This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File:                     yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier:          6Rl6/NHrH9KmNXIm1YzoCZxCuMPFkhJopSfaP3IoF/o=
Subject key identifier:   84:72:35:BC:15:00:F4:7B:46:93:ED:6B:61:84:A7:5C:81:9B:58:FD
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer:       /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial:       019B3C7ED77D6D21EC6F49AB0CD8839E240B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number:          178B
Signing time:             Sat 20 Dec 2025 16:01:44 +0000
Manifest this update:     Sat 20 Dec 2025 16:01:44 +0000
Manifest next update:     Sun 21 Dec 2025 16:01:44 +0000
Files and hashes:         1: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (hash: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=)
                          2: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (hash: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=)
                          3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: 7d+RRONb4N6xOBY2+SJuMaMOr/vc0S26ZWQxqbUYWow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7e:d7:7d:6d:21:ec:6f:49:ab:0c:d8:83:9e:24:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
        Validity
            Not Before: Dec 20 16:01:44 2025 GMT
            Not After : Dec 21 16:01:44 2025 GMT
        Subject: CN=847235bc1500f47b4693ed6b6184a75c819b58fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:99:32:66:06:05:01:1e:6a:bd:16:79:75:
                    53:46:e9:9b:ac:a9:d9:08:a0:db:19:37:d1:e6:e4:
                    46:b9:47:4e:05:99:1c:88:de:2b:00:1b:57:5b:b2:
                    27:bf:6c:15:64:14:e5:1a:73:16:9d:95:a5:98:63:
                    8f:64:93:77:80:d1:6d:65:a9:66:d0:06:b5:18:5b:
                    3d:aa:a8:06:80:bc:3d:f2:00:70:fb:50:0d:14:e4:
                    c1:72:56:bb:71:f6:bc:f0:c4:c4:8f:50:d0:ea:37:
                    88:91:12:29:8c:48:35:15:34:18:99:d0:67:af:f8:
                    52:55:dc:c4:6b:9b:92:76:a7:83:2f:e0:21:3a:d2:
                    5a:04:21:cf:f6:bb:63:c8:06:e8:34:32:1f:61:c7:
                    df:fe:73:ac:57:7f:2a:c5:b7:60:dc:4a:9e:fc:00:
                    0d:70:ce:02:70:d1:81:85:70:00:9e:9d:c3:ee:36:
                    1c:91:a3:3b:de:54:1f:8b:30:85:c1:b2:08:7f:1b:
                    6e:1b:b5:15:c6:3e:b3:45:04:3b:ad:54:bd:c1:a5:
                    ac:16:be:87:6d:0b:39:89:2e:7a:33:6a:38:d9:6d:
                    d2:52:8e:50:e1:aa:12:70:66:84:09:fe:93:47:16:
                    e9:0f:db:48:aa:db:8b:16:f9:85:d3:6d:8f:d4:fa:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:72:35:BC:15:00:F4:7B:46:93:ED:6B:61:84:A7:5C:81:9B:58:FD
            X509v3 Authority Key Identifier:
                keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:83:34:7a:ab:ff:b3:2f:28:f8:bf:35:bc:a8:22:c2:fa:49:
         81:6a:0f:b9:88:52:3f:dd:6c:85:39:4a:db:02:21:73:47:fc:
         da:4b:53:48:c4:eb:45:13:8f:64:34:30:4a:dc:c9:cb:7d:5b:
         c9:d1:28:94:33:57:ed:7f:b6:65:8e:ba:66:ea:93:87:a4:ba:
         d3:44:9f:ca:32:4b:34:b5:e1:8c:d0:90:88:24:b9:be:52:f8:
         3f:fe:5f:1c:77:27:99:cf:2c:38:f5:9c:71:80:e9:40:c7:b9:
         92:fb:0f:d7:1b:da:17:32:ea:20:a8:64:b4:b3:9c:32:f5:99:
         2e:4a:c0:50:8d:95:ce:a1:a5:da:24:b4:54:0e:72:97:62:ea:
         7d:46:ed:17:f7:53:67:b8:6e:15:45:48:71:36:b4:c5:f1:bf:
         5a:c2:21:b7:05:5a:ab:58:8e:59:e5:5c:ee:1e:be:99:21:1d:
         81:b8:7c:f4:e3:31:8c:e9:bf:e4:42:77:4c:1e:9f:84:ed:38:
         8b:d4:68:f3:9f:11:99:7b:de:07:c9:28:ce:ef:03:7e:8a:0b:
         88:e1:02:cd:0f:eb:31:f6:34:28:52:81:d3:16:60:3c:9d:31:
         3b:f6:6b:95:12:a1:4a:56:74:a9:97:ca:3b:a7:23:3e:cb:ca:
         1f:c5:2e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8ftd9bSHsb0mrDNiDniQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTEwNmRhYWQzYTk3M2ZkZTk4OTE0ZjdjYzFjY2QzNWQ4
Y2MzYzMwHhcNMjUxMjIwMTYwMTQ0WhcNMjUxMjIxMTYwMTQ0WjAzMTEwLwYDVQQD
Eyg4NDcyMzViYzE1MDBmNDdiNDY5M2VkNmI2MTg0YTc1YzgxOWI1OGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rGZMmYGBQEear0WeXVTRumbrKnZ
CKDbGTfR5uRGuUdOBZkciN4rABtXW7Inv2wVZBTlGnMWnZWlmGOPZJN3gNFtZalm
0Aa1GFs9qqgGgLw98gBw+1ANFOTBcla7cfa88MTEj1DQ6jeIkRIpjEg1FTQYmdBn
r/hSVdzEa5uSdqeDL+AhOtJaBCHP9rtjyAboNDIfYcff/nOsV38qxbdg3Eqe/AAN
cM4CcNGBhXAAnp3D7jYckaM73lQfizCFwbIIfxtuG7UVxj6zRQQ7rVS9waWsFr6H
bQs5iS56M2o42W3SUo5Q4aoScGaECf6TRxbpD9tIqtuLFvmF022P1PprHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRyNbwVAPR7RpPta2GEp1yBm1j9MB8GA1UdIwQY
MBaAFMhRBtqtOpc/3piRT3zBzNNdjMPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUt
ZmVmNDg3MTJhY2FiLzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUtZmVmNDg3MTJhY2Fi
LzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4M0eqv/
sy8o+L81vKgiwvpJgWoPuYhSP91shTlK2wIhc0f82ktTSMTrRROPZDQwStzJy31b
ydEolDNX7X+2ZY66ZuqTh6S600SfyjJLNLXhjNCQiCS5vlL4P/5fHHcnmc8sOPWc
cYDpQMe5kvsP1xvaFzLqIKhktLOcMvWZLkrAUI2VzqGl2iS0VA5yl2LqfUbtF/dT
Z7huFUVIcTa0xfG/WsIhtwVaq1iOWeVc7h6+mSEdgbh89OMxjOm/5EJ3TB6fhO04
i9Ro858RmXveB8kozu8DfooLiOECzQ/rMfY0KFKB0xZgPJ0xO/ZrlRKhSlZ0qZfK
O6cjPsvKH8UuOw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:13:59 2025 by rpki-client