This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
File:                     BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json)
Hash identifier:          rgLmiPrTxgFwrNwB+BujIZDArhT0JTP4ZaaIgCmq07A=
Subject key identifier:   81:82:B7:25:7C:2D:26:CB:8A:70:79:43:E4:D6:5F:26:29:F0:2C:1C
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Certificate issuer:       /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial:       019AF3C01B1DA3C8708FB1DBCAF91BFBEC3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
Manifest number:          186B
Signing time:             Sat 06 Dec 2025 13:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:44 +0000
Files and hashes:         1: 05Tg0UTrs2bglsb4atVMOsvRYS0.roa (hash: VhJZRocRnbLToarK8Wb3G47273juDPcLT4qOnhmDcBI=)
                          2: 0t-N62F11L22RXi8LFNfQS2TvDQ.roa (hash: fZ442BH/ml9qRqaBuzjKJulrHPDUDH1jI4JlwuQOcx8=)
                          3: 5QoLvq-WQhi5T97Feko4QBKbJJw.roa (hash: 7I36hNQka2fyL1Q374RiVWWXD4L+NmzEsqbBYn/pLlM=)
                          4: 6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa (hash: iMyO6h7kJ4PGNfYetznIkMIkkeZszd0XbN1GelrAgSQ=)
                          5: 6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa (hash: JW5KsBQslWl7UMV/MlFKqi9hwR7KoSJt1apypxuQJ5Y=)
                          6: 7qByDki_pKXz-mNnSCgIXHS1XaM.roa (hash: LGUK2l5AC67T1BEV+gQvM8QIjOAp9/K6aMTWDWsKeLc=)
                          7: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: anMMbsisuOakpUesSOdi0ZZJxQ9jq+9T3eF0GfE+F+A=)
                          8: D8-tg2HFfaxtzWtLFVQ2_Tw33X4.roa (hash: W0yzlxsbtTJh4rdHCOnewjEeTldRIygMs+3n84CIFt0=)
                          9: DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa (hash: DlQDXNMbatjiry2Z/1lohQ5Y3aQ3whRLmr2gMIHuKEk=)
                          10: OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa (hash: eJOYvtDNe3FhBqS6Vln19RuplvlaDGsRE5/7K05uBUA=)
                          11: SwcgVnhGmzMWqIm_KFB-KKc0RJo.roa (hash: zsctMXkFR2wIfF/ZZB2QR24YMG6LeLpv/U7aSRBkmeo=)
                          12: UUpwIiVcqDAAnpr6ilJo-OXFSZk.roa (hash: pd9P0IlgabDMIpT9nXZW5tJdWZ7mt1qbF+E2T8hCSg0=)
                          13: mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa (hash: 07jH3RAfwMd/hMMXiDE+Mo4JGAXBcfNHakucWyLpJhk=)
                          14: ptXbX8Zqa-anm64RYPO3MNfDgCc.roa (hash: X1KaAT7AfL8kdySxiP0OJr7eJjZG/di68v2W2Al5EUw=)
                          15: te211TKQz2Pk8IALmy95oPDOlAo.roa (hash: 6m2ob5nsGlLuQ9RcRXpg5CWRSsEUhhwU4klUczhb2D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:1b:1d:a3:c8:70:8f:b1:db:ca:f9:1b:fb:ec:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
        Validity
            Not Before: Dec  6 13:00:44 2025 GMT
            Not After : Dec  7 13:00:44 2025 GMT
        Subject: CN=8182b7257c2d26cb8a707943e4d65f2629f02c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:df:40:86:40:67:a8:99:df:eb:e7:73:04:
                    7f:c5:54:3e:b1:f2:1d:11:ec:13:66:30:38:15:da:
                    b9:39:54:8a:df:f5:6d:9f:c4:c0:2d:57:d9:62:b6:
                    8c:d5:ed:78:42:85:7d:57:0a:f1:f3:f2:04:a9:ac:
                    31:4f:cc:3a:5d:ee:06:85:bc:b3:0e:ee:49:36:1c:
                    96:24:11:68:05:24:97:ee:7d:c8:97:66:3d:cf:52:
                    c3:2b:ce:a2:a1:88:26:bc:8e:b1:e9:4b:ed:e2:89:
                    e4:89:a0:e2:44:17:cc:6c:7e:5e:9e:a9:43:c6:99:
                    48:18:57:84:79:f5:f3:ed:ce:9f:a1:5b:00:bc:08:
                    0e:8c:77:bd:f9:f7:35:7e:a4:d1:0d:23:12:b3:75:
                    d6:1f:f0:ef:52:ae:96:02:5f:35:f1:97:5d:00:8b:
                    f3:ca:c3:38:f1:6f:10:24:6b:8a:0c:cb:8e:7a:54:
                    6d:d7:3e:4a:c7:93:3a:41:e4:98:17:27:3d:67:4e:
                    50:05:00:d2:bf:9d:6c:81:10:7d:9b:27:db:8b:ab:
                    9a:fc:89:7d:f8:d7:ed:18:0c:b7:47:01:09:9e:7f:
                    f3:9a:93:e2:56:ae:93:23:43:d8:37:4a:3f:cd:9e:
                    6b:aa:b0:13:2d:ac:da:ac:d9:bc:79:3e:bc:2f:ef:
                    f1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:82:B7:25:7C:2D:26:CB:8A:70:79:43:E4:D6:5F:26:29:F0:2C:1C
            X509v3 Authority Key Identifier:
                keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:65:2f:06:a8:a0:f4:76:cf:83:73:a6:b2:04:71:d6:a4:cb:
         eb:61:45:89:7c:32:a1:ee:f2:63:d9:f9:53:94:77:d1:cf:0c:
         cd:75:89:41:0a:7d:2a:66:d8:6a:95:43:35:45:a1:c4:98:9f:
         1d:51:a7:21:75:98:bb:d8:4c:60:d1:05:c8:93:e5:1a:91:30:
         bc:cc:ff:9c:7a:e8:60:b4:b7:61:a4:e7:ea:cc:6f:b4:af:d6:
         6d:48:48:18:89:d7:e8:6a:2a:5b:04:b1:9b:fa:02:4d:34:62:
         13:df:03:6d:b8:17:65:d2:5f:4d:1f:94:d7:86:c5:ff:7f:81:
         14:d6:6d:c0:e9:48:c6:b9:f3:15:84:39:16:88:c5:9a:dd:4c:
         69:c1:0f:24:18:31:ca:52:23:13:07:dc:c2:c0:f6:19:20:26:
         0c:c4:b5:f1:89:51:5d:39:1d:af:37:37:9d:75:ad:14:f4:07:
         ca:94:78:40:12:18:cb:de:18:87:f9:83:f3:4f:eb:49:72:25:
         4d:28:e0:48:f1:2c:37:5c:ea:d4:72:f2:73:36:c1:61:9f:25:
         98:64:ca:9a:b6:61:36:37:b9:fd:4b:57:f7:74:c2:f0:3a:c4:
         53:3f:6d:f7:72:68:19:b2:f5:06:5b:29:58:f9:a2:77:46:df:
         39:95:d5:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwBsdo8hwj7Hbyvkb++w/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjUxMjA2MTMwMDQ0WhcNMjUxMjA3MTMwMDQ0WjAzMTEwLwYDVQQD
Eyg4MTgyYjcyNTdjMmQyNmNiOGE3MDc5NDNlNGQ2NWYyNjI5ZjAyYzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbzfQIZAZ6iZ3+vncwR/xVQ+sfId
EewTZjA4Fdq5OVSK3/Vtn8TALVfZYraM1e14QoV9Vwrx8/IEqawxT8w6Xe4Ghbyz
Du5JNhyWJBFoBSSX7n3Il2Y9z1LDK86ioYgmvI6x6Uvt4onkiaDiRBfMbH5enqlD
xplIGFeEefXz7c6foVsAvAgOjHe9+fc1fqTRDSMSs3XWH/DvUq6WAl818ZddAIvz
ysM48W8QJGuKDMuOelRt1z5Kx5M6QeSYFyc9Z05QBQDSv51sgRB9myfbi6ua/Il9
+NftGAy3RwEJnn/zmpPiVq6TI0PYN0o/zZ5rqrATLazarNm8eT68L+/xYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGCtyV8LSbLinB5Q+TWXyYp8CwcMB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2UvBqig
9HbPg3OmsgRx1qTL62FFiXwyoe7yY9n5U5R30c8MzXWJQQp9KmbYapVDNUWhxJif
HVGnIXWYu9hMYNEFyJPlGpEwvMz/nHroYLS3YaTn6sxvtK/WbUhIGInX6GoqWwSx
m/oCTTRiE98DbbgXZdJfTR+U14bF/3+BFNZtwOlIxrnzFYQ5FojFmt1MacEPJBgx
ylIjEwfcwsD2GSAmDMS18YlRXTkdrzc3nXWtFPQHypR4QBIYy94Yh/mD80/rSXIl
TSjgSPEsN1zq1HLyczbBYZ8lmGTKmrZhNje5/UtX93TC8DrEUz9t93JoGbL1Blsp
WPmid0bfOZXVQQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:41:19 2025 by rpki-client