This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          /+L+fZw2vRDshI3W5Ru8DQZr0e40TUqEuQ9iSwRyr1E=
Subject key identifier:   F5:B8:16:30:8B:23:40:CA:3E:69:68:11:FD:00:D2:61:47:8B:C5:B4
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019B37C5BD914FF7222F88AC07D397AAE47D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          179B
Signing time:             Fri 19 Dec 2025 18:01:04 +0000
Manifest this update:     Fri 19 Dec 2025 18:01:04 +0000
Manifest next update:     Sat 20 Dec 2025 18:01:04 +0000
Files and hashes:         1: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=)
                          2: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=)
                          3: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=)
                          4: DN12qBzUGkVhRMYHW6P-wHN3H-Q.roa (hash: x2S5h7iauxlMwn5C36mbaOnEH7ELW/M3cT6pPWGqdXw=)
                          5: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=)
                          6: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=)
                          7: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=)
                          8: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=)
                          9: HbeQRoxPpDHCAC-nA9_3-JrPAeM.roa (hash: G4sQzJXdS6O2EylSl79XWh9ZSYXUAtP0Wp4/fBYIKYg=)
                          10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=)
                          11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=)
                          12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=)
                          13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: Lq4mDZc2rSMLVJAaaZmjyCNx5GcQPaQ6pPGZebktbLY=)
                          14: _Flf5DnTwHuT82uk-rjJ-aUZBWU.roa (hash: QPTNTyL8Zldulvvmt2UMxQpz2Oe0nqDM6jKT4JF5VAA=)
                          15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=)
                          16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=)
                          17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=)
                          18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=)
                          19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=)
                          20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=)
                          21: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (hash: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:bd:91:4f:f7:22:2f:88:ac:07:d3:97:aa:e4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Dec 19 18:01:04 2025 GMT
            Not After : Dec 20 18:01:04 2025 GMT
        Subject: CN=f5b816308b2340ca3e696811fd00d261478bc5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:c3:1e:1e:be:89:24:3b:92:8e:9b:e9:f5:
                    da:ea:78:36:36:74:91:72:bf:8f:67:3e:6d:df:d2:
                    e0:d7:12:2c:db:28:4f:47:e5:7a:2d:bf:84:ee:84:
                    5e:50:03:4d:f2:7a:3f:da:5a:70:f9:20:cf:fe:d4:
                    1d:cd:bc:ba:e5:79:86:d3:f8:7a:67:af:96:4c:06:
                    40:54:52:fe:13:f6:bd:61:ed:d0:59:20:6b:37:5f:
                    94:49:43:fe:80:be:fc:f3:b9:2a:6d:2e:d2:03:64:
                    0f:06:9c:99:49:96:fd:00:79:aa:bf:e5:2f:b8:99:
                    95:05:d3:14:99:77:22:f3:d0:56:19:47:8a:f2:aa:
                    70:b6:a7:70:56:0a:fa:e4:0d:77:11:d8:c3:0b:4b:
                    cb:13:02:77:4f:03:ac:ec:68:8d:04:25:1f:a5:83:
                    c0:1d:f8:c4:b5:98:53:3e:53:1c:67:be:3a:db:f6:
                    3b:8b:4f:44:6f:58:54:f4:99:93:f8:ff:2c:a7:6e:
                    f6:dd:25:f4:85:f8:33:04:96:e3:0e:2c:5f:b1:dd:
                    2e:be:0d:e4:9d:3e:d9:7b:c4:19:db:80:a3:f7:30:
                    5f:34:51:b9:8e:a8:0c:12:69:45:54:5f:44:c3:06:
                    75:13:24:3f:16:89:62:23:ae:6e:62:8e:bf:ae:61:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B8:16:30:8B:23:40:CA:3E:69:68:11:FD:00:D2:61:47:8B:C5:B4
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c2:0c:8d:b8:43:d2:10:bc:3f:39:f2:ed:36:96:7c:16:f6:
         91:c9:04:49:62:ff:9e:6a:1d:e9:72:fc:15:7e:f5:a0:c7:96:
         b2:46:7c:da:a9:ff:32:69:ca:bb:71:6e:3e:22:8d:7f:e4:b5:
         aa:5b:7d:f5:1f:15:64:8f:d0:d7:19:e4:49:64:da:bb:d3:00:
         a0:94:56:e4:d0:42:0e:89:d9:53:1f:d8:92:1b:49:17:bc:3c:
         0e:8a:f7:09:32:4e:8d:c0:bd:96:92:6e:42:77:15:fb:34:2b:
         46:c7:7e:58:30:d5:d8:62:75:ee:3f:c7:8f:db:23:11:55:8d:
         9e:61:e5:ee:ac:35:69:8c:f0:3e:b8:95:c2:d5:eb:6b:0e:6b:
         7b:bc:55:24:47:f0:69:f5:af:03:fe:3e:e7:4f:91:90:1a:e4:
         79:a5:bc:08:00:e0:cf:60:fb:de:03:e5:ad:09:c2:ba:79:44:
         81:e8:8c:87:de:b7:c7:00:18:db:5b:e8:a9:66:ec:eb:9b:d7:
         cc:f5:92:c4:78:7a:05:a9:c0:c9:85:b4:b2:ce:dc:7d:dd:91:
         33:b8:8c:8e:60:bb:8c:aa:90:65:d4:a1:06:48:5b:cd:dc:72:
         46:9c:38:29:78:63:7e:e7:a6:1c:b7:a3:b5:99:8b:57:3b:e7:
         f6:81:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:01:32 2025 by rpki-client