This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File:                     dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier:          VX8Yn2Q+R7OmqN87umV842kzoUI2jKPEP75IdUt0cvI=
Subject key identifier:   AB:BC:C7:22:FA:28:92:A2:64:18:78:E1:5D:F7:40:05:87:EF:74:19
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       019B3A90DE6BEF0CB236275E4E278C5A0056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number:          179C
Signing time:             Sat 20 Dec 2025 07:02:11 +0000
Manifest this update:     Sat 20 Dec 2025 07:02:11 +0000
Manifest next update:     Sun 21 Dec 2025 07:02:11 +0000
Files and hashes:         1: 0GRCDt4fJ388QfTkHCpESDtsT30.roa (hash: k9OOgOfGm6/D5FgP/oCwjZmCMN3rSoxJmPb/amgvunU=)
                          2: 0NgIFKzE9U8mH1i_SzHm7txoLcU.roa (hash: hWQWohZ9IroKasDxxI/Z9V0O1L7U0SMQLl5Y82yIR3M=)
                          3: 1-yKYajfg5LY4mvNwPfafD3WCloA.roa (hash: WHC+36zJ+PfduDAkHrQdjdBbj6qnsfp62GV4AEEhmh8=)
                          4: 16QrQeCpwuqAfGGNMUzWS0WBV8Y.roa (hash: bmMldajlx/sTBR7HO2a2fTU2N475J5MRbFTSSzzaMIE=)
                          5: 4EfNGR4wiWbi_y1y433ICACWCZ0.roa (hash: W3KUBln3jDDd0cmmpR54v75Ll2wQ3RHqXSQ0s5O+eAU=)
                          6: 6yOls-b1_zSEPoNekFa6o4CZVU8.roa (hash: 4upnvyLgri06Nt5KSgO8Uwq/0K4QFNyV2w+ngXB4/18=)
                          7: DYMRxMEMoWV3Z5tMWRgW1jHqK9s.roa (hash: 6wMdwoy8UyJzHKKarNEHW2Cdeen4yoziiPrTe9YFHSg=)
                          8: Dpy95jXaeVWXPozFztldShHCRU4.roa (hash: /YGR1d8dV4jSlropxf6JRB0rYbUE70tJU0k00P3NxfE=)
                          9: FguRz0zA5etvzxWwMxGIJgd6k9Q.roa (hash: bUHFCLBTCucLtw2+JrZ57cEqNMKllYDmKc3mR95hRPw=)
                          10: L2UCeVHHcg9euQRtLcEzhApV2UE.roa (hash: awT5trUmAy4FPSzNkgCSgldj93M9lPrOlgd5pOswERE=)
                          11: M66I0UzjQBS9vnsa6hJXUcQSBYc.roa (hash: V+buEBexkfH/z8IfHQHVN3d+jviM7gfofPkFusouHl4=)
                          12: Orn9mMECvNnMxcocGzjxOdoRHk0.roa (hash: aAMLejN67KDw/WEq6MTlllANPts4owmBi6ah/2ILaOs=)
                          13: WEP8t9A44--cEjL5pRqrcK4NrA0.roa (hash: elcme8pyEkMhDdeVhgtzdCn+oqpKZYwu+OBHtYqbN08=)
                          14: WH2mqCoP_fWwSJcPuGUkRGobwNc.roa (hash: 7ARLGzAANjQVfOe30KclN1L6S5EbZnzPNgQQS4I4lwo=)
                          15: X8C31I22e7AIAIjXdr_l8xIku6c.roa (hash: 7Qhdi1NeFgvJPaxWBB0us3PX5KoyYrtl9JfPmMsmHRs=)
                          16: aKC4Ve_rwXPA5F4UwLOqVSzUoxQ.roa (hash: C2m1c3bcRtr4/LzoB1kvIKIl5IupGv3jDqJQPFpHE+Y=)
                          17: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: w1aa0RZkjQmtbB/g1F+neVJdRgH1Ue/rxwgO6HsE1yg=)
                          18: itJrIiDbZUHX0hMzNvHagOk0kkQ.roa (hash: 93vrSgc7l73uP0vt9qb0d56TAGfuxzEHnQxV4M3Vt/w=)
                          19: nA8ldX9v5Ip91riXYh1Is3JlGWU.roa (hash: LGoPjUjc03K0F3TRSud6cQW/fDxbqmiVQ8elBoGls6M=)
                          20: nheDIdc7Ex5DQQ3yUWyXEO40Wag.roa (hash: QW76PsmZ19rGr3AHGvysCP+0ICfRHV3icfaUxRkR4IA=)
                          21: tjgASAOzma6f2Z7RoOryTeTZY9s.roa (hash: DpWY737dSZuYYOG9ZIqDhXCNF5lWUkY9/w4EmAF3fpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:de:6b:ef:0c:b2:36:27:5e:4e:27:8c:5a:00:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: Dec 20 07:02:11 2025 GMT
            Not After : Dec 21 07:02:11 2025 GMT
        Subject: CN=abbcc722fa2892a2641878e15df7400587ef7419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:66:16:06:43:cd:58:98:ac:d8:f8:7e:e9:91:
                    72:13:57:93:84:94:89:a5:58:d1:a8:8b:c5:7e:01:
                    83:90:2e:47:17:cf:f6:e1:3d:27:73:85:7f:da:42:
                    09:fa:c9:d8:8b:f5:54:5b:28:3d:a4:43:8a:4e:b9:
                    2e:bc:02:f7:d8:07:31:10:61:c1:52:7d:7b:37:6b:
                    ad:a5:e7:f1:b0:cc:be:d1:ff:29:2d:b2:54:de:68:
                    44:f9:7d:12:0d:db:13:21:9f:df:72:6d:83:d4:3a:
                    10:f7:32:9c:a4:12:c5:7f:8a:4a:0f:32:e0:6e:38:
                    e3:bb:7e:b2:c8:de:3f:be:5a:dc:5e:da:36:e7:0a:
                    e2:e9:c4:f7:30:16:4b:66:f7:79:e9:95:c2:d8:36:
                    a0:77:6a:ae:cc:40:b3:2e:72:08:05:b5:68:bc:16:
                    b2:54:a1:22:9d:72:0d:23:ca:1d:95:78:c2:b1:90:
                    97:cf:2c:1a:b3:51:66:60:a9:25:81:d8:df:ab:d8:
                    68:a9:19:9d:eb:ad:48:d0:b3:dd:c8:57:cb:e4:b9:
                    62:11:bc:00:9a:40:3c:79:5b:7b:f6:04:f5:a3:7a:
                    22:2f:49:c0:18:88:cf:4d:65:db:c6:26:48:f1:f9:
                    4f:99:0e:3a:86:0c:9b:3f:ca:df:1a:1b:e6:b5:b5:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BC:C7:22:FA:28:92:A2:64:18:78:E1:5D:F7:40:05:87:EF:74:19
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b4:9a:b6:ed:dd:c3:a3:be:35:7e:88:d7:36:87:d1:5b:5c:
         dd:fc:0e:f2:e9:e4:ba:71:49:af:24:73:78:6d:3b:14:f1:a1:
         5d:b1:c7:2f:82:f6:2d:8b:64:10:41:46:5d:bc:30:62:b4:c0:
         23:64:d2:c9:5b:fb:69:a8:ba:ca:c7:2a:1d:63:e4:68:a2:6f:
         16:57:32:12:8f:1d:48:17:4a:2b:ec:70:45:a7:05:d4:f9:8d:
         16:bc:8a:b0:b9:c2:26:74:5b:d3:ce:91:23:36:0c:15:c2:03:
         82:60:ba:20:08:43:b4:72:0f:2f:42:51:14:de:ea:22:f6:0a:
         69:a0:76:99:99:d4:7d:f7:94:ee:90:34:d4:41:2a:72:29:97:
         27:b7:6b:1a:d6:b5:0d:cf:5d:58:5f:c9:29:24:55:96:46:c4:
         cd:5e:6a:94:c7:2c:33:e3:7f:df:d8:58:eb:15:14:e9:45:3b:
         92:8c:15:53:4b:01:5a:c7:80:d1:61:d5:d0:33:15:d5:a1:f4:
         d6:b8:ba:9f:78:37:05:13:90:05:02:07:b0:05:2e:d3:4a:43:
         68:de:4f:ca:0e:7a:0b:d9:be:bb:b2:9a:e7:6b:a6:cb:9d:f9:
         36:d2:df:b2:c6:41:9d:67:4f:52:65:fe:0a:bb:e9:d1:5b:18:
         c7:02:1c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:15:53 2025 by rpki-client