This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          RS4IrtuPqvaKNB4RpKMdt3IFj6A1Q3f6IayGKw9l7m8=
Subject key identifier:   67:A8:3D:F9:4E:62:49:90:49:B3:20:DB:50:B9:76:7B:70:52:CC:88
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019B0A4806F8E77EE92DE1431607C3BE658E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          176B
Signing time:             Wed 10 Dec 2025 22:00:51 +0000
Manifest this update:     Wed 10 Dec 2025 22:00:51 +0000
Manifest next update:     Thu 11 Dec 2025 22:00:51 +0000
Files and hashes:         1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
                          2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
                          3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
                          4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
                          5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: mi6oUB7CZaEcIS+DniYRP2jwzVMaXNDFOPgyZUBVups=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0a:48:06:f8:e7:7e:e9:2d:e1:43:16:07:c3:be:65:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Dec 10 22:00:51 2025 GMT
            Not After : Dec 11 22:00:51 2025 GMT
        Subject: CN=67a83df94e62499049b320db50b9767b7052cc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:ec:3e:66:89:2e:ab:3f:ba:74:2e:8c:4f:
                    16:9d:c9:74:a4:34:0a:12:a5:7c:6d:72:b5:cb:f3:
                    f1:38:ed:64:81:0b:63:14:0b:a0:4d:8f:80:d8:eb:
                    f4:b6:72:23:04:00:2d:a8:27:ea:4e:c3:10:3a:35:
                    0a:3f:cc:d7:c3:2b:6b:3a:f3:b5:5d:56:d4:18:91:
                    94:27:63:90:e4:9e:3f:ed:2e:2a:26:3e:b0:2e:ee:
                    ce:cb:1b:22:9f:9d:13:3e:a1:2f:ce:67:37:4f:cf:
                    13:ad:a0:7b:d4:e8:75:55:92:82:2e:ae:20:dd:76:
                    c3:59:36:07:be:9d:2a:70:a4:36:6a:05:ba:0a:71:
                    3e:c3:99:a3:25:a5:ec:c2:ac:2d:cb:c9:0a:bd:ae:
                    08:ce:5b:6e:ba:5d:79:5c:d2:a3:09:40:4a:4a:92:
                    a8:98:ef:96:cc:77:43:76:66:db:6e:43:4a:ae:e0:
                    c3:69:c9:90:bb:09:b7:e5:15:52:c3:6d:d0:55:e0:
                    9f:e5:e9:4c:e5:3a:95:cd:1f:7b:06:cc:09:f5:16:
                    5a:de:97:5e:88:6e:b6:90:2f:20:a8:63:c2:e1:19:
                    e3:d3:18:79:f9:13:53:b8:97:e7:67:22:4b:95:98:
                    9d:9a:ec:4e:a9:0b:96:11:6f:83:06:06:63:53:2d:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A8:3D:F9:4E:62:49:90:49:B3:20:DB:50:B9:76:7B:70:52:CC:88
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:56:3c:55:fa:cf:f6:9a:4a:cc:bc:61:24:28:e7:8c:5b:4a:
         6e:57:30:9a:92:a0:29:e1:99:69:5f:bb:9d:bf:28:87:cd:08:
         63:4b:f3:e8:a7:b0:c2:a2:ff:e6:d6:0f:a6:c0:9f:13:f5:ae:
         45:a9:ae:11:f6:c7:c4:61:3c:fe:41:e4:14:11:f9:f6:97:2e:
         dd:6f:7d:73:a1:35:0b:af:e9:cd:4c:2e:eb:26:f1:4e:15:01:
         7d:55:6a:ed:2d:ca:3d:57:6a:43:b2:0b:ea:11:60:7d:3b:a4:
         2f:4f:c4:73:b9:34:0e:41:7e:d2:e0:54:59:c9:be:e5:f1:cb:
         10:2f:81:af:66:b6:f9:30:d2:e2:25:99:3b:96:61:cb:13:fd:
         fc:d3:2f:0c:f0:ce:17:82:e8:76:d9:bd:69:ce:a0:37:fa:fd:
         0f:0a:3a:4f:83:9f:54:5f:0e:3f:cc:1f:15:3d:ae:49:2e:86:
         73:a4:5f:9d:d3:10:05:64:63:5c:ba:af:4a:cb:34:20:a8:15:
         6a:bb:3c:9a:fb:f9:2d:c0:99:f6:df:3c:9d:37:19:9b:d0:ff:
         97:c8:28:72:11:fc:63:78:83:d8:f2:9b:a6:f8:8b:c4:9b:a0:
         3b:f8:65:73:62:a5:0e:03:f7:d3:b9:cc:74:0a:a5:8c:03:ca:
         6a:4a:ed:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsKSAb4537pLeFDFgfDvmWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Yzk4YjJlNGEzZTA2MGRlZjQ1YWJjNjJjMGUzNDVmYWE4
MGI1ZWMwHhcNMjUxMjEwMjIwMDUxWhcNMjUxMjExMjIwMDUxWjAzMTEwLwYDVQQD
Eyg2N2E4M2RmOTRlNjI0OTkwNDliMzIwZGI1MGI5NzY3YjcwNTJjYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzvsPmaJLqs/unQujE8Wncl0pDQK
EqV8bXK1y/PxOO1kgQtjFAugTY+A2Ov0tnIjBAAtqCfqTsMQOjUKP8zXwytrOvO1
XVbUGJGUJ2OQ5J4/7S4qJj6wLu7Oyxsin50TPqEvzmc3T88TraB71Oh1VZKCLq4g
3XbDWTYHvp0qcKQ2agW6CnE+w5mjJaXswqwty8kKva4Izltuul15XNKjCUBKSpKo
mO+WzHdDdmbbbkNKruDDacmQuwm35RVSw23QVeCf5elM5TqVzR97BswJ9RZa3pde
iG62kC8gqGPC4Rnj0xh5+RNTuJfnZyJLlZidmuxOqQuWEW+DBgZjUy0ehQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeoPflOYkmQSbMg21C5dntwUsyIMB8GA1UdIwQY
MBaAFEbJiy5KPgYN70WrxiwONF+qgLXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEt
MzQ0OTUyMjcxMGU3LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEtMzQ0OTUyMjcxMGU3
LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblY8VfrP
9ppKzLxhJCjnjFtKblcwmpKgKeGZaV+7nb8oh80IY0vz6KewwqL/5tYPpsCfE/Wu
RamuEfbHxGE8/kHkFBH59pcu3W99c6E1C6/pzUwu6ybxThUBfVVq7S3KPVdqQ7IL
6hFgfTukL0/Ec7k0DkF+0uBUWcm+5fHLEC+Br2a2+TDS4iWZO5ZhyxP9/NMvDPDO
F4Lodtm9ac6gN/r9Dwo6T4OfVF8OP8wfFT2uSS6Gc6RfndMQBWRjXLqvSss0IKgV
ars8mvv5LcCZ9t88nTcZm9D/l8gochH8Y3iD2PKbpviLxJugO/hlc2KlDgP307nM
dAqljAPKakrtEQ==
-----END CERTIFICATE-----
Generated at Thu Dec 11 00:58:22 2025 by rpki-client