This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File:                     p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier:          EqHzUWFgKUPgo+9DP5376XKMXDvN6ftKTxH/1QTae7M=
Subject key identifier:   66:8C:FA:6F:59:DA:3E:5A:D3:21:8D:9A:8C:B6:9F:93:E7:7D:39:CE
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer:       /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial:       019B1ACE22E706A45C318139741B3C01BC94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number:          177F
Signing time:             Sun 14 Dec 2025 03:01:15 +0000
Manifest this update:     Sun 14 Dec 2025 03:01:15 +0000
Manifest next update:     Mon 15 Dec 2025 03:01:15 +0000
Files and hashes:         1: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (hash: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=)
                          2: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (hash: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=)
                          3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: hA4OHfiWOJ2wL2H0TJLx0qy28QGBMcaGyeHAJWtvAvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1a:ce:22:e7:06:a4:5c:31:81:39:74:1b:3c:01:bc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
        Validity
            Not Before: Dec 14 03:01:15 2025 GMT
            Not After : Dec 15 03:01:15 2025 GMT
        Subject: CN=668cfa6f59da3e5ad3218d9a8cb69f93e77d39ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1f:c9:4c:8f:5d:14:93:02:b7:46:63:af:85:
                    aa:be:73:2e:df:c7:88:59:86:04:e7:08:e7:90:f6:
                    bb:1a:38:0f:42:4b:fd:6f:b9:71:c1:4f:de:7e:53:
                    bb:e9:f6:19:f9:f6:47:b1:8c:bf:81:43:1f:9b:e4:
                    f7:2d:08:e5:77:c9:09:d9:f2:d1:eb:60:d0:95:51:
                    19:a4:d6:3e:00:ac:b8:85:fc:f8:e3:d7:30:44:75:
                    10:d9:ab:92:8c:5f:b1:7c:03:01:b2:92:05:6e:ed:
                    8d:3c:f6:b8:dd:06:84:98:b3:29:ec:62:02:ed:90:
                    d2:5d:b2:7b:10:ff:83:67:f6:87:36:3f:a3:41:b5:
                    88:c3:75:75:70:55:ee:0e:d8:4a:99:3a:86:c2:c4:
                    0e:50:a3:e5:f9:91:dc:96:d1:df:65:2d:2d:a4:26:
                    60:59:25:93:ea:aa:95:c1:d8:d2:9e:2f:b9:e5:b1:
                    99:da:f7:dc:7f:f3:19:37:f9:72:d8:41:95:4c:44:
                    bb:c5:dd:81:6b:e0:26:11:8e:b7:f3:21:02:08:78:
                    1f:b9:d7:6f:14:d9:77:55:b9:de:2c:4c:91:4a:68:
                    4b:b4:55:a5:28:0f:c2:09:62:21:27:e1:e8:a9:0f:
                    1d:e5:96:2f:e0:8d:ec:8f:a5:6a:c2:01:7c:19:d6:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8C:FA:6F:59:DA:3E:5A:D3:21:8D:9A:8C:B6:9F:93:E7:7D:39:CE
            X509v3 Authority Key Identifier:
                keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d0:22:3f:71:e4:d4:d4:d6:f9:78:08:01:c9:55:02:d3:f2:
         fb:52:f6:0b:b1:89:88:7b:97:69:05:5c:0f:a5:5c:7f:fa:cf:
         f5:70:c9:34:f1:f3:41:75:e1:b4:a6:04:ca:91:6a:72:0d:1e:
         9a:d1:48:0f:4a:7c:80:10:88:92:72:1f:bf:cf:c8:b8:18:19:
         d2:02:dc:98:1c:41:23:d9:59:c6:35:4a:68:81:82:2c:23:2b:
         4b:32:dd:b6:99:55:b5:bb:f1:29:b7:57:41:99:14:3f:fa:af:
         74:ee:82:52:58:47:da:56:56:0c:be:4a:4e:fd:fb:20:09:95:
         cf:ed:d7:59:74:cf:af:1d:8e:45:d8:2c:ca:51:61:d1:66:c2:
         38:43:0b:af:9b:7f:a5:ad:0e:5e:80:26:cb:75:b9:a6:9a:ec:
         31:cc:37:69:a8:92:ab:8f:61:2f:51:4e:ea:82:93:04:9a:ed:
         ab:85:c8:f2:ab:c5:31:05:d9:c6:e6:92:3c:19:06:3a:6e:46:
         4e:e6:59:2b:ba:4f:d7:11:f2:d0:70:d7:0c:ee:d2:4b:16:89:
         03:be:01:6a:98:16:f2:fb:1b:95:f4:34:9d:5a:2c:c9:65:7c:
         b2:ef:db:28:41:12:50:99:df:4c:68:3e:b1:58:1e:87:e5:1f:
         1f:e0:76:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsaziLnBqRcMYE5dBs8AbyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDM2Mzc1ZmIwMzIyNzU2YjU1ZGFmZjY0ZTI2NWVmNzJj
MGRhNTIwHhcNMjUxMjE0MDMwMTE1WhcNMjUxMjE1MDMwMTE1WjAzMTEwLwYDVQQD
Eyg2NjhjZmE2ZjU5ZGEzZTVhZDMyMThkOWE4Y2I2OWY5M2U3N2QzOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B/JTI9dFJMCt0Zjr4WqvnMu38eI
WYYE5wjnkPa7GjgPQkv9b7lxwU/eflO76fYZ+fZHsYy/gUMfm+T3LQjld8kJ2fLR
62DQlVEZpNY+AKy4hfz449cwRHUQ2auSjF+xfAMBspIFbu2NPPa43QaEmLMp7GIC
7ZDSXbJ7EP+DZ/aHNj+jQbWIw3V1cFXuDthKmTqGwsQOUKPl+ZHcltHfZS0tpCZg
WSWT6qqVwdjSni+55bGZ2vfcf/MZN/ly2EGVTES7xd2Ba+AmEY638yECCHgfuddv
FNl3VbneLEyRSmhLtFWlKA/CCWIhJ+HoqQ8d5ZYv4I3sj6VqwgF8GdYviQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaM+m9Z2j5a0yGNmoy2n5PnfTnOMB8GA1UdIwQY
MBaAFKdDY3X7AyJ1a1Xa/2TiZe9ywNpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEt
MGU2YzFmZTlkMDE1LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEtMGU2YzFmZTlkMDE1
LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9AiP3Hk
1NTW+XgIAclVAtPy+1L2C7GJiHuXaQVcD6Vcf/rP9XDJNPHzQXXhtKYEypFqcg0e
mtFID0p8gBCIknIfv8/IuBgZ0gLcmBxBI9lZxjVKaIGCLCMrSzLdtplVtbvxKbdX
QZkUP/qvdO6CUlhH2lZWDL5KTv37IAmVz+3XWXTPrx2ORdgsylFh0WbCOEMLr5t/
pa0OXoAmy3W5pprsMcw3aaiSq49hL1FO6oKTBJrtq4XI8qvFMQXZxuaSPBkGOm5G
TuZZK7pP1xHy0HDXDO7SSxaJA74BapgW8vsblfQ0nVosyWV8su/bKEESUJnfTGg+
sVgeh+UfH+B2uw==
-----END CERTIFICATE-----
Generated at Sun Dec 14 08:01:10 2025 by rpki-client