This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File:                     0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier:          ZGdM93sB35WN5ZICZ+De3kxAI433SH7Mov/VddFiccU=
Subject key identifier:   19:4D:77:43:A4:7E:A7:69:04:B4:EA:6E:B4:C9:17:E7:7D:5B:5D:EB
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer:       /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial:       019B0E92F7D5D3169280C5877EDBBDB40FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number:          177B
Signing time:             Thu 11 Dec 2025 18:01:11 +0000
Manifest this update:     Thu 11 Dec 2025 18:01:11 +0000
Manifest next update:     Fri 12 Dec 2025 18:01:11 +0000
Files and hashes:         1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: OKQ+dhFJ6B1oRkcTw8gKHWiK+k54WirR61+DsgA4K3c=)
                          2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
                          3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
                          4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
                          5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
                          6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
                          7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
                          8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:92:f7:d5:d3:16:92:80:c5:87:7e:db:bd:b4:0f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
        Validity
            Not Before: Dec 11 18:01:11 2025 GMT
            Not After : Dec 12 18:01:11 2025 GMT
        Subject: CN=194d7743a47ea76904b4ea6eb4c917e77d5b5deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:29:66:5c:18:34:69:98:3f:af:63:e1:6f:
                    07:a8:28:f2:26:83:a5:aa:fd:ee:6b:82:55:cc:97:
                    2c:ac:5f:a9:da:3f:5e:d7:9f:f1:22:59:1d:9b:43:
                    5c:f6:73:90:18:f7:d0:2a:34:ca:b9:e9:e5:b4:a8:
                    3e:d6:25:10:bb:7d:a7:47:fc:a1:41:3e:6a:cf:b1:
                    aa:4e:f6:a3:65:70:dd:63:b3:09:7e:a4:4e:0b:31:
                    c0:e8:04:3f:de:64:c5:69:a4:45:55:d0:15:43:ba:
                    eb:93:95:00:60:c2:a8:8f:84:25:25:a7:a8:7e:96:
                    8c:6a:76:97:ab:13:c5:12:11:db:3c:60:7a:7d:79:
                    37:4e:63:9c:0e:89:50:1e:c3:21:fd:0c:09:6d:ce:
                    6d:28:50:f0:eb:65:be:e9:be:2a:36:c3:2e:af:bd:
                    11:90:19:09:fd:ae:76:18:3c:5a:29:14:db:3e:a5:
                    36:ec:af:76:93:95:7a:7f:55:41:3d:eb:f0:aa:38:
                    e4:8a:c2:36:c1:d2:e9:b7:ae:2c:42:9a:aa:17:9f:
                    22:62:6f:cc:a5:e7:db:e2:b8:e9:83:59:ff:99:97:
                    70:2c:7f:e2:7e:7d:9a:78:9a:d7:8a:bb:fb:57:70:
                    fe:c6:ac:87:f6:63:81:0f:cf:a5:16:c9:63:1b:7d:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4D:77:43:A4:7E:A7:69:04:B4:EA:6E:B4:C9:17:E7:7D:5B:5D:EB
            X509v3 Authority Key Identifier:
                keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2a:54:08:84:28:64:b4:3a:db:60:fc:5c:70:c6:4f:a3:74:
         bd:0a:f2:80:ac:d6:8e:e2:fa:62:62:ec:80:11:ff:f1:da:49:
         f6:df:c8:0d:34:9f:f2:19:c3:c9:3c:5e:95:a5:f4:8d:a5:03:
         b4:de:09:51:98:fa:52:07:c3:07:5e:19:25:d4:1f:5c:33:7d:
         dd:91:d7:07:07:dd:c8:73:13:4a:1b:12:13:09:8b:0e:65:81:
         27:04:8e:3b:53:19:6d:89:6a:33:5b:fe:3e:03:e6:84:02:2a:
         19:d5:a9:74:d7:50:7f:3d:e5:3f:dc:da:b7:60:48:4c:ee:45:
         8c:2c:9c:a9:ee:2e:52:b1:16:fb:34:15:b1:4a:93:dc:d2:7b:
         94:ef:93:db:bb:a0:f4:5f:92:f9:d3:6b:b7:f5:9b:67:1e:bc:
         a9:17:77:5a:8e:56:aa:73:7d:6c:9a:da:09:01:17:f6:79:d1:
         01:39:b0:92:f3:74:fd:17:6d:86:07:e8:80:43:2b:8a:eb:fd:
         63:fc:9b:d7:ea:33:cb:56:91:05:af:47:8c:90:75:55:d5:d7:
         af:77:65:96:df:e7:3f:71:25:09:13:c0:74:d9:f0:31:6a:20:
         44:60:f1:c6:0e:5d:e2:08:24:41:74:7a:c4:e6:48:79:04:90:
         0b:36:30:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsOkvfV0xaSgMWHftu9tA/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjIyZmRlYzhmYWRmY2E1OGU3NTc1YzI5ZjEwZTczYWU3
NzU3MTUwHhcNMjUxMjExMTgwMTExWhcNMjUxMjEyMTgwMTExWjAzMTEwLwYDVQQD
EygxOTRkNzc0M2E0N2VhNzY5MDRiNGVhNmViNGM5MTdlNzdkNWI1ZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6kpZlwYNGmYP69j4W8HqCjyJoOl
qv3ua4JVzJcsrF+p2j9e15/xIlkdm0Nc9nOQGPfQKjTKuenltKg+1iUQu32nR/yh
QT5qz7GqTvajZXDdY7MJfqROCzHA6AQ/3mTFaaRFVdAVQ7rrk5UAYMKoj4QlJaeo
fpaManaXqxPFEhHbPGB6fXk3TmOcDolQHsMh/QwJbc5tKFDw62W+6b4qNsMur70R
kBkJ/a52GDxaKRTbPqU27K92k5V6f1VBPevwqjjkisI2wdLpt64sQpqqF58iYm/M
pefb4rjpg1n/mZdwLH/ifn2aeJrXirv7V3D+xqyH9mOBD8+lFsljG32IzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlNd0OkfqdpBLTqbrTJF+d9W13rMB8GA1UdIwQY
MBaAFNJiL97I+t/KWOdXXCnxDnOud1cVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWIt
ZjA1YWEyMjlkNjM4LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWItZjA1YWEyMjlkNjM4
LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSpUCIQo
ZLQ622D8XHDGT6N0vQrygKzWjuL6YmLsgBH/8dpJ9t/IDTSf8hnDyTxelaX0jaUD
tN4JUZj6UgfDB14ZJdQfXDN93ZHXBwfdyHMTShsSEwmLDmWBJwSOO1MZbYlqM1v+
PgPmhAIqGdWpdNdQfz3lP9zat2BITO5FjCycqe4uUrEW+zQVsUqT3NJ7lO+T27ug
9F+S+dNrt/WbZx68qRd3Wo5WqnN9bJraCQEX9nnRATmwkvN0/RdthgfogEMriuv9
Y/yb1+ozy1aRBa9HjJB1VdXXr3dllt/nP3ElCRPAdNnwMWogRGDxxg5d4ggkQXR6
xOZIeQSQCzYwRw==
-----END CERTIFICATE-----
Generated at Fri Dec 12 01:00:25 2025 by rpki-client