This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File:                     IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier:          t/V6O53V2YbafHFxYsNtcmJlSkq8dlynEooEFJInNWQ=
Subject key identifier:   1F:9B:D6:9C:2D:6D:F3:23:54:0F:93:5B:5B:01:7B:6E:0F:65:AA:DE
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer:       /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial:       019B62B039346E6E26CE4F7209BA985CF053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number:          179F
Signing time:             Sun 28 Dec 2025 02:01:14 +0000
Manifest this update:     Sun 28 Dec 2025 02:01:14 +0000
Manifest next update:     Mon 29 Dec 2025 02:01:14 +0000
Files and hashes:         1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=)
                          2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: NSo1LWD/42Kdl/uTwRF9GK/nNbi8ZKDYppRbA81tDsA=)
                          3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:62:b0:39:34:6e:6e:26:ce:4f:72:09:ba:98:5c:f0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
        Validity
            Not Before: Dec 28 02:01:14 2025 GMT
            Not After : Dec 29 02:01:14 2025 GMT
        Subject: CN=1f9bd69c2d6df323540f935b5b017b6e0f65aade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:56:47:2f:f5:cb:7d:23:63:38:8e:85:2b:
                    c1:63:c6:ba:11:7e:10:21:2f:9c:ed:88:39:dc:f6:
                    79:63:be:c3:e1:2a:15:6e:15:8d:9f:ed:d9:d3:6c:
                    66:fb:e2:5f:8c:da:33:12:d2:f6:27:66:a7:fd:5d:
                    c8:ca:34:58:c4:b7:23:7a:a1:60:2d:d9:47:c6:6e:
                    86:fa:2d:a1:49:ee:1a:12:5b:23:1d:d9:bd:7d:98:
                    b9:2d:2b:49:7b:f1:b8:16:8e:f1:29:db:70:02:6c:
                    46:5d:a2:fd:c4:18:96:be:11:83:ee:e3:1f:2c:ca:
                    39:18:73:a5:c9:e9:4b:cb:db:a0:67:4a:23:13:93:
                    f2:fc:6e:c2:27:ef:16:34:c3:25:db:15:3f:bc:34:
                    a1:97:c0:4e:11:74:af:44:a8:a5:57:56:58:d1:74:
                    e4:49:de:9e:ca:8e:83:42:9b:7d:23:64:79:73:f6:
                    e8:5e:a8:0e:79:fb:53:8e:a1:02:26:a8:c2:cd:b0:
                    48:0c:08:2d:68:63:88:b9:89:41:8b:66:28:c8:a1:
                    01:35:41:5e:a6:b5:79:26:42:c6:3b:dd:f7:4f:a5:
                    ff:ee:c9:d2:31:0a:c0:ed:b3:c7:33:97:9b:f9:19:
                    5b:ad:22:66:7d:80:5d:39:b8:17:4e:41:fc:12:49:
                    cb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9B:D6:9C:2D:6D:F3:23:54:0F:93:5B:5B:01:7B:6E:0F:65:AA:DE
            X509v3 Authority Key Identifier:
                keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:87:a8:2f:26:d7:47:01:b1:92:46:73:d3:ed:d6:bd:27:48:
         dc:bf:9f:e9:79:fa:da:f3:3a:3b:3e:96:e6:94:2c:fc:41:e5:
         ea:88:c1:b5:93:bd:84:61:a8:88:11:bb:37:19:da:2a:56:a4:
         1e:23:1d:d2:ed:63:2a:13:28:2a:7a:4a:e8:ad:ba:57:45:44:
         13:34:85:f8:39:9e:4e:c8:9d:25:92:dc:3f:1b:06:fb:be:73:
         3d:59:45:49:30:1a:73:11:1f:0d:2f:82:45:64:b4:92:5f:81:
         b1:ff:7a:a0:4f:2e:13:ae:8c:9d:81:fc:3c:ae:d1:56:a9:43:
         a7:1c:66:d7:ae:10:50:de:81:4f:e8:8e:e1:af:b3:99:a5:15:
         62:f1:d2:35:06:8c:0a:76:f1:2f:c3:45:fc:69:c2:00:ea:04:
         f0:32:5b:5f:60:7d:13:62:96:ec:9b:45:0d:e6:82:df:89:b8:
         9a:cb:a6:b8:46:23:3a:ea:c1:a3:f7:44:9f:23:2f:43:bc:ba:
         a2:e8:5c:c2:e1:da:9b:6f:9f:33:43:de:4e:60:27:20:ad:c9:
         03:95:8e:8d:9b:8c:7f:f8:1e:b3:91:5e:e9:cb:9f:6a:15:3b:
         f6:0e:14:08:69:65:e4:78:47:8a:24:10:92:ed:c4:64:45:62:
         4d:b3:b9:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtisDk0bm4mzk9yCbqYXPBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTIwYzZhNmM4Y2YxNzI2ZTdkNDhlMzE0YTE2Y2NkMDVl
Zjg2MDcwHhcNMjUxMjI4MDIwMTE0WhcNMjUxMjI5MDIwMTE0WjAzMTEwLwYDVQQD
EygxZjliZDY5YzJkNmRmMzIzNTQwZjkzNWI1YjAxN2I2ZTBmNjVhYWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz5WRy/1y30jYziOhSvBY8a6EX4Q
IS+c7Yg53PZ5Y77D4SoVbhWNn+3Z02xm++JfjNozEtL2J2an/V3IyjRYxLcjeqFg
LdlHxm6G+i2hSe4aElsjHdm9fZi5LStJe/G4Fo7xKdtwAmxGXaL9xBiWvhGD7uMf
LMo5GHOlyelLy9ugZ0ojE5Py/G7CJ+8WNMMl2xU/vDShl8BOEXSvRKilV1ZY0XTk
Sd6eyo6DQpt9I2R5c/boXqgOeftTjqECJqjCzbBIDAgtaGOIuYlBi2YoyKEBNUFe
prV5JkLGO933T6X/7snSMQrA7bPHM5eb+RlbrSJmfYBdObgXTkH8EknLiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+b1pwtbfMjVA+TW1sBe24PZareMB8GA1UdIwQY
MBaAFCMSDGpsjPFybn1I4xShbM0F74YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQt
ZTRiNzAyZjE2MTE2LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQtZTRiNzAyZjE2MTE2
LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4eoLybX
RwGxkkZz0+3WvSdI3L+f6Xn62vM6Oz6W5pQs/EHl6ojBtZO9hGGoiBG7NxnaKlak
HiMd0u1jKhMoKnpK6K26V0VEEzSF+DmeTsidJZLcPxsG+75zPVlFSTAacxEfDS+C
RWS0kl+Bsf96oE8uE66MnYH8PK7RVqlDpxxm164QUN6BT+iO4a+zmaUVYvHSNQaM
CnbxL8NF/GnCAOoE8DJbX2B9E2KW7JtFDeaC34m4msumuEYjOurBo/dEnyMvQ7y6
ouhcwuHam2+fM0PeTmAnIK3JA5WOjZuMf/ges5Fe6cufahU79g4UCGll5HhHiiQQ
ku3EZEViTbO5TA==
-----END CERTIFICATE-----
Generated at Sun Dec 28 08:02:23 2025 by rpki-client