This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File:                     Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier:          TFBMSCcQYDWPJ+Q+qalqfRhStFoNLuBMYhR2VRWvAyw=
Subject key identifier:   D8:A4:6E:A8:7E:73:49:A6:BC:D8:DD:76:66:8B:D4:69:C4:F4:77:F5
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer:       /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial:       019B3BD98D07CBC5390708D81CB5C0731CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number:          1788
Signing time:             Sat 20 Dec 2025 13:01:11 +0000
Manifest this update:     Sat 20 Dec 2025 13:01:11 +0000
Manifest next update:     Sun 21 Dec 2025 13:01:11 +0000
Files and hashes:         1: 2nLfLY9iuS0QWJUoxMXGuTVNh4Q.roa (hash: KGQN3KTkCEm9UO8mNAZfG4hkgxNjImc/0aUX1CErP0M=)
                          2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: 5Rp1POqcU8zI2bX0Ly1DBC8UZUtJM9sOda22X9LerCA=)
                          3: OP_LxEh3lwkqqiARAnCPDgbwZFo.roa (hash: s8g9cGnm5CE4zgxAFLfWVnDVE/Wx0l3/tOuxqSeDbUw=)
                          4: Th0AzgJWNzEMUInk7IHPiBNTMFs.roa (hash: 0b9R/T23sDaiRJT9SmZqwKUiLRaB4TURwrsLOA1pG44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:8d:07:cb:c5:39:07:08:d8:1c:b5:c0:73:1c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
        Validity
            Not Before: Dec 20 13:01:11 2025 GMT
            Not After : Dec 21 13:01:11 2025 GMT
        Subject: CN=d8a46ea87e7349a6bcd8dd76668bd469c4f477f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:4a:0d:9c:03:a6:44:ab:53:2b:79:0f:34:
                    28:fe:09:46:f5:65:16:f4:2d:11:eb:79:b5:f0:29:
                    af:59:16:51:4c:b3:50:0c:d7:37:6a:71:37:3e:43:
                    dd:80:da:af:52:de:57:63:e0:2b:bc:d9:53:07:3b:
                    20:f6:fe:6f:08:33:1e:cd:f1:16:37:a0:0f:07:f2:
                    fb:dd:43:42:db:94:21:3e:eb:5c:6d:b1:94:ce:3c:
                    36:20:44:dc:ba:ce:26:fe:72:15:17:4b:52:a4:22:
                    cc:25:1c:24:12:86:7c:14:11:b4:4f:54:01:41:45:
                    31:a4:81:61:a6:c9:89:c4:aa:20:96:28:92:bd:18:
                    01:cb:fd:d9:03:50:a2:f4:31:66:d1:26:b7:bd:7b:
                    25:6c:b7:92:49:12:e3:a7:66:a1:f7:59:c9:07:18:
                    06:4a:41:62:98:4d:ef:2f:db:cf:c4:d4:eb:87:ee:
                    29:76:7e:63:4d:34:b5:a8:32:36:fb:c4:8d:67:a6:
                    d4:28:60:71:a3:13:00:27:65:1a:40:74:e8:b2:f1:
                    93:c1:b9:d9:c7:79:59:08:cb:67:72:b8:11:28:c0:
                    a4:fa:21:46:3e:12:b9:4d:90:76:96:7e:31:3c:85:
                    9c:6f:6d:31:01:93:70:98:6d:5a:6e:a7:04:98:2a:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A4:6E:A8:7E:73:49:A6:BC:D8:DD:76:66:8B:D4:69:C4:F4:77:F5
            X509v3 Authority Key Identifier:
                keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:42:6d:d4:6a:7c:5d:69:0f:52:87:a9:9b:16:f4:b7:0a:
         0f:fc:10:4b:3f:72:31:c9:a8:d3:41:c0:39:9f:21:06:19:36:
         99:59:8d:bd:d6:30:13:ac:3b:56:85:65:20:d7:ab:6b:10:64:
         ae:71:d7:0b:87:79:d0:7f:43:ff:d2:75:97:b6:c7:cd:fb:88:
         96:86:b8:3c:80:d4:7e:27:66:30:59:6e:ec:17:ce:66:75:e8:
         d5:8f:93:de:b1:6b:5f:bc:db:8a:92:2d:12:e6:63:91:e1:3c:
         94:a1:b7:77:38:18:74:8c:09:62:9a:25:65:49:e1:66:09:13:
         65:67:40:92:c8:7f:80:47:50:b3:4f:8a:e1:98:96:d9:cf:7a:
         ba:1d:cb:f6:a6:5c:5c:c3:9e:a7:4b:49:85:37:f6:49:fa:e4:
         ad:ed:ac:60:f4:4e:6d:91:8d:f3:53:0a:aa:a9:a8:47:d1:d3:
         fe:51:69:fc:f6:bc:22:97:f0:58:d1:71:17:6c:9c:9d:37:45:
         0e:3b:ad:98:73:2d:13:b1:98:d2:a4:15:f5:bc:69:42:ff:56:
         65:7e:02:6a:f7:c3:a9:ab:d3:2e:31:6b:d6:e2:32:d0:10:f1:
         e1:09:4a:34:ca:72:dc:5b:7d:cf:e7:96:6a:39:63:89:f1:2c:
         9d:25:f1:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs72Y0Hy8U5BwjYHLXAcxyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzdhY2QxMTJmMWM2YzgzM2JlYzIyZjhiNTNjYzcwZDIz
OTA4NzYwHhcNMjUxMjIwMTMwMTExWhcNMjUxMjIxMTMwMTExWjAzMTEwLwYDVQQD
EyhkOGE0NmVhODdlNzM0OWE2YmNkOGRkNzY2NjhiZDQ2OWM0ZjQ3N2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLNKDZwDpkSrUyt5DzQo/glG9WUW
9C0R63m18CmvWRZRTLNQDNc3anE3PkPdgNqvUt5XY+ArvNlTBzsg9v5vCDMezfEW
N6APB/L73UNC25QhPutcbbGUzjw2IETcus4m/nIVF0tSpCLMJRwkEoZ8FBG0T1QB
QUUxpIFhpsmJxKogliiSvRgBy/3ZA1Ci9DFm0Sa3vXslbLeSSRLjp2ah91nJBxgG
SkFimE3vL9vPxNTrh+4pdn5jTTS1qDI2+8SNZ6bUKGBxoxMAJ2UaQHTosvGTwbnZ
x3lZCMtncrgRKMCk+iFGPhK5TZB2ln4xPIWcb20xAZNwmG1abqcEmCr6gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNikbqh+c0mmvNjddmaL1GnE9Hf1MB8GA1UdIwQY
MBaAFAJ3rNES8cbIM77CL4tTzHDSOQh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQt
ZDk2NTU5ODc4NzRhLzEvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQtZDk2NTU5ODc4NzRh
LzEvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7JCbdRq
fF1pD1KHqZsW9LcKD/wQSz9yMcmo00HAOZ8hBhk2mVmNvdYwE6w7VoVlINeraxBk
rnHXC4d50H9D/9J1l7bHzfuIloa4PIDUfidmMFlu7BfOZnXo1Y+T3rFrX7zbipIt
EuZjkeE8lKG3dzgYdIwJYpolZUnhZgkTZWdAksh/gEdQs0+K4ZiW2c96uh3L9qZc
XMOep0tJhTf2Sfrkre2sYPRObZGN81MKqqmoR9HT/lFp/Pa8IpfwWNFxF2ycnTdF
DjutmHMtE7GY0qQV9bxpQv9WZX4CavfDqavTLjFr1uIy0BDx4QlKNMpy3Ft9z+eW
ajljifEsnSXxtg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:02:15 2025 by rpki-client