This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File:                     5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier:          IpZDXpGK6WwFqOarYsWXqfWwDY9eRS6oCsLzKwuy1Pc=
Subject key identifier:   D4:80:78:3F:0C:00:13:17:44:61:3A:FC:76:80:6E:42:03:F8:E4:CC
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       019AF3F78FF8118B4018D76878EDF8CC84AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number:          177C
Signing time:             Sat 06 Dec 2025 14:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:18 +0000
Files and hashes:         1: 01g5y437H2m0RBS60K8v_5CH25Y.roa (hash: 6whrCWSU/OFo5FWbCgWTtdfsQVzcFfU3y10vUs1oFTE=)
                          2: 1-4thfGCfV_85lt2WZkN-l71fwv0.roa (hash: 7cUPpyEsjpN2LkemwyOwpAzp6M6Mod4nt5VJCSxBi3s=)
                          3: 1-U546Wnv3X2dlqBwiPgmgD5rG0Q.roa (hash: UYLMoDLmtnbaqveYEw4e1FYtKG5Xz2eS50cYOB7habA=)
                          4: 1BsLjyLGR7fVTKId14K_LDmFaOE.roa (hash: psSOJBHeT4i88iWFESSWMgqzZaf6jPzMO0pv5q33yJ4=)
                          5: 4wlDChlgzrgFapvpBy46MAFlefc.roa (hash: EYqlVV6MH4EbjLdFRd/br9sG35MzdZTRrWmN3sTJ6/Y=)
                          6: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: jWgmM9VSZNKhWICt3l1zG7DIolYiMw4JJbeLUvmEsAk=)
                          7: 6R9owLjblkvlkz3ih4RN9e--Vn8.roa (hash: k/StVbEK5dj4FEhDjLuET6E7LydiR63r1n+a13Y1e3g=)
                          8: A-Fkuj2Ry_3wy9lszQO5iFmpTsM.roa (hash: MqXfL/IjblbyaoanvxCZ0s6/syF5tUBaoXoKEYvO5Ck=)
                          9: CqQsoC1jFsSbLss7hEFtLKrKDMY.roa (hash: 7YVK/zmpOd/tEBFOBPOhNo6QF1d67oChKSOQOYEoacg=)
                          10: GEAO-RpDOblA62IXyDgWLKyaZE4.roa (hash: B/mmE5K4Y0+TtLR8pgvUmngTm+hQZlJcszavfMaBB+I=)
                          11: NFK0Hjvsp_Sq78uC-zn-OtIs2io.roa (hash: RkRZ6SorlL5rZdfTuNFGZoclIhB5xyBOn5s6WMdE+L4=)
                          12: QmD1NuxNLYfmzuhbCU_99CJ-o-k.roa (hash: ugpwTRCdEyAoIefE/m+oUbM/pJjpH0ikF/U5tO+O/jM=)
                          13: Sn5j9mrsDzCn0e9SdfxRYinpue4.roa (hash: Pmm/ivnYdFW6uuCjzZHPDQpUkRs+mtt6nnTRFq0BYj0=)
                          14: TtR0csYqYQUGmaJtYJ6I1Sb4jtA.roa (hash: /RrNIRwEKfIWdjBmKgKNDu3bdN5NswYfyOudqPj07dM=)
                          15: W5W8H6uR-lCCEmn3v-XsPLRNVss.roa (hash: MqFZSzbOqhNyXJIgrbDDE4K1XPvGby9AbWHLANkDs8A=)
                          16: cKTcZs-U_VD8X5oF6KYi9vL_XPY.roa (hash: Ojplqzn5+rFkagKqgJjGg7MR261z7vGOzqJ6p2GYag4=)
                          17: dUjWdWqHZ3bB28SlJrHRKXOFumI.roa (hash: L5pkt5HZhPKaDfcEd3yHsIdGb5cnUbqIUW0exwEPLyc=)
                          18: lM1B4eqvI9WRB2F5MltXjXFSUNw.roa (hash: AbZgfqJhiLBwdICwkR/kGfMSad6ug4enx96U2XP1Fgk=)
                          19: mza84PKMv0aUDroEfzQZip-9Um8.roa (hash: xfLnRg1sIPVix0oNDyz6FdqLtVqmjxCCvOykxKOTB0s=)
                          20: u0oJmkSedaonOs5uLkSqqL59uJ4.roa (hash: C6uJzJ3uiAjMgAmGSpBjfqhHJVcbN5byOHdLx08rPTM=)
                          21: ujwUfZi-j2E7tiXxuxPwDEMg9Do.roa (hash: ZVTJzzTXgsjt6o/MwKVQt8mq4QnG+HkM2MYUgIyYqIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:8f:f8:11:8b:40:18:d7:68:78:ed:f8:cc:84:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: Dec  6 14:01:18 2025 GMT
            Not After : Dec  7 14:01:18 2025 GMT
        Subject: CN=d480783f0c00131744613afc76806e4203f8e4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ae:19:eb:51:b7:eb:21:d6:11:c2:21:59:7c:
                    b2:00:07:14:0a:0b:c6:18:41:9c:7d:2b:b4:66:cc:
                    07:c2:ac:05:96:e3:b7:18:e1:1d:e9:71:7b:0d:a0:
                    cb:d5:c5:ac:4a:9b:23:d6:fa:2b:13:5a:2f:f3:91:
                    a0:0d:c3:cc:8a:52:9c:14:27:d1:f4:d8:77:db:d9:
                    fb:59:8a:55:ba:ec:6c:d0:8d:40:b9:b7:96:9c:00:
                    e2:b4:33:bb:3c:5a:b3:92:96:6f:50:69:27:c9:98:
                    f7:8f:ae:58:94:9a:92:cb:53:5c:42:68:b0:76:22:
                    7d:a7:a7:e9:76:58:bd:6a:91:e3:bb:a3:37:d7:01:
                    7a:99:6d:07:ee:49:f4:c9:8d:ed:1a:1e:9b:3d:fd:
                    75:0d:5d:e6:2a:ba:fd:7a:17:55:ea:03:2f:e0:22:
                    e9:50:aa:ce:dc:93:b1:9c:76:70:4e:26:73:35:ae:
                    a2:8e:a3:15:e5:6a:db:94:a7:e7:97:55:14:e5:91:
                    8b:c3:e3:16:85:dc:19:58:46:09:c8:cb:91:88:78:
                    a6:a6:a7:46:69:c4:19:a7:e0:a7:9c:16:d2:c5:24:
                    fa:c1:3c:f2:55:4f:5e:46:e4:0d:21:70:72:c8:c2:
                    51:07:6f:e7:b6:fb:eb:ee:81:3a:08:b5:fb:97:4d:
                    be:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:80:78:3F:0C:00:13:17:44:61:3A:FC:76:80:6E:42:03:F8:E4:CC
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:10:29:1c:ee:b6:a5:04:12:d5:ca:05:e8:8f:01:60:4a:
         a9:c8:2c:d9:75:1c:6e:0e:c1:d9:2c:70:66:ce:6a:1c:22:5a:
         f1:15:37:b6:e2:c3:70:bc:c1:16:f8:1a:a6:7d:e5:98:7d:b0:
         67:1b:f2:f2:14:a6:d1:96:1b:62:81:c0:bf:d3:73:2e:74:36:
         28:14:3a:c5:2d:75:e3:71:e3:48:da:3d:0c:56:cb:81:9e:37:
         64:3e:22:8c:f5:c6:91:db:66:df:a6:56:b0:47:15:21:d0:36:
         52:03:69:0f:79:a5:d4:73:d4:a9:45:f1:91:59:9e:ba:9d:36:
         58:61:90:94:91:db:71:36:fb:ba:ae:10:d8:b3:d3:31:7f:08:
         c9:67:1f:49:41:38:fc:a2:b1:f8:fb:9d:41:c7:9f:76:84:1e:
         22:6b:3b:72:e2:58:52:b1:b4:3c:71:b0:50:10:cf:2f:9d:1d:
         84:22:71:43:20:a1:ad:e4:ee:77:af:da:3f:2d:f0:ef:ad:9a:
         f7:37:4a:f2:7d:ef:35:ca:2f:38:89:73:a9:f2:9d:87:bf:4a:
         f3:ab:bf:55:a7:a5:6b:d6:93:69:51:bd:e1:28:2f:4f:48:4a:
         b5:41:e7:94:d9:b4:86:71:4e:09:5a:c3:4e:76:3c:b6:89:2c:
         6e:d0:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:02:40 2025 by rpki-client