This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File:                     TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier:          Ot8QX7OKvecmYuTAcefMG0ubZx+bzxavZNq2cfLJZv0=
Subject key identifier:   42:3D:23:61:A9:90:82:4D:86:E6:FB:D5:0F:6E:B7:F8:64:45:6A:AB
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer:       /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial:       019B39466CE64EE7486EF04371C39E589744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number:          1788
Signing time:             Sat 20 Dec 2025 01:01:15 +0000
Manifest this update:     Sat 20 Dec 2025 01:01:15 +0000
Manifest next update:     Sun 21 Dec 2025 01:01:15 +0000
Files and hashes:         1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=)
                          2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=)
                          3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: lJjDG94xyAmMKgrV87Exvx8i8BJ6EG1/QhC9rdV0Seo=)
                          4: ymqrtOTNWDQDdgBajqQ828K-pKw.roa (hash: MvzirsJ3BfWJOTVpYajs6bYFgV7Uhw3FJ4ibTjZ7nbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:6c:e6:4e:e7:48:6e:f0:43:71:c3:9e:58:97:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
        Validity
            Not Before: Dec 20 01:01:15 2025 GMT
            Not After : Dec 21 01:01:15 2025 GMT
        Subject: CN=423d2361a990824d86e6fbd50f6eb7f864456aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:b4:c7:ee:6e:56:24:30:8d:c3:da:90:37:
                    b8:c5:1b:aa:2e:e2:25:77:58:9b:4b:17:67:df:15:
                    18:20:53:f7:10:02:ce:b6:b4:6a:98:73:cb:84:c9:
                    8c:3b:93:7f:53:09:08:a3:7c:9e:84:6a:3b:1b:8e:
                    c3:dc:51:58:c0:1e:79:ff:11:03:d3:1b:91:46:57:
                    38:44:5b:8c:6f:d1:aa:ea:b6:29:1f:c1:ec:19:38:
                    d0:ad:fb:ed:4b:52:9b:9c:af:4e:68:e2:cf:19:ae:
                    92:55:c8:61:4a:91:72:4b:e4:da:1c:54:16:dc:d9:
                    5a:67:0d:18:e3:5a:66:4d:af:d8:ed:bb:8c:66:b6:
                    b6:4a:35:c4:63:8f:4a:8c:1a:a7:c7:4e:84:05:de:
                    09:7f:b1:c9:0f:11:2b:9e:f0:13:56:6e:08:c2:c1:
                    1d:a3:0c:7c:06:45:c8:f0:ec:0a:5f:8e:d7:14:c7:
                    72:45:08:b9:70:b6:f4:41:0f:88:60:24:4c:a0:f9:
                    e0:23:a9:8b:a2:e3:da:b1:cd:de:17:a9:bc:20:2f:
                    fa:68:fb:a6:b2:b8:a5:be:e4:32:05:12:ab:6d:e2:
                    43:61:40:64:21:50:3a:d9:df:43:ee:d4:95:e7:6d:
                    03:6c:16:c3:6c:ba:e2:24:58:7f:6d:e4:96:77:4f:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3D:23:61:A9:90:82:4D:86:E6:FB:D5:0F:6E:B7:F8:64:45:6A:AB
            X509v3 Authority Key Identifier:
                keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:78:df:0a:62:c3:59:9d:d3:3d:a5:9f:57:69:10:57:d2:
         72:a0:2e:1f:8f:a4:52:8f:b4:36:fa:06:4b:bd:60:ec:3d:04:
         99:a6:e2:7b:81:67:8d:10:e5:e4:17:47:dd:2c:34:22:44:3f:
         a9:0e:bb:fb:32:85:4a:e9:6f:ed:8e:68:b1:55:86:cd:64:4a:
         35:e6:1d:17:df:ef:0e:9c:21:e5:e1:9a:02:c5:89:a9:ac:b0:
         f8:26:26:16:59:08:35:47:b9:78:95:e3:96:0b:3d:f7:f6:9e:
         82:7d:89:ae:aa:ca:b5:20:14:d5:77:63:ac:6f:ee:3d:b0:20:
         3a:a8:23:81:47:0c:42:4c:b0:c4:26:23:87:02:71:ce:b3:19:
         7d:0c:c4:f5:57:47:1a:36:f7:c6:06:40:88:9e:7b:68:12:bd:
         be:ca:6a:52:e6:91:38:b6:4f:cf:80:18:af:31:b7:c5:3c:e6:
         06:d8:de:79:53:d2:32:ec:0a:1e:9b:16:17:72:51:ff:63:0a:
         e3:4b:d7:72:62:79:40:6c:b7:0f:98:e1:e5:a5:dd:23:a7:cf:
         58:0f:ba:10:2f:44:f1:de:41:b3:56:66:b7:95:7b:6e:e4:db:
         77:e0:31:ca:a9:aa:51:f6:79:61:2f:14:e7:28:7d:8a:04:8c:
         3b:1f:11:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs5RmzmTudIbvBDccOeWJdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0
MjNlYjgwHhcNMjUxMjIwMDEwMTE1WhcNMjUxMjIxMDEwMTE1WjAzMTEwLwYDVQQD
Eyg0MjNkMjM2MWE5OTA4MjRkODZlNmZiZDUwZjZlYjdmODY0NDU2YWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuO0x+5uViQwjcPakDe4xRuqLuIl
d1ibSxdn3xUYIFP3EALOtrRqmHPLhMmMO5N/UwkIo3yehGo7G47D3FFYwB55/xED
0xuRRlc4RFuMb9Gq6rYpH8HsGTjQrfvtS1KbnK9OaOLPGa6SVchhSpFyS+TaHFQW
3NlaZw0Y41pmTa/Y7buMZra2SjXEY49KjBqnx06EBd4Jf7HJDxErnvATVm4IwsEd
owx8BkXI8OwKX47XFMdyRQi5cLb0QQ+IYCRMoPngI6mLouPasc3eF6m8IC/6aPum
srilvuQyBRKrbeJDYUBkIVA62d9D7tSV520DbBbDbLriJFh/beSWd0+nOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI9I2GpkIJNhub71Q9ut/hkRWqrMB8GA1UdIwQY
MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct
MmU4NGI4ZDE4ZTRlLzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl
LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3d43wpi
w1md0z2ln1dpEFfScqAuH4+kUo+0NvoGS71g7D0Emabie4FnjRDl5BdH3Sw0IkQ/
qQ67+zKFSulv7Y5osVWGzWRKNeYdF9/vDpwh5eGaAsWJqayw+CYmFlkINUe5eJXj
lgs99/aegn2JrqrKtSAU1XdjrG/uPbAgOqgjgUcMQkywxCYjhwJxzrMZfQzE9VdH
Gjb3xgZAiJ57aBK9vspqUuaROLZPz4AYrzG3xTzmBtjeeVPSMuwKHpsWF3JR/2MK
40vXcmJ5QGy3D5jh5aXdI6fPWA+6EC9E8d5Bs1Zmt5V7buTbd+AxyqmqUfZ5YS8U
5yh9igSMOx8RrA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 02:58:25 2025 by rpki-client