This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          5lfHjoRTA9CbTnSJP0cb54kftH3uG6vkNmthmwzVn2o=
Subject key identifier:   4D:43:E0:E2:49:93:09:0C:90:CF:C0:82:22:2F:9E:4A:93:B9:EC:BF
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019B41A474CF3B61A985FD0DA20D6AB11F8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          178D
Signing time:             Sun 21 Dec 2025 16:00:55 +0000
Manifest this update:     Sun 21 Dec 2025 16:00:55 +0000
Manifest next update:     Mon 22 Dec 2025 16:00:55 +0000
Files and hashes:         1: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: /pEX2S41mR5hsWlJUieP9ZFyTghF1fDlW41FBZ2E0Vk=)
                          2: Hp-aUMiKFduSFShKvppXI42_Uj8.roa (hash: lCB+C5NdYk9yj77o+dq8fC9obFb6kuE+kfqjMFwOwXM=)
                          3: fj4ybxpsDPTq3Dcp32ARk19V658.roa (hash: G3z4kx3nRpiPVloWlnA+5o5/TapLF4KViU9lT9zaU4s=)
                          4: pE4C0VroSmY26_TJM0K-lSQgc7M.roa (hash: vf7UXC4PR0yUJjr6xqwo9zqitXjZXFvwlnGZdHjjf6A=)
                          5: waFJY_9Xx4HVBca8mozwG38i49k.roa (hash: 2sqvgn5zOZZ4lehKra8TFzA3bKpHh9AvNDOTiV97aSw=)
                          6: wwsOTx-pck8zIz4rEJvLSRVOW78.roa (hash: MNbHqch8VEMBR8R4jhawYSxV/uo6TDEte38JPI3LQos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:41:a4:74:cf:3b:61:a9:85:fd:0d:a2:0d:6a:b1:1f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Dec 21 16:00:55 2025 GMT
            Not After : Dec 22 16:00:55 2025 GMT
        Subject: CN=4d43e0e24993090c90cfc082222f9e4a93b9ecbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:8a:5d:9c:2d:1b:1d:62:04:07:63:bd:5a:
                    d5:96:99:e4:e4:3d:ed:aa:11:77:2b:c2:9d:34:10:
                    85:2e:2a:2d:8c:b8:60:42:49:6e:d0:39:6b:f1:30:
                    1c:ae:2d:cc:59:d4:3c:3e:43:88:f1:2d:a5:f8:c3:
                    cd:ed:9a:80:73:ec:7c:ee:20:c3:10:18:67:44:3d:
                    96:5e:4e:46:01:08:d1:db:ce:04:f3:fb:3d:4c:18:
                    e7:85:79:cb:cc:99:b8:f4:49:5c:dc:d9:8d:e6:70:
                    f6:ce:2b:24:8c:e9:c6:86:65:58:4b:12:6e:63:e6:
                    f1:29:1b:9b:99:8f:61:77:83:5a:a6:9b:c1:c3:55:
                    dc:60:3a:f7:fb:73:72:3a:c7:56:c1:d3:03:19:2b:
                    75:d2:81:19:79:a9:c3:a2:e5:23:9d:69:7a:9f:e1:
                    45:71:53:de:7c:f1:c4:39:16:e6:86:5b:11:7b:51:
                    82:51:02:b6:bd:6c:33:b3:96:16:8e:ea:a7:48:0f:
                    5f:b2:3f:33:74:a6:59:be:99:c0:29:6a:b7:47:e4:
                    21:ca:2f:c5:89:07:24:5b:d9:eb:36:23:1e:4a:cb:
                    67:c3:66:3e:b6:a2:5e:9b:0b:7f:d2:63:7a:7f:e7:
                    41:9c:e7:35:16:f2:8d:7c:cb:e8:5d:04:8a:ca:75:
                    7d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:43:E0:E2:49:93:09:0C:90:CF:C0:82:22:2F:9E:4A:93:B9:EC:BF
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:15:33:47:a9:1c:0e:0d:f7:41:f3:39:b4:cd:87:d5:3e:d3:
         1e:fb:98:3a:7e:08:af:28:64:cb:ea:09:4f:81:b3:5c:18:04:
         59:b1:1f:38:6e:8b:97:4c:5a:71:75:98:31:c3:5a:c3:3b:23:
         6a:cb:6c:64:34:e1:d7:00:11:eb:10:d6:3d:b1:06:5a:01:8f:
         d2:c8:41:46:04:b9:a3:36:11:01:d6:62:92:35:7c:ef:86:f4:
         2e:c7:84:61:74:3c:0d:b4:cd:b2:5f:0e:ab:4f:49:13:8b:65:
         a5:f8:19:4e:fd:71:81:d6:72:ec:71:34:e4:1f:ec:19:30:fd:
         35:89:b9:ac:84:7c:bd:fe:94:a9:85:c4:be:73:21:64:f1:3c:
         25:b3:10:43:d7:7f:8a:65:2d:4f:0f:25:bc:6b:fc:17:a0:61:
         41:42:3c:f2:48:62:ee:41:b4:9b:ee:5b:57:ac:cc:c3:e5:4c:
         4f:ab:eb:4a:a5:2b:17:30:48:aa:99:6c:10:33:1f:b2:fe:bb:
         63:0a:a7:4c:04:c2:0e:72:8f:2a:11:26:6d:e9:39:92:8f:f5:
         3a:c2:2f:0f:75:65:dc:b1:92:72:12:d3:6b:5a:6a:b3:fa:40:
         67:83:95:e0:d8:aa:52:5d:e9:ab:e0:da:d1:a9:1d:84:cc:31:
         64:46:1f:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtBpHTPO2Gphf0Nog1qsR+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmM2ZTQ1MTgxZDgzOWZkMTBlNGE5MDI3NjJmMjZjOWE2
NDY3OTYwHhcNMjUxMjIxMTYwMDU1WhcNMjUxMjIyMTYwMDU1WjAzMTEwLwYDVQQD
Eyg0ZDQzZTBlMjQ5OTMwOTBjOTBjZmMwODIyMjJmOWU0YTkzYjllY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7iKXZwtGx1iBAdjvVrVlpnk5D3t
qhF3K8KdNBCFLiotjLhgQklu0Dlr8TAcri3MWdQ8PkOI8S2l+MPN7ZqAc+x87iDD
EBhnRD2WXk5GAQjR284E8/s9TBjnhXnLzJm49Elc3NmN5nD2ziskjOnGhmVYSxJu
Y+bxKRubmY9hd4NappvBw1XcYDr3+3NyOsdWwdMDGSt10oEZeanDouUjnWl6n+FF
cVPefPHEORbmhlsRe1GCUQK2vWwzs5YWjuqnSA9fsj8zdKZZvpnAKWq3R+Qhyi/F
iQckW9nrNiMeSstnw2Y+tqJemwt/0mN6f+dBnOc1FvKNfMvoXQSKynV9RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1D4OJJkwkMkM/AgiIvnkqTuey/MB8GA1UdIwQY
MBaAFNj8bkUYHYOf0Q5KkCdi8myaZGeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjIt
N2ViMmViODViODRhLzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjItN2ViMmViODViODRh
LzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxUzR6kc
Dg33QfM5tM2H1T7THvuYOn4Iryhky+oJT4GzXBgEWbEfOG6Ll0xacXWYMcNawzsj
astsZDTh1wAR6xDWPbEGWgGP0shBRgS5ozYRAdZikjV874b0LseEYXQ8DbTNsl8O
q09JE4tlpfgZTv1xgdZy7HE05B/sGTD9NYm5rIR8vf6UqYXEvnMhZPE8JbMQQ9d/
imUtTw8lvGv8F6BhQUI88khi7kG0m+5bV6zMw+VMT6vrSqUrFzBIqplsEDMfsv67
YwqnTATCDnKPKhEmbek5ko/1OsIvD3Vl3LGSchLTa1pqs/pAZ4OV4NiqUl3pq+Da
0akdhMwxZEYftw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 20:35:43 2025 by rpki-client