This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
File:                     94ItRZflST0VF4v7EOaEHdF-WJc.mft (raw, json)
Hash identifier:          doeC60qslprXOmeGSfJTeiuRSgXUkcPICmjU40bEl3o=
Subject key identifier:   E1:4A:69:4B:E7:33:5F:A4:13:B3:F5:0B:DE:E6:D8:C3:A2:27:03:D3
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Certificate issuer:       /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial:       019B5B9B6EB2D122F159D125023E236D3A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
Manifest number:          179C
Signing time:             Fri 26 Dec 2025 17:01:11 +0000
Manifest this update:     Fri 26 Dec 2025 17:01:11 +0000
Manifest next update:     Sat 27 Dec 2025 17:01:11 +0000
Files and hashes:         1: 1YmAF7f_m5KPGo_OwiMLBR1JW5M.roa (hash: UAkDP6iNOKZ++HkTLAbL+chM5gUSSrJ7CaImjH0oho8=)
                          2: 94ItRZflST0VF4v7EOaEHdF-WJc.crl (hash: akJ9tCXUuIkw3mhcFMFcAr2MIV1EteKdnKv2anu2dHg=)
                          3: 97KmMU-io56QACTp1Zd1_FHTqgw.roa (hash: uCAMfglxmwOpuKBmRAadF3cN1VLfWXLJnP20OsEzzUE=)
                          4: En9vXJm7XWjYXN5tMXgE82FcYWY.roa (hash: U0ZcoSNs7yuylkfmvka9vQooaxrwx4TKjkqWeYLwaY8=)
                          5: VD6wEJYNAt-3ccOgOQEtYbRpD0A.roa (hash: 8S53UWk8y2kICWluONZMk3V/wk1nRogIOqOUIQmbX3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 17:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5b:9b:6e:b2:d1:22:f1:59:d1:25:02:3e:23:6d:3a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
        Validity
            Not Before: Dec 26 17:01:11 2025 GMT
            Not After : Dec 27 17:01:11 2025 GMT
        Subject: CN=e14a694be7335fa413b3f50bdee6d8c3a22703d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:46:d3:ee:c6:ec:89:7f:e0:4d:56:3d:56:
                    e4:eb:57:1a:5b:c2:e0:58:a3:6d:29:04:a4:58:36:
                    00:bb:01:36:98:5e:08:6c:68:b5:70:6e:4e:b5:4c:
                    4d:43:f7:96:a1:f5:fa:41:c9:78:b4:bd:e3:c8:40:
                    2f:c1:cd:44:14:66:c6:12:18:78:48:fe:27:3c:17:
                    25:9e:55:5f:3f:91:48:45:bc:f6:77:5a:41:65:1f:
                    e1:9d:fc:b2:14:71:7a:d0:2b:32:04:fd:7a:e5:26:
                    9f:55:cf:b6:c4:02:6c:c0:8d:c6:71:d2:b4:b4:1d:
                    c4:c0:6e:92:48:40:2d:ab:e9:0e:6a:c9:9c:d8:59:
                    71:32:12:b6:25:39:c7:9d:cc:33:85:9d:e3:25:c6:
                    24:56:17:b5:cc:42:67:cd:43:8a:da:4f:49:6b:da:
                    98:76:61:07:b8:68:ae:17:c4:be:7e:b5:5e:ce:6b:
                    c4:7d:f3:04:d1:81:03:8e:76:d8:c1:12:a8:bd:1f:
                    1b:1e:4c:b4:bd:25:0a:2f:09:bf:d8:d7:e5:fd:14:
                    1f:2d:f5:73:8a:a0:b3:37:c9:69:a8:21:5e:bd:65:
                    9d:50:ac:c3:e3:29:5c:28:3e:85:5b:bd:ba:3b:30:
                    09:0b:29:79:d6:43:9c:59:88:ae:f4:8e:9c:82:5d:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4A:69:4B:E7:33:5F:A4:13:B3:F5:0B:DE:E6:D8:C3:A2:27:03:D3
            X509v3 Authority Key Identifier:
                keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:31:8f:42:96:10:ab:81:a3:d0:e6:8e:93:6a:8b:c4:09:54:
         0a:90:ed:92:45:5c:f5:43:55:69:fa:12:88:3d:e6:29:db:ca:
         2d:e7:83:cd:40:32:52:7f:94:79:1e:64:40:aa:9b:c7:23:33:
         83:f5:e3:00:08:ae:fb:c9:65:49:02:a5:be:e3:09:a0:18:8f:
         5d:41:a2:a2:34:7e:fe:a3:da:4f:a9:2a:cb:79:e9:f0:b4:08:
         fa:79:0e:6d:67:c5:d4:7e:e8:0d:96:e7:de:95:4a:30:58:ed:
         5d:ae:9d:2a:81:8c:12:92:1a:4d:e7:24:10:53:83:fa:d7:33:
         df:35:9a:c4:ca:cd:c3:65:cd:35:70:89:d5:7e:aa:7f:54:b6:
         c4:44:b8:54:26:49:7f:58:c1:47:ee:af:ce:83:02:6d:bf:43:
         0d:1b:c7:e7:aa:e7:02:70:bd:50:5c:f9:a7:ac:49:cf:66:14:
         4f:90:3f:fd:86:81:b8:e7:fe:08:f7:f7:40:c5:6f:25:3a:70:
         58:dc:ff:73:d0:95:5b:9b:ac:a4:35:1a:28:e4:c6:4f:74:24:
         41:89:50:38:f0:c7:da:73:07:16:be:33:91:fd:d5:ba:22:fe:
         32:a5:7b:37:4c:2d:25:b9:07:c2:a2:39:7d:1e:2d:55:f9:15:
         c6:20:b0:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtbm26y0SLxWdElAj4jbToqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODIyZDQ1OTdlNTQ5M2QxNTE3OGJmYjEwZTY4NDFkZDE3
ZTU4OTcwHhcNMjUxMjI2MTcwMTExWhcNMjUxMjI3MTcwMTExWjAzMTEwLwYDVQQD
EyhlMTRhNjk0YmU3MzM1ZmE0MTNiM2Y1MGJkZWU2ZDhjM2EyMjcwM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucRG0+7G7Il/4E1WPVbk61caW8Lg
WKNtKQSkWDYAuwE2mF4IbGi1cG5OtUxNQ/eWofX6Qcl4tL3jyEAvwc1EFGbGEhh4
SP4nPBclnlVfP5FIRbz2d1pBZR/hnfyyFHF60CsyBP165SafVc+2xAJswI3GcdK0
tB3EwG6SSEAtq+kOasmc2FlxMhK2JTnHncwzhZ3jJcYkVhe1zEJnzUOK2k9Ja9qY
dmEHuGiuF8S+frVezmvEffME0YEDjnbYwRKovR8bHky0vSUKLwm/2Nfl/RQfLfVz
iqCzN8lpqCFevWWdUKzD4ylcKD6FW726OzAJCyl51kOcWYiu9I6cgl3ogQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFKaUvnM1+kE7P1C97m2MOiJwPTMB8GA1UdIwQY
MBaAFPeCLUWX5Uk9FReL+xDmhB3RfliXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYt
ODYyZTk5OTczZmMzLzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYtODYyZTk5OTczZmMz
LzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjGPQpYQ
q4Gj0OaOk2qLxAlUCpDtkkVc9UNVafoSiD3mKdvKLeeDzUAyUn+UeR5kQKqbxyMz
g/XjAAiu+8llSQKlvuMJoBiPXUGiojR+/qPaT6kqy3np8LQI+nkObWfF1H7oDZbn
3pVKMFjtXa6dKoGMEpIaTeckEFOD+tcz3zWaxMrNw2XNNXCJ1X6qf1S2xES4VCZJ
f1jBR+6vzoMCbb9DDRvH56rnAnC9UFz5p6xJz2YUT5A//YaBuOf+CPf3QMVvJTpw
WNz/c9CVW5uspDUaKOTGT3QkQYlQOPDH2nMHFr4zkf3VuiL+MqV7N0wtJbkHwqI5
fR4tVfkVxiCwPA==
-----END CERTIFICATE-----
Generated at Sat Dec 27 02:36:12 2025 by rpki-client