This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File:                     ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier:          7V3gKSKGNEjLJvXfdYSGULcur7rCOfwLgGjuLQh0sjo=
Subject key identifier:   4E:B6:8F:7B:8D:7F:1E:90:24:B7:13:2A:6B:43:D3:35:F6:CE:49:12
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer:       /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial:       019B37C5ED32E66C4A575CE1B25617C0C308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number:          178E
Signing time:             Fri 19 Dec 2025 18:01:16 +0000
Manifest this update:     Fri 19 Dec 2025 18:01:16 +0000
Manifest next update:     Sat 20 Dec 2025 18:01:16 +0000
Files and hashes:         1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
                          2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
                          3: JYtV1xya2PeTYSiqPGeg1v3D1hU.roa (hash: jSaIThGpGsn1CtL3kupT6o9d7MS0BOry41A4muvp5uA=)
                          4: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
                          5: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: NV/LIdABaMC7P8le+Re8swgaXvtWsQee9VJGEdTMTyY=)
                          6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
                          7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
                          8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:ed:32:e6:6c:4a:57:5c:e1:b2:56:17:c0:c3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
        Validity
            Not Before: Dec 19 18:01:16 2025 GMT
            Not After : Dec 20 18:01:16 2025 GMT
        Subject: CN=4eb68f7b8d7f1e9024b7132a6b43d335f6ce4912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:e7:45:80:7e:f2:a7:1b:33:30:f8:21:bc:
                    e4:d0:85:6e:0d:41:42:85:c4:bf:de:12:cc:66:60:
                    37:15:65:74:fb:c9:c2:3e:04:2d:54:be:0f:a8:66:
                    60:d1:67:70:19:d4:a5:32:ee:f4:d0:87:33:d6:19:
                    2e:57:cf:77:95:0d:86:61:03:80:81:66:31:c2:ea:
                    ac:4b:22:7e:fe:06:ee:3a:67:ba:9e:fc:97:ce:91:
                    35:a0:c0:94:7e:27:98:d4:85:2b:b7:12:f6:f2:d9:
                    d7:ce:0e:96:61:8c:bd:8a:c0:02:39:fa:bc:36:78:
                    8b:c5:f7:8f:c0:0d:54:35:9a:c8:da:87:4c:9e:93:
                    40:8a:99:68:38:4f:86:e1:e9:de:e2:7c:c4:63:9b:
                    cf:81:00:16:ec:4a:d3:21:09:f5:b6:2d:9c:10:50:
                    95:35:ce:82:4e:fe:50:73:39:bc:c4:9e:11:16:de:
                    90:dd:72:fc:0d:17:04:ee:05:e0:a3:02:34:85:f9:
                    45:e3:3b:71:24:bd:ac:36:cf:59:76:ae:ab:e1:37:
                    14:bb:4c:f7:d2:62:32:d3:d8:44:e1:c8:bf:62:eb:
                    84:b6:c1:bf:f6:94:08:9c:44:f7:93:6a:a8:55:09:
                    79:76:79:b3:a0:85:54:cf:26:f1:4a:2d:9d:f7:39:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B6:8F:7B:8D:7F:1E:90:24:B7:13:2A:6B:43:D3:35:F6:CE:49:12
            X509v3 Authority Key Identifier:
                keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:2b:e7:98:a6:c3:c3:bd:7b:10:ab:7a:c3:de:e9:19:01:
         fe:30:c3:c4:3b:b1:3c:d8:72:8d:c5:4f:e8:53:69:40:f7:28:
         86:d3:3a:bf:1f:75:16:95:81:ea:e5:04:a3:74:eb:0d:21:99:
         81:ab:12:f5:3a:3d:19:25:6a:51:84:69:35:32:1c:cc:a8:cf:
         e0:ec:f7:28:05:24:c3:71:21:86:f9:07:12:13:1f:77:d2:5a:
         77:23:42:11:d5:92:e8:40:db:db:3a:fc:91:64:8d:eb:94:b2:
         68:40:c2:39:44:b9:97:b9:b0:8c:53:4a:f1:f8:7b:b6:9e:d3:
         f8:c7:43:a1:ae:ad:e3:02:0d:4a:9f:81:44:6a:3e:29:ff:36:
         a8:4a:89:05:10:76:75:59:7a:d3:c3:a6:08:e3:04:49:59:62:
         66:fd:fd:a0:fe:61:7a:b8:89:94:16:a0:9e:a0:e5:4f:3e:ff:
         7e:c9:e5:a0:c2:c9:6e:ab:88:0b:63:90:a5:c8:8c:c7:09:f8:
         cc:f6:d8:df:e0:84:b1:2a:5b:49:53:a5:31:7e:61:f7:01:e6:
         69:8f:7c:5a:e7:dd:b6:a2:ee:b9:13:91:f2:6d:ed:e0:e7:64:
         67:d9:9d:f8:18:54:a4:3f:10:ad:47:01:39:43:95:96:55:6b:
         ee:c5:9b:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3xe0y5mxKV1zhslYXwMMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3
OGIzOGQwHhcNMjUxMjE5MTgwMTE2WhcNMjUxMjIwMTgwMTE2WjAzMTEwLwYDVQQD
Eyg0ZWI2OGY3YjhkN2YxZTkwMjRiNzEzMmE2YjQzZDMzNWY2Y2U0OTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMHnRYB+8qcbMzD4Ibzk0IVuDUFC
hcS/3hLMZmA3FWV0+8nCPgQtVL4PqGZg0WdwGdSlMu700Icz1hkuV893lQ2GYQOA
gWYxwuqsSyJ+/gbuOme6nvyXzpE1oMCUfieY1IUrtxL28tnXzg6WYYy9isACOfq8
NniLxfePwA1UNZrI2odMnpNAiploOE+G4ene4nzEY5vPgQAW7ErTIQn1ti2cEFCV
Nc6CTv5Qczm8xJ4RFt6Q3XL8DRcE7gXgowI0hflF4ztxJL2sNs9Zdq6r4TcUu0z3
0mIy09hE4ci/YuuEtsG/9pQInET3k2qoVQl5dnmzoIVUzybxSi2d9zmqAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE62j3uNfx6QJLcTKmtD0zX2zkkSMB8GA1UdIwQY
MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt
NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh
LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsMr55im
w8O9exCresPe6RkB/jDDxDuxPNhyjcVP6FNpQPcohtM6vx91FpWB6uUEo3TrDSGZ
gasS9To9GSVqUYRpNTIczKjP4Oz3KAUkw3EhhvkHEhMfd9JadyNCEdWS6EDb2zr8
kWSN65SyaEDCOUS5l7mwjFNK8fh7tp7T+MdDoa6t4wINSp+BRGo+Kf82qEqJBRB2
dVl608OmCOMESVliZv39oP5heriJlBagnqDlTz7/fsnloMLJbquIC2OQpciMxwn4
zPbY3+CEsSpbSVOlMX5h9wHmaY98WufdtqLuuROR8m3t4OdkZ9md+BhUpD8QrUcB
OUOVllVr7sWb7w==
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:07:59 2025 by rpki-client