This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
File:                     Dm2P132t49P5bLSZMZSMJymtoN4.mft (raw, json)
Hash identifier:          DcNhRotlKR0EgLURO0W/NvTUcuU3B1VX3o21VwJ1bYU=
Subject key identifier:   61:1C:59:6D:F3:11:C0:3E:82:AD:D9:CD:F2:44:1B:92:B7:AF:A5:60
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Certificate issuer:       /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial:       019B2551E03949785B79B27679F2C76A6F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
Manifest number:          177E
Signing time:             Tue 16 Dec 2025 04:01:21 +0000
Manifest this update:     Tue 16 Dec 2025 04:01:21 +0000
Manifest next update:     Wed 17 Dec 2025 04:01:21 +0000
Files and hashes:         1: 7agd0xXHCJCEBXtCCNxD5ubRKuY.roa (hash: oQw/mKm0E4AJl8kl0WckRZJlnbPoPgaZD+9rJpy3frY=)
                          2: Dm2P132t49P5bLSZMZSMJymtoN4.crl (hash: PZ63KtuRD+bMCE1Jn2/ds8uGy/YET9GJVltAR5G5Ewg=)
                          3: LT-9VM8v74LKR6mHQpnPgQmq0Pc.roa (hash: DjF9+jZlXLi3uEoLKBvDZoW0dJ/H/LAI1EAde2tMt5g=)
                          4: wKqbNOLsqrVFYWVrfyYGqu1Sues.roa (hash: /xyx+mYRyXQ5PVlQrZvBX8K5l17ZBxWHv6YVrNpVAuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:51:e0:39:49:78:5b:79:b2:76:79:f2:c7:6a:6f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
        Validity
            Not Before: Dec 16 04:01:21 2025 GMT
            Not After : Dec 17 04:01:21 2025 GMT
        Subject: CN=611c596df311c03e82add9cdf2441b92b7afa560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b0:5e:d9:2a:e8:52:04:1f:cf:ad:50:28:89:
                    0d:f8:62:d2:60:37:2a:79:67:6c:1b:b4:a1:0b:22:
                    6e:fc:1b:d6:90:5d:5d:8d:2c:c7:a9:df:b3:eb:8b:
                    6d:c8:cb:2d:10:09:e1:2d:48:de:e7:27:b1:7a:eb:
                    89:27:c8:97:7c:69:75:7f:24:52:67:32:b0:3c:31:
                    98:ff:f4:1a:28:97:5b:e0:1d:86:48:4a:27:43:09:
                    21:18:86:76:5c:c0:dd:a0:c2:2d:98:8b:e3:56:9c:
                    30:8f:2f:d8:9d:f1:2d:c1:7e:ed:53:d8:99:94:61:
                    c8:05:c6:60:74:3e:45:cc:5d:ab:b4:15:f2:33:08:
                    9b:32:be:5d:95:bf:f9:92:66:05:81:f8:74:68:be:
                    4d:ff:76:ea:71:30:19:f6:23:45:57:4f:e8:dc:d6:
                    2d:76:09:2c:ed:7b:e0:6d:26:5f:dd:80:a9:df:9b:
                    5a:34:35:5c:9f:6d:55:76:f3:9a:33:b2:bd:43:fa:
                    01:3d:01:41:11:b7:94:b2:f3:89:e3:5e:68:12:65:
                    c8:e2:46:d5:ac:a2:cd:16:bf:f7:e4:f9:ba:22:1c:
                    f5:c7:c5:96:93:51:ad:40:8c:b4:ed:43:67:da:34:
                    0c:59:6e:f1:c4:20:69:fb:ea:c7:3b:52:a2:15:60:
                    09:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1C:59:6D:F3:11:C0:3E:82:AD:D9:CD:F2:44:1B:92:B7:AF:A5:60
            X509v3 Authority Key Identifier:
                keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:fe:92:23:f6:d1:2f:e7:2b:5b:28:96:cc:0d:8d:57:f7:f0:
         dd:7c:f5:71:81:58:8a:68:92:14:c3:22:aa:4b:16:05:5b:24:
         51:88:31:e3:1b:d0:4b:6b:07:6e:6f:6c:d2:31:22:f0:1c:15:
         fe:1b:a7:8c:e3:37:7b:d2:9f:4f:69:09:bb:ac:a4:2c:52:0d:
         a4:4f:41:47:c5:08:5e:4b:c4:1a:79:db:1e:69:79:53:5f:db:
         83:93:95:58:67:e6:4f:5a:f2:53:ac:c8:1b:76:c0:84:2f:07:
         ec:5d:22:65:fb:df:c1:ff:1a:43:02:ed:d3:99:99:05:4b:3b:
         b3:cc:36:14:6b:65:90:bc:2d:cc:86:e2:74:b5:03:cb:f9:8d:
         72:82:36:79:13:04:6b:4f:55:78:61:c9:c8:35:09:1d:8e:16:
         73:d9:9f:70:29:b8:26:17:02:89:8d:d3:3b:bb:8e:be:28:49:
         bd:e8:52:b2:8b:3f:93:08:9d:d2:94:31:9b:f2:97:80:a8:9f:
         44:b3:ec:bd:c4:ad:c9:b4:30:d6:02:c4:77:14:5b:fa:35:5b:
         a9:82:d5:85:d0:b5:41:67:52:4e:f3:ad:22:f6:b1:43:31:02:
         ac:27:93:3d:a2:5e:59:e4:bb:4d:8b:85:a1:b1:3c:fb:f4:29:
         5a:01:92:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZslUeA5SXhbebJ2efLHam8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmQ4ZmQ3N2RhZGUzZDNmOTZjYjQ5OTMxOTQ4YzI3Mjlh
ZGEwZGUwHhcNMjUxMjE2MDQwMTIxWhcNMjUxMjE3MDQwMTIxWjAzMTEwLwYDVQQD
Eyg2MTFjNTk2ZGYzMTFjMDNlODJhZGQ5Y2RmMjQ0MWI5MmI3YWZhNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bBe2SroUgQfz61QKIkN+GLSYDcq
eWdsG7ShCyJu/BvWkF1djSzHqd+z64ttyMstEAnhLUje5yexeuuJJ8iXfGl1fyRS
ZzKwPDGY//QaKJdb4B2GSEonQwkhGIZ2XMDdoMItmIvjVpwwjy/YnfEtwX7tU9iZ
lGHIBcZgdD5FzF2rtBXyMwibMr5dlb/5kmYFgfh0aL5N/3bqcTAZ9iNFV0/o3NYt
dgks7XvgbSZf3YCp35taNDVcn21VdvOaM7K9Q/oBPQFBEbeUsvOJ415oEmXI4kbV
rKLNFr/35Pm6Ihz1x8WWk1GtQIy07UNn2jQMWW7xxCBp++rHO1KiFWAJxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEcWW3zEcA+gq3ZzfJEG5K3r6VgMB8GA1UdIwQY
MBaAFA5tj9d9rePT+Wy0mTGUjCcpraDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEt
YmQzNWMwNDhiOTMwLzEvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEtYmQzNWMwNDhiOTMw
LzEvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjP6SI/bR
L+crWyiWzA2NV/fw3Xz1cYFYimiSFMMiqksWBVskUYgx4xvQS2sHbm9s0jEi8BwV
/hunjOM3e9KfT2kJu6ykLFINpE9BR8UIXkvEGnnbHml5U1/bg5OVWGfmT1ryU6zI
G3bAhC8H7F0iZfvfwf8aQwLt05mZBUs7s8w2FGtlkLwtzIbidLUDy/mNcoI2eRME
a09VeGHJyDUJHY4Wc9mfcCm4JhcCiY3TO7uOvihJvehSsos/kwid0pQxm/KXgKif
RLPsvcStybQw1gLEdxRb+jVbqYLVhdC1QWdSTvOtIvaxQzECrCeTPaJeWeS7TYuF
obE8+/QpWgGSmA==
-----END CERTIFICATE-----
Generated at Tue Dec 16 06:21:37 2025 by rpki-client