This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File:                     guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier:          5QfokJvao5HmaJyweHVRnnhI08KhtL7Vlzj49xKMnHc=
Subject key identifier:   8D:EF:25:BD:C0:E4:8E:EC:5C:72:45:84:67:D6:C1:75:11:FA:82:35
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer:       /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial:       019B3D90E62504D99FBA191855FCED9677A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number:          0F85
Signing time:             Sat 20 Dec 2025 21:01:04 +0000
Manifest this update:     Sat 20 Dec 2025 21:01:04 +0000
Manifest next update:     Sun 21 Dec 2025 21:01:04 +0000
Files and hashes:         1: FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa (hash: 2VetqHsWLuCtCZQI5pXnNL52eNemAp797/ha4XRoM7M=)
                          2: _FNnAfXHIK3mS0z3F15N5D4m-eE.roa (hash: AzmbPxnJj3q2Pp6UGPDbM97rM3z/NgrygHufcP5z/7g=)
                          3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: /raTIUug07Z1LXJeZerp4ayMvXJF7J5QBQLS+A9ATjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:90:e6:25:04:d9:9f:ba:19:18:55:fc:ed:96:77:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
        Validity
            Not Before: Dec 20 21:01:04 2025 GMT
            Not After : Dec 21 21:01:04 2025 GMT
        Subject: CN=8def25bdc0e48eec5c72458467d6c17511fa8235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:b1:93:aa:d1:04:87:e2:79:5a:c4:6f:5a:
                    8d:aa:57:5a:61:41:d4:b7:be:59:f5:92:f8:53:62:
                    6c:a0:83:4e:25:61:b4:af:16:f3:a7:53:31:04:d3:
                    38:c7:74:a2:bd:3f:b3:a3:c2:06:79:aa:07:c3:f1:
                    cd:60:c0:88:93:86:6c:19:1b:a9:0a:a6:7b:60:cd:
                    8e:2c:5b:4f:71:c0:47:cb:09:42:a3:63:c4:bd:c7:
                    ce:2b:32:a1:59:74:11:73:a5:e0:c9:51:bd:0d:7a:
                    cb:ed:a0:5c:d4:80:dd:2b:a3:3e:91:d5:fe:2c:13:
                    3c:01:4b:9a:99:16:c5:22:79:f6:21:f1:b3:11:18:
                    e4:75:9b:07:41:9a:13:7d:0d:14:3a:fd:ed:27:8c:
                    c0:be:d7:17:cf:be:3f:9a:09:a1:a8:14:47:08:58:
                    00:46:9c:0b:ea:be:f5:d4:6f:06:43:c7:de:29:7a:
                    42:4d:4c:4f:29:47:4f:a8:2f:38:09:e6:d3:58:04:
                    b1:e6:22:55:45:74:81:c9:39:99:1f:8d:9c:1a:da:
                    c8:bc:e4:db:58:7b:ec:b1:2d:8f:0d:c3:11:6e:05:
                    80:fb:99:5d:02:68:7c:ab:d2:f5:67:5d:9b:0f:05:
                    7a:56:a2:a3:54:71:d8:cd:35:b1:87:2a:f4:29:18:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EF:25:BD:C0:E4:8E:EC:5C:72:45:84:67:D6:C1:75:11:FA:82:35
            X509v3 Authority Key Identifier:
                keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:45:a9:ab:df:f0:47:bf:c0:ba:9d:88:5d:b9:03:d2:9f:80:
         0d:89:b6:16:0b:cc:02:de:4f:ad:cd:a3:cf:d3:4b:3e:ff:da:
         ee:92:d6:46:d4:fc:ef:10:57:bc:b4:a9:47:a4:d6:ca:cc:44:
         51:b4:c2:e1:f7:10:91:06:e9:15:93:63:0e:91:bc:4d:ff:05:
         77:62:9a:c5:21:73:40:67:af:6d:27:93:eb:04:7e:82:8b:41:
         48:f3:b9:b7:00:b8:01:c1:72:c5:3d:3a:b6:72:bd:ff:48:65:
         e1:07:eb:e7:d6:37:2d:79:90:9e:6a:d8:e0:51:2c:30:26:fd:
         75:8f:d3:f6:54:38:fb:30:d2:7f:52:53:15:6f:50:d9:5f:e1:
         63:aa:a0:ca:47:ce:72:91:a2:87:ec:e4:9f:81:88:d3:74:fb:
         0d:c8:62:94:b9:da:97:11:1c:e6:e6:9c:2c:3b:a2:fc:3b:3b:
         09:2b:50:1d:c9:32:ed:63:5f:89:0c:79:77:87:8b:66:d4:74:
         a5:17:f1:54:45:2f:6a:e2:7b:8b:45:7a:4b:ac:05:72:df:35:
         74:27:ad:b8:10:04:29:74:a9:75:1c:be:f1:d6:5a:5d:03:cf:
         15:f5:9a:98:ef:95:63:65:1e:ba:07:8c:24:2e:a5:06:d5:5f:
         4b:bd:9a:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9kOYlBNmfuhkYVfztlneoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTM5NjgxYzVhYWVmYjM1ZTU0ZjRhZDhhZmE0MjhkNGZm
ZGUwNmEwHhcNMjUxMjIwMjEwMTA0WhcNMjUxMjIxMjEwMTA0WjAzMTEwLwYDVQQD
Eyg4ZGVmMjViZGMwZTQ4ZWVjNWM3MjQ1ODQ2N2Q2YzE3NTExZmE4MjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MSxk6rRBIfieVrEb1qNqldaYUHU
t75Z9ZL4U2JsoINOJWG0rxbzp1MxBNM4x3SivT+zo8IGeaoHw/HNYMCIk4ZsGRup
CqZ7YM2OLFtPccBHywlCo2PEvcfOKzKhWXQRc6XgyVG9DXrL7aBc1IDdK6M+kdX+
LBM8AUuamRbFInn2IfGzERjkdZsHQZoTfQ0UOv3tJ4zAvtcXz74/mgmhqBRHCFgA
RpwL6r711G8GQ8feKXpCTUxPKUdPqC84CebTWASx5iJVRXSByTmZH42cGtrIvOTb
WHvssS2PDcMRbgWA+5ldAmh8q9L1Z12bDwV6VqKjVHHYzTWxhyr0KRhQpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3vJb3A5I7sXHJFhGfWwXUR+oI1MB8GA1UdIwQY
MBaAFILjloHFqu+zXlT0rYr6Qo1P/eBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgt
ZmFmZDE0OTZhZTU5LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgtZmFmZDE0OTZhZTU5
LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0Wpq9/w
R7/Aup2IXbkD0p+ADYm2FgvMAt5Prc2jz9NLPv/a7pLWRtT87xBXvLSpR6TWysxE
UbTC4fcQkQbpFZNjDpG8Tf8Fd2KaxSFzQGevbSeT6wR+gotBSPO5twC4AcFyxT06
tnK9/0hl4Qfr59Y3LXmQnmrY4FEsMCb9dY/T9lQ4+zDSf1JTFW9Q2V/hY6qgykfO
cpGih+zkn4GI03T7DchilLnalxEc5uacLDui/Ds7CStQHcky7WNfiQx5d4eLZtR0
pRfxVEUvauJ7i0V6S6wFct81dCetuBAEKXSpdRy+8dZaXQPPFfWamO+VY2UeugeM
JC6lBtVfS72afQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:42:46 2025 by rpki-client