This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
File:                     M_6ArqEA6YwNpdH_75izcdEe3aI.mft (raw, json)
Hash identifier:          RbMusFsTVPyO3N3nscAo5K2BCzpRx2ES7re6gEm/npM=
Subject key identifier:   5C:39:88:FC:46:6C:76:EF:C4:45:6B:6A:18:BE:0D:A8:3E:6E:EB:B7
Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
Certificate issuer:       /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Certificate serial:       019B43C96FEC71073126AB23295B8B623391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
Manifest number:          178F
Signing time:             Mon 22 Dec 2025 02:00:33 +0000
Manifest this update:     Mon 22 Dec 2025 02:00:33 +0000
Manifest next update:     Tue 23 Dec 2025 02:00:33 +0000
Files and hashes:         1: M_6ArqEA6YwNpdH_75izcdEe3aI.crl (hash: oyVHEU5aG58M32t3vIufONE6LmecPhmk3rVz0/xXeL4=)
                          2: azxmi2se1IK95xXGAVKvEPH21_A.roa (hash: Ss+Ca/k8A0fp5KqEjbn4GKd8EzNY8mejKpcvQRG6Wdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:c9:6f:ec:71:07:31:26:ab:23:29:5b:8b:62:33:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
        Validity
            Not Before: Dec 22 02:00:33 2025 GMT
            Not After : Dec 23 02:00:33 2025 GMT
        Subject: CN=5c3988fc466c76efc4456b6a18be0da83e6eebb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d8:56:4e:fc:83:5a:39:0b:9e:5d:2d:bb:9d:
                    39:35:49:4f:df:c1:05:c1:18:53:a4:be:48:01:e2:
                    2b:2a:d2:bf:e5:54:ec:4f:fe:8a:85:aa:fc:7d:6e:
                    3b:f2:0d:91:f2:98:01:82:9a:e9:b8:7c:3c:26:ca:
                    66:73:18:e0:74:8e:45:91:82:24:12:94:0a:f9:0c:
                    4a:55:9f:34:5f:2e:1d:d3:50:62:9b:ac:d5:f2:d3:
                    ab:96:23:9a:6b:1e:68:df:27:9f:f0:bb:ab:75:76:
                    8b:0c:f4:fc:b1:3b:56:71:f7:42:64:37:a6:dc:23:
                    46:c6:69:49:11:f1:9d:f8:71:d0:74:ec:e9:78:75:
                    dc:5d:b0:f9:48:e2:74:2e:40:c4:78:8d:ee:d3:a7:
                    9f:aa:7b:7a:05:d6:d8:b6:94:be:8c:bc:50:eb:69:
                    d1:d1:9d:85:d3:94:7f:1d:af:dc:15:5c:4f:cd:79:
                    1b:a0:0b:2d:bc:3b:cc:53:ef:1e:7e:64:5d:9e:ea:
                    b2:8c:bf:1c:2a:2b:27:a3:22:e2:c4:e4:fe:01:34:
                    cc:01:a9:e4:f0:2a:c6:95:6f:56:19:77:b5:f5:8c:
                    4b:b4:7e:c4:95:8c:dd:81:18:40:4a:1e:59:2a:9c:
                    14:8e:f7:1c:03:7f:1f:25:8e:df:d8:dc:58:1b:1b:
                    b5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:39:88:FC:46:6C:76:EF:C4:45:6B:6A:18:BE:0D:A8:3E:6E:EB:B7
            X509v3 Authority Key Identifier:
                keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d1:62:e8:c1:c8:27:a2:d9:d6:05:e1:3e:e5:62:e3:fa:11:
         08:88:b2:dc:1a:15:ec:10:54:41:09:6c:1a:10:a6:c9:c1:41:
         cd:d1:e2:63:c3:fe:6c:7f:f3:53:e0:d3:44:53:0f:77:93:77:
         a0:30:df:b5:76:f0:e8:2d:c3:24:67:94:e4:05:0b:6d:f4:59:
         2a:5c:4a:fc:43:b2:59:f6:f9:5f:81:82:3b:c7:cf:8f:42:f6:
         8f:d1:21:f5:f0:c2:f6:57:8a:59:69:d8:7f:92:65:43:7b:34:
         c1:5d:2a:77:d5:c6:b8:65:e2:8e:97:c2:d1:e1:cf:f0:0c:89:
         b3:e2:2e:e9:5e:f4:fb:9e:b0:c9:76:44:1e:8e:fa:b7:9e:81:
         3c:4f:fe:d2:6b:ea:ea:4d:85:39:3a:49:99:5e:27:9f:b8:08:
         d9:64:fd:aa:b3:fe:7a:e4:08:f7:93:bf:95:58:2a:32:e5:c6:
         3f:be:44:5e:e0:9b:cc:21:c7:17:03:16:21:a9:1d:09:d3:5e:
         67:de:35:21:9f:17:38:94:a6:e5:f6:1b:fc:06:30:3b:4c:9c:
         90:55:d0:e7:d4:6d:b6:8c:b0:83:1c:3f:92:67:29:17:d3:63:
         36:fd:4d:c6:bb:1d:01:ad:4c:dc:1a:c7:05:fe:4f:33:18:bb:
         1a:d5:f7:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtDyW/scQcxJqsjKVuLYjORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZmU4MGFlYTEwMGU5OGMwZGE1ZDFmZmVmOThiMzcxZDEx
ZWRkYTIwHhcNMjUxMjIyMDIwMDMzWhcNMjUxMjIzMDIwMDMzWjAzMTEwLwYDVQQD
Eyg1YzM5ODhmYzQ2NmM3NmVmYzQ0NTZiNmExOGJlMGRhODNlNmVlYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dhWTvyDWjkLnl0tu505NUlP38EF
wRhTpL5IAeIrKtK/5VTsT/6Khar8fW478g2R8pgBgprpuHw8JspmcxjgdI5FkYIk
EpQK+QxKVZ80Xy4d01Bim6zV8tOrliOaax5o3yef8LurdXaLDPT8sTtWcfdCZDem
3CNGxmlJEfGd+HHQdOzpeHXcXbD5SOJ0LkDEeI3u06efqnt6BdbYtpS+jLxQ62nR
0Z2F05R/Ha/cFVxPzXkboAstvDvMU+8efmRdnuqyjL8cKisnoyLixOT+ATTMAank
8CrGlW9WGXe19YxLtH7ElYzdgRhASh5ZKpwUjvccA38fJY7f2NxYGxu1EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw5iPxGbHbvxEVrahi+Dag+buu3MB8GA1UdIwQY
MBaAFDP+gK6hAOmMDaXR/++Ys3HRHt2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV82QXJxRUE2WXdOcGRIXzc1aXpjZEVlM2FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84MDI1MjUtNWMyYy00NTY0LWJhNWEt
NmNkNjU5YWNiZjA3LzEvTV82QXJxRUE2WXdOcGRIXzc1aXpjZEVlM2FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84MDI1MjUtNWMyYy00NTY0LWJhNWEtNmNkNjU5YWNiZjA3
LzEvTV82QXJxRUE2WXdOcGRIXzc1aXpjZEVlM2FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9Fi6MHI
J6LZ1gXhPuVi4/oRCIiy3BoV7BBUQQlsGhCmycFBzdHiY8P+bH/zU+DTRFMPd5N3
oDDftXbw6C3DJGeU5AULbfRZKlxK/EOyWfb5X4GCO8fPj0L2j9Eh9fDC9leKWWnY
f5JlQ3s0wV0qd9XGuGXijpfC0eHP8AyJs+Iu6V70+56wyXZEHo76t56BPE/+0mvq
6k2FOTpJmV4nn7gI2WT9qrP+euQI95O/lVgqMuXGP75EXuCbzCHHFwMWIakdCdNe
Z941IZ8XOJSm5fYb/AYwO0yckFXQ59Rttoywgxw/kmcpF9NjNv1NxrsdAa1M3BrH
Bf5PMxi7GtX3zA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 04:19:13 2025 by rpki-client