This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File:                     F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier:          gxv/KOa2WGVPCLuRFfslmxk4JAktk86fWolzG+yNOZU=
Subject key identifier:   53:43:21:C8:29:D6:CF:41:F5:B3:16:23:09:99:C2:4B:60:B8:E7:E1
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer:       /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial:       019B6B0E4FEAAE3DED0FA53E15827AA11D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number:          179E
Signing time:             Mon 29 Dec 2025 17:00:58 +0000
Manifest this update:     Mon 29 Dec 2025 17:00:58 +0000
Manifest next update:     Tue 30 Dec 2025 17:00:58 +0000
Files and hashes:         1: 2zPO2m1PUGY-iLAYnC4rJmYASPE.roa (hash: Rs7PMbEzIpZxq7FwWF4kt1+4OAfZU7egEzwfwjyWknc=)
                          2: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: w2BrHekMWTXANRNGOfhVsBljRlLF4cN9Gpqc1nmJrFQ=)
                          3: sL81ThqOdiuggWYnv3U7dVFV4tQ.roa (hash: 9lHlaxhYv60ZuaT3Wq1aBGjk7nIJ6koMpcmTPm5Lg44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 17:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6b:0e:4f:ea:ae:3d:ed:0f:a5:3e:15:82:7a:a1:1d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
        Validity
            Not Before: Dec 29 17:00:58 2025 GMT
            Not After : Dec 30 17:00:58 2025 GMT
        Subject: CN=534321c829d6cf41f5b316230999c24b60b8e7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c0:f2:77:d2:f6:a3:bc:4f:03:c2:fb:83:ae:
                    59:ee:98:0e:b6:49:68:7f:b3:f6:34:99:f1:1b:06:
                    c8:4a:c8:8e:46:27:a6:07:0e:44:78:5e:52:98:b6:
                    6d:57:54:7d:b1:88:77:5a:00:7d:9c:4a:86:09:cb:
                    90:1e:03:d5:a0:1c:da:92:45:8b:1a:9c:d0:24:f8:
                    b1:a8:1f:b7:07:20:9b:99:27:12:8a:80:d1:df:05:
                    57:e8:72:50:8c:92:36:da:cf:be:b7:4f:f3:07:11:
                    91:32:35:97:59:5c:54:d2:96:5c:73:3a:97:8f:1d:
                    e8:7f:4c:0e:ec:db:78:df:8b:11:fa:57:d0:e2:7d:
                    e1:2c:86:f8:d6:be:57:c5:3f:60:8b:f2:98:46:42:
                    6b:44:e2:af:ca:69:43:76:23:03:95:49:54:bb:ca:
                    d3:df:62:ef:63:6f:7c:e8:69:83:77:1a:c6:21:51:
                    f1:8c:2c:2e:12:ed:41:08:45:87:a2:77:6f:1f:d2:
                    5c:0a:64:dc:91:ea:ee:62:5e:d6:d4:45:9b:7e:f9:
                    bb:35:da:e3:2e:1b:8f:bb:ca:78:52:c7:7e:a8:4f:
                    98:fe:85:3f:88:03:8d:38:4a:ef:4a:98:d0:5b:80:
                    78:d9:f7:e2:da:14:3a:10:69:90:a0:bc:2e:74:87:
                    71:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:43:21:C8:29:D6:CF:41:F5:B3:16:23:09:99:C2:4B:60:B8:E7:E1
            X509v3 Authority Key Identifier:
                keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b5:45:01:d1:3b:bc:aa:35:eb:4a:50:ce:ce:55:48:a9:92:
         81:42:a5:0f:eb:fc:89:a0:d4:6a:12:74:1f:b5:19:ae:a4:15:
         fc:84:a1:31:c1:3f:9e:9d:a3:61:06:f7:bf:28:1e:d9:4f:48:
         16:da:1f:30:48:24:60:33:78:6f:58:4a:de:b7:ea:a8:07:80:
         c0:97:7b:6a:4b:5a:c0:d6:0c:eb:3a:59:dd:f8:45:f8:9d:e7:
         42:db:61:79:92:67:bd:82:b5:a4:50:07:4c:73:ea:f5:34:18:
         82:28:8e:91:15:e0:78:e1:29:2c:5f:67:48:81:9d:46:40:c8:
         eb:df:f6:60:93:2e:22:a4:f2:4a:4d:52:b2:3d:65:0d:fc:35:
         20:de:8b:d6:a6:ed:9c:59:60:b5:12:d8:6b:94:ad:38:fb:f5:
         9f:d2:43:68:42:a9:2c:42:ce:4f:81:27:e6:82:45:d2:85:ad:
         ae:5a:9c:da:c9:93:a9:22:64:59:7f:41:60:02:51:18:52:2a:
         61:99:be:d8:ba:51:1b:ea:86:e7:ca:bf:5a:16:5a:e1:4d:ec:
         3a:d0:3e:2c:3a:7c:96:0a:aa:95:75:1b:b2:ca:86:d2:8b:98:
         48:2d:d3:f0:b8:83:14:0f:7e:45:64:5c:30:b9:1d:a6:2f:94:
         8c:a7:d4:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtrDk/qrj3tD6U+FYJ6oR0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjhiZWI1NTVkYWZhODJjM2Q2YWEzMzY5MDlhZTVhZGUz
NWE4M2QwHhcNMjUxMjI5MTcwMDU4WhcNMjUxMjMwMTcwMDU4WjAzMTEwLwYDVQQD
Eyg1MzQzMjFjODI5ZDZjZjQxZjViMzE2MjMwOTk5YzI0YjYwYjhlN2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMDyd9L2o7xPA8L7g65Z7pgOtklo
f7P2NJnxGwbISsiORiemBw5EeF5SmLZtV1R9sYh3WgB9nEqGCcuQHgPVoBzakkWL
GpzQJPixqB+3ByCbmScSioDR3wVX6HJQjJI22s++t0/zBxGRMjWXWVxU0pZcczqX
jx3of0wO7Nt434sR+lfQ4n3hLIb41r5XxT9gi/KYRkJrROKvymlDdiMDlUlUu8rT
32LvY2986GmDdxrGIVHxjCwuEu1BCEWHondvH9JcCmTckeruYl7W1EWbfvm7Ndrj
LhuPu8p4Usd+qE+Y/oU/iAONOErvSpjQW4B42ffi2hQ6EGmQoLwudIdxXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNDIcgp1s9B9bMWIwmZwktguOfhMB8GA1UdIwQY
MBaAFBe4vrVV2vqCw9aqM2kJrlreNag9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81MTUxOWMtMWU5My00NGE5LWFjNzAt
N2UyNDI2NzRkZWZjLzEvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81MTUxOWMtMWU5My00NGE5LWFjNzAtN2UyNDI2NzRkZWZj
LzEvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbVFAdE7
vKo160pQzs5VSKmSgUKlD+v8iaDUahJ0H7UZrqQV/IShMcE/np2jYQb3vyge2U9I
FtofMEgkYDN4b1hK3rfqqAeAwJd7aktawNYM6zpZ3fhF+J3nQttheZJnvYK1pFAH
THPq9TQYgiiOkRXgeOEpLF9nSIGdRkDI69/2YJMuIqTySk1Ssj1lDfw1IN6L1qbt
nFlgtRLYa5StOPv1n9JDaEKpLELOT4En5oJF0oWtrlqc2smTqSJkWX9BYAJRGFIq
YZm+2LpRG+qG58q/WhZa4U3sOtA+LDp8lgqqlXUbssqG0ouYSC3T8LiDFA9+RWRc
MLkdpi+UjKfURQ==
-----END CERTIFICATE-----
Generated at Tue Dec 30 03:19:53 2025 by rpki-client