This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
File:                     N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json)
Hash identifier:          c8SQ/uDucergI8jw/pr5xD3SdIQlyY0lyRzn7BRefSc=
Subject key identifier:   88:0B:3E:52:AD:33:1A:FD:43:59:DE:82:13:0B:C7:51:10:53:38:BF
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Certificate issuer:       /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial:       019B416D2B8AC7E7A1CA76084382DC799658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
Manifest number:          178E
Signing time:             Sun 21 Dec 2025 15:00:32 +0000
Manifest this update:     Sun 21 Dec 2025 15:00:32 +0000
Manifest next update:     Mon 22 Dec 2025 15:00:32 +0000
Files and hashes:         1: MbrCU5EWrzqFZBAeUe4bUJd8wew.roa (hash: 5Pva3cv3+IYsnuZvSImhrKouYMj9MMRYEIbLj8Bzi98=)
                          2: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: iXuO594+6jpdIGXCb3k5nJ+aNN1j+0jlyAduY6nKPVc=)
                          3: zQEfbksVhhA2S7Y-4p6fScJooW4.roa (hash: wml6Lhyvjtk0nrkWUQQ2ofJbLrbKj1m4u8FJSWuGbD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:41:6d:2b:8a:c7:e7:a1:ca:76:08:43:82:dc:79:96:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
        Validity
            Not Before: Dec 21 15:00:32 2025 GMT
            Not After : Dec 22 15:00:32 2025 GMT
        Subject: CN=880b3e52ad331afd4359de82130bc751105338bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:8e:00:eb:42:ce:20:d3:38:35:3a:f5:97:
                    9f:ac:4e:8a:d9:e8:eb:76:16:08:d9:a5:75:58:89:
                    36:7b:87:d1:f4:10:af:d9:0f:d7:b7:11:2f:28:59:
                    f4:36:16:ac:de:b7:7d:e1:fb:9e:ef:60:18:09:f0:
                    40:4d:b2:fe:43:f5:6f:e3:58:8b:07:9b:82:f7:9f:
                    55:5d:d7:3c:ee:1b:52:9d:d3:e0:ea:0c:ec:3a:c1:
                    46:f1:c2:2b:0b:37:de:d5:44:fc:cd:fa:ae:58:6d:
                    14:06:93:f6:6c:de:9f:18:50:8f:b8:c7:e4:1b:b4:
                    63:3a:b7:b2:f4:95:15:93:3a:af:9e:d6:e4:4f:28:
                    24:48:dd:d9:6b:45:93:3f:a6:85:97:99:1e:4c:36:
                    80:a0:22:f3:de:cf:bb:6e:82:d4:f5:51:b9:d1:5b:
                    68:0d:c2:23:0d:f6:0b:a7:3b:b2:47:72:16:09:b1:
                    39:81:d3:3b:78:af:9f:e1:ce:ac:51:21:df:4e:b5:
                    9f:84:e9:50:4a:05:e4:a7:04:1f:3a:6a:d4:43:0c:
                    02:bf:97:67:36:c9:c8:43:c0:0f:2e:bb:31:3e:a0:
                    7f:c7:92:3e:bd:5b:16:d2:6a:de:3c:9d:8c:ac:9b:
                    53:a9:5d:46:7d:04:d9:00:22:74:da:7b:02:18:da:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0B:3E:52:AD:33:1A:FD:43:59:DE:82:13:0B:C7:51:10:53:38:BF
            X509v3 Authority Key Identifier:
                keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:08:0e:f6:3d:61:a5:1b:f8:f1:50:6a:4b:1a:16:75:29:ee:
         ec:03:65:d5:3b:a5:df:cc:10:de:7e:4c:35:9f:3a:62:38:34:
         bb:65:59:57:cb:c8:10:36:5f:c0:4e:14:c0:54:e4:90:e9:d0:
         0b:1a:ea:45:09:10:04:3e:ea:48:e5:b6:c6:33:79:72:7f:8b:
         a7:a9:aa:1b:10:ca:be:a4:64:ad:54:38:b8:e6:63:0f:23:0d:
         2e:04:a1:27:c2:d4:5b:5a:a8:0b:76:ca:6c:b4:a4:9b:2e:c4:
         c1:96:bc:6d:ca:5d:f0:5c:c4:84:ce:a3:bb:0b:94:f5:be:f4:
         89:dd:88:e3:d1:8a:b2:80:e2:87:6f:59:09:b2:43:69:37:bc:
         f9:1e:33:b0:5a:f3:31:74:12:56:43:24:61:28:f4:d4:91:3e:
         aa:e8:2c:7e:8d:05:56:e5:f1:7f:69:ce:67:e9:77:39:cf:b0:
         a2:e1:f4:d7:5f:cc:a1:b8:61:ca:00:35:e1:aa:ce:95:da:a5:
         ec:d3:98:b4:7b:20:18:86:1e:c0:f5:7a:03:1d:20:b7:7d:60:
         00:f3:23:f5:51:61:a6:0b:1d:af:ed:93:a6:32:81:16:b7:62:
         0e:88:a0:05:1e:01:0b:75:c3:f7:13:5d:2f:29:d7:3d:1d:36:
         9a:e4:bf:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtBbSuKx+ehynYIQ4LceZZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZGVlNmFjYmM3ODJiOGM3Njk2YTQwYjI4ZTgwMzM5NjE5
ZDBmMWIwHhcNMjUxMjIxMTUwMDMyWhcNMjUxMjIyMTUwMDMyWjAzMTEwLwYDVQQD
Eyg4ODBiM2U1MmFkMzMxYWZkNDM1OWRlODIxMzBiYzc1MTEwNTMzOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PSOAOtCziDTODU69ZefrE6K2ejr
dhYI2aV1WIk2e4fR9BCv2Q/XtxEvKFn0Nhas3rd94fue72AYCfBATbL+Q/Vv41iL
B5uC959VXdc87htSndPg6gzsOsFG8cIrCzfe1UT8zfquWG0UBpP2bN6fGFCPuMfk
G7RjOrey9JUVkzqvntbkTygkSN3Za0WTP6aFl5keTDaAoCLz3s+7boLU9VG50Vto
DcIjDfYLpzuyR3IWCbE5gdM7eK+f4c6sUSHfTrWfhOlQSgXkpwQfOmrUQwwCv5dn
NsnIQ8APLrsxPqB/x5I+vVsW0mrePJ2MrJtTqV1GfQTZACJ02nsCGNqWTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgLPlKtMxr9Q1neghMLx1EQUzi/MB8GA1UdIwQY
MBaAFDfe5qy8eCuMdpakCyjoAzlhnQ8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjk3bXJMeDRLNHgybHFRTEtPZ0RPV0dkRHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wMjBkNDctMmNjMC00MzZiLWI5Zjkt
YjczYmZjY2I0ZTA4LzEvTjk3bXJMeDRLNHgybHFRTEtPZ0RPV0dkRHhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wMjBkNDctMmNjMC00MzZiLWI5ZjktYjczYmZjY2I0ZTA4
LzEvTjk3bXJMeDRLNHgybHFRTEtPZ0RPV0dkRHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQgO9j1h
pRv48VBqSxoWdSnu7ANl1Tul38wQ3n5MNZ86Yjg0u2VZV8vIEDZfwE4UwFTkkOnQ
CxrqRQkQBD7qSOW2xjN5cn+Lp6mqGxDKvqRkrVQ4uOZjDyMNLgShJ8LUW1qoC3bK
bLSkmy7EwZa8bcpd8FzEhM6juwuU9b70id2I49GKsoDih29ZCbJDaTe8+R4zsFrz
MXQSVkMkYSj01JE+qugsfo0FVuXxf2nOZ+l3Oc+wouH011/MobhhygA14arOldql
7NOYtHsgGIYewPV6Ax0gt31gAPMj9VFhpgsdr+2TpjKBFrdiDoigBR4BC3XD9xNd
LynXPR02muS/pA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 00:22:47 2025 by rpki-client