This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
File:                     EIanwN6nPdD5Ti6f4ayatnAbIlM.mft (raw, json)
Hash identifier:          78EeCXLoKm5iPWvzAVevakC+0Du4Qxb35Hzn9THBTvQ=
Subject key identifier:   95:8E:41:FD:3F:CC:03:2E:B8:7F:A0:E7:32:80:9E:14:46:73:B8:54
Authority key identifier: 10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
Certificate issuer:       /CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Certificate serial:       019B255196B80E2608025BF4466B3D9F0BDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
Manifest number:          177D
Signing time:             Tue 16 Dec 2025 04:01:02 +0000
Manifest this update:     Tue 16 Dec 2025 04:01:02 +0000
Manifest next update:     Wed 17 Dec 2025 04:01:02 +0000
Files and hashes:         1: 3wY6oGANv8v5KdwOhq0YCyGCR3c.roa (hash: YTsANZzZhIeMDaKWnAImTcGoqYZxIqqraKwHHW/4AQQ=)
                          2: EIanwN6nPdD5Ti6f4ayatnAbIlM.crl (hash: VbTqMDa2o//rzkZC91arU3DnlRipLmx2Rcz2wR03p9k=)
                          3: N6mQt4p5LaN2cPNO7YXd-z2Q3Ds.roa (hash: NGM3dzWw+RuSOK1JbfI7JvooWiDasEuAqNb3dRiWmXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:51:96:b8:0e:26:08:02:5b:f4:46:6b:3d:9f:0b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
        Validity
            Not Before: Dec 16 04:01:02 2025 GMT
            Not After : Dec 17 04:01:02 2025 GMT
        Subject: CN=958e41fd3fcc032eb87fa0e732809e144673b854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:31:f4:4e:45:59:19:74:9d:ec:c5:70:c1:
                    19:59:91:fa:68:f6:c6:37:b2:97:31:f8:f1:8e:a2:
                    ad:fe:4e:47:95:ae:a7:39:2c:e0:00:e1:6a:88:c5:
                    ba:06:5d:15:46:53:74:b5:8d:8c:39:b6:98:05:6d:
                    59:d2:27:6f:11:eb:95:53:88:ea:11:98:2c:c4:a0:
                    5f:13:36:09:5f:b9:09:6a:f0:33:22:b9:49:8e:8a:
                    25:fe:ce:08:27:a1:aa:f4:ed:b2:9d:99:b4:ab:3b:
                    87:da:25:77:c9:0d:17:b2:23:6d:a3:12:0b:ad:1b:
                    84:ea:10:bc:aa:d2:7d:d5:ac:15:94:14:f8:17:9f:
                    de:68:2c:31:c4:6b:a9:36:df:2f:12:01:da:17:72:
                    99:3c:ec:44:f1:b3:5a:82:04:d3:46:75:45:40:ab:
                    5a:90:7f:ee:90:26:25:84:e5:59:2e:94:90:7f:b8:
                    43:c9:64:cf:ff:2b:84:63:b6:b3:dc:3b:63:a8:67:
                    e8:a2:c2:15:00:0f:c8:26:e6:ce:87:99:bd:44:07:
                    4b:18:d0:10:10:41:eb:d0:1c:c8:3b:96:ee:37:3e:
                    b5:e3:ed:dc:54:71:8e:a6:49:99:d5:f1:51:ec:74:
                    9e:cd:80:5e:77:8c:de:9f:df:3a:f8:74:bb:96:d0:
                    42:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8E:41:FD:3F:CC:03:2E:B8:7F:A0:E7:32:80:9E:14:46:73:B8:54
            X509v3 Authority Key Identifier:
                keyid:10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:29:74:19:60:c7:b1:77:75:1a:26:ef:c0:f0:72:30:ad:
         2d:ce:b6:7d:1a:7b:ed:d5:02:67:9d:51:88:0c:4a:46:4f:ca:
         dd:82:63:f9:ce:2c:a6:58:b1:cd:68:a2:e2:32:8e:5f:4c:d0:
         da:a0:fb:d7:e2:71:77:d3:e8:32:ac:09:4e:c4:ba:76:c0:5e:
         b2:ff:b9:a3:59:9a:93:4b:f0:d0:94:e6:b4:6b:a5:95:b9:01:
         48:8f:18:ab:da:60:45:b7:1b:7d:d9:4d:c2:18:76:ed:58:de:
         0b:19:f6:71:79:ed:47:9b:51:1f:c4:de:bc:49:64:1d:fb:04:
         2f:ef:13:60:83:b3:88:86:9f:71:53:72:67:8d:33:4f:82:b4:
         a8:55:a6:41:ae:69:0a:6d:ef:ce:48:a4:5f:f1:66:c5:ef:ab:
         13:be:ec:4e:90:dd:d2:8d:7f:60:84:14:db:4c:c8:5c:9f:27:
         57:8b:fb:8a:65:0d:7d:32:fc:67:79:49:f2:f2:5d:ed:be:a8:
         59:dd:c9:44:6f:5b:23:c4:aa:10:25:55:94:2f:06:32:13:a3:
         ea:fa:65:02:37:53:bc:d2:8b:da:cb:ac:45:92:0a:44:46:57:
         7a:9b:a2:02:0c:f4:b2:fe:a3:8a:f3:80:34:a7:5a:b8:b3:ea:
         64:83:68:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZslUZa4DiYIAlv0Rms9nwvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODZhN2MwZGVhNzNkZDBmOTRlMmU5ZmUxYWM5YWI2NzAx
YjIyNTMwHhcNMjUxMjE2MDQwMTAyWhcNMjUxMjE3MDQwMTAyWjAzMTEwLwYDVQQD
Eyg5NThlNDFmZDNmY2MwMzJlYjg3ZmEwZTczMjgwOWUxNDQ2NzNiODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjUx9E5FWRl0nezFcMEZWZH6aPbG
N7KXMfjxjqKt/k5Hla6nOSzgAOFqiMW6Bl0VRlN0tY2MObaYBW1Z0idvEeuVU4jq
EZgsxKBfEzYJX7kJavAzIrlJjool/s4IJ6Gq9O2ynZm0qzuH2iV3yQ0XsiNtoxIL
rRuE6hC8qtJ91awVlBT4F5/eaCwxxGupNt8vEgHaF3KZPOxE8bNaggTTRnVFQKta
kH/ukCYlhOVZLpSQf7hDyWTP/yuEY7az3DtjqGfoosIVAA/IJubOh5m9RAdLGNAQ
EEHr0BzIO5buNz614+3cVHGOpkmZ1fFR7HSezYBed4zen986+HS7ltBCNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWOQf0/zAMuuH+g5zKAnhRGc7hUMB8GA1UdIwQY
MBaAFBCGp8Depz3Q+U4un+GsmrZwGyJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUlhbndONm5QZEQ1VGk2ZjRheWF0bkFiSWxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NjkwZDAtYTJhYi00Yjc0LWIxMDQt
ZDllMWI4MWRkMWM3LzEvRUlhbndONm5QZEQ1VGk2ZjRheWF0bkFiSWxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85NjkwZDAtYTJhYi00Yjc0LWIxMDQtZDllMWI4MWRkMWM3
LzEvRUlhbndONm5QZEQ1VGk2ZjRheWF0bkFiSWxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMMpdBlg
x7F3dRom78DwcjCtLc62fRp77dUCZ51RiAxKRk/K3YJj+c4splixzWii4jKOX0zQ
2qD71+Jxd9PoMqwJTsS6dsBesv+5o1mak0vw0JTmtGullbkBSI8Yq9pgRbcbfdlN
whh27VjeCxn2cXntR5tRH8TevElkHfsEL+8TYIOziIafcVNyZ40zT4K0qFWmQa5p
Cm3vzkikX/Fmxe+rE77sTpDd0o1/YIQU20zIXJ8nV4v7imUNfTL8Z3lJ8vJd7b6o
Wd3JRG9bI8SqECVVlC8GMhOj6vplAjdTvNKL2susRZIKREZXepuiAgz0sv6jivOA
NKdauLPqZINoqQ==
-----END CERTIFICATE-----
Generated at Tue Dec 16 09:44:22 2025 by rpki-client