This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File:                     rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier:          qqgYYoaQ28sZWEdRfb1c9FXEequ22q7nsMPODFGj22s=
Subject key identifier:   46:01:4C:F6:C3:CC:03:8D:2A:B1:86:2D:57:26:D7:A8:1D:E3:7C:43
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       019B2EFA4195BF03612A918C4BE875887FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number:          177F
Signing time:             Thu 18 Dec 2025 01:01:51 +0000
Manifest this update:     Thu 18 Dec 2025 01:01:51 +0000
Manifest next update:     Fri 19 Dec 2025 01:01:51 +0000
Files and hashes:         1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=)
                          2: _ONnyoGJy4BONjnQqy_VIZR_lsQ.asa (hash: fg8lcyp5xk0Ls5QPpNy6ZcES0R4cZ7H66Wj2T/SkgFA=)
                          3: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: 3zx9SjITLK/SU0DXfCS2BkiORbvsb+0pxVy3z09F5e0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:fa:41:95:bf:03:61:2a:91:8c:4b:e8:75:88:7f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: Dec 18 01:01:51 2025 GMT
            Not After : Dec 19 01:01:51 2025 GMT
        Subject: CN=46014cf6c3cc038d2ab1862d5726d7a81de37c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:8d:41:71:14:0d:53:7c:1c:de:36:9f:24:
                    80:2f:f9:7b:7a:26:dd:59:ed:55:35:14:96:1e:15:
                    f7:c4:ce:1d:78:d0:f6:39:91:6a:d3:88:98:c3:a6:
                    87:8c:78:19:19:73:68:35:fa:f5:34:44:77:2b:43:
                    07:f2:25:53:32:37:8b:c2:e5:a8:9c:ec:66:05:41:
                    7f:1b:b2:9a:d7:c0:d6:d8:b6:f4:41:5a:e2:1b:98:
                    94:9b:20:97:b0:9e:d1:2d:0a:46:7d:41:de:e2:7f:
                    6f:29:ba:c5:ab:24:da:07:77:7d:a5:7a:ee:21:6d:
                    97:90:21:8b:8a:b8:c5:65:fc:8c:32:33:6d:aa:c7:
                    7a:6c:a7:7b:08:04:cd:ba:80:36:66:78:9c:02:32:
                    f8:fa:7b:91:6e:1a:54:8d:69:df:fd:a2:e4:0c:bb:
                    0b:10:c5:e5:74:b3:f4:9b:23:76:d3:20:dd:d3:a9:
                    c5:08:92:94:a7:29:c6:c3:1f:b1:43:5c:5d:62:2a:
                    63:f3:da:94:58:8e:1f:46:52:e4:ae:d5:03:d1:20:
                    6a:7c:8d:fb:b2:64:dc:0f:c3:9a:e4:58:2f:75:bd:
                    39:6e:08:d4:be:a2:f6:c8:cd:e6:a5:2c:1b:12:ce:
                    05:71:f8:c2:8f:f4:75:ca:8c:d1:77:1d:22:59:7c:
                    d1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:01:4C:F6:C3:CC:03:8D:2A:B1:86:2D:57:26:D7:A8:1D:E3:7C:43
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:90:b1:d0:2d:d0:aa:18:3c:50:d4:77:54:bb:aa:34:31:64:
         6b:ed:90:24:d7:fe:c2:e1:b6:6f:29:65:43:70:cd:e3:54:db:
         48:fd:69:54:bb:2e:6d:1d:db:a2:39:ef:60:1b:14:9b:80:43:
         f0:b0:a0:ad:ce:b3:0b:81:f7:e9:03:8d:18:8d:17:91:8a:f0:
         4f:82:1f:6d:39:13:6a:31:4a:2b:fd:c2:d8:ec:e2:6c:70:10:
         0e:a6:ae:f1:d9:f6:5f:c7:10:57:66:d3:6f:74:5d:4e:7c:4d:
         cb:77:78:3f:a2:3e:65:60:1b:ec:54:29:91:c4:79:dc:36:11:
         d8:3b:8e:a5:16:b8:33:a4:61:ad:6b:33:45:2d:3d:c2:e5:c6:
         df:ed:63:3b:3c:0a:09:c8:06:d3:f2:ab:29:97:65:32:68:52:
         fb:d1:4a:e5:76:63:0f:a4:74:97:97:3c:02:15:ec:e0:71:7c:
         3b:7e:ce:8a:a0:93:15:ab:9a:21:db:6f:a8:d2:02:3f:e5:4b:
         e3:b3:b5:6f:8a:6b:5c:3f:77:b2:fe:d6:ea:d7:67:c6:78:16:
         54:45:16:13:42:97:b8:78:f8:bf:39:0d:5f:65:51:97:be:71:
         c0:f7:71:96:41:7a:76:df:f4:00:60:f1:a2:75:f6:8c:c7:8c:
         af:9d:b3:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsu+kGVvwNhKpGMS+h1iH/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjIwMjUwZDRjZGQzNjY3MTliOTY5ZDZmNDEyMzAxYzEz
ZWI5MDEwHhcNMjUxMjE4MDEwMTUxWhcNMjUxMjE5MDEwMTUxWjAzMTEwLwYDVQQD
Eyg0NjAxNGNmNmMzY2MwMzhkMmFiMTg2MmQ1NzI2ZDdhODFkZTM3YzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqeNQXEUDVN8HN42nySAL/l7eibd
We1VNRSWHhX3xM4deND2OZFq04iYw6aHjHgZGXNoNfr1NER3K0MH8iVTMjeLwuWo
nOxmBUF/G7Ka18DW2Lb0QVriG5iUmyCXsJ7RLQpGfUHe4n9vKbrFqyTaB3d9pXru
IW2XkCGLirjFZfyMMjNtqsd6bKd7CATNuoA2ZnicAjL4+nuRbhpUjWnf/aLkDLsL
EMXldLP0myN20yDd06nFCJKUpynGwx+xQ1xdYipj89qUWI4fRlLkrtUD0SBqfI37
smTcD8Oa5Fgvdb05bgjUvqL2yM3mpSwbEs4FcfjCj/R1yozRdx0iWXzRJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYBTPbDzAONKrGGLVcm16gd43xDMB8GA1UdIwQY
MBaAFKyyAlDUzdNmcZuWnW9BIwHBPrkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQt
NmY0ZjAzMWVlYWUyLzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQtNmY0ZjAzMWVlYWUy
LzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJCx0C3Q
qhg8UNR3VLuqNDFka+2QJNf+wuG2byllQ3DN41TbSP1pVLsubR3bojnvYBsUm4BD
8LCgrc6zC4H36QONGI0XkYrwT4IfbTkTajFKK/3C2OzibHAQDqau8dn2X8cQV2bT
b3RdTnxNy3d4P6I+ZWAb7FQpkcR53DYR2DuOpRa4M6RhrWszRS09wuXG3+1jOzwK
CcgG0/KrKZdlMmhS+9FK5XZjD6R0l5c8AhXs4HF8O37OiqCTFauaIdtvqNICP+VL
47O1b4prXD93sv7W6tdnxngWVEUWE0KXuHj4vzkNX2VRl75xwPdxlkF6dt/0AGDx
onX2jMeMr52zyA==
-----END CERTIFICATE-----
Generated at Thu Dec 18 09:24:52 2025 by rpki-client