This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          6itWA/HZb6MXy3JtEI0h+VxGlhfC49sMD7W5hoCHQ/4=
Subject key identifier:   FE:9B:B9:53:4C:37:79:9B:72:DE:14:6B:72:CC:05:CB:FE:6A:59:D9
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       019AF3F75B2A4C744A4E4EC12A6051B924A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          162C
Signing time:             Sat 06 Dec 2025 14:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:05 +0000
Files and hashes:         1: HKEHenn7EguAMxlu8X0PMavfllI.roa (hash: Q1kxs4HiA00x+L/BlCzsp0V9iVJn16kS+H5yLVpADws=)
                          2: aW7CIH9THP_A_IUSjPSDQj4OB_s.roa (hash: 3CR9jYGSAUnr8tm9+NOJlM2eXyEyWaUsyQOyrnBdR0Q=)
                          3: cZNThB_jk2noBG8YtvmrQUXM7A8.roa (hash: iXfGM6dzzfNtT7f4YAxIq0/HoZkuUS3xKDy4j4hKu1k=)
                          4: jSOy5FaXl1S-Obr1YdaCignR9a8.roa (hash: yYEGAEpJB4t7L5q86t/lqbzz/tPx+TQT6wXoohYrOVI=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: LLGWV9Z695onP/WiZnmY4y4/8nXG1mjFSZ8QYNG20Cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:5b:2a:4c:74:4a:4e:4e:c1:2a:60:51:b9:24:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Dec  6 14:01:05 2025 GMT
            Not After : Dec  7 14:01:05 2025 GMT
        Subject: CN=fe9bb9534c37799b72de146b72cc05cbfe6a59d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fe:42:c3:8d:80:12:5a:52:ae:c3:27:2e:2f:
                    b7:9f:24:e3:6a:66:ba:fb:84:55:c2:a6:49:4c:23:
                    e6:3e:28:71:70:f4:7e:4f:d0:5f:c3:d9:1d:78:82:
                    fa:98:de:6c:e1:d9:f5:a4:78:ac:c8:4f:b6:38:68:
                    6f:e9:5e:f3:74:7d:9b:1d:f7:ea:32:4d:2f:0d:7f:
                    a9:fb:f0:c6:42:73:22:59:4e:c7:41:60:c7:16:3d:
                    ac:9e:30:92:b7:07:59:6b:85:f3:c8:4d:33:f0:91:
                    fe:6e:e9:90:d8:ea:e4:aa:4a:13:af:c0:d3:90:6a:
                    9e:62:15:43:5a:c7:9c:bb:dc:26:0c:61:c3:03:b9:
                    17:a3:ec:86:0d:26:52:59:f9:1b:05:44:97:23:7a:
                    6e:6a:09:09:67:7e:83:5f:bd:83:3c:ea:5b:ed:6a:
                    89:07:04:38:89:7b:eb:ba:37:a5:29:5d:51:28:9c:
                    06:5e:3c:09:57:cd:4b:f1:11:94:9e:2f:c4:69:93:
                    06:3f:16:bc:62:ad:3e:84:e0:94:96:f6:df:95:aa:
                    dc:e9:f1:63:c4:ea:0a:c0:8b:8e:43:e1:ec:32:3f:
                    01:f6:01:d7:03:83:bd:48:f9:7d:0e:6b:e8:0e:88:
                    63:10:af:7e:75:e9:cb:a9:3c:f5:b2:e8:c2:0b:d4:
                    9a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9B:B9:53:4C:37:79:9B:72:DE:14:6B:72:CC:05:CB:FE:6A:59:D9
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:23:88:f8:89:d5:96:1c:6b:75:a9:e1:c4:6d:c2:a1:60:3e:
         f0:65:39:cc:1e:36:b9:41:f0:84:7a:5b:00:6d:5e:b5:ec:28:
         95:46:6d:27:9f:62:f0:2d:60:e3:ec:b9:7e:49:f8:50:db:f0:
         3f:64:15:d7:17:92:26:7b:81:41:36:fb:c9:45:28:c2:75:3c:
         49:44:79:60:ef:1a:14:71:1d:37:1b:db:8f:45:e9:7c:f2:a6:
         8e:3d:42:75:63:bc:c2:d3:21:99:20:f6:c7:68:0a:83:c2:a2:
         99:b7:c4:09:26:0d:09:2b:a7:4b:65:cc:20:b6:28:b7:67:40:
         86:54:ae:0b:29:07:e0:d4:bf:7e:01:2a:79:af:66:ff:52:0b:
         56:58:3d:4e:64:87:1b:e3:9c:08:58:72:68:69:78:92:4b:9b:
         b3:2f:8c:8e:ca:0b:f6:a2:c2:14:8b:7b:3a:f7:ba:c3:37:d7:
         ff:31:46:ba:26:e5:a2:bf:c5:1a:0a:fc:23:5c:9e:4f:d1:55:
         18:70:d3:b1:ee:22:a3:0d:70:17:0a:f3:cb:0d:b8:2b:84:c6:
         d9:32:16:7f:fb:b8:73:85:ed:4f:0e:4b:2e:cb:78:1c:18:a5:
         d8:57:df:6d:3f:0f:0f:b0:1a:1a:a6:58:c3:8e:69:3d:17:c5:
         ee:42:40:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrz91sqTHRKTk7BKmBRuSShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNGM4MzBiMTEyNjE0ODNhNjJiNjY5NmE0YzM3MjBlOGFk
ODhhMGQwHhcNMjUxMjA2MTQwMTA1WhcNMjUxMjA3MTQwMTA1WjAzMTEwLwYDVQQD
EyhmZTliYjk1MzRjMzc3OTliNzJkZTE0NmI3MmNjMDVjYmZlNmE1OWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P5Cw42AElpSrsMnLi+3nyTjama6
+4RVwqZJTCPmPihxcPR+T9Bfw9kdeIL6mN5s4dn1pHisyE+2OGhv6V7zdH2bHffq
Mk0vDX+p+/DGQnMiWU7HQWDHFj2snjCStwdZa4XzyE0z8JH+bumQ2OrkqkoTr8DT
kGqeYhVDWsecu9wmDGHDA7kXo+yGDSZSWfkbBUSXI3puagkJZ36DX72DPOpb7WqJ
BwQ4iXvrujelKV1RKJwGXjwJV81L8RGUni/EaZMGPxa8Yq0+hOCUlvbflarc6fFj
xOoKwIuOQ+HsMj8B9gHXA4O9SPl9DmvoDohjEK9+denLqTz1sujCC9SadQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6buVNMN3mbct4Ua3LMBcv+alnZMB8GA1UdIwQY
MBaAFK1MgwsRJhSDpitmlqTDcg6K2IoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEt
MjIyY2ViNmMzNDRjLzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEtMjIyY2ViNmMzNDRj
LzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCOI+InV
lhxrdanhxG3CoWA+8GU5zB42uUHwhHpbAG1etewolUZtJ59i8C1g4+y5fkn4UNvw
P2QV1xeSJnuBQTb7yUUownU8SUR5YO8aFHEdNxvbj0XpfPKmjj1CdWO8wtMhmSD2
x2gKg8KimbfECSYNCSunS2XMILYot2dAhlSuCykH4NS/fgEqea9m/1ILVlg9TmSH
G+OcCFhyaGl4kkubsy+MjsoL9qLCFIt7Ove6wzfX/zFGuiblor/FGgr8I1yeT9FV
GHDTse4iow1wFwrzyw24K4TG2TIWf/u4c4XtTw5LLst4HBil2FffbT8PD7AaGqZY
w45pPRfF7kJAsA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:09:24 2025 by rpki-client