This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File:                     noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier:          G4E5fvOh1VSZCpixkDz58nyANE7rbJqzfWzkbZcJXVI=
Subject key identifier:   A1:73:56:83:10:88:F5:5A:8B:04:13:86:83:19:6B:F2:49:49:96:C9
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer:       /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial:       019B3C108227D4C2320C909155031DABDC81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number:          0E33
Signing time:             Sat 20 Dec 2025 14:01:13 +0000
Manifest this update:     Sat 20 Dec 2025 14:01:13 +0000
Manifest next update:     Sun 21 Dec 2025 14:01:13 +0000
Files and hashes:         1: nOieJBaD-sIvzNFw8ys8kgtNYus.roa (hash: mIQiCbdb3uG6eqbgHss6OvqglKI0yQcTc3QtF2YXAwA=)
                          2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: ShcXcTzBuTpZRJGfBfgiFtRujM7jgyvAO5D2l9eTIXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:10:82:27:d4:c2:32:0c:90:91:55:03:1d:ab:dc:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
        Validity
            Not Before: Dec 20 14:01:13 2025 GMT
            Not After : Dec 21 14:01:13 2025 GMT
        Subject: CN=a17356831088f55a8b04138683196bf2494996c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:23:6f:bb:0b:a2:a4:ed:65:a8:16:cf:4c:
                    55:9a:e0:f6:13:d1:d3:e1:a2:1b:23:db:c7:e8:2e:
                    7f:e6:7f:19:db:31:e3:4a:23:2a:8d:7f:90:4b:48:
                    df:12:a4:40:06:d4:e6:ce:7f:8f:f2:cf:25:49:30:
                    49:42:62:0a:5f:88:5b:57:47:94:03:88:b9:91:2e:
                    df:60:b5:dd:a2:bb:1c:e9:1d:13:fb:ea:1d:b3:29:
                    a6:85:fb:cf:be:59:6e:b1:ac:65:b2:53:8c:85:38:
                    48:14:b3:22:8d:dd:ea:5d:68:cf:1e:32:90:82:d4:
                    a5:eb:56:f0:bc:38:f1:ea:c8:84:3c:0c:d1:a1:44:
                    c3:8d:a1:6a:ad:72:c4:a9:42:4e:3e:9f:e6:74:88:
                    31:d8:4f:81:02:a4:c6:0b:b5:cb:b2:a6:c5:6e:d5:
                    bd:b0:76:2a:44:36:2d:83:3d:04:ba:b4:9a:32:c8:
                    81:ad:4b:7c:11:1d:9a:42:d1:70:84:27:5b:2e:c3:
                    eb:cc:d2:ed:1a:58:b3:28:47:84:9d:a8:5e:ca:e9:
                    a2:1b:30:df:49:f9:81:73:44:a1:f4:62:ba:be:ec:
                    70:1b:45:b8:bf:54:10:fb:38:a2:f2:3e:c6:45:af:
                    b6:72:a8:0a:79:33:9b:7d:b1:91:0a:14:36:51:93:
                    b5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:73:56:83:10:88:F5:5A:8B:04:13:86:83:19:6B:F2:49:49:96:C9
            X509v3 Authority Key Identifier:
                keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d0:18:2e:fc:2e:62:79:e6:8c:68:86:83:10:8e:1e:10:0c:
         9a:fd:d1:17:9f:e0:48:a7:73:d5:0a:3f:ff:7b:ec:34:7f:30:
         44:64:d5:66:79:7e:c1:58:d6:5f:2f:67:42:20:79:6d:9f:15:
         46:e2:34:d5:fb:53:9c:28:7c:e6:97:e6:b5:6d:13:5f:f3:54:
         d0:25:04:ed:27:a0:c5:e0:69:3d:4f:e6:43:62:86:6a:6b:ec:
         03:85:50:fd:d3:c8:d1:bf:82:a1:2b:82:af:39:0e:1a:e5:a0:
         a0:7e:f4:e2:fa:e6:45:d2:0e:6c:8e:78:7c:39:32:63:e4:bf:
         2f:d9:96:88:0b:c6:a7:bf:2e:56:80:94:24:55:eb:bf:cf:1b:
         47:70:93:13:95:8b:4b:b4:3f:fe:ef:dd:c4:40:15:fb:f0:16:
         13:c1:79:65:c6:4e:58:ae:b9:c0:a6:ae:60:98:66:ab:e9:18:
         3d:24:be:c6:2c:a8:17:e1:e6:d8:ab:bb:5d:8b:a0:79:c5:33:
         38:18:57:a4:0f:80:49:92:d6:ad:d8:b7:9b:3c:cf:2b:ed:b8:
         c5:f6:f3:13:77:53:65:4b:f8:d2:26:f1:91:cd:c4:04:e7:e4:
         6b:80:1c:1a:1c:a1:42:2c:04:10:35:02:b1:eb:5b:03:38:b4:
         8a:ee:34:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8EIIn1MIyDJCRVQMdq9yBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllODFkZGFhZDg4ZjcwNzE2MTJkN2MzYjc2MThlMjRkMWE1
MjMzYmIwHhcNMjUxMjIwMTQwMTEzWhcNMjUxMjIxMTQwMTEzWjAzMTEwLwYDVQQD
EyhhMTczNTY4MzEwODhmNTVhOGIwNDEzODY4MzE5NmJmMjQ5NDk5NmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfojb7sLoqTtZagWz0xVmuD2E9HT
4aIbI9vH6C5/5n8Z2zHjSiMqjX+QS0jfEqRABtTmzn+P8s8lSTBJQmIKX4hbV0eU
A4i5kS7fYLXdorsc6R0T++odsymmhfvPvllusaxlslOMhThIFLMijd3qXWjPHjKQ
gtSl61bwvDjx6siEPAzRoUTDjaFqrXLEqUJOPp/mdIgx2E+BAqTGC7XLsqbFbtW9
sHYqRDYtgz0EurSaMsiBrUt8ER2aQtFwhCdbLsPrzNLtGlizKEeEnaheyumiGzDf
SfmBc0Sh9GK6vuxwG0W4v1QQ+zii8j7GRa+2cqgKeTObfbGRChQ2UZO1tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFzVoMQiPVaiwQThoMZa/JJSZbJMB8GA1UdIwQY
MBaAFJ6B3arYj3BxYS18O3YY4k0aUjO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYt
YmY2OWIxMmE2NzQ0LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYtYmY2OWIxMmE2NzQ0
LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNAYLvwu
YnnmjGiGgxCOHhAMmv3RF5/gSKdz1Qo//3vsNH8wRGTVZnl+wVjWXy9nQiB5bZ8V
RuI01ftTnCh85pfmtW0TX/NU0CUE7SegxeBpPU/mQ2KGamvsA4VQ/dPI0b+CoSuC
rzkOGuWgoH704vrmRdIObI54fDkyY+S/L9mWiAvGp78uVoCUJFXrv88bR3CTE5WL
S7Q//u/dxEAV+/AWE8F5ZcZOWK65wKauYJhmq+kYPSS+xiyoF+Hm2Ku7XYugecUz
OBhXpA+ASZLWrdi3mzzPK+24xfbzE3dTZUv40ibxkc3EBOfka4AcGhyhQiwEEDUC
setbAzi0iu40lA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:49:32 2025 by rpki-client