This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File:                     gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier:          eiC2IdtI7HxiKSXFlX/yLxWb7zrXXj+d3v0i89kd4Fg=
Subject key identifier:   65:BD:4C:19:7A:D5:FE:BB:DC:16:D0:C2:42:B0:96:BD:21:08:67:1E
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       019B3EA377B05764FC3F06A9CFF629D17651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number:          1792
Signing time:             Sun 21 Dec 2025 02:00:58 +0000
Manifest this update:     Sun 21 Dec 2025 02:00:58 +0000
Manifest next update:     Mon 22 Dec 2025 02:00:58 +0000
Files and hashes:         1: 78X0IG7SGTb_CqUUoAsl9rOEOoQ.roa (hash: dHUSFpGblHkPXU9NYMPaCtIz+bczpLlHXComKZfL/BA=)
                          2: FQcgCQcG__7aM5eRsupFU2EPhlA.roa (hash: xigvLo77r4Zkdva8w7DgHnMdwBCwRTMrZ+SBoUs6iWs=)
                          3: MfGfVoxcZRKcXeryJdrARrFNT30.roa (hash: NP17Awbv8VvBz7g9no++bSqGAeudeK0bPJQ8VG+ovrs=)
                          4: WD7CCMj1boEtISgVQIZGdGTenUQ.roa (hash: 4IOANIE3kXmhVP0/F3MzPDZJAgrgCHcPBEmcnYUkUzc=)
                          5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: 5aw8qLSNDOi2+yXd+myv+qips3CihFBJ5nEt23WQG4M=)
                          6: sjitqywkz9ufiQpRQwXHpL0dJPA.roa (hash: O1YNzqfVoGDW6rve4zWAx2oDjZ7sBc+TeGZe932UNgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:a3:77:b0:57:64:fc:3f:06:a9:cf:f6:29:d1:76:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Dec 21 02:00:58 2025 GMT
            Not After : Dec 22 02:00:58 2025 GMT
        Subject: CN=65bd4c197ad5febbdc16d0c242b096bd2108671e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:67:81:87:96:fe:de:21:2a:c3:3f:47:52:
                    f1:74:1b:f3:e8:0e:97:64:bc:58:11:82:64:04:ac:
                    b9:67:83:f0:3d:33:8e:93:6a:99:25:20:fb:f2:d3:
                    02:84:1a:37:21:05:5a:b9:2f:43:5c:2f:e9:55:0c:
                    e7:96:03:20:16:f5:46:77:4d:a5:7d:79:2c:d9:98:
                    23:25:59:8a:35:59:4e:9b:0f:db:ff:14:20:17:31:
                    4e:e9:a4:a0:da:36:6f:0a:86:ea:5b:82:36:d7:ea:
                    21:90:ed:31:d8:be:e2:d3:23:d4:56:54:de:50:05:
                    ba:56:d6:66:7f:59:dd:e6:91:05:80:ce:32:78:01:
                    9e:84:53:42:da:5c:f8:ee:2b:56:63:69:c7:ac:62:
                    f3:0d:f8:57:a5:0b:14:30:04:2e:eb:fa:cc:cb:43:
                    90:49:3c:c4:ba:25:ae:e2:1a:7f:ef:76:6f:e0:14:
                    e3:a4:45:df:aa:06:c0:60:ad:00:10:ed:e9:6a:4c:
                    f1:fc:54:4c:2f:b1:53:81:e7:b1:90:8b:e0:87:03:
                    45:b6:7b:e8:8c:f9:d4:d7:f7:1c:71:a4:8f:66:02:
                    b7:fa:22:fd:2f:60:f9:f3:e9:34:57:af:10:6d:3f:
                    cd:d8:f2:64:d9:34:87:e6:f2:1f:62:bb:72:2c:2d:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BD:4C:19:7A:D5:FE:BB:DC:16:D0:C2:42:B0:96:BD:21:08:67:1E
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:f7:88:3f:d1:47:40:3a:5c:91:2f:0b:51:3a:1a:d0:e1:
         46:c5:c7:74:0c:dc:46:8f:b3:9b:e1:55:7a:2d:a8:ef:54:ed:
         e2:3b:6a:1f:0a:47:cb:0f:13:77:43:65:33:ae:90:60:b9:8f:
         6c:82:db:f5:e7:5e:82:71:2a:c9:4a:94:f7:94:4a:73:8f:d5:
         5a:3a:8e:05:b4:38:6a:e4:f9:e2:d4:6e:09:73:cb:ab:69:0c:
         ff:a2:cd:47:36:27:0d:03:e2:6a:f3:00:50:19:25:8a:86:6c:
         db:3f:35:31:83:3b:60:fb:77:ef:2d:b3:bc:23:60:64:32:b2:
         76:79:50:33:fb:4e:5c:a8:29:a4:a9:cb:73:cd:03:11:75:51:
         97:38:36:86:83:52:ff:03:f2:6d:6a:ac:bc:d6:42:df:6f:ed:
         16:cb:a5:46:98:9d:27:94:53:9a:ff:94:76:4c:68:71:c8:9b:
         41:27:1e:f6:13:3b:b7:fb:f7:72:f2:c4:fd:17:f8:49:79:98:
         3f:4c:de:2f:0c:2a:24:c6:ab:fa:15:35:6b:50:c0:de:79:e5:
         3c:e5:f7:14:35:4a:1e:e6:c8:14:30:80:b6:9c:51:d6:5a:58:
         74:cf:9a:3a:31:93:bb:32:31:01:74:57:47:4b:ad:5d:d9:09:
         26:3d:2b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+o3ewV2T8Pwapz/Yp0XZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOGMzYTZjNWNiZmYwNzM5ZTQzOGQwNTc0NDQwNWIxNjE5
N2IxNWIwHhcNMjUxMjIxMDIwMDU4WhcNMjUxMjIyMDIwMDU4WjAzMTEwLwYDVQQD
Eyg2NWJkNGMxOTdhZDVmZWJiZGMxNmQwYzI0MmIwOTZiZDIxMDg2NzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GBngYeW/t4hKsM/R1LxdBvz6A6X
ZLxYEYJkBKy5Z4PwPTOOk2qZJSD78tMChBo3IQVauS9DXC/pVQznlgMgFvVGd02l
fXks2ZgjJVmKNVlOmw/b/xQgFzFO6aSg2jZvCobqW4I21+ohkO0x2L7i0yPUVlTe
UAW6VtZmf1nd5pEFgM4yeAGehFNC2lz47itWY2nHrGLzDfhXpQsUMAQu6/rMy0OQ
STzEuiWu4hp/73Zv4BTjpEXfqgbAYK0AEO3pakzx/FRML7FTgeexkIvghwNFtnvo
jPnU1/cccaSPZgK3+iL9L2D58+k0V68QbT/N2PJk2TSH5vIfYrtyLC0EfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGW9TBl61f673BbQwkKwlr0hCGceMB8GA1UdIwQY
MBaAFICMOmxcv/BznkONBXREBbFhl7FbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUt
NjE4MTljNDgwY2JlLzEvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUtNjE4MTljNDgwY2Jl
LzEvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9T3iD/R
R0A6XJEvC1E6GtDhRsXHdAzcRo+zm+FVei2o71Tt4jtqHwpHyw8Td0NlM66QYLmP
bILb9edegnEqyUqU95RKc4/VWjqOBbQ4auT54tRuCXPLq2kM/6LNRzYnDQPiavMA
UBklioZs2z81MYM7YPt37y2zvCNgZDKydnlQM/tOXKgppKnLc80DEXVRlzg2hoNS
/wPybWqsvNZC32/tFsulRpidJ5RTmv+UdkxoccibQSce9hM7t/v3cvLE/Rf4SXmY
P0zeLwwqJMar+hU1a1DA3nnlPOX3FDVKHubIFDCAtpxR1lpYdM+aOjGTuzIxAXRX
R0utXdkJJj0rMA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:07:38 2025 by rpki-client