This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File:                     4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier:          d5zFohaWfQsfqGonuuSUel254awE6QZRTmoJKOQGRFo=
Subject key identifier:   93:AA:8B:20:E9:B7:0A:31:5A:13:DD:A2:3F:1E:66:2C:8A:7A:1C:6E
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer:       /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial:       019B2D0AD0D88BB4E834D524522F187A1D33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number:          178C
Signing time:             Wed 17 Dec 2025 16:00:41 +0000
Manifest this update:     Wed 17 Dec 2025 16:00:41 +0000
Manifest next update:     Thu 18 Dec 2025 16:00:41 +0000
Files and hashes:         1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: CJTqZMnt5iFFkHlx7xz9CQfJ6ZoNrSB+fi4c8LKlpRE=)
                          2: YqwVujDHhfLEawoR2PJTNXDGOkQ.roa (hash: HReVdGArp33wnWKEmG0bJpK865E8KNNuSsxXzjPZYbc=)
                          3: vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (hash: GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:0a:d0:d8:8b:b4:e8:34:d5:24:52:2f:18:7a:1d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
        Validity
            Not Before: Dec 17 16:00:41 2025 GMT
            Not After : Dec 18 16:00:41 2025 GMT
        Subject: CN=93aa8b20e9b70a315a13dda23f1e662c8a7a1c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:d3:12:05:59:c2:d6:50:38:d4:1e:23:a9:
                    c2:0e:c3:cd:e2:de:4e:fd:70:17:71:1f:e5:b0:32:
                    a5:2a:4f:2d:96:76:29:46:fc:c5:08:74:4d:c2:99:
                    49:4f:39:ec:06:3e:04:1b:b8:50:a6:8f:af:17:ff:
                    4e:09:69:6c:1b:1b:00:99:6c:04:34:6e:95:e3:8a:
                    95:e8:a3:20:65:6d:fe:6c:f6:df:bc:e6:31:49:aa:
                    15:ce:24:b3:d6:11:cc:ac:74:c3:40:09:8d:78:38:
                    8e:96:08:d2:4b:3a:6b:b5:17:b7:3f:e9:33:23:74:
                    72:88:91:77:87:4f:6e:ae:6c:b0:85:01:d6:fd:c3:
                    c7:24:d1:93:f3:a1:d3:1c:f7:38:b9:89:02:a3:bc:
                    e3:55:18:7b:aa:b5:9d:e9:bb:24:ae:5c:ff:52:10:
                    df:72:38:bf:d1:16:99:b8:ec:08:24:76:c4:52:44:
                    d6:a2:e1:94:e5:b4:32:29:e9:63:8e:76:a7:dc:75:
                    8d:a8:63:48:6f:93:1b:b5:5a:54:65:f7:a8:4e:c1:
                    84:23:70:90:5a:40:ce:ad:88:7f:ea:bc:81:2d:1e:
                    7e:63:92:c2:b4:c9:89:5d:5d:6b:3a:62:a1:01:64:
                    4c:d1:5e:85:32:a9:3b:a9:f9:f5:a6:3f:d6:54:62:
                    fb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AA:8B:20:E9:B7:0A:31:5A:13:DD:A2:3F:1E:66:2C:8A:7A:1C:6E
            X509v3 Authority Key Identifier:
                keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:5f:62:99:05:f6:f1:c1:7d:4e:f3:ec:0e:74:ad:91:e3:50:
         97:91:00:5e:6e:38:f3:12:9e:6f:55:74:2c:70:76:16:1f:47:
         3f:48:48:c5:7a:3a:d9:ea:34:f0:0e:52:9c:03:5a:a7:d5:86:
         99:0e:40:09:5f:a8:76:9a:ec:86:20:7e:b2:f8:bc:01:e9:4b:
         1a:a4:20:7b:71:ab:12:00:73:1d:59:c0:9f:b6:a7:8a:5e:25:
         a4:3f:a3:49:08:bd:25:f2:d3:8d:4e:0f:7d:44:21:84:c8:04:
         b4:a7:76:a3:0e:54:01:da:b1:0f:1d:65:27:5d:82:8a:e4:95:
         24:36:fc:95:a3:3b:74:c4:38:68:3a:78:09:2c:04:dd:45:6b:
         2c:42:d8:33:3d:e3:dd:2e:25:e0:3a:1f:37:3c:51:e2:da:e3:
         19:f3:06:ea:93:b8:fd:df:5e:64:b3:11:ac:6b:3f:a4:2d:1b:
         58:90:e3:3f:a2:a8:97:77:f2:8b:3b:da:82:bb:08:25:5e:c8:
         51:a9:a4:15:68:e6:8b:03:0e:40:fd:9c:df:5d:73:41:f0:de:
         a2:c9:1a:73:46:89:10:1a:73:92:bd:09:bd:4f:db:3e:d3:5c:
         42:41:e7:b5:47:b9:70:6f:77:f8:9e:de:ad:2c:e5:95:01:14:
         f2:03:e5:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZstCtDYi7ToNNUkUi8Yeh0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzhhMzkwZGRlNWUxNTE5YTRiZDNkYTc1NGE5M2U5ODg0
OTJkNjcwHhcNMjUxMjE3MTYwMDQxWhcNMjUxMjE4MTYwMDQxWjAzMTEwLwYDVQQD
Eyg5M2FhOGIyMGU5YjcwYTMxNWExM2RkYTIzZjFlNjYyYzhhN2ExYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI3TEgVZwtZQONQeI6nCDsPN4t5O
/XAXcR/lsDKlKk8tlnYpRvzFCHRNwplJTznsBj4EG7hQpo+vF/9OCWlsGxsAmWwE
NG6V44qV6KMgZW3+bPbfvOYxSaoVziSz1hHMrHTDQAmNeDiOlgjSSzprtRe3P+kz
I3RyiJF3h09urmywhQHW/cPHJNGT86HTHPc4uYkCo7zjVRh7qrWd6bskrlz/UhDf
cji/0RaZuOwIJHbEUkTWouGU5bQyKeljjnan3HWNqGNIb5MbtVpUZfeoTsGEI3CQ
WkDOrYh/6ryBLR5+Y5LCtMmJXV1rOmKhAWRM0V6FMqk7qfn1pj/WVGL7xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOqiyDptwoxWhPdoj8eZiyKehxuMB8GA1UdIwQY
MBaAFODIo5Dd5eFRmkvT2nVKk+mISS1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUt
YmVmM2JhMjFjNzE1LzEvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUtYmVmM2JhMjFjNzE1
LzEvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUl9imQX2
8cF9TvPsDnStkeNQl5EAXm448xKeb1V0LHB2Fh9HP0hIxXo62eo08A5SnANap9WG
mQ5ACV+odprshiB+svi8AelLGqQge3GrEgBzHVnAn7anil4lpD+jSQi9JfLTjU4P
fUQhhMgEtKd2ow5UAdqxDx1lJ12CiuSVJDb8laM7dMQ4aDp4CSwE3UVrLELYMz3j
3S4l4DofNzxR4trjGfMG6pO4/d9eZLMRrGs/pC0bWJDjP6Kol3fyizvagrsIJV7I
UamkFWjmiwMOQP2c311zQfDeoskac0aJEBpzkr0JvU/bPtNcQkHntUe5cG93+J7e
rSzllQEU8gPlPQ==
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:45:51 2025 by rpki-client