This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
File:                     rB5-vncjkuz4xhcsJvHGfuPGGIM.mft (raw, json)
Hash identifier:          g4JjCbnWFh7XlUHj6rboITXxbZWshURvTUyjPv4pB5I=
Subject key identifier:   1B:6F:38:6D:43:FC:F2:35:E1:20:2B:33:12:E5:F9:D7:D2:03:20:0B
Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
Certificate issuer:       /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Certificate serial:       019B2D0AFCC1BE06961F01F26F1C57F8820D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
Manifest number:          0B28
Signing time:             Wed 17 Dec 2025 16:00:53 +0000
Manifest this update:     Wed 17 Dec 2025 16:00:53 +0000
Manifest next update:     Thu 18 Dec 2025 16:00:53 +0000
Files and hashes:         1: djea3wowsH9-GL3nIoFch0gf_Ow.roa (hash: t6fqkUvoXSupS3l5uRjJ3VosWSd+9PoyLIE+ML64T24=)
                          2: rB5-vncjkuz4xhcsJvHGfuPGGIM.crl (hash: CXLOwxzFZXY5+jGBDzucfGPvrsGqEAnR+lGfrfycO6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:0a:fc:c1:be:06:96:1f:01:f2:6f:1c:57:f8:82:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
        Validity
            Not Before: Dec 17 16:00:53 2025 GMT
            Not After : Dec 18 16:00:53 2025 GMT
        Subject: CN=1b6f386d43fcf235e1202b3312e5f9d7d203200b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:4c:77:72:2f:f2:56:38:60:b0:d3:0b:08:
                    e6:52:b0:a7:a8:07:98:c2:d4:38:b7:06:ed:1e:bb:
                    f2:6a:fe:d8:a2:04:f9:8b:68:04:21:01:26:68:b8:
                    1f:94:ca:05:e0:7e:f1:d1:39:15:66:8a:7d:1d:f5:
                    83:bc:d1:47:45:72:de:33:75:e5:b3:1e:9e:31:56:
                    b9:6e:aa:b3:3e:d7:42:88:aa:fc:28:a6:ab:28:43:
                    16:66:4f:f8:81:80:4c:59:c6:02:1e:4b:f9:cd:6e:
                    00:3c:3e:58:ab:3a:b9:a5:7a:c9:b0:96:9f:9c:8e:
                    14:7b:d2:9b:6c:d3:4d:96:b4:7a:7e:c6:19:f2:3a:
                    04:2b:4e:8c:13:ec:76:95:fc:f4:4e:ca:88:87:a4:
                    43:fc:15:a5:3d:dd:67:a5:2a:89:54:eb:1d:54:9a:
                    d2:17:81:26:9b:57:a1:28:2e:83:82:91:a4:76:2d:
                    0a:a7:40:49:69:bd:95:ef:55:9d:ab:f3:3d:6a:41:
                    c5:12:31:00:3d:83:f3:d6:b7:82:a3:72:df:95:db:
                    f2:2c:ef:13:41:85:ca:69:6c:c2:36:9b:d4:a9:51:
                    b5:32:9e:4a:81:fe:27:b5:20:2a:c6:7e:2f:f9:a6:
                    4a:e6:61:4a:39:0e:38:92:ae:31:60:ac:e6:79:8f:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6F:38:6D:43:FC:F2:35:E1:20:2B:33:12:E5:F9:D7:D2:03:20:0B
            X509v3 Authority Key Identifier:
                keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ba:ed:fb:6d:3c:85:b0:77:4f:96:71:e7:26:7a:c8:5a:f8:
         a5:1d:2b:bd:29:56:78:51:e9:a1:7e:d2:9a:e3:1b:a1:62:22:
         22:42:5d:55:88:f2:4b:3c:96:30:51:3a:f7:ae:c3:65:96:71:
         0b:51:55:1d:03:31:a4:8c:f1:78:23:ee:33:73:af:40:c5:70:
         fd:7b:a5:a6:ef:12:11:3e:7a:51:bf:c1:47:20:92:9a:68:ff:
         89:a9:3d:f4:9b:ea:53:4a:05:3a:df:22:d6:94:c4:fb:c7:62:
         98:3a:70:1b:44:fd:7a:d5:b7:5f:89:3e:64:d0:6d:2b:7a:14:
         07:76:dc:9c:44:88:3f:1d:7e:f2:1f:5b:3d:02:65:42:f8:02:
         9e:4a:6f:47:b1:a3:7c:85:da:a0:83:b4:02:ee:59:57:2e:43:
         78:f3:c1:e4:d9:df:10:2d:7d:25:10:61:05:b7:a5:f6:39:76:
         5d:e1:92:cd:af:bd:f0:50:ae:05:b5:66:85:6c:b8:2d:26:34:
         a8:b6:2a:dd:58:27:dc:13:b3:10:90:1a:62:e2:ad:eb:7b:65:
         40:42:f9:b9:a1:4b:af:4a:ee:1d:71:97:ed:a3:66:f9:f0:ec:
         6c:2f:52:56:0c:70:97:2c:95:a8:f1:f0:d3:d4:57:da:3a:6b:
         f3:fb:ea:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZstCvzBvgaWHwHybxxX+IINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMWU3ZWJlNzcyMzkyZWNmOGM2MTcyYzI2ZjFjNjdlZTNj
NjE4ODMwHhcNMjUxMjE3MTYwMDUzWhcNMjUxMjE4MTYwMDUzWjAzMTEwLwYDVQQD
EygxYjZmMzg2ZDQzZmNmMjM1ZTEyMDJiMzMxMmU1ZjlkN2QyMDMyMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBlMd3Iv8lY4YLDTCwjmUrCnqAeY
wtQ4twbtHrvyav7YogT5i2gEIQEmaLgflMoF4H7x0TkVZop9HfWDvNFHRXLeM3Xl
sx6eMVa5bqqzPtdCiKr8KKarKEMWZk/4gYBMWcYCHkv5zW4APD5Yqzq5pXrJsJaf
nI4Ue9KbbNNNlrR6fsYZ8joEK06ME+x2lfz0TsqIh6RD/BWlPd1npSqJVOsdVJrS
F4Emm1ehKC6DgpGkdi0Kp0BJab2V71Wdq/M9akHFEjEAPYPz1reCo3LfldvyLO8T
QYXKaWzCNpvUqVG1Mp5Kgf4ntSAqxn4v+aZK5mFKOQ44kq4xYKzmeY8aHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtvOG1D/PI14SArMxLl+dfSAyALMB8GA1UdIwQY
MBaAFKwefr53I5Ls+MYXLCbxxn7jxhiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82M2JjNmMtM2Y3NC00Zjc3LWI2OWEt
YTIxODZmODY4NTE5LzEvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi82M2JjNmMtM2Y3NC00Zjc3LWI2OWEtYTIxODZmODY4NTE5
LzEvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLrt+208
hbB3T5Zx5yZ6yFr4pR0rvSlWeFHpoX7SmuMboWIiIkJdVYjySzyWMFE6967DZZZx
C1FVHQMxpIzxeCPuM3OvQMVw/Xulpu8SET56Ub/BRyCSmmj/iak99JvqU0oFOt8i
1pTE+8dimDpwG0T9etW3X4k+ZNBtK3oUB3bcnESIPx1+8h9bPQJlQvgCnkpvR7Gj
fIXaoIO0Au5ZVy5DePPB5NnfEC19JRBhBbel9jl2XeGSza+98FCuBbVmhWy4LSY0
qLYq3Vgn3BOzEJAaYuKt63tlQEL5uaFLr0ruHXGX7aNm+fDsbC9SVgxwlyyVqPHw
09RX2jpr8/vqCA==
-----END CERTIFICATE-----
Generated at Wed Dec 17 20:46:42 2025 by rpki-client