This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File:                     H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier:          Zj9BqzxqYQN0qc1VIbvLHVuaDEPD2MQ1A6TjCyIbCBg=
Subject key identifier:   47:AE:49:1A:8F:68:04:0A:84:E3:74:9B:05:B3:BE:7B:23:41:3F:3E
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer:       /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial:       019B5ED37E5659F610E376AE67E10AC02D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number:          179B
Signing time:             Sat 27 Dec 2025 08:01:17 +0000
Manifest this update:     Sat 27 Dec 2025 08:01:17 +0000
Manifest next update:     Sun 28 Dec 2025 08:01:17 +0000
Files and hashes:         1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=)
                          2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: WIrAJ7DSnBFsB/ALxIHH4ocqHJGI3e/PlW13LirRQWY=)
                          3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 08:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5e:d3:7e:56:59:f6:10:e3:76:ae:67:e1:0a:c0:2d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
        Validity
            Not Before: Dec 27 08:01:17 2025 GMT
            Not After : Dec 28 08:01:17 2025 GMT
        Subject: CN=47ae491a8f68040a84e3749b05b3be7b23413f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6d:69:44:04:62:1f:f1:f1:97:b0:06:5a:71:
                    9b:4b:31:77:6a:ce:4d:8a:0d:41:33:5f:16:0f:0c:
                    75:b0:f7:89:d6:f9:19:46:11:c9:a2:35:a5:ab:09:
                    07:ba:7e:f9:26:6c:66:1e:4c:8d:64:4a:32:77:9f:
                    d3:6b:09:1c:b4:85:e7:6b:3f:88:7a:8c:2a:67:69:
                    f4:7e:f2:05:39:2d:81:ec:78:bc:6a:8d:d4:2e:33:
                    9f:65:9b:09:54:a6:78:a1:49:9e:45:c6:0b:2e:86:
                    37:01:3a:c6:3c:ef:84:e3:7f:2b:44:58:ba:18:87:
                    cc:c1:a0:43:69:9d:3d:a7:c1:48:8e:af:25:b1:6a:
                    e3:ba:25:3b:cc:dc:2c:80:2b:13:0e:c8:09:9b:d3:
                    ef:fa:e4:94:bf:11:af:fb:f2:68:c2:94:d9:d2:a3:
                    eb:92:41:3a:77:13:68:c3:d6:7c:51:90:11:1c:55:
                    70:b4:6b:9c:74:56:60:c7:23:cb:a8:b7:3e:f6:41:
                    d3:a4:80:ab:89:6b:cf:0f:c8:69:1a:31:95:c5:76:
                    0f:83:ef:ec:1a:aa:b7:44:bd:e2:d9:c0:5a:2d:65:
                    a5:99:b9:06:40:8b:cd:bd:83:72:b8:42:3e:ff:83:
                    98:65:dc:b5:90:ba:c2:f9:04:60:88:b5:e6:c8:6e:
                    8a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AE:49:1A:8F:68:04:0A:84:E3:74:9B:05:B3:BE:7B:23:41:3F:3E
            X509v3 Authority Key Identifier:
                keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b1:c0:6c:0d:80:c4:9c:34:94:6c:b9:f5:b2:39:90:60:b2:
         e2:e4:73:1b:5d:8a:0b:a0:01:22:c3:14:24:62:a6:89:52:20:
         11:60:55:85:f8:0f:a0:5c:4e:23:48:4d:e6:46:26:11:b9:69:
         ff:dc:0a:e7:05:64:46:e8:17:00:4f:0c:16:4a:26:4f:de:39:
         93:4f:11:38:ed:76:37:d4:51:c4:10:bf:df:c0:ba:d2:f0:53:
         ac:c6:b5:fb:7f:df:33:01:c9:b4:26:2b:93:8a:b6:48:52:d2:
         d8:13:1b:e6:bc:19:f4:be:3f:18:e5:de:3f:86:76:71:09:08:
         90:f4:ff:97:a0:07:ca:74:a4:bb:97:01:e6:03:06:fe:48:6e:
         1e:e5:6d:e0:66:7a:87:a1:65:67:39:f7:e3:13:61:8a:47:70:
         1c:ba:de:71:28:55:71:cd:df:f0:58:3e:d7:c6:56:27:25:45:
         46:b9:85:2f:d6:95:a1:be:2b:84:a6:d0:97:12:d1:24:74:73:
         af:07:ec:8c:55:44:7b:ec:7c:55:16:ca:5e:c6:3a:ab:a6:90:
         84:10:8a:3e:99:f5:5b:b1:8d:63:3c:60:da:3a:81:3b:1b:e3:
         78:0c:f5:9d:0e:0b:00:81:fb:88:49:58:25:47:97:d9:f1:7d:
         cc:61:60:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZte035WWfYQ43auZ+EKwC2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYThhYzM3Zjk2OTUxNjk2MjdmNzVlMDk4OTYzMzk2ZGU5
NjM4Y2MwHhcNMjUxMjI3MDgwMTE3WhcNMjUxMjI4MDgwMTE3WjAzMTEwLwYDVQQD
Eyg0N2FlNDkxYThmNjgwNDBhODRlMzc0OWIwNWIzYmU3YjIzNDEzZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7m1pRARiH/Hxl7AGWnGbSzF3as5N
ig1BM18WDwx1sPeJ1vkZRhHJojWlqwkHun75JmxmHkyNZEoyd5/TawkctIXnaz+I
eowqZ2n0fvIFOS2B7Hi8ao3ULjOfZZsJVKZ4oUmeRcYLLoY3ATrGPO+E438rRFi6
GIfMwaBDaZ09p8FIjq8lsWrjuiU7zNwsgCsTDsgJm9Pv+uSUvxGv+/JowpTZ0qPr
kkE6dxNow9Z8UZARHFVwtGucdFZgxyPLqLc+9kHTpICriWvPD8hpGjGVxXYPg+/s
Gqq3RL3i2cBaLWWlmbkGQIvNvYNyuEI+/4OYZdy1kLrC+QRgiLXmyG6KpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeuSRqPaAQKhON0mwWzvnsjQT8+MB8GA1UdIwQY
MBaAFB+orDf5aVFpYn914JiWM5beljjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUt
MDIzYjZjMDc5M2YxLzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUtMDIzYjZjMDc5M2Yx
LzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurHAbA2A
xJw0lGy59bI5kGCy4uRzG12KC6ABIsMUJGKmiVIgEWBVhfgPoFxOI0hN5kYmEblp
/9wK5wVkRugXAE8MFkomT945k08ROO12N9RRxBC/38C60vBTrMa1+3/fMwHJtCYr
k4q2SFLS2BMb5rwZ9L4/GOXeP4Z2cQkIkPT/l6AHynSku5cB5gMG/khuHuVt4GZ6
h6FlZzn34xNhikdwHLrecShVcc3f8Fg+18ZWJyVFRrmFL9aVob4rhKbQlxLRJHRz
rwfsjFVEe+x8VRbKXsY6q6aQhBCKPpn1W7GNYzxg2jqBOxvjeAz1nQ4LAIH7iElY
JUeX2fF9zGFgFA==
-----END CERTIFICATE-----
Generated at Sat Dec 27 17:38:24 2025 by rpki-client