This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File:                     fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier:          vOw2u+gpNacDyTNUbPZoqxQUT9PV0Go+yOWdpbLnmbY=
Subject key identifier:   1D:FE:24:1B:79:A7:B2:23:1A:B7:E5:73:97:07:06:AA:45:6B:5F:9E
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer:       /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial:       019B410030C6F8F10776ABBC60ED83F460D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number:          178F
Signing time:             Sun 21 Dec 2025 13:01:29 +0000
Manifest this update:     Sun 21 Dec 2025 13:01:29 +0000
Manifest next update:     Mon 22 Dec 2025 13:01:29 +0000
Files and hashes:         1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
                          2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
                          3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: S+pxl9GjNM+MH3oXLsLXLHcKoDWVg8+nFIBhFVDlVT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:41:00:30:c6:f8:f1:07:76:ab:bc:60:ed:83:f4:60:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
        Validity
            Not Before: Dec 21 13:01:29 2025 GMT
            Not After : Dec 22 13:01:29 2025 GMT
        Subject: CN=1dfe241b79a7b2231ab7e573970706aa456b5f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:ce:f6:a7:49:8e:eb:61:3c:65:d0:cd:59:
                    57:86:1c:eb:e6:f0:2d:64:e8:4d:c4:05:4a:7e:15:
                    34:22:ee:a3:4a:ac:e2:47:36:ca:64:33:52:67:33:
                    ac:3f:ed:e6:b8:be:05:4d:8a:c0:b8:e8:93:0e:64:
                    e6:10:76:b9:94:77:57:e5:53:d2:f0:9d:07:f8:f2:
                    69:36:f6:6e:4f:b8:83:f6:06:07:c4:1b:85:f9:8b:
                    db:fc:09:5b:43:5f:98:11:22:30:4b:ed:a8:67:5d:
                    d3:eb:9e:15:e0:61:b3:3d:aa:8b:82:2f:f9:97:1c:
                    60:5c:cf:f1:c5:58:ec:bd:b9:e5:dc:42:f3:0d:1b:
                    04:69:3b:c9:6d:14:4e:01:19:36:1d:3e:7d:6b:40:
                    3a:cd:35:4b:69:cb:3b:b6:69:61:40:db:32:e4:9c:
                    eb:83:50:71:73:82:f1:e4:40:b4:fb:f5:17:ba:23:
                    38:62:3a:d6:a1:15:93:0d:00:b6:0b:1b:4e:ce:62:
                    90:51:1b:e8:63:11:03:94:20:ee:bf:b0:24:7e:96:
                    1d:6d:91:51:26:05:ec:61:fe:af:f3:05:ae:42:61:
                    a7:55:cf:38:85:3f:e6:73:3a:34:db:57:cf:c8:d9:
                    19:9a:3c:50:a9:60:5d:41:34:c7:6d:ec:6c:1d:20:
                    94:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FE:24:1B:79:A7:B2:23:1A:B7:E5:73:97:07:06:AA:45:6B:5F:9E
            X509v3 Authority Key Identifier:
                keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:75:01:39:9c:09:67:1e:6e:17:4c:44:97:af:d2:0c:94:e1:
         65:5d:eb:c1:43:95:b8:ee:c7:26:36:63:19:0b:9c:32:9f:33:
         f1:00:e3:9b:d3:29:0a:41:8f:a7:5f:f4:11:d9:c5:c2:70:f4:
         bd:2a:6a:83:ed:69:26:72:c4:50:95:25:d8:7b:e3:d5:e9:33:
         73:3c:af:e1:e3:32:f3:47:d6:cc:9c:be:2f:c4:cf:dc:e8:b4:
         7a:b5:ba:95:2b:95:22:45:f5:dc:05:23:a0:2f:4e:1a:cf:5c:
         3d:0a:ef:17:91:44:ae:2f:a4:88:15:97:ab:69:70:45:e7:ae:
         68:e7:36:d6:ee:45:b4:5a:8d:72:67:54:e2:6f:e9:d0:62:04:
         47:c1:f5:e7:9f:22:6d:24:47:be:16:09:58:0f:17:ed:96:0d:
         3b:9c:70:57:0a:7e:02:a7:e4:84:47:5b:df:72:36:2e:bf:09:
         2c:22:fc:27:7c:9d:ca:65:3b:9c:29:e8:f6:f1:fb:28:3d:3d:
         7d:7a:c0:27:61:5b:0e:86:29:ca:83:49:3f:b3:84:d2:11:6b:
         49:df:af:72:74:c1:fe:b9:e8:47:77:11:40:a0:b8:00:4b:3b:
         02:e0:2a:72:2b:6b:e1:0d:42:9b:43:ae:2d:05:52:e2:33:16:
         e1:f2:a9:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtBADDG+PEHdqu8YO2D9GDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOTEyNjczMmMyZjAxOTNiYzNkZTRlOGQzYWJjMTVmNGJh
ZWQ2MmQwHhcNMjUxMjIxMTMwMTI5WhcNMjUxMjIyMTMwMTI5WjAzMTEwLwYDVQQD
EygxZGZlMjQxYjc5YTdiMjIzMWFiN2U1NzM5NzA3MDZhYTQ1NmI1ZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DnO9qdJjuthPGXQzVlXhhzr5vAt
ZOhNxAVKfhU0Iu6jSqziRzbKZDNSZzOsP+3muL4FTYrAuOiTDmTmEHa5lHdX5VPS
8J0H+PJpNvZuT7iD9gYHxBuF+Yvb/AlbQ1+YESIwS+2oZ13T654V4GGzPaqLgi/5
lxxgXM/xxVjsvbnl3ELzDRsEaTvJbRROARk2HT59a0A6zTVLacs7tmlhQNsy5Jzr
g1Bxc4Lx5EC0+/UXuiM4YjrWoRWTDQC2CxtOzmKQURvoYxEDlCDuv7AkfpYdbZFR
JgXsYf6v8wWuQmGnVc84hT/mczo021fPyNkZmjxQqWBdQTTHbexsHSCUMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3+JBt5p7IjGrflc5cHBqpFa1+eMB8GA1UdIwQY
MBaAFHyRJnMsLwGTvD3k6NOrwV9LrtYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2Qt
ZDZiNzMwMjY2ZTc2LzEvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2QtZDZiNzMwMjY2ZTc2
LzEvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnUBOZwJ
Zx5uF0xEl6/SDJThZV3rwUOVuO7HJjZjGQucMp8z8QDjm9MpCkGPp1/0EdnFwnD0
vSpqg+1pJnLEUJUl2Hvj1ekzczyv4eMy80fWzJy+L8TP3Oi0erW6lSuVIkX13AUj
oC9OGs9cPQrvF5FEri+kiBWXq2lwReeuaOc21u5FtFqNcmdU4m/p0GIER8H1558i
bSRHvhYJWA8X7ZYNO5xwVwp+AqfkhEdb33I2Lr8JLCL8J3ydymU7nCno9vH7KD09
fXrAJ2FbDoYpyoNJP7OE0hFrSd+vcnTB/rnoR3cRQKC4AEs7AuAqcitr4Q1Cm0Ou
LQVS4jMW4fKptg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 19:50:46 2025 by rpki-client