This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File:                     eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier:          VRl+3F2hmU8vtZOUlPqpF7rl9GFg1vNC3V7PpmJazac=
Subject key identifier:   AD:AC:11:5A:26:7C:05:19:58:03:81:07:64:80:60:32:E8:83:9B:67
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer:       /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial:       019B3F48178CEACC651ECD1C289A7995BD00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number:          178C
Signing time:             Sun 21 Dec 2025 05:00:47 +0000
Manifest this update:     Sun 21 Dec 2025 05:00:47 +0000
Manifest next update:     Mon 22 Dec 2025 05:00:47 +0000
Files and hashes:         1: 7BO8TZ7ATCsCuTGlJnm0y-khSyU.roa (hash: x6i25XfL4F0gRp6H2u4+rOMQs65WiJ45VD9+0G2z3+I=)
                          2: FWiPIHCHDr0uKdyZ_foi8pOa3qE.roa (hash: DmpIUKQykitdg60h0JYisIxDWolUrUFXqS52YO726hw=)
                          3: aNixjFy8ziG3vjf15zAVaRB-c8A.roa (hash: EnnotKECMV4Ndd6+GZEZZLejmbdDUCzQTSAS/USoOkg=)
                          4: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: ScAfSKPw/1OIC1UUenA9l1zZWwEHXFQkyk615ydQ2vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:48:17:8c:ea:cc:65:1e:cd:1c:28:9a:79:95:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
        Validity
            Not Before: Dec 21 05:00:47 2025 GMT
            Not After : Dec 22 05:00:47 2025 GMT
        Subject: CN=adac115a267c05195803810764806032e8839b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:92:38:fc:70:da:6d:52:8e:21:67:65:20:
                    50:ba:bd:d0:b5:1e:0f:89:3f:97:e3:76:3f:52:64:
                    86:05:21:21:1a:27:6a:a6:db:be:a3:3b:58:1b:01:
                    18:55:f3:52:df:df:b3:a4:a8:f6:3f:17:c6:d8:ba:
                    70:c0:61:d2:c8:0b:ef:02:0d:88:e3:31:55:56:56:
                    a2:6b:9c:49:7a:3d:40:b9:86:ff:a1:fe:53:b5:24:
                    d1:b2:6d:19:1b:4a:8c:1b:0c:89:1e:1e:10:29:f8:
                    ec:81:fe:bc:66:d2:cf:44:2a:af:02:98:57:5a:bf:
                    89:3f:2a:d9:cc:29:a4:ac:32:2e:6c:73:20:e6:cd:
                    91:94:8c:ee:31:b2:e6:1e:8d:af:19:75:a4:dc:44:
                    ba:88:c4:b1:42:a1:21:91:94:b7:55:fd:0b:ae:08:
                    1a:f6:bc:ba:2d:b0:88:8d:4e:11:ec:61:f4:71:12:
                    1f:d6:65:d7:43:7c:b4:e0:4e:da:65:44:83:36:e4:
                    dd:fc:24:2f:50:88:ca:78:a7:a3:c7:93:a4:7f:d6:
                    99:5c:48:1e:61:c1:f1:81:e8:d2:08:9f:a8:4a:55:
                    ba:04:0a:41:5e:83:f8:65:95:5b:aa:2c:4b:88:ef:
                    15:a3:46:42:21:10:6e:5d:ab:ca:42:8c:a4:1c:55:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AC:11:5A:26:7C:05:19:58:03:81:07:64:80:60:32:E8:83:9B:67
            X509v3 Authority Key Identifier:
                keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:0b:85:95:30:39:af:cf:16:d5:82:dd:89:85:55:3c:ff:6d:
         9d:bc:df:02:81:47:94:52:01:cc:17:6f:b8:6f:17:91:8c:27:
         8d:77:37:77:17:f8:d5:1c:71:f3:8f:84:32:7b:dd:ad:fc:df:
         56:82:13:27:55:ba:ad:1f:84:7d:b5:83:8d:46:b9:94:ac:99:
         9a:e4:e9:09:de:7d:58:cc:87:1a:c8:e2:28:ed:09:45:0d:3a:
         b2:2a:fa:24:bf:21:41:db:6c:f4:01:16:ab:2d:0d:9b:91:b1:
         f5:71:19:d7:94:43:70:13:59:a1:ed:b8:86:0f:0d:07:b9:a3:
         10:84:68:06:57:1f:b1:ab:bf:23:05:6e:27:c5:f2:cc:43:21:
         81:7f:9a:3c:21:f2:92:00:74:80:7e:02:bb:6f:41:13:81:b5:
         11:64:64:7e:dd:28:bf:3a:54:4a:8f:d7:0f:5d:ef:27:99:8b:
         30:61:bf:03:e2:e0:ab:d5:e1:b7:73:0d:8d:3c:e2:5f:62:9f:
         fb:cb:62:a1:04:e0:09:7b:bd:3a:5a:ed:91:44:18:6e:d4:2b:
         6f:17:34:76:e9:e1:9a:95:11:93:37:89:c8:ed:b4:80:3b:b3:
         b9:59:c9:3e:a1:40:57:21:35:55:ab:16:aa:04:e0:9b:af:8d:
         e9:88:42:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs/SBeM6sxlHs0cKJp5lb0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5N2E0OGNjMTNlMjAwZTJkM2YzOGFmODMzMThkMWJjYWY2
ZjYzMzEwHhcNMjUxMjIxMDUwMDQ3WhcNMjUxMjIyMDUwMDQ3WjAzMTEwLwYDVQQD
EyhhZGFjMTE1YTI2N2MwNTE5NTgwMzgxMDc2NDgwNjAzMmU4ODM5YjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/mSOPxw2m1SjiFnZSBQur3QtR4P
iT+X43Y/UmSGBSEhGidqptu+oztYGwEYVfNS39+zpKj2PxfG2LpwwGHSyAvvAg2I
4zFVVlaia5xJej1AuYb/of5TtSTRsm0ZG0qMGwyJHh4QKfjsgf68ZtLPRCqvAphX
Wr+JPyrZzCmkrDIubHMg5s2RlIzuMbLmHo2vGXWk3ES6iMSxQqEhkZS3Vf0Lrgga
9ry6LbCIjU4R7GH0cRIf1mXXQ3y04E7aZUSDNuTd/CQvUIjKeKejx5Okf9aZXEge
YcHxgejSCJ+oSlW6BApBXoP4ZZVbqixLiO8Vo0ZCIRBuXavKQoykHFV5OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2sEVomfAUZWAOBB2SAYDLog5tnMB8GA1UdIwQY
MBaAFHl6SMwT4gDi0/OK+DMY0byvb2MxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEt
N2Q3ZjRiNjM0ODQ5LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEtN2Q3ZjRiNjM0ODQ5
LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzQuFlTA5
r88W1YLdiYVVPP9tnbzfAoFHlFIBzBdvuG8XkYwnjXc3dxf41Rxx84+EMnvdrfzf
VoITJ1W6rR+EfbWDjUa5lKyZmuTpCd59WMyHGsjiKO0JRQ06sir6JL8hQdts9AEW
qy0Nm5Gx9XEZ15RDcBNZoe24hg8NB7mjEIRoBlcfsau/IwVuJ8XyzEMhgX+aPCHy
kgB0gH4Cu29BE4G1EWRkft0ovzpUSo/XD13vJ5mLMGG/A+Lgq9Xht3MNjTziX2Kf
+8tioQTgCXu9OlrtkUQYbtQrbxc0dunhmpURkzeJyO20gDuzuVnJPqFAVyE1VasW
qgTgm6+N6YhCAA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:25:07 2025 by rpki-client