This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File:                     H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier:          iV3zhrVOLQd55JvP8w0jGVtyYhjpplb7D6F5I30/SoQ=
Subject key identifier:   55:93:26:68:B1:CC:4B:9B:C4:F0:B1:94:18:5E:11:84:5E:2F:0F:87
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer:       /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial:       019B2D7905C550CB7698F1D88034AB6E858B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number:          179E
Signing time:             Wed 17 Dec 2025 18:01:04 +0000
Manifest this update:     Wed 17 Dec 2025 18:01:04 +0000
Manifest next update:     Thu 18 Dec 2025 18:01:04 +0000
Files and hashes:         1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=)
                          2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=)
                          3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=)
                          4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=)
                          5: 9-BujRyAiG67GPBXPyZf0-ILLF4.roa (hash: KkFtXt5WRV9VBYy3IBvnda5CkZe910L5RSJzKX/5FFY=)
                          6: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=)
                          7: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=)
                          8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=)
                          9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=)
                          10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=)
                          11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: VnTEXTSUsXuvcMByaZA121HH6C65mvnhwhduLcbcD0s=)
                          12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=)
                          13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=)
                          14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=)
                          15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=)
                          16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=)
                          17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=)
                          18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=)
                          19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=)
                          20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=)
                          21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=)
                          22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=)
                          23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=)
                          24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=)
                          25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=)
                          26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=)
                          27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=)
                          28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=)
                          29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=)
                          30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=)
                          31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=)
                          32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=)
                          33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=)
                          34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 18:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:79:05:c5:50:cb:76:98:f1:d8:80:34:ab:6e:85:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
        Validity
            Not Before: Dec 17 18:01:04 2025 GMT
            Not After : Dec 18 18:01:04 2025 GMT
        Subject: CN=55932668b1cc4b9bc4f0b194185e11845e2f0f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fc:1d:54:9d:16:91:8b:3e:58:c7:13:36:13:
                    09:42:85:c0:51:56:fe:be:f2:85:d7:2b:2f:4c:d6:
                    9a:cd:58:36:c2:78:40:a7:88:d0:d4:2f:98:c6:18:
                    09:37:4c:b3:2c:dc:21:87:e1:e8:6c:69:63:b2:78:
                    e9:95:b7:31:6f:1e:02:fd:82:21:a0:cd:29:fb:2e:
                    6f:ba:98:50:14:d0:86:38:33:5b:79:be:e8:2f:88:
                    57:a1:d5:a4:54:af:6f:e5:f2:d0:47:00:63:29:c4:
                    1f:85:af:66:79:e8:71:3d:12:6a:94:37:4c:34:5e:
                    32:28:5d:87:76:dc:bd:26:6d:45:ba:69:f6:ec:b5:
                    ad:93:92:64:db:1c:8d:c5:bb:23:f1:4f:fe:a8:68:
                    5f:db:73:43:9e:7f:2b:a7:76:b9:fb:e3:23:72:39:
                    9f:38:29:53:24:aa:c6:31:67:9d:d4:24:c9:17:0b:
                    eb:b2:35:7a:f6:8d:74:9e:ad:13:b2:12:ef:16:51:
                    ef:1e:75:8f:7d:2e:37:ac:ba:10:64:88:4c:98:64:
                    42:f6:35:be:65:22:cf:3e:7d:52:58:ab:e8:af:f2:
                    cf:9d:ae:99:42:ab:14:88:81:de:94:ba:d9:23:2e:
                    4f:e9:fd:07:6f:b0:8f:81:2a:ec:6d:3a:29:f8:89:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:93:26:68:B1:CC:4B:9B:C4:F0:B1:94:18:5E:11:84:5E:2F:0F:87
            X509v3 Authority Key Identifier:
                keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ec:99:29:5a:c3:3e:9e:4e:e8:5f:02:ec:67:ad:09:04:07:
         5d:5d:f6:fe:90:3d:50:22:d3:11:a7:03:a4:c6:ee:08:4a:f8:
         50:f4:9a:c8:82:31:3c:24:48:18:e6:29:6e:cb:0d:c5:5a:0e:
         ca:11:24:9c:dd:3b:2e:24:3a:bf:f5:ba:21:3d:65:62:82:34:
         b9:f9:52:ff:1f:37:26:f1:e3:73:dc:72:e1:85:cb:8a:c4:57:
         d8:87:c1:b2:e5:4e:71:bb:27:4d:5b:2f:79:44:d4:cc:fa:3b:
         3d:d3:52:c2:11:ca:57:8f:a1:5e:7c:3b:63:69:0d:38:96:e3:
         26:d5:e0:c4:5e:35:96:a1:5c:7a:33:2e:f2:bb:6d:1b:39:e7:
         47:56:b3:1f:bb:d6:e0:6b:a6:65:36:1d:aa:b7:b3:47:a0:10:
         28:33:db:7f:f7:5a:0c:a0:81:3b:14:f9:90:14:f5:42:f0:77:
         4d:1a:3c:9d:cc:b3:5a:d6:45:37:b4:64:92:bc:d4:15:f5:10:
         c2:f1:1a:27:e7:5b:14:a8:83:4c:36:e5:bf:00:34:90:0a:f7:
         34:79:27:fd:9d:da:dc:9f:42:8b:a7:eb:d7:72:9f:76:49:b3:
         71:19:31:c6:13:c4:ef:cc:f7:d8:e4:9f:03:f1:24:69:90:e7:
         61:8d:11:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsteQXFUMt2mPHYgDSrboWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx
NzFmYmEwHhcNMjUxMjE3MTgwMTA0WhcNMjUxMjE4MTgwMTA0WjAzMTEwLwYDVQQD
Eyg1NTkzMjY2OGIxY2M0YjliYzRmMGIxOTQxODVlMTE4NDVlMmYwZjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPwdVJ0WkYs+WMcTNhMJQoXAUVb+
vvKF1ysvTNaazVg2wnhAp4jQ1C+YxhgJN0yzLNwhh+HobGljsnjplbcxbx4C/YIh
oM0p+y5vuphQFNCGODNbeb7oL4hXodWkVK9v5fLQRwBjKcQfha9meehxPRJqlDdM
NF4yKF2Hdty9Jm1Fumn27LWtk5Jk2xyNxbsj8U/+qGhf23NDnn8rp3a5++Mjcjmf
OClTJKrGMWed1CTJFwvrsjV69o10nq0TshLvFlHvHnWPfS43rLoQZIhMmGRC9jW+
ZSLPPn1SWKvor/LPna6ZQqsUiIHelLrZIy5P6f0Hb7CPgSrsbTop+InRbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWTJmixzEubxPCxlBheEYReLw+HMB8GA1UdIwQY
MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt
MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz
LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieyZKVrD
Pp5O6F8C7GetCQQHXV32/pA9UCLTEacDpMbuCEr4UPSayIIxPCRIGOYpbssNxVoO
yhEknN07LiQ6v/W6IT1lYoI0uflS/x83JvHjc9xy4YXLisRX2IfBsuVOcbsnTVsv
eUTUzPo7PdNSwhHKV4+hXnw7Y2kNOJbjJtXgxF41lqFcejMu8rttGznnR1azH7vW
4GumZTYdqrezR6AQKDPbf/daDKCBOxT5kBT1QvB3TRo8ncyzWtZFN7RkkrzUFfUQ
wvEaJ+dbFKiDTDblvwA0kAr3NHkn/Z3a3J9Ci6fr13KfdkmzcRkxxhPE78z32OSf
A/EkaZDnYY0Rzw==
-----END CERTIFICATE-----
Generated at Wed Dec 17 22:22:20 2025 by rpki-client