This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
File:                     cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json)
Hash identifier:          2XqKC7L3C83picWsY4l24g4L7VrBIETQAEsJ40je+f4=
Subject key identifier:   12:4E:5F:94:0A:9D:2B:BD:C2:C1:5E:97:A1:FE:26:6D:48:8B:32:9A
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Certificate issuer:       /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial:       019B18A84F35879F502634F7BD80CD3C7EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
Manifest number:          177B
Signing time:             Sat 13 Dec 2025 17:00:42 +0000
Manifest this update:     Sat 13 Dec 2025 17:00:42 +0000
Manifest next update:     Sun 14 Dec 2025 17:00:42 +0000
Files and hashes:         1: 6QFd9IdVpCQmItNCPxRFCrp9nKQ.roa (hash: bGmgyU+MRUomnlmMA4u5BiNJcGHkzxHgj+I3pHeo+G0=)
                          2: 7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa (hash: /UJ2jaPIsh9LABzhutyiOz6tqO3pebNJplX7fsJ15q4=)
                          3: 9x0cjGr7YULmSfzI3dcYG9w_06I.roa (hash: nZkDj/8oM/37FYrz8May17dhFjnT3DNeVQBgn2oaZf0=)
                          4: EBjZlhPdImN_fmswrc4n1qFbaJc.roa (hash: tUvTqcEJd5jRcaH6HCXAi4EQUm+eSxMyHWyd2ocWiV8=)
                          5: GNcbaUuI19-wbs7GLcE1lajDv-k.roa (hash: JkYHzX+XVOiUvpRyMV+wrBz6xce9nKA7hPNlot5aQZ4=)
                          6: PX0DpkBl9yg1gQzNf2fXaFsswv8.roa (hash: fegY3SzHduBrH8eO5Wo9IcX0cjRfR9p14sX7mhpiZ8U=)
                          7: SHXtPV4kgZiSMLrfaQNfttE3YEg.roa (hash: vCULHOU0pm0NUpWsnrVNz86sxtEUOZpw65hpej3MIxs=)
                          8: TEHPMPoZisl9vOiLWV_tB3SmWaI.roa (hash: /q8DB82i9XChVszHx+lvwBEwJCoXbxAKUBSDji6t9Ek=)
                          9: VAwOmXBu3_hb-94kaLmxAE_i7pI.roa (hash: IZvIAsZ3NFMGzz4y4fdnumBCA9Bj3yp20yIaQmXg3Fo=)
                          10: YTPIeKA6vN8bBsCmmqzk6w3bpmU.roa (hash: Mo6Tf23Yod2O05O4042OzPfIL4jXB8/HVLdp8MJUwtk=)
                          11: YrZdH5pglRx66b5p9JGRz_SyZts.roa (hash: mhtrEJveZQw15THeEWaXosd9inWt6asg5tmlg7bP8KA=)
                          12: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: ARaqiTalues837xCEPU2mUNVgiNTJi68BOZE4rn24HI=)
                          13: k34T0BOxtuolFGK7D9gfPSVqjyg.roa (hash: zRGBGpZvNTWiV1L4FpZxoKUzkhe3V2xnMgLC1QF7Yns=)
                          14: p9yFoBCMLxcx2kyLnzIglbUZt8Q.roa (hash: fbxtSkZt340A9KV6V1MZj2gG37RK0K88NQoLtoEEGa0=)
                          15: rm3UHUFplAChrToLa297UrTCIuo.roa (hash: HHiyje/4Xaq3L0LGhP0VYLYtVuy3S8HWVlC7cJ7pBgA=)
                          16: yKPpEfXuR3hgVnHrW-SosrWvchI.roa (hash: JRlziFyrSVh96Xmb3+ZOE6HFj6jm/zMUIwmBAAhdoq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:18:a8:4f:35:87:9f:50:26:34:f7:bd:80:cd:3c:7e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
        Validity
            Not Before: Dec 13 17:00:42 2025 GMT
            Not After : Dec 14 17:00:42 2025 GMT
        Subject: CN=124e5f940a9d2bbdc2c15e97a1fe266d488b329a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:63:7b:cb:ed:a8:31:bb:48:2d:00:72:88:a7:
                    6d:c7:bf:f0:82:46:38:61:56:fe:08:1d:76:de:e6:
                    6b:bc:f4:44:81:dd:49:1f:3d:6d:56:57:d8:13:22:
                    b0:26:bb:67:13:b4:c7:0d:08:e5:6e:a6:15:24:98:
                    b0:01:13:36:98:bf:10:a9:8f:0c:ec:f5:d1:1b:c7:
                    e3:5b:ef:a1:09:80:2b:e0:e8:19:c6:50:db:52:fc:
                    64:bc:b4:0a:9d:d0:91:e0:97:d5:17:a6:0d:28:12:
                    7c:78:ce:21:47:ed:db:f0:34:74:22:81:c3:c5:26:
                    91:dc:31:78:66:ee:ab:5c:78:7a:61:33:61:bf:82:
                    66:e9:c9:6d:e1:1c:5e:b7:60:4c:5e:75:4b:93:48:
                    21:ac:c4:05:d3:2a:97:a5:7c:16:a2:d2:29:41:50:
                    64:f0:d6:84:39:bc:7d:63:e4:da:da:b1:36:44:44:
                    d2:70:4e:b1:fb:5d:48:95:b5:0f:56:5b:d5:3b:70:
                    42:a0:53:75:69:97:5d:c5:22:bd:32:57:ed:56:00:
                    a6:af:f8:00:4f:a0:a9:9a:de:9a:e2:9b:a0:8f:7a:
                    8a:b5:bb:47:56:c4:0a:aa:39:f1:ee:b5:3c:88:35:
                    73:65:bc:5d:9c:78:9c:b9:cb:4f:76:3a:e8:74:ab:
                    43:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4E:5F:94:0A:9D:2B:BD:C2:C1:5E:97:A1:FE:26:6D:48:8B:32:9A
            X509v3 Authority Key Identifier:
                keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:43:53:bb:3f:6d:a9:d0:4c:8f:c9:2d:f4:77:22:15:a6:59:
         23:e7:b9:1d:f7:60:b9:39:18:39:93:d1:3e:86:00:6f:1e:bf:
         9d:c7:34:3b:ef:82:91:5b:1e:7d:eb:d1:0e:0d:2d:5d:29:84:
         67:c8:f7:56:ab:b1:7e:14:18:9b:3b:b2:cc:77:41:34:8c:04:
         d5:9f:a3:54:70:38:bc:f6:b5:61:24:14:46:89:9a:4b:63:2c:
         4c:29:51:32:13:02:ba:94:71:76:1b:d0:fb:76:ea:23:88:24:
         77:fd:b0:6a:a5:eb:b6:40:27:fa:30:aa:71:f5:8a:03:b0:e3:
         aa:fe:3d:c9:05:e2:26:a0:1e:68:01:40:5c:a4:84:17:3f:f0:
         9c:1e:dc:a9:a1:e8:9a:72:bd:13:10:1e:c1:35:a9:e3:1f:ed:
         c5:e6:46:b6:66:d1:82:83:62:8a:b9:5c:09:4c:11:49:2f:5f:
         01:21:b6:63:d3:9c:f4:c7:79:ad:16:ae:07:a1:c3:f8:1d:18:
         63:4c:25:61:92:bc:23:08:cf:42:c5:d7:db:0c:1a:72:ae:4e:
         54:49:d7:2c:2a:7e:65:b0:1a:4a:bc:c5:16:cd:67:7f:1c:e1:
         4d:07:0c:41:3b:b3:f4:1d:d1:1b:fb:94:c4:24:07:07:4e:74:
         f2:6b:86:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsYqE81h59QJjT3vYDNPH7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl
ZjRmZWEwHhcNMjUxMjEzMTcwMDQyWhcNMjUxMjE0MTcwMDQyWjAzMTEwLwYDVQQD
EygxMjRlNWY5NDBhOWQyYmJkYzJjMTVlOTdhMWZlMjY2ZDQ4OGIzMjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WN7y+2oMbtILQByiKdtx7/wgkY4
YVb+CB123uZrvPREgd1JHz1tVlfYEyKwJrtnE7THDQjlbqYVJJiwARM2mL8QqY8M
7PXRG8fjW++hCYAr4OgZxlDbUvxkvLQKndCR4JfVF6YNKBJ8eM4hR+3b8DR0IoHD
xSaR3DF4Zu6rXHh6YTNhv4Jm6clt4Rxet2BMXnVLk0ghrMQF0yqXpXwWotIpQVBk
8NaEObx9Y+Ta2rE2RETScE6x+11IlbUPVlvVO3BCoFN1aZddxSK9MlftVgCmr/gA
T6Cpmt6a4pugj3qKtbtHVsQKqjnx7rU8iDVzZbxdnHicuctPdjrodKtD6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJOX5QKnSu9wsFel6H+Jm1IizKaMB8GA1UdIwQY
MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt
YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1
LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkNTuz9t
qdBMj8kt9HciFaZZI+e5HfdguTkYOZPRPoYAbx6/ncc0O++CkVsefevRDg0tXSmE
Z8j3VquxfhQYmzuyzHdBNIwE1Z+jVHA4vPa1YSQURomaS2MsTClRMhMCupRxdhvQ
+3bqI4gkd/2waqXrtkAn+jCqcfWKA7Djqv49yQXiJqAeaAFAXKSEFz/wnB7cqaHo
mnK9ExAewTWp4x/txeZGtmbRgoNiirlcCUwRSS9fASG2Y9Oc9Md5rRauB6HD+B0Y
Y0wlYZK8IwjPQsXX2wwacq5OVEnXLCp+ZbAaSrzFFs1nfxzhTQcMQTuz9B3RG/uU
xCQHB0508muGbQ==
-----END CERTIFICATE-----
Generated at Sat Dec 13 21:17:16 2025 by rpki-client