This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File:                     sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier:          772AAstAZblHhLWHAuDze88J73gNoaLiyvI8pH/KPhc=
Subject key identifier:   4C:91:55:A9:D8:86:EA:46:12:91:B0:3C:50:71:1F:39:C7:81:DE:5E
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer:       /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial:       019B3D59AE757770E7939DD71BBC6FF6FB39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number:          178D
Signing time:             Sat 20 Dec 2025 20:00:45 +0000
Manifest this update:     Sat 20 Dec 2025 20:00:45 +0000
Manifest next update:     Sun 21 Dec 2025 20:00:45 +0000
Files and hashes:         1: Uly4hJm4n0CW_m9VG7FdyUYLXQ0.roa (hash: W7kTTFRMLEf4OA7s2XNv00hUyVmO5iV/FwUiWEf3g0U=)
                          2: WsuxGAiaGf_A6Y2lC2J6NUEltcs.roa (hash: xwq4xmwvcXSf9rjrw/uyv+kqTXqSwacSqKQKgPJXLGc=)
                          3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: J971q5cwOZSLewTaZFvo+zac162CEiIQKGiyqEIf9As=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:59:ae:75:77:70:e7:93:9d:d7:1b:bc:6f:f6:fb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
        Validity
            Not Before: Dec 20 20:00:45 2025 GMT
            Not After : Dec 21 20:00:45 2025 GMT
        Subject: CN=4c9155a9d886ea461291b03c50711f39c781de5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:ad:94:b8:4e:0d:dd:96:d9:ad:f5:96:60:
                    f0:b4:44:73:f8:73:29:fb:53:36:4c:d1:17:2b:30:
                    4d:4b:e6:85:b9:2f:6e:a4:16:f6:be:47:59:46:3b:
                    62:54:b3:bf:35:52:ce:a6:ab:14:6d:df:53:2b:cb:
                    6d:b5:e1:4f:06:f7:a3:78:ba:53:79:31:67:83:19:
                    21:20:59:7a:50:57:db:e2:2e:42:03:6e:82:6a:33:
                    da:fc:29:3a:90:44:53:c2:41:43:89:a2:b2:6f:9b:
                    7d:97:f7:4c:29:2d:28:e2:88:1a:a6:85:5c:b5:e3:
                    6a:2c:27:9d:5f:94:b7:18:83:4f:9e:c7:1d:60:61:
                    7d:6d:a2:c4:fb:69:9b:7b:fc:e8:36:cc:46:77:6f:
                    14:1a:f2:83:9c:2c:b9:b2:0c:26:3d:8b:5f:13:cd:
                    63:85:42:df:91:49:2e:a9:c3:ea:fa:bc:2c:64:fd:
                    7c:82:1e:2c:6e:cf:8f:cd:7e:46:01:98:d0:b9:77:
                    1b:2b:72:3f:c7:f4:ab:13:52:ea:b6:4b:4c:98:bb:
                    7f:51:e9:1e:50:7c:dd:b3:91:1e:26:8d:67:6f:ec:
                    23:2d:28:38:8d:02:e7:c1:0b:a0:d7:18:df:6c:9c:
                    57:e0:b0:7f:5e:23:b9:83:71:52:9a:f8:72:27:80:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:91:55:A9:D8:86:EA:46:12:91:B0:3C:50:71:1F:39:C7:81:DE:5E
            X509v3 Authority Key Identifier:
                keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:23:5e:63:d9:d8:48:f3:88:d4:aa:23:dc:fc:c0:8b:ae:5d:
         fa:55:28:69:75:b4:00:5a:e9:ba:83:27:5f:82:3f:73:db:01:
         ca:98:ad:a5:c9:7f:d6:76:f8:f2:03:66:06:98:36:32:0e:f1:
         de:38:60:a1:4a:01:bb:96:25:5c:cd:4c:72:fe:b4:c3:82:c2:
         87:ab:0f:d3:54:7c:4b:0d:be:5d:c8:5f:c2:67:cc:39:34:8c:
         e8:8f:c8:94:d4:37:4d:5b:ba:93:14:7e:20:1b:a2:08:ac:41:
         29:b2:73:30:cf:bf:6c:0d:30:2c:bf:f6:4c:6f:84:e9:f0:81:
         02:41:a8:a4:e0:07:b4:dd:69:6c:34:19:34:38:69:08:40:81:
         19:30:ac:ad:52:63:6e:f6:54:f4:40:6e:ab:3b:39:cd:c4:22:
         38:3b:2d:58:64:7e:f2:b2:1a:9d:e6:54:b9:5e:05:80:df:da:
         39:3b:e0:1f:83:9f:d5:88:a7:12:df:18:35:9c:79:cb:31:0c:
         65:83:18:be:0e:0e:02:ca:80:28:9a:48:8c:47:f3:76:39:2c:
         f8:04:45:0a:53:df:10:2d:54:f7:cc:21:a1:0a:0d:3f:81:f9:
         a4:7d:35:20:92:7a:1d:9d:d8:2a:0e:2e:fd:88:bd:f7:b9:a7:
         2f:a9:6b:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9Wa51d3Dnk53XG7xv9vs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZGZhZmQzNjczMDM5NmZlMzM4ZTc3MmRhZGJlNGMzYzg1
Y2Q5NTIwHhcNMjUxMjIwMjAwMDQ1WhcNMjUxMjIxMjAwMDQ1WjAzMTEwLwYDVQQD
Eyg0YzkxNTVhOWQ4ODZlYTQ2MTI5MWIwM2M1MDcxMWYzOWM3ODFkZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IWtlLhODd2W2a31lmDwtERz+HMp
+1M2TNEXKzBNS+aFuS9upBb2vkdZRjtiVLO/NVLOpqsUbd9TK8ttteFPBvejeLpT
eTFngxkhIFl6UFfb4i5CA26CajPa/Ck6kERTwkFDiaKyb5t9l/dMKS0o4ogapoVc
teNqLCedX5S3GINPnscdYGF9baLE+2mbe/zoNsxGd28UGvKDnCy5sgwmPYtfE81j
hULfkUkuqcPq+rwsZP18gh4sbs+PzX5GAZjQuXcbK3I/x/SrE1LqtktMmLt/Ueke
UHzds5EeJo1nb+wjLSg4jQLnwQug1xjfbJxX4LB/XiO5g3FSmvhyJ4C6IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyRVanYhupGEpGwPFBxHznHgd5eMB8GA1UdIwQY
MBaAFLDfr9NnMDlv4zjnctrb5MPIXNlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc04tdjAyY3dPV19qT09keTJ0dmt3OGhjMlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNjk2ZmQtNGQ5ZC00ZTI4LTkyNmUt
MGFhNWI0NmJmOGFhLzEvc04tdjAyY3dPV19qT09keTJ0dmt3OGhjMlZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mNjk2ZmQtNGQ5ZC00ZTI4LTkyNmUtMGFhNWI0NmJmOGFh
LzEvc04tdjAyY3dPV19qT09keTJ0dmt3OGhjMlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiNeY9nY
SPOI1Koj3PzAi65d+lUoaXW0AFrpuoMnX4I/c9sBypitpcl/1nb48gNmBpg2Mg7x
3jhgoUoBu5YlXM1Mcv60w4LCh6sP01R8Sw2+XchfwmfMOTSM6I/IlNQ3TVu6kxR+
IBuiCKxBKbJzMM+/bA0wLL/2TG+E6fCBAkGopOAHtN1pbDQZNDhpCECBGTCsrVJj
bvZU9EBuqzs5zcQiODstWGR+8rIaneZUuV4FgN/aOTvgH4Of1YinEt8YNZx5yzEM
ZYMYvg4OAsqAKJpIjEfzdjks+ARFClPfEC1U98whoQoNP4H5pH01IJJ6HZ3YKg4u
/Yi997mnL6lr8g==
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:16:29 2025 by rpki-client