This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File:                     5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier:          3owe4WHvIKC1rHxBvs3yMrZAF91T07LTiNYb1oVtuPc=
Subject key identifier:   B4:15:A3:44:1A:2F:36:7C:81:3C:86:18:2A:40:E2:E0:69:D0:7A:68
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       019B378ED5654C577922F120DFFE7CE7D350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number:          179F
Signing time:             Fri 19 Dec 2025 17:01:06 +0000
Manifest this update:     Fri 19 Dec 2025 17:01:06 +0000
Manifest next update:     Sat 20 Dec 2025 17:01:06 +0000
Files and hashes:         1: 01g5y437H2m0RBS60K8v_5CH25Y.roa (hash: 6whrCWSU/OFo5FWbCgWTtdfsQVzcFfU3y10vUs1oFTE=)
                          2: 1-4thfGCfV_85lt2WZkN-l71fwv0.roa (hash: 7cUPpyEsjpN2LkemwyOwpAzp6M6Mod4nt5VJCSxBi3s=)
                          3: 1-U546Wnv3X2dlqBwiPgmgD5rG0Q.roa (hash: UYLMoDLmtnbaqveYEw4e1FYtKG5Xz2eS50cYOB7habA=)
                          4: 1BsLjyLGR7fVTKId14K_LDmFaOE.roa (hash: psSOJBHeT4i88iWFESSWMgqzZaf6jPzMO0pv5q33yJ4=)
                          5: 4wlDChlgzrgFapvpBy46MAFlefc.roa (hash: EYqlVV6MH4EbjLdFRd/br9sG35MzdZTRrWmN3sTJ6/Y=)
                          6: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: l/D6ZB7vymUV56n2QoICn5gmHRXWeL60C6ADDLIdOa0=)
                          7: 6R9owLjblkvlkz3ih4RN9e--Vn8.roa (hash: k/StVbEK5dj4FEhDjLuET6E7LydiR63r1n+a13Y1e3g=)
                          8: A-Fkuj2Ry_3wy9lszQO5iFmpTsM.roa (hash: MqXfL/IjblbyaoanvxCZ0s6/syF5tUBaoXoKEYvO5Ck=)
                          9: CqQsoC1jFsSbLss7hEFtLKrKDMY.roa (hash: 7YVK/zmpOd/tEBFOBPOhNo6QF1d67oChKSOQOYEoacg=)
                          10: GEAO-RpDOblA62IXyDgWLKyaZE4.roa (hash: B/mmE5K4Y0+TtLR8pgvUmngTm+hQZlJcszavfMaBB+I=)
                          11: NFK0Hjvsp_Sq78uC-zn-OtIs2io.roa (hash: RkRZ6SorlL5rZdfTuNFGZoclIhB5xyBOn5s6WMdE+L4=)
                          12: QmD1NuxNLYfmzuhbCU_99CJ-o-k.roa (hash: ugpwTRCdEyAoIefE/m+oUbM/pJjpH0ikF/U5tO+O/jM=)
                          13: Sn5j9mrsDzCn0e9SdfxRYinpue4.roa (hash: Pmm/ivnYdFW6uuCjzZHPDQpUkRs+mtt6nnTRFq0BYj0=)
                          14: TtR0csYqYQUGmaJtYJ6I1Sb4jtA.roa (hash: /RrNIRwEKfIWdjBmKgKNDu3bdN5NswYfyOudqPj07dM=)
                          15: W5W8H6uR-lCCEmn3v-XsPLRNVss.roa (hash: MqFZSzbOqhNyXJIgrbDDE4K1XPvGby9AbWHLANkDs8A=)
                          16: cKTcZs-U_VD8X5oF6KYi9vL_XPY.roa (hash: Ojplqzn5+rFkagKqgJjGg7MR261z7vGOzqJ6p2GYag4=)
                          17: dUjWdWqHZ3bB28SlJrHRKXOFumI.roa (hash: L5pkt5HZhPKaDfcEd3yHsIdGb5cnUbqIUW0exwEPLyc=)
                          18: lM1B4eqvI9WRB2F5MltXjXFSUNw.roa (hash: AbZgfqJhiLBwdICwkR/kGfMSad6ug4enx96U2XP1Fgk=)
                          19: mza84PKMv0aUDroEfzQZip-9Um8.roa (hash: xfLnRg1sIPVix0oNDyz6FdqLtVqmjxCCvOykxKOTB0s=)
                          20: u0oJmkSedaonOs5uLkSqqL59uJ4.roa (hash: C6uJzJ3uiAjMgAmGSpBjfqhHJVcbN5byOHdLx08rPTM=)
                          21: ujwUfZi-j2E7tiXxuxPwDEMg9Do.roa (hash: ZVTJzzTXgsjt6o/MwKVQt8mq4QnG+HkM2MYUgIyYqIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:8e:d5:65:4c:57:79:22:f1:20:df:fe:7c:e7:d3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: Dec 19 17:01:06 2025 GMT
            Not After : Dec 20 17:01:06 2025 GMT
        Subject: CN=b415a3441a2f367c813c86182a40e2e069d07a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:f8:23:57:2a:a0:9e:35:c0:9e:85:6e:a4:
                    82:73:bf:8f:50:8f:81:ec:7a:05:d7:bc:f6:5d:db:
                    bb:fe:3e:de:90:59:47:80:e2:d0:21:00:dd:3c:bf:
                    57:8f:b9:be:38:2e:48:8a:d6:cf:42:d4:b5:79:d7:
                    0d:92:d1:b1:03:28:1a:5d:9a:2f:d4:25:a0:ca:e5:
                    42:7f:14:18:72:e5:b7:f9:eb:38:d6:63:1e:ab:59:
                    4c:f8:8d:7d:24:49:2a:27:be:d0:40:d6:af:04:b5:
                    df:d9:a9:f9:ba:1d:03:5e:ff:84:f9:06:62:a6:de:
                    9f:c5:72:ff:ce:48:5a:83:73:1f:a5:70:d8:30:ad:
                    26:77:a8:28:93:6b:3a:67:a3:bb:ff:e5:c8:d9:c5:
                    0a:33:a9:58:fe:64:43:d3:d5:7b:e5:e5:58:61:0e:
                    1a:f5:03:e4:6b:72:2d:e5:15:24:3c:d4:cf:c5:1c:
                    6c:f2:5d:62:76:7c:49:60:d3:e1:55:f3:9b:93:95:
                    f5:06:33:88:0c:44:30:10:c3:97:79:02:4f:ac:ce:
                    cd:41:84:b5:47:f5:bd:dc:06:5e:3b:ab:2a:85:4f:
                    aa:0e:fb:1b:e8:94:77:45:0a:3d:07:ce:69:61:cc:
                    31:fb:8c:1a:8c:bf:8e:4a:29:39:fd:ef:6b:04:7a:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:15:A3:44:1A:2F:36:7C:81:3C:86:18:2A:40:E2:E0:69:D0:7A:68
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:20:f9:c6:4b:ca:b3:3e:07:71:b1:6c:0d:27:c2:25:cd:b7:
         34:81:4b:1c:c7:8c:00:e3:a9:e8:8c:a7:37:d6:1c:7e:c3:44:
         89:92:6a:82:96:9b:b7:02:0a:c6:ee:8f:2e:e8:8b:84:d4:cc:
         fd:e9:ee:67:21:0d:47:fa:5f:61:26:45:46:ba:ec:24:2e:8d:
         63:96:74:d3:d3:45:a4:19:fe:36:ee:59:5d:e3:fa:b3:58:e5:
         6f:e8:d1:17:70:43:7d:6a:3d:33:5e:55:fd:a7:b1:26:c8:8c:
         13:df:94:f5:46:90:e5:fa:5b:92:c1:d0:55:d4:ab:fd:24:14:
         c5:f8:34:bd:0d:62:cb:28:a7:46:77:2d:7d:0e:a5:47:b2:52:
         a0:20:c3:2b:ff:ff:2c:24:f3:1e:8b:b2:15:49:33:ce:51:fc:
         3e:af:f7:26:51:0f:df:f7:ea:4b:59:ac:b7:71:a9:8e:94:dd:
         60:2e:7d:47:a5:45:9e:fc:b0:05:0b:86:ec:a0:50:44:8a:01:
         32:23:6a:85:09:c7:52:67:03:66:01:c6:1c:64:ae:95:3d:e8:
         93:09:73:97:21:7e:5f:e7:e7:80:8d:6c:12:49:1f:40:ab:20:
         6c:b6:8c:30:97:72:89:c9:bc:ca:17:5d:33:bb:c7:f8:34:c1:
         f9:bd:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:10:38 2025 by rpki-client