This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File:                     sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier:          GvEqbhEUBH8ZEeP8pN6TKwUPtF9TLt4PiUnAE6JISj0=
Subject key identifier:   E0:2F:1C:4E:43:9B:D5:73:75:CF:21:58:30:FF:EE:F3:DC:88:45:CA
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer:       /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial:       019B62421315B307BEDF9EBDBE54384EB849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number:          179C
Signing time:             Sun 28 Dec 2025 00:00:55 +0000
Manifest this update:     Sun 28 Dec 2025 00:00:55 +0000
Manifest next update:     Mon 29 Dec 2025 00:00:55 +0000
Files and hashes:         1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=)
                          2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=)
                          3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=)
                          4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: KB/XnkR5p//UmT+eMTUqg1NtBl5Ixrie6ABC7fxVdWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:62:42:13:15:b3:07:be:df:9e:bd:be:54:38:4e:b8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
        Validity
            Not Before: Dec 28 00:00:55 2025 GMT
            Not After : Dec 29 00:00:55 2025 GMT
        Subject: CN=e02f1c4e439bd57375cf215830ffeef3dc8845ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:31:24:ad:4c:2c:53:6c:ea:3a:5d:8a:f1:
                    c1:62:4c:91:99:3b:a6:9d:21:4d:18:e2:9c:4b:59:
                    f0:9a:ba:bf:1d:85:d0:64:7b:7d:ed:da:a8:8e:e5:
                    3b:aa:f2:e6:5f:2e:d6:60:25:f0:d6:65:06:9b:0d:
                    08:1f:ea:52:3c:ea:00:f0:77:3d:67:aa:91:2d:19:
                    e0:12:92:e4:19:b2:b5:78:c5:65:54:1c:a3:82:b7:
                    44:59:1e:c0:b3:b8:c8:d4:ef:31:92:68:cf:3f:72:
                    6d:77:9d:7e:fc:a2:f7:20:8f:19:05:2d:9c:78:67:
                    51:c8:86:ac:8d:33:a7:f6:a3:11:bb:50:ea:a3:d3:
                    6c:4d:b0:90:c1:a5:88:e8:7e:62:63:31:41:63:6e:
                    0c:72:ff:be:46:43:e0:89:43:f2:1b:15:5e:ad:eb:
                    4f:0b:33:42:7f:63:45:2e:54:4b:05:18:54:da:15:
                    93:ac:d3:93:b1:41:1c:18:54:4d:6e:e3:2d:86:3a:
                    c6:19:a6:ab:7c:e3:b6:17:c8:50:13:a8:3a:a7:fa:
                    65:b3:e3:20:44:e3:79:64:3d:8d:64:d6:24:5e:2d:
                    90:63:49:da:a9:64:5e:66:38:59:38:3c:95:30:23:
                    24:8e:87:df:a9:b3:ba:fd:ac:5a:84:9e:a7:95:88:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:1C:4E:43:9B:D5:73:75:CF:21:58:30:FF:EE:F3:DC:88:45:CA
            X509v3 Authority Key Identifier:
                keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0a:19:ac:4f:61:08:1f:c7:88:cf:53:8e:4a:50:ed:50:49:
         ff:b4:19:c2:5d:58:35:71:8d:f5:97:99:d2:da:b5:f8:84:09:
         35:f0:55:71:47:29:d1:8f:ef:4a:7a:2c:fc:4b:2e:ba:ee:be:
         15:a5:e1:23:44:fb:ea:59:ba:e3:9a:d8:85:32:e6:f1:6d:e7:
         47:64:74:23:6d:56:fb:81:96:57:95:fb:c9:2a:1c:02:e5:a2:
         51:36:9b:f6:1c:4b:97:a6:9b:b9:e4:56:60:e2:1e:af:80:ad:
         01:c8:12:aa:34:ac:fb:b3:75:fa:d6:eb:3f:48:e9:17:58:9f:
         10:1c:3b:e5:0e:97:8f:ca:d9:08:c6:a8:e3:ae:84:bd:12:2a:
         91:20:22:51:46:fe:4a:0d:c7:62:41:4c:e4:77:44:96:b7:65:
         f8:6d:80:07:28:b6:b6:37:19:c0:08:2b:eb:52:25:a1:26:b1:
         49:c8:57:8b:78:82:86:51:b6:b3:af:63:93:b6:ee:bd:8b:97:
         2e:98:9c:00:a6:11:67:4e:5e:69:38:ff:c4:39:65:3c:b3:da:
         7f:84:a9:0a:27:b6:bb:c2:47:36:d1:e0:3e:30:d2:68:12:ff:
         c4:30:c0:3f:45:12:1b:bc:93:e8:07:46:73:79:3f:ce:0b:98:
         3a:cb:05:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtiQhMVswe+3569vlQ4TrhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWEwNjA0ZTc2ODc2ZmEwM2U2YWQ4Njg3ZmExZGI2YzYz
ZDM5MDgwHhcNMjUxMjI4MDAwMDU1WhcNMjUxMjI5MDAwMDU1WjAzMTEwLwYDVQQD
EyhlMDJmMWM0ZTQzOWJkNTczNzVjZjIxNTgzMGZmZWVmM2RjODg0NWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJExJK1MLFNs6jpdivHBYkyRmTum
nSFNGOKcS1nwmrq/HYXQZHt97dqojuU7qvLmXy7WYCXw1mUGmw0IH+pSPOoA8Hc9
Z6qRLRngEpLkGbK1eMVlVByjgrdEWR7As7jI1O8xkmjPP3Jtd51+/KL3II8ZBS2c
eGdRyIasjTOn9qMRu1Dqo9NsTbCQwaWI6H5iYzFBY24Mcv++RkPgiUPyGxVeretP
CzNCf2NFLlRLBRhU2hWTrNOTsUEcGFRNbuMthjrGGaarfOO2F8hQE6g6p/pls+Mg
RON5ZD2NZNYkXi2QY0naqWReZjhZODyVMCMkjoffqbO6/axahJ6nlYhyxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAvHE5Dm9Vzdc8hWDD/7vPciEXKMB8GA1UdIwQY
MBaAFLBaBgTnaHb6A+athof6HbbGPTkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1Nzgt
YTYwNTcxN2QzNGFlLzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1NzgtYTYwNTcxN2QzNGFl
LzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQoZrE9h
CB/HiM9TjkpQ7VBJ/7QZwl1YNXGN9ZeZ0tq1+IQJNfBVcUcp0Y/vSnos/Esuuu6+
FaXhI0T76lm645rYhTLm8W3nR2R0I21W+4GWV5X7ySocAuWiUTab9hxLl6abueRW
YOIer4CtAcgSqjSs+7N1+tbrP0jpF1ifEBw75Q6Xj8rZCMao466EvRIqkSAiUUb+
Sg3HYkFM5HdElrdl+G2AByi2tjcZwAgr61IloSaxSchXi3iChlG2s69jk7buvYuX
LpicAKYRZ05eaTj/xDllPLPaf4SpCie2u8JHNtHgPjDSaBL/xDDAP0USG7yT6AdG
c3k/zguYOssFqg==
-----END CERTIFICATE-----
Generated at Sun Dec 28 08:17:05 2025 by rpki-client