This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
File:                     V8H-gINkZ0mBatP6ZAmDRfth6fU.mft (raw, json)
Hash identifier:          D1ib5SA4d9usT8+ezOops2dEPl6AQWhS2lsUI00kDNs=
Subject key identifier:   7C:76:AE:28:CF:2A:ED:24:27:92:9D:A9:31:93:91:17:89:70:19:6B
Authority key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
Certificate issuer:       /CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Certificate serial:       019B3C7DE7BF355D648B35384DE9FEB83B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
Manifest number:          178E
Signing time:             Sat 20 Dec 2025 16:00:42 +0000
Manifest this update:     Sat 20 Dec 2025 16:00:42 +0000
Manifest next update:     Sun 21 Dec 2025 16:00:42 +0000
Files and hashes:         1: V8H-gINkZ0mBatP6ZAmDRfth6fU.crl (hash: KMHK2F/spXwvFnR76lBtZeNUwqwLf9m9VAOcDdLwQOA=)
                          2: jlU0CrUNYpHyPZ-sOhh_p4dS8gE.roa (hash: pzmvvOy/hE4GB8tk4sl95mF4r2s5M3R9gOVbZKnKbN0=)
                          3: wjFAe85gcJ2SfXs40DJdEDbXotE.roa (hash: DSpyolAhawhBau7UeDVnlkKHfjXo0qD3j7nDhPuigrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7d:e7:bf:35:5d:64:8b:35:38:4d:e9:fe:b8:3b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c1fe8083646749816ad3fa64098345fb61e9f5
        Validity
            Not Before: Dec 20 16:00:42 2025 GMT
            Not After : Dec 21 16:00:42 2025 GMT
        Subject: CN=7c76ae28cf2aed2427929da9319391178970196b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:1f:e4:ba:41:8f:32:2e:af:95:a4:98:ed:
                    3b:e5:87:9c:c4:84:58:a6:fe:ff:a7:36:21:a1:f7:
                    cb:4a:cd:58:6b:9f:7c:eb:67:50:c0:65:94:fa:85:
                    96:d1:3a:06:98:cc:98:f6:12:fe:fd:25:a5:76:e1:
                    c5:6b:8e:63:77:4a:c7:ab:1d:af:88:cb:e5:90:a2:
                    b8:56:21:da:a4:5a:5f:29:21:37:99:0e:69:44:22:
                    ef:a5:c5:6f:89:e9:f1:e7:28:4e:d4:80:4d:6f:b2:
                    30:18:07:fc:d4:91:b2:d7:79:b7:12:d1:5c:69:de:
                    db:d4:10:82:0e:8a:8b:76:7c:a3:d8:60:a7:92:5c:
                    2f:9f:1d:fa:9b:bd:e2:88:c1:ec:1c:e3:f4:66:1f:
                    7b:e4:ed:47:c0:a5:c8:b5:d5:62:c9:03:b3:75:5b:
                    c7:9b:f0:59:a9:d2:5c:ab:5f:b5:1e:ea:fe:46:1d:
                    23:06:10:26:2a:c5:33:00:40:fc:2c:65:8d:ce:34:
                    b1:36:3f:a5:15:67:0b:26:c0:8d:75:7c:97:10:c7:
                    8e:72:62:8f:74:63:20:94:5a:1a:f5:86:ee:24:1b:
                    14:86:dd:30:c2:31:8f:67:ad:ab:85:6c:f1:c8:5f:
                    c2:9b:9d:09:7b:9e:40:09:71:49:1c:bd:77:1e:a3:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:76:AE:28:CF:2A:ED:24:27:92:9D:A9:31:93:91:17:89:70:19:6B
            X509v3 Authority Key Identifier:
                keyid:57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:aa:29:a5:4d:87:26:6c:78:91:1c:39:7f:57:f8:b2:9e:16:
         4b:69:db:44:f5:dc:ac:4a:68:25:6b:bc:fe:77:a2:62:20:53:
         75:79:e4:7a:91:d7:f9:25:03:11:b7:08:6f:cb:13:66:26:06:
         33:6f:88:31:8e:fc:ee:43:c1:49:d2:36:09:f1:72:06:a3:e1:
         1d:ac:da:98:d3:80:da:20:20:59:67:d9:14:ca:ec:19:d6:9d:
         c5:62:cc:48:8a:aa:04:a1:27:7a:9a:9e:2f:04:c5:9e:e6:5e:
         d3:84:a6:cd:69:a6:18:e7:b6:e8:69:e2:63:84:7e:21:c0:db:
         35:1e:fe:33:d5:7f:1c:ff:45:27:8e:21:2e:aa:f8:4b:18:bb:
         47:2d:1f:9d:ad:ce:3c:b7:30:03:59:48:02:5c:56:23:93:02:
         43:69:97:64:df:dc:70:9c:bb:4e:bb:96:09:2a:21:07:a2:43:
         c4:90:19:18:e7:6e:5a:5d:06:45:65:08:21:3c:d6:c7:cb:e0:
         1b:70:a8:a3:86:85:3e:1b:71:4c:e9:42:9f:f9:48:08:ac:08:
         3a:f2:b2:2d:2c:b3:c2:ea:d1:a3:f6:30:c4:42:b2:91:0e:ed:
         61:66:ed:e2:0a:6e:cd:d6:4e:72:66:54:9f:d5:b9:15:fc:cc:
         ec:46:00:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8fee/NV1kizU4Ten+uDuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzFmZTgwODM2NDY3NDk4MTZhZDNmYTY0MDk4MzQ1ZmI2
MWU5ZjUwHhcNMjUxMjIwMTYwMDQyWhcNMjUxMjIxMTYwMDQyWjAzMTEwLwYDVQQD
Eyg3Yzc2YWUyOGNmMmFlZDI0Mjc5MjlkYTkzMTkzOTExNzg5NzAxOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFkf5LpBjzIur5WkmO075YecxIRY
pv7/pzYhoffLSs1Ya59862dQwGWU+oWW0ToGmMyY9hL+/SWlduHFa45jd0rHqx2v
iMvlkKK4ViHapFpfKSE3mQ5pRCLvpcVvienx5yhO1IBNb7IwGAf81JGy13m3EtFc
ad7b1BCCDoqLdnyj2GCnklwvnx36m73iiMHsHOP0Zh975O1HwKXItdViyQOzdVvH
m/BZqdJcq1+1Hur+Rh0jBhAmKsUzAED8LGWNzjSxNj+lFWcLJsCNdXyXEMeOcmKP
dGMglFoa9YbuJBsUht0wwjGPZ62rhWzxyF/Cm50Je55ACXFJHL13HqOigQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHx2rijPKu0kJ5KdqTGTkReJcBlrMB8GA1UdIwQY
MBaAFFfB/oCDZGdJgWrT+mQJg0X7Yen1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjQ3MDgtZWVmOS00OWRlLWI4ODct
ZjMyMDY5ZWM0ZWU1LzEvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xYjQ3MDgtZWVmOS00OWRlLWI4ODctZjMyMDY5ZWM0ZWU1
LzEvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaoppU2H
Jmx4kRw5f1f4sp4WS2nbRPXcrEpoJWu8/neiYiBTdXnkepHX+SUDEbcIb8sTZiYG
M2+IMY787kPBSdI2CfFyBqPhHazamNOA2iAgWWfZFMrsGdadxWLMSIqqBKEnepqe
LwTFnuZe04SmzWmmGOe26GniY4R+IcDbNR7+M9V/HP9FJ44hLqr4Sxi7Ry0fna3O
PLcwA1lIAlxWI5MCQ2mXZN/ccJy7TruWCSohB6JDxJAZGOduWl0GRWUIITzWx8vg
G3Coo4aFPhtxTOlCn/lICKwIOvKyLSyzwurRo/YwxEKykQ7tYWbt4gpuzdZOcmZU
n9W5FfzM7EYAEw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:27:37 2025 by rpki-client