This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
File:                     j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft (raw, json)
Hash identifier:          BvCV0R54sFC9qVRsUyWP1fBVWp9T4Z/ciR0AhB42of8=
Subject key identifier:   DB:D9:DB:E7:81:E4:D4:CE:0C:68:D0:6D:BE:4E:A9:6A:34:65:1A:D5
Authority key identifier: 8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
Certificate issuer:       /CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Certificate serial:       019B24765ED14D92EFA086FBDBD2FF19B936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
Manifest number:          177F
Signing time:             Tue 16 Dec 2025 00:01:35 +0000
Manifest this update:     Tue 16 Dec 2025 00:01:35 +0000
Manifest next update:     Wed 17 Dec 2025 00:01:35 +0000
Files and hashes:         1: 45eXxJu6xURO3jmHH_sr82ETXJ0.roa (hash: 06fBrGTkGREvoEfC3pMk8VcZ5AuI0qqaRZOfsMwGOFA=)
                          2: j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl (hash: SvDA1MVfto+eBOY4K7w9cztT6wa8K5rZS+RIwZI+ZII=)
                          3: rLANs67-3Gi4kRW1nj3PUya8Q2E.roa (hash: WVv39ltsTymDu8Za5wkORIX9Pb4T6Yo22AuFIAqG2RU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:76:5e:d1:4d:92:ef:a0:86:fb:db:d2:ff:19:b9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbc1063a6efb45e27b111e9207827c9f732502b
        Validity
            Not Before: Dec 16 00:01:35 2025 GMT
            Not After : Dec 17 00:01:35 2025 GMT
        Subject: CN=dbd9dbe781e4d4ce0c68d06dbe4ea96a34651ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:fb:6e:6e:14:38:88:54:9d:20:da:8a:81:
                    e4:2d:01:45:35:e1:4b:57:cc:4d:f3:be:4e:c2:0f:
                    db:23:33:b2:1a:77:47:f6:cb:38:34:24:4a:39:5b:
                    70:96:76:e5:bd:ee:0a:4b:bc:4f:9a:7e:5a:34:b5:
                    d8:ce:35:40:b4:1c:ba:91:01:cd:64:de:9e:3f:dd:
                    6c:13:a7:d0:c7:be:44:c4:0f:8e:37:97:3c:82:9b:
                    f0:b1:f9:23:07:2b:97:74:26:0d:ac:cc:ce:a5:45:
                    a2:42:47:bd:92:33:dc:a2:42:57:7d:73:67:6f:33:
                    2f:a8:75:05:c5:8c:31:ff:a7:f5:ec:5d:c9:e4:e7:
                    b7:fe:c5:51:61:57:c7:60:8c:dc:15:6b:a6:a8:39:
                    f8:29:ef:63:94:28:ab:b6:60:34:25:b5:c1:12:dc:
                    f2:7a:ad:95:b9:dc:b2:de:93:15:7c:a7:2a:49:fc:
                    1c:42:25:d0:08:af:51:bd:ed:dd:68:f8:ce:3e:b1:
                    87:0c:d4:7b:fb:47:9d:6d:fe:ef:e4:ee:cb:3f:f5:
                    16:e4:65:7d:69:35:02:8b:73:44:c4:94:7f:bb:40:
                    07:78:cf:78:f5:55:79:87:4e:b5:65:81:a8:c6:23:
                    a5:c7:87:b8:09:1b:c1:a6:d7:0e:5d:26:13:39:f8:
                    cb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:DB:E7:81:E4:D4:CE:0C:68:D0:6D:BE:4E:A9:6A:34:65:1A:D5
            X509v3 Authority Key Identifier:
                keyid:8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c5:d5:b9:b2:65:5d:a3:69:0e:0d:02:63:ab:4c:72:4a:21:
         9e:10:cb:0a:8b:1b:95:17:d4:1c:4e:c8:18:de:ce:ef:01:a2:
         01:c3:c9:16:e6:64:7d:e2:cd:13:cd:e2:1c:54:01:8b:63:65:
         74:88:ad:1a:e0:80:5d:84:0c:65:eb:c7:8c:54:9d:f1:19:c2:
         69:e6:dd:04:5d:78:43:3a:cb:c5:87:ee:41:3d:c4:f6:38:28:
         34:4d:b6:94:0f:09:d9:46:c7:9b:d6:6b:a3:7a:dd:ba:4c:ab:
         32:66:11:4c:ea:4f:b7:9d:57:66:c9:ee:a6:5c:eb:de:0c:5d:
         ce:70:0d:d3:4a:a7:80:35:56:40:54:bc:68:b5:15:28:04:f2:
         8c:17:d9:b3:7f:bf:c6:89:a6:6a:97:14:ac:2b:b1:1d:c3:35:
         e6:e3:2d:63:a6:85:f4:ce:d7:b4:ad:26:a1:9a:2f:04:18:0a:
         96:7d:b4:34:99:1e:5b:31:52:d9:c4:89:c1:9b:b9:16:c4:8b:
         12:3c:0b:75:ad:c9:cf:6b:c3:30:59:e7:20:1f:d2:5b:12:5d:
         6b:6a:0b:dc:44:ca:4e:c9:d6:3c:db:31:c5:67:41:c0:42:d8:
         ac:46:d2:e3:e1:30:f6:6c:49:03:39:30:4c:ad:fc:dd:d0:f5:
         5b:97:ca:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZskdl7RTZLvoIb729L/Gbk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYmMxMDYzYTZlZmI0NWUyN2IxMTFlOTIwNzgyN2M5Zjcz
MjUwMmIwHhcNMjUxMjE2MDAwMTM1WhcNMjUxMjE3MDAwMTM1WjAzMTEwLwYDVQQD
EyhkYmQ5ZGJlNzgxZTRkNGNlMGM2OGQwNmRiZTRlYTk2YTM0NjUxYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7T7bm4UOIhUnSDaioHkLQFFNeFL
V8xN875Owg/bIzOyGndH9ss4NCRKOVtwlnblve4KS7xPmn5aNLXYzjVAtBy6kQHN
ZN6eP91sE6fQx75ExA+ON5c8gpvwsfkjByuXdCYNrMzOpUWiQke9kjPcokJXfXNn
bzMvqHUFxYwx/6f17F3J5Oe3/sVRYVfHYIzcFWumqDn4Ke9jlCirtmA0JbXBEtzy
eq2Vudyy3pMVfKcqSfwcQiXQCK9Rve3daPjOPrGHDNR7+0edbf7v5O7LP/UW5GV9
aTUCi3NExJR/u0AHeM949VV5h061ZYGoxiOlx4e4CRvBptcOXSYTOfjLpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvZ2+eB5NTODGjQbb5OqWo0ZRrVMB8GA1UdIwQY
MBaAFI+8EGOm77ReJ7ER6SB4J8n3MlArMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajd3UVk2YnZ0RjRuc1JIcElIZ255ZmN5VUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8xZDhlODAtMzNhOC00ZDU1LWEzZDYt
NWVjZGVmMmZiNjhkLzEvajd3UVk2YnZ0RjRuc1JIcElIZ255ZmN5VUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8xZDhlODAtMzNhOC00ZDU1LWEzZDYtNWVjZGVmMmZiNjhk
LzEvajd3UVk2YnZ0RjRuc1JIcElIZ255ZmN5VUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMXVubJl
XaNpDg0CY6tMckohnhDLCosblRfUHE7IGN7O7wGiAcPJFuZkfeLNE83iHFQBi2Nl
dIitGuCAXYQMZevHjFSd8RnCaebdBF14QzrLxYfuQT3E9jgoNE22lA8J2UbHm9Zr
o3rdukyrMmYRTOpPt51XZsnuplzr3gxdznAN00qngDVWQFS8aLUVKATyjBfZs3+/
xommapcUrCuxHcM15uMtY6aF9M7XtK0moZovBBgKln20NJkeWzFS2cSJwZu5FsSL
EjwLda3Jz2vDMFnnIB/SWxJda2oL3ETKTsnWPNsxxWdBwELYrEbS4+Ew9mxJAzkw
TK383dD1W5fKcw==
-----END CERTIFICATE-----
Generated at Tue Dec 16 10:54:23 2025 by rpki-client