This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File:                     egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier:          y3FQwyByupRLHIcHOcveLqR65ee5zkAMhpgj6O+GzeU=
Subject key identifier:   15:4B:8B:81:C4:8E:C9:82:7C:6C:01:D6:EC:7A:D8:71:97:4C:9B:40
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer:       /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial:       019B3E6CDED7F0CC538603F991BD897A49FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number:          178B
Signing time:             Sun 21 Dec 2025 01:01:20 +0000
Manifest this update:     Sun 21 Dec 2025 01:01:20 +0000
Manifest next update:     Mon 22 Dec 2025 01:01:20 +0000
Files and hashes:         1: RHlWpFi-cDo-cyvs-sRaiXiZbg8.roa (hash: 1PWadJWZ+l1enHDdWPnllLiQPr55+3WUCTN9xqnYDuA=)
                          2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: L9uo0dh9XYpnUzrSJp2q0PsJ1fdAeAAFZ78VrkQseBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6c:de:d7:f0:cc:53:86:03:f9:91:bd:89:7a:49:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
        Validity
            Not Before: Dec 21 01:01:20 2025 GMT
            Not After : Dec 22 01:01:20 2025 GMT
        Subject: CN=154b8b81c48ec9827c6c01d6ec7ad871974c9b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:ac:6e:32:3f:82:1b:56:42:5f:c0:38:76:
                    84:01:c4:02:7a:7f:bb:cc:5e:f3:e1:b4:cd:bf:9c:
                    68:fb:f8:19:75:05:66:4f:1a:e4:e7:1d:0a:95:4a:
                    3b:b4:8c:f4:bf:f4:10:dd:36:28:b1:38:11:41:c9:
                    4e:ab:7e:d5:0d:8e:09:66:f0:f1:17:38:3f:57:27:
                    2a:0b:91:c5:6e:90:b5:71:1b:3b:2a:de:0d:1a:9f:
                    95:b2:c8:ce:8e:8d:e7:b5:a7:da:98:93:11:78:c4:
                    0b:1f:07:e1:95:5d:80:e4:13:95:9e:73:d9:ea:d0:
                    51:00:a6:e1:c4:88:1f:be:61:75:82:47:d6:d0:1d:
                    8a:7d:02:46:92:7a:41:32:ab:26:29:bd:0e:4d:77:
                    93:64:bc:51:ab:a8:e9:ac:b5:85:8e:1d:66:e5:d7:
                    34:12:4b:83:4d:55:72:1d:d3:88:c7:3a:22:2e:be:
                    53:02:cb:e9:c0:77:70:f2:da:b0:f9:97:a7:40:22:
                    18:ca:a6:05:56:c2:2c:0d:1a:08:b9:5a:d8:7f:d1:
                    e4:1b:a7:26:68:82:dd:98:7d:8c:c8:4d:0b:c9:1c:
                    6c:b9:c1:26:ca:5a:02:14:a8:ce:e5:82:67:a9:24:
                    db:59:bb:6b:47:45:ed:29:c1:46:27:e3:21:9d:f5:
                    3b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4B:8B:81:C4:8E:C9:82:7C:6C:01:D6:EC:7A:D8:71:97:4C:9B:40
            X509v3 Authority Key Identifier:
                keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f8:18:3f:0c:3c:b8:fc:52:e3:fd:4d:69:b0:de:ab:8a:cd:
         45:1a:31:e8:b0:5e:dd:7a:15:ad:4f:20:69:3d:49:d7:e9:52:
         6f:5f:42:ef:dd:b4:c4:40:1f:44:3e:42:1f:d6:76:ee:1f:7a:
         58:13:c6:6e:42:cd:69:99:05:84:3f:cd:7a:8d:d5:bb:3e:b5:
         a3:89:bf:cc:6c:e7:48:6c:c9:43:09:a1:b2:46:54:c7:35:ab:
         18:86:7d:4d:7e:4f:ce:8a:e3:61:34:c3:7b:53:ba:78:dd:d9:
         8c:b9:01:a6:09:0a:4e:84:7e:42:e2:9f:45:b6:37:58:f4:c8:
         81:d6:95:a4:ce:3b:d3:18:62:ed:21:23:3b:3d:78:14:b4:71:
         cf:6a:00:39:7d:39:96:86:d0:07:93:3b:b8:73:74:75:3f:d1:
         4b:c7:89:0c:2b:40:fd:3b:da:76:5d:79:9b:7d:68:e1:ca:0c:
         d4:14:a2:19:86:33:ed:77:ab:62:db:86:29:c9:cb:1b:0b:c6:
         c5:9c:16:bb:3f:70:81:79:ec:6b:23:83:d6:6b:3b:04:b0:16:
         bf:a4:03:99:4b:98:09:49:d2:ac:34:a0:80:9a:15:02:d8:f7:
         00:60:96:a6:bb:fa:44:78:e3:54:c4:87:a6:60:6d:2b:d7:69:
         ce:5b:82:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+bN7X8MxThgP5kb2Jekn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMGNmZDVhNTEwMTNlNWZkNmNhZjgwOTg3ODA0N2E2MDVl
ZTlkNmQwHhcNMjUxMjIxMDEwMTIwWhcNMjUxMjIyMDEwMTIwWjAzMTEwLwYDVQQD
EygxNTRiOGI4MWM0OGVjOTgyN2M2YzAxZDZlYzdhZDg3MTk3NGM5YjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJCsbjI/ghtWQl/AOHaEAcQCen+7
zF7z4bTNv5xo+/gZdQVmTxrk5x0KlUo7tIz0v/QQ3TYosTgRQclOq37VDY4JZvDx
Fzg/VycqC5HFbpC1cRs7Kt4NGp+VssjOjo3ntafamJMReMQLHwfhlV2A5BOVnnPZ
6tBRAKbhxIgfvmF1gkfW0B2KfQJGknpBMqsmKb0OTXeTZLxRq6jprLWFjh1m5dc0
EkuDTVVyHdOIxzoiLr5TAsvpwHdw8tqw+ZenQCIYyqYFVsIsDRoIuVrYf9HkG6cm
aILdmH2MyE0LyRxsucEmyloCFKjO5YJnqSTbWbtrR0XtKcFGJ+MhnfU7+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVLi4HEjsmCfGwB1ux62HGXTJtAMB8GA1UdIwQY
MBaAFHoM/VpRAT5f1sr4CYeAR6YF7p1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTA0ZDgtNDlkYy00MDlmLTkyZmMt
ZGQ1NjIzMDQ4ZWEyLzEvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTA0ZDgtNDlkYy00MDlmLTkyZmMtZGQ1NjIzMDQ4ZWEy
LzEvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/gYPww8
uPxS4/1NabDeq4rNRRox6LBe3XoVrU8gaT1J1+lSb19C7920xEAfRD5CH9Z27h96
WBPGbkLNaZkFhD/Neo3Vuz61o4m/zGznSGzJQwmhskZUxzWrGIZ9TX5PzorjYTTD
e1O6eN3ZjLkBpgkKToR+QuKfRbY3WPTIgdaVpM470xhi7SEjOz14FLRxz2oAOX05
lobQB5M7uHN0dT/RS8eJDCtA/Tvadl15m31o4coM1BSiGYYz7XerYtuGKcnLGwvG
xZwWuz9wgXnsayOD1ms7BLAWv6QDmUuYCUnSrDSggJoVAtj3AGCWprv6RHjjVMSH
pmBtK9dpzluCSg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:16:09 2025 by rpki-client