This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File:                     dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier:          Wi7H/J5ipyNufxv6Bu0B8FCBNfnRZqGGeCjF0sgj2OI=
Subject key identifier:   39:69:83:B6:C4:F9:D6:F5:28:25:9E:AE:E2:F6:70:70:8C:95:47:48
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer:       /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial:       019B269B5B4421D3AC025FC9DBB01DDF1098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number:          178D
Signing time:             Tue 16 Dec 2025 10:01:14 +0000
Manifest this update:     Tue 16 Dec 2025 10:01:14 +0000
Manifest next update:     Wed 17 Dec 2025 10:01:14 +0000
Files and hashes:         1: 54dHE0jadLwCWG8zkr-DJUOEEaw.roa (hash: oNDnO3daYus3xELeZDv1QShW9ceHJLAT7TByuVM8qlM=)
                          2: G5C1ZqYlTLCRRxbHStMwHe3D7Ns.roa (hash: LpFTYAOw4TDfnjUrddNXOWvBHb296+OG0h5PcCYbZJE=)
                          3: L_hiJ_zTIPvJHKnWltGOdh1BBUE.roa (hash: fnkqnOVp0hCGhUIs9oj2vYD3xsZ2o6VTqPgLKa54b08=)
                          4: _udyEbevQeyPMsntui78RQRmYXo.roa (hash: 8RRyytezjUw6YTel2ifQgoEKUcJPXqM6Y67HGaLLOtA=)
                          5: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: YKEahrONPLWQ7+C+hpYCB5GinK0s/Of9NxGMN7NE4lI=)
                          6: d_QjM08NyWxu6Tcwa6Z9vaHDI6E.roa (hash: 2UiuRNdprh1vh3n/JUuIuP4pSF4iJgcL2G0BqHfLcb8=)
                          7: gu5dao22fJp9scPActSQNTp8QK4.roa (hash: SFp8Pdfj96YgeaI0ilX+9ls8kY++x5GaLl2llXmCJNc=)
                          8: jwpY6rERA_zyIv98bpD7R8nes4o.roa (hash: zhq9elSEk74CwB7NZMhv2D35pQpbRAFiT6FBizp5Yp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:9b:5b:44:21:d3:ac:02:5f:c9:db:b0:1d:df:10:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
        Validity
            Not Before: Dec 16 10:01:14 2025 GMT
            Not After : Dec 17 10:01:14 2025 GMT
        Subject: CN=396983b6c4f9d6f528259eaee2f670708c954748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a9:24:54:bf:ae:42:45:bb:1d:68:ed:1a:a2:
                    0a:db:6f:b5:61:25:33:13:ad:ce:fb:16:fe:da:26:
                    eb:85:5c:9f:1b:71:11:11:23:e0:fa:59:a7:af:1d:
                    d8:e8:bf:3b:ba:d4:a8:d1:22:67:9d:e4:4c:e6:aa:
                    63:95:01:00:b6:9a:2b:3b:b8:08:7d:7b:f1:6b:9e:
                    2c:6c:51:de:75:75:7c:09:90:3a:3a:3d:89:85:08:
                    6c:fb:b4:f3:07:a6:09:4d:91:eb:d7:51:93:ed:eb:
                    ac:04:15:9c:07:df:a7:97:8d:a3:2b:64:de:88:a6:
                    e2:63:e9:66:91:ab:e8:1c:57:c1:d1:6e:c6:fc:51:
                    9a:5a:95:c6:65:e7:bb:b3:1e:4e:04:3c:9c:bc:0a:
                    3c:34:9f:28:ee:59:20:23:c1:77:19:92:32:0e:1a:
                    0c:ac:ca:d0:73:08:74:2e:8e:de:51:5d:d1:25:7b:
                    0e:78:22:cb:ff:7d:cc:2f:7f:f9:08:4f:16:ac:a0:
                    0b:93:95:2d:1f:e7:bb:67:28:c2:14:7f:6d:70:42:
                    3d:5e:f2:aa:e4:f9:92:41:6a:a0:68:6b:ee:16:38:
                    7b:4e:20:8b:fd:bb:db:c0:c4:ae:a6:a3:d6:8c:66:
                    91:4e:2a:02:4c:80:4e:7e:2c:9e:db:00:8c:ab:91:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:69:83:B6:C4:F9:D6:F5:28:25:9E:AE:E2:F6:70:70:8C:95:47:48
            X509v3 Authority Key Identifier:
                keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:07:e1:4f:4e:2e:9a:3d:e6:a7:02:bd:07:64:a5:ad:58:5a:
         5e:3b:75:7c:15:23:2f:64:04:57:bc:51:9d:75:cb:6c:97:16:
         19:db:9f:ee:7c:ab:b0:b1:78:bb:13:44:76:61:6d:11:cb:36:
         a7:50:38:18:6d:ca:e1:30:d9:29:f1:c6:52:33:8a:31:08:c7:
         46:f6:c0:75:d3:cd:13:f6:45:38:ec:91:cf:ab:41:03:38:65:
         35:8e:f8:43:15:fe:5b:3f:45:35:a2:db:11:07:43:08:44:84:
         d0:7c:bf:c2:e5:2d:94:96:dc:a1:df:19:3e:78:fb:3a:b9:2e:
         d3:c3:45:65:9b:31:c4:53:29:27:44:2e:7d:d4:a7:b4:8b:46:
         51:5c:0a:65:77:30:ac:42:40:c6:17:d8:8c:48:5a:4f:8b:db:
         e2:f8:1c:62:ed:d6:55:82:a9:f7:24:7b:7f:dc:88:88:19:c7:
         e8:74:ee:c4:de:37:ee:5c:e6:29:ea:8b:5f:f7:b5:19:bd:eb:
         bc:59:8e:c2:c8:b6:e8:d3:a0:b4:b8:b3:bd:3b:49:79:96:44:
         53:6a:7e:fa:29:40:15:f4:9b:6e:d7:a4:09:d3:e6:b7:96:20:
         e8:a1:55:c4:a0:28:c2:f3:23:83:57:c5:22:75:23:70:c0:dd:
         75:ea:0f:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsmm1tEIdOsAl/J27Ad3xCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm
OWRlNTYwHhcNMjUxMjE2MTAwMTE0WhcNMjUxMjE3MTAwMTE0WjAzMTEwLwYDVQQD
EygzOTY5ODNiNmM0ZjlkNmY1MjgyNTllYWVlMmY2NzA3MDhjOTU0NzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KkkVL+uQkW7HWjtGqIK22+1YSUz
E63O+xb+2ibrhVyfG3ERESPg+lmnrx3Y6L87utSo0SJnneRM5qpjlQEAtporO7gI
fXvxa54sbFHedXV8CZA6Oj2JhQhs+7TzB6YJTZHr11GT7eusBBWcB9+nl42jK2Te
iKbiY+lmkavoHFfB0W7G/FGaWpXGZee7sx5OBDycvAo8NJ8o7lkgI8F3GZIyDhoM
rMrQcwh0Lo7eUV3RJXsOeCLL/33ML3/5CE8WrKALk5UtH+e7ZyjCFH9tcEI9XvKq
5PmSQWqgaGvuFjh7TiCL/bvbwMSupqPWjGaRTioCTIBOfiye2wCMq5FEIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlpg7bE+db1KCWeruL2cHCMlUdIMB8GA1UdIwQY
MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt
ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm
LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAfhT04u
mj3mpwK9B2SlrVhaXjt1fBUjL2QEV7xRnXXLbJcWGduf7nyrsLF4uxNEdmFtEcs2
p1A4GG3K4TDZKfHGUjOKMQjHRvbAddPNE/ZFOOyRz6tBAzhlNY74QxX+Wz9FNaLb
EQdDCESE0Hy/wuUtlJbcod8ZPnj7Orku08NFZZsxxFMpJ0QufdSntItGUVwKZXcw
rEJAxhfYjEhaT4vb4vgcYu3WVYKp9yR7f9yIiBnH6HTuxN437lzmKeqLX/e1Gb3r
vFmOwsi26NOgtLizvTtJeZZEU2p++ilAFfSbbtekCdPmt5Yg6KFVxKAowvMjg1fF
InUjcMDddeoPCg==
-----END CERTIFICATE-----
Generated at Tue Dec 16 19:16:06 2025 by rpki-client