This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
File:                     _neeViOLby6gaO3k4grvAMkEEys.mft (raw, json)
Hash identifier:          Y2VA6EQf5UJ7ROJLShxneds86ov77bhd8hUwJJQgCJA=
Subject key identifier:   A7:89:B1:2E:E3:03:FF:69:0B:C4:48:B8:DB:1E:EE:59:59:13:09:A0
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       019B3DC7F22439B389FCCE72EE0C35F5642A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
Manifest number:          149D
Signing time:             Sat 20 Dec 2025 22:01:12 +0000
Manifest this update:     Sat 20 Dec 2025 22:01:12 +0000
Manifest next update:     Sun 21 Dec 2025 22:01:12 +0000
Files and hashes:         1: 41n65uhvIrOs7pMXCEwIyWAHStU.roa (hash: LjxJ/BCjHptc+tFYMZxLMpRYryRPRgRDdjg86l2vAZ0=)
                          2: LPzeUoKKbtBniuOIqj8nJU_M67E.roa (hash: BXGvnjHmSyIsPAZUo8glr5Sei8gWA74Tz3aN6uo9z9U=)
                          3: _neeViOLby6gaO3k4grvAMkEEys.crl (hash: tKPC/LWPqorwuotRHopeM0t3MB8urnddQ6aO/UAR+50=)
                          4: iugZQQWfqpNEwggEDdc9annvzCU.roa (hash: XNsihYWbb8vNeIHc4e1Zu/NYWdhSyuR1dlZRFO/guBI=)
                          5: kITElgml7RZxWNr4eKfvM1E5VyM.roa (hash: mYphYuWKa2oClwokItjP8xyLuFG6crqS5Vudhf5XeTk=)
                          6: koZdUg9eyaaGc1g9ur5UXBYavrc.roa (hash: GaEJ7CaaD7TlL7BrSl+zzHjmdcf3ad/46vcHTxYsYGE=)
                          7: r3RFE-879aQPlTAYSIzxRB7I1g4.roa (hash: HvDiU5OY5w8GPNN2r0h7VcqBDnJGg+XhKF07qtUJ66M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:c7:f2:24:39:b3:89:fc:ce:72:ee:0c:35:f5:64:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Dec 20 22:01:12 2025 GMT
            Not After : Dec 21 22:01:12 2025 GMT
        Subject: CN=a789b12ee303ff690bc448b8db1eee59591309a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:f7:28:e4:46:7f:07:35:c2:01:b1:4f:62:
                    b6:d4:e9:06:7c:ce:c8:8a:c9:38:4e:16:71:5a:bb:
                    0b:75:0b:3a:77:61:95:02:fa:35:95:60:28:b5:4f:
                    11:a9:de:bf:ce:88:64:45:b8:1d:d4:e3:59:44:14:
                    df:49:ed:23:89:88:01:25:ba:89:ca:e2:ef:2f:77:
                    0c:3c:d3:37:60:c0:49:46:94:19:60:cc:3f:d6:b6:
                    e6:66:57:48:6e:53:1f:81:f3:a6:4b:93:12:3a:03:
                    ae:39:79:61:c4:c9:ef:e7:67:66:c2:24:62:a2:97:
                    5a:68:e6:63:d8:74:a2:e2:cc:54:dc:43:37:6b:79:
                    73:92:07:33:30:b2:f8:ee:48:8f:f9:2f:92:4c:90:
                    76:7e:98:0a:89:5d:6a:28:e0:a0:c8:c7:ae:8b:2a:
                    bf:aa:8d:ce:31:a3:b8:4c:21:2a:c6:59:ad:df:3b:
                    04:bc:63:c8:b3:c2:b4:2a:63:30:d1:d7:31:c5:3e:
                    da:09:5e:30:20:ed:a7:19:53:a3:e9:b5:44:c7:44:
                    4a:53:62:5b:9b:ae:75:28:a3:df:56:bd:e1:81:74:
                    40:b1:02:19:7b:6e:0f:48:6c:a9:78:4a:04:a2:ef:
                    11:6d:22:5e:30:b7:3e:ae:d4:69:68:bd:ad:d3:68:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:89:B1:2E:E3:03:FF:69:0B:C4:48:B8:DB:1E:EE:59:59:13:09:A0
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6c:41:7e:11:6a:cb:73:a1:e4:4e:95:5a:c1:55:70:f3:ac:
         70:65:4f:93:44:a7:12:6f:0d:8e:8f:50:cc:a9:fc:cc:4e:37:
         bf:6c:f4:db:10:77:b0:3d:d2:c0:01:c3:8a:03:a8:8f:69:fd:
         ab:bb:7c:2c:8e:3b:80:b5:ac:32:69:e0:6b:4e:0b:71:e0:02:
         0d:0a:d2:5a:30:ed:05:71:33:de:08:68:f2:50:ba:88:eb:c2:
         8a:18:15:11:a4:b0:1d:d5:11:6e:94:3e:4a:1e:e8:1c:40:9e:
         7c:c4:7a:7b:bb:46:72:53:cb:31:ad:dc:8c:d8:4e:58:4f:a2:
         0e:61:e8:46:a3:ca:03:35:10:f1:9a:52:ee:b3:f8:6b:ca:b2:
         98:de:83:3f:dc:5c:1f:05:8b:31:50:dd:40:b9:9e:b7:fa:e0:
         66:cc:02:de:aa:13:93:91:34:38:78:2b:44:5a:e0:bd:4a:c8:
         76:9a:bd:0f:8c:14:9c:76:2a:fc:25:06:e9:05:f6:87:72:1d:
         09:6f:5a:4f:c8:8d:7e:0b:2e:9b:55:2d:6c:0e:c3:52:07:21:
         a9:85:df:5f:d1:44:c7:0e:80:f3:4f:a4:31:d1:a8:ec:bd:62:
         a8:d2:37:7a:4e:44:98:59:7b:2f:32:4c:5c:15:2a:15:d4:19:
         3b:58:ef:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9x/IkObOJ/M5y7gw19WQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjUxMjIwMjIwMTEyWhcNMjUxMjIxMjIwMTEyWjAzMTEwLwYDVQQD
EyhhNzg5YjEyZWUzMDNmZjY5MGJjNDQ4YjhkYjFlZWU1OTU5MTMwOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xv3KORGfwc1wgGxT2K21OkGfM7I
isk4ThZxWrsLdQs6d2GVAvo1lWAotU8Rqd6/zohkRbgd1ONZRBTfSe0jiYgBJbqJ
yuLvL3cMPNM3YMBJRpQZYMw/1rbmZldIblMfgfOmS5MSOgOuOXlhxMnv52dmwiRi
opdaaOZj2HSi4sxU3EM3a3lzkgczMLL47kiP+S+STJB2fpgKiV1qKOCgyMeuiyq/
qo3OMaO4TCEqxlmt3zsEvGPIs8K0KmMw0dcxxT7aCV4wIO2nGVOj6bVEx0RKU2Jb
m651KKPfVr3hgXRAsQIZe24PSGypeEoEou8RbSJeMLc+rtRpaL2t02ggDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeJsS7jA/9pC8RIuNse7llZEwmgMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmxBfhFq
y3Oh5E6VWsFVcPOscGVPk0SnEm8Njo9QzKn8zE43v2z02xB3sD3SwAHDigOoj2n9
q7t8LI47gLWsMmnga04LceACDQrSWjDtBXEz3gho8lC6iOvCihgVEaSwHdURbpQ+
Sh7oHECefMR6e7tGclPLMa3cjNhOWE+iDmHoRqPKAzUQ8ZpS7rP4a8qymN6DP9xc
HwWLMVDdQLmet/rgZswC3qoTk5E0OHgrRFrgvUrIdpq9D4wUnHYq/CUG6QX2h3Id
CW9aT8iNfgsum1UtbA7DUgchqYXfX9FExw6A80+kMdGo7L1iqNI3ek5EmFl7LzJM
XBUqFdQZO1jvHw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:16:07 2025 by rpki-client