This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File:                     q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier:          1DRhIochCz5hZgN1VubNkEC4januP0FnJS+J5GkhQ6o=
Subject key identifier:   8F:5D:11:2C:23:3D:23:76:C1:2D:4B:4B:DB:BB:EC:DC:1C:8F:47:55
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer:       /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial:       019B668CA9C4B20D6A23B8794A1E81B8FFCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number:          179F
Signing time:             Sun 28 Dec 2025 20:00:53 +0000
Manifest this update:     Sun 28 Dec 2025 20:00:53 +0000
Manifest next update:     Mon 29 Dec 2025 20:00:53 +0000
Files and hashes:         1: 90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa (hash: OSVSFtU4v1yfm+DOAOwZeidgdh2EY4LpmP/NOkKDmkg=)
                          2: JErXjXvKorGj9aJu1omld6wdpcs.roa (hash: kiyLNY+zTwPwB8AkdrotNIs7qiykrRwfggYUByu+C28=)
                          3: UscJiSEPN7-PYnIHOgT8LNjrioo.roa (hash: RVU014DpCH3z/tdVgprON9hggZk6wMumDABO2h4+Fx0=)
                          4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: LmbrvKPCFjLqArQpsy0aKzjpEwb1F5Jq2qSHysrTVMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:66:8c:a9:c4:b2:0d:6a:23:b8:79:4a:1e:81:b8:ff:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
        Validity
            Not Before: Dec 28 20:00:53 2025 GMT
            Not After : Dec 29 20:00:53 2025 GMT
        Subject: CN=8f5d112c233d2376c12d4b4bdbbbecdc1c8f4755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:da:cb:4b:8f:37:0c:92:42:4e:0e:16:85:
                    37:84:b6:58:a1:39:0f:29:1f:c1:73:62:bb:cb:2f:
                    4b:3c:83:76:61:40:4b:e6:33:cf:6d:64:e6:19:54:
                    eb:bc:d1:89:c4:56:d6:df:7c:0c:0e:77:9b:cc:99:
                    c9:b9:dd:77:08:a2:df:56:fe:f6:af:ef:c9:17:56:
                    95:e3:a7:de:8f:46:5c:e9:80:fa:b5:f0:ce:5b:bc:
                    dc:01:93:bc:fe:b3:dc:a0:ad:82:00:5f:cf:0a:f9:
                    ea:2d:02:8b:9a:6c:5b:ae:0d:33:ad:fd:3e:2a:37:
                    a5:ad:4a:26:33:f0:13:2f:11:a6:1a:23:46:ea:03:
                    b7:16:50:dc:31:01:fc:94:ee:94:38:6b:36:0d:98:
                    27:06:6d:fc:b4:00:aa:bc:7a:9a:a7:d9:7a:e7:f0:
                    20:6b:73:03:4e:91:f2:5f:20:e0:08:c6:5a:30:c6:
                    42:98:b5:bd:07:3c:4d:31:5c:2a:fa:09:51:09:cc:
                    12:2d:ab:a6:9b:3c:fc:17:4a:a5:e2:c2:a0:3a:f9:
                    ad:ac:45:68:90:cb:58:be:ef:e0:e1:f1:65:fb:96:
                    7a:8d:f9:81:ec:89:99:bd:ee:64:d0:55:b5:37:8a:
                    04:9f:e2:2c:97:31:f7:d4:c6:ba:b6:38:4c:f1:6c:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5D:11:2C:23:3D:23:76:C1:2D:4B:4B:DB:BB:EC:DC:1C:8F:47:55
            X509v3 Authority Key Identifier:
                keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9a:7c:8e:ef:29:12:d9:c6:36:8e:96:5d:af:8b:18:8f:dc:
         70:9d:47:7f:2e:1e:de:86:09:a6:6a:84:7f:29:8f:f7:4a:e2:
         b7:fc:4e:35:57:03:a3:43:51:d5:f6:4a:a5:c9:37:59:83:ef:
         3f:4f:9e:87:ae:23:9d:92:2a:2e:4c:27:c2:b4:35:3b:77:e8:
         79:77:d8:a2:2d:7f:c8:17:d2:14:6a:83:35:5f:f0:db:f9:9c:
         d2:0d:ea:d2:5b:d0:c2:2a:1a:c0:81:94:cc:f3:b1:99:ed:35:
         ec:d6:e9:c2:16:2d:d0:16:97:66:74:9b:44:59:c3:89:c4:dc:
         72:e4:d0:ef:13:4d:8d:9e:66:0b:1b:c1:c4:bc:4c:59:fa:24:
         6e:f5:82:53:d6:2a:50:00:ee:8f:c0:19:66:a7:cd:dd:88:47:
         5f:95:70:50:c6:b9:fd:70:fb:4b:99:f9:e5:8f:64:19:a2:1c:
         63:23:a2:0f:af:a8:ec:ba:a4:ad:f5:3b:b2:1a:d2:c4:02:e1:
         14:0a:d5:e5:b7:30:a3:ce:ef:8b:a9:97:5f:eb:c3:24:0b:3e:
         3a:74:28:42:af:f7:83:7d:fc:f3:47:d7:6a:ef:ab:47:79:4a:
         18:ac:a6:7c:db:f5:1c:08:b5:96:eb:50:91:b9:83:22:75:fb:
         3b:d8:f8:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtmjKnEsg1qI7h5Sh6BuP/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOTFkNTI2MjU2MWE5ZGQ3MTNkZmEzOTE2M2RlYzg0OWZl
ZTQ2MzYwHhcNMjUxMjI4MjAwMDUzWhcNMjUxMjI5MjAwMDUzWjAzMTEwLwYDVQQD
Eyg4ZjVkMTEyYzIzM2QyMzc2YzEyZDRiNGJkYmJiZWNkYzFjOGY0NzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJvay0uPNwySQk4OFoU3hLZYoTkP
KR/Bc2K7yy9LPIN2YUBL5jPPbWTmGVTrvNGJxFbW33wMDnebzJnJud13CKLfVv72
r+/JF1aV46fej0Zc6YD6tfDOW7zcAZO8/rPcoK2CAF/PCvnqLQKLmmxbrg0zrf0+
KjelrUomM/ATLxGmGiNG6gO3FlDcMQH8lO6UOGs2DZgnBm38tACqvHqap9l65/Ag
a3MDTpHyXyDgCMZaMMZCmLW9BzxNMVwq+glRCcwSLaummzz8F0ql4sKgOvmtrEVo
kMtYvu/g4fFl+5Z6jfmB7ImZve5k0FW1N4oEn+IslzH31Ma6tjhM8WyBuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9dESwjPSN2wS1LS9u77Nwcj0dVMB8GA1UdIwQY
MBaAFKuR1SYlYandcT36ORY97ISf7kY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQt
Mjc1MjQyYWE2Nzc1LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQtMjc1MjQyYWE2Nzc1
LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpp8ju8p
EtnGNo6WXa+LGI/ccJ1Hfy4e3oYJpmqEfymP90rit/xONVcDo0NR1fZKpck3WYPv
P0+eh64jnZIqLkwnwrQ1O3foeXfYoi1/yBfSFGqDNV/w2/mc0g3q0lvQwioawIGU
zPOxme017NbpwhYt0BaXZnSbRFnDicTccuTQ7xNNjZ5mCxvBxLxMWfokbvWCU9Yq
UADuj8AZZqfN3YhHX5VwUMa5/XD7S5n55Y9kGaIcYyOiD6+o7LqkrfU7shrSxALh
FArV5bcwo87vi6mXX+vDJAs+OnQoQq/3g33880fXau+rR3lKGKymfNv1HAi1lutQ
kbmDInX7O9j4tg==
-----END CERTIFICATE-----
Generated at Mon Dec 29 03:29:16 2025 by rpki-client