This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File:                     Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier:          TaXz9ow6xpO8jVjzeu+yxkwEKfgX+KJ+/wByG+ZDX0A=
Subject key identifier:   20:57:F2:05:62:7B:AC:E5:C5:F0:06:18:42:9B:42:70:03:A9:17:53
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer:       /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial:       019AF3526C9AFBA7C5B7FBD7EBA602F78329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number:          162A
Signing time:             Sat 06 Dec 2025 11:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:56 +0000
Files and hashes:         1: 6ErfCPwAmfbVMHf0WQijaX8o94o.roa (hash: xIsd+voDU6heAFU10HoQQ5mHLbMtmpQhpDpDanQQkwY=)
                          2: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: wXmWNPGzSgf2H4z5T/o2v6Z6esLlzmnw/fkgEkhY5Y4=)
                          3: qcHe72FL2z-UmO_X8Rev1HToxnE.roa (hash: 4Z4lNAeftyjgjC/YKeKvbCrg253Zv9FXA7xaqcqk/0s=)
                          4: rFN0KDBiljkvhFQ66hAH56Hsc84.roa (hash: 2lh/B/WXfyLgwdob+PT24RTvz83sEjoawwppCzC07qk=)
                          5: ttl4gF5H4xVOsldpEtY--5SUL-g.roa (hash: SbdB5263yFvJJDlQfuHRPnaHcrA2J/RblHkI32JVk8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:6c:9a:fb:a7:c5:b7:fb:d7:eb:a6:02:f7:83:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
        Validity
            Not Before: Dec  6 11:00:56 2025 GMT
            Not After : Dec  7 11:00:56 2025 GMT
        Subject: CN=2057f205627bace5c5f00618429b427003a91753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:be:50:36:4f:8f:0e:e6:66:bd:08:28:86:
                    80:65:15:3c:87:4b:46:4e:03:64:df:b1:f9:68:a9:
                    cc:31:05:6f:1a:b2:9c:e7:5b:90:23:29:7c:96:8e:
                    32:9f:58:ad:e1:49:a0:f0:48:06:97:48:b4:40:93:
                    e0:f1:eb:fb:d9:7e:de:92:aa:3a:f7:2e:7b:a8:49:
                    25:a4:f7:83:4e:63:fc:e1:ae:00:3d:42:c9:35:a9:
                    92:21:4f:3e:98:9d:d9:16:d9:e6:89:32:96:ff:c9:
                    3b:3d:8e:81:72:09:bd:8c:45:42:23:9a:29:51:9f:
                    6b:df:4b:32:e3:a1:33:dc:2a:a4:fb:e5:e6:05:71:
                    c2:39:64:6e:76:86:30:44:ab:0c:73:58:63:31:69:
                    68:ea:7c:16:59:b2:bc:1e:9e:d9:27:28:24:63:b3:
                    c9:62:ef:85:28:9c:e7:11:c3:f9:16:b8:02:f0:75:
                    00:28:7a:8c:24:b7:7f:22:28:e9:76:57:6c:2c:08:
                    10:a4:41:8f:d1:a6:04:59:f1:b4:e0:2b:14:46:00:
                    fb:cf:a6:7e:09:f5:31:ec:06:f6:45:6e:ed:3d:a4:
                    77:27:a9:2f:0f:62:f0:4d:9f:9e:e3:4e:e2:8a:0c:
                    30:c5:19:cc:a9:51:ee:66:83:0e:aa:e1:7f:78:6b:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:57:F2:05:62:7B:AC:E5:C5:F0:06:18:42:9B:42:70:03:A9:17:53
            X509v3 Authority Key Identifier:
                keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ee:88:48:97:da:05:c0:7c:25:65:dc:94:c6:4b:ac:5d:c1:
         9a:aa:05:c7:e7:eb:92:d7:76:e2:87:58:dd:b0:d9:ca:57:21:
         1b:ab:0c:ee:5c:eb:d8:a2:09:e9:8f:bd:58:3a:19:84:cf:87:
         64:b1:2b:b5:f0:e2:f8:fd:fa:12:c9:ac:66:ca:7e:4a:09:4c:
         bf:74:04:e6:64:31:69:fc:1f:ce:39:7e:d4:3c:f6:0f:9b:a4:
         44:4a:fb:8a:c8:42:52:a7:d4:e5:fb:3e:37:fa:80:9c:3b:64:
         4e:9e:39:98:15:7c:22:56:9d:7a:5a:90:4d:a8:8f:83:d3:5d:
         fb:37:40:ce:8e:9a:28:79:e5:1c:75:58:f0:45:54:b8:fa:11:
         ca:3d:a1:39:66:00:25:0b:77:66:34:f2:aa:04:24:ad:53:fa:
         33:90:00:29:0b:8c:b3:e5:5d:f7:5b:98:0f:c2:c1:90:5a:96:
         7e:61:d0:4f:63:cd:07:9e:a3:69:83:7b:18:06:ab:f9:d6:9a:
         a1:2c:d6:8c:f8:13:78:8b:51:e3:3e:cf:6c:0b:6f:38:1b:3e:
         1d:01:77:ac:c1:07:22:5c:d3:8d:38:d2:8d:8d:37:70:25:e1:
         2d:5e:46:5c:fa:88:bf:06:85:bc:c1:2f:a8:58:1b:80:32:01:
         57:3b:f9:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzUmya+6fFt/vX66YC94MpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MGQzMTQ5ZmM1MGNhOTc5N2Y1MGZkZTllMDJhMDgzMTM0
YzUwMTkwHhcNMjUxMjA2MTEwMDU2WhcNMjUxMjA3MTEwMDU2WjAzMTEwLwYDVQQD
EygyMDU3ZjIwNTYyN2JhY2U1YzVmMDA2MTg0MjliNDI3MDAzYTkxNzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwy+UDZPjw7mZr0IKIaAZRU8h0tG
TgNk37H5aKnMMQVvGrKc51uQIyl8lo4yn1it4Umg8EgGl0i0QJPg8ev72X7ekqo6
9y57qEklpPeDTmP84a4APULJNamSIU8+mJ3ZFtnmiTKW/8k7PY6Bcgm9jEVCI5op
UZ9r30sy46Ez3Cqk++XmBXHCOWRudoYwRKsMc1hjMWlo6nwWWbK8Hp7ZJygkY7PJ
Yu+FKJznEcP5FrgC8HUAKHqMJLd/IijpdldsLAgQpEGP0aYEWfG04CsURgD7z6Z+
CfUx7Ab2RW7tPaR3J6kvD2LwTZ+e407iigwwxRnMqVHuZoMOquF/eGvXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBX8gVie6zlxfAGGEKbQnADqRdTMB8GA1UdIwQY
MBaAFEYNMUn8UMqXl/UP3p4CoIMTTFAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUt
NzViZDk0NmE3MzU1LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUtNzViZDk0NmE3MzU1
LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANe6ISJfa
BcB8JWXclMZLrF3BmqoFx+frktd24odY3bDZylchG6sM7lzr2KIJ6Y+9WDoZhM+H
ZLErtfDi+P36EsmsZsp+SglMv3QE5mQxafwfzjl+1Dz2D5ukREr7ishCUqfU5fs+
N/qAnDtkTp45mBV8IladelqQTaiPg9Nd+zdAzo6aKHnlHHVY8EVUuPoRyj2hOWYA
JQt3ZjTyqgQkrVP6M5AAKQuMs+Vd91uYD8LBkFqWfmHQT2PNB56jaYN7GAar+daa
oSzWjPgTeItR4z7PbAtvOBs+HQF3rMEHIlzTjTjSjY03cCXhLV5GXPqIvwaFvMEv
qFgbgDIBVzv5zQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:45:26 2025 by rpki-client