cd:
         59:2f:23:0a:54:ce:d0:be:45:71:61:84:ff:b6:60:68:58:2f:
         2c:7c:d4:ed:12:4b:fc:aa:78:8e:d5:c3:6d:f8:34:28:6d:1f:
         aa:a6:8d:03:ff:3a:ff:3b:b3:e3:a9:7f:6f:9f:19:b6:a0:38:
         8b:af:39:5f:52:97:9e:38:28:69:d9:bf:7e:f3:61:a5:20:d3:
         86:74:65:d2:64:8e:15:8f:d5:27:2b:41:4b:47:ac:06:92:02:
         1d:1b:d5:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtykM+PcziG/alXLDGwWsdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2
OTRmZGEwHhcNMjUxMjMxMDQwMDUxWhcNMjYwMTAxMDQwMDUxWjAzMTEwLwYDVQQD
Eyg2OThjMTVmMGNlMjJkZDU0YmNlNDYzNGIzNzFjYTBiYzdhNGU4NDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/p0n4nkdK1Kd13w7+Ng/3GWunSx
F6jueLIaHgm1i5FwhiYdlfy6OTAug7DCvgIoT3Zpp6xB+3XHTEf4/7QJuGQQDED7
h+CYszA4zAgH9x8ri4HNftWFfaMWdeW9g78LDiIUO/kyEjSk8AnRYuhWsTtIfajX
ScbJnw8W7S+cTSVQRrWb8b6iHLku696k2p6sOYRvMXDC+ZPE/6PDyEmCwig9VtQa
0rfF6+rQfpvaetGBXB6n0FNCwm5WIo2DUxAJ+qJkaXG22PjoVrgeb3wb9eAKd5ri
4C0ejagK983MOW+DAWxOCzr6MZqpzD5qib7LULey5v6FXryM66QwzDc14QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmMFfDOIt1UvORjSzccoLx6ToQiMB8GA1UdIwQY
MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt
ZjM1MzczZGE3ZGViLzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi
LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0dfzF57
2XJLMO4eLiYLJHBvVicKRELDxKp7/u+bb4+EfP5HXPNX2U5/YPBGk/BTafFS89w1
a/PyGApDoIYAXZEAemFWzF7Tb55FVS/7XgRHNEiu0v7sutKeDBpwHtI+XD0hIM9T
3cwoAcUi/RmoHI+Z+6dXd8eCHbE/v+7hW720hG4l4sezzL83QAgFodooxsWMIFEs
xITHj81+LfkqihvNWS8jClTO0L5FcWGE/7ZgaFgvLHzU7RJL/Kp4jtXDbfg0KG0f
qqaNA/86/zuz46l/b58ZtqA4i685X1KXnjgoadm/fvNhpSDThnRl0mSOFY/VJytB
S0esBpICHRvVvQ==
-----END CERTIFICATE-----
Generated at Wed Dec 31 09:36:41 2025 by rpki-client