This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
File:                     05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json)
Hash identifier:          +LnCHCu0cAxRky6SZN5DqBiqCWHWqrw6bBWe9dHMtN0=
Subject key identifier:   7A:95:AB:73:1C:6B:86:C6:99:02:C2:6A:E0:48:5F:7C:45:A2:E3:BC
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Certificate issuer:       /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial:       019B2D79838EEC9534CF3A176573111B4A18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
Manifest number:          177F
Signing time:             Wed 17 Dec 2025 18:01:36 +0000
Manifest this update:     Wed 17 Dec 2025 18:01:36 +0000
Manifest next update:     Thu 18 Dec 2025 18:01:36 +0000
Files and hashes:         1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: TAMEB6A4LI+ZMxNShMnPK2To/nwQU3mXNlZ+BCFS9vY=)
                          2: ERfV3_AHrLYigXx8U5FimrME4a4.roa (hash: kvXysfA19vdf9ZpdNwdZyFu3Veq/rlxvog9k5IItPng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 18:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:79:83:8e:ec:95:34:cf:3a:17:65:73:11:1b:4a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
        Validity
            Not Before: Dec 17 18:01:36 2025 GMT
            Not After : Dec 18 18:01:36 2025 GMT
        Subject: CN=7a95ab731c6b86c69902c26ae0485f7c45a2e3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:e7:42:eb:0e:8a:45:8e:21:f5:b3:32:2f:
                    b0:e8:c0:7d:c8:94:c6:1f:c5:1b:2d:0d:c9:2d:0b:
                    5e:85:ff:79:79:42:44:2f:cc:18:63:05:f3:2d:d3:
                    95:db:67:89:7b:0f:27:09:86:b8:3a:fa:3e:34:6c:
                    eb:f0:93:a5:e9:ac:1d:06:a6:28:16:9f:50:3c:60:
                    bb:41:96:1d:1f:35:b7:3b:d8:df:ca:c4:36:62:77:
                    aa:8b:e2:54:9e:d1:70:b0:18:88:80:49:27:bd:b1:
                    1b:3c:18:29:4e:d1:02:2a:af:14:64:a6:8e:53:c4:
                    b3:29:4d:3d:db:56:3a:91:18:b9:f0:37:3a:ca:cc:
                    5d:b0:a6:65:7f:22:80:5a:17:b7:1c:ba:ff:d2:c6:
                    13:08:62:a8:3d:97:36:d6:c5:7a:3a:ec:59:f8:ba:
                    f4:f4:56:d9:b5:a9:8d:db:6d:ad:a5:ee:91:3c:3c:
                    04:01:b4:64:9f:d9:73:a7:aa:db:34:5e:33:54:80:
                    a5:ac:71:3a:a3:8f:af:63:61:28:8e:46:d9:98:27:
                    b3:c2:ae:48:dd:4c:bf:2b:b3:3c:ba:9b:5e:f3:63:
                    1e:1e:38:6b:3e:a2:ad:d1:a5:9d:73:84:39:7c:76:
                    e0:eb:75:fa:c5:0a:28:eb:f8:0d:2d:0e:7b:e4:b1:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:95:AB:73:1C:6B:86:C6:99:02:C2:6A:E0:48:5F:7C:45:A2:E3:BC
            X509v3 Authority Key Identifier:
                keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:90:5b:97:96:6f:7a:c5:8d:bc:5d:15:ac:37:59:3e:b9:80:
         39:eb:02:4c:02:24:0d:0b:3f:b1:3d:7d:88:f7:eb:29:4f:2b:
         6f:29:48:a6:2b:b7:ca:f0:43:f0:c0:fe:1a:37:32:78:b9:46:
         f8:c2:54:86:3c:49:c7:82:3c:fa:49:ad:d6:d6:4f:df:0f:89:
         5e:40:8c:b6:2b:96:13:6f:6f:61:f7:df:8a:43:a0:45:b5:71:
         b8:7d:91:4b:d2:fa:a5:86:96:b4:48:2e:a2:25:7c:70:2f:f2:
         dc:8b:e5:af:06:1c:1d:39:21:56:a5:4b:06:b8:f9:f5:65:c0:
         a3:2f:e4:d5:35:c6:13:a4:4a:61:41:67:78:af:63:1b:f5:85:
         96:d9:a6:0d:a3:24:e4:84:90:9d:34:bc:70:d1:16:26:45:1a:
         ea:92:23:09:d7:28:c6:2a:2f:ee:f1:ba:f3:ba:62:75:ca:c8:
         4c:7b:43:30:70:67:da:ce:48:d4:a4:f8:a8:3f:59:6f:76:0f:
         15:5e:db:40:60:aa:a0:a0:46:e9:57:85:f3:5c:f7:d6:87:be:
         ba:54:42:0a:36:a1:61:32:c0:a2:38:9c:3d:58:8c:b5:02:c3:
         c3:e3:54:e4:07:90:38:b8:86:ae:8b:40:8b:41:d1:6c:f7:6c:
         da:90:4d:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsteYOO7JU0zzoXZXMRG0oYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTJmOGZjOTg2ZTlmMWQzZTRiZjA1ZmNhOTY1OWEwODgx
ZDcwMDMwHhcNMjUxMjE3MTgwMTM2WhcNMjUxMjE4MTgwMTM2WjAzMTEwLwYDVQQD
Eyg3YTk1YWI3MzFjNmI4NmM2OTkwMmMyNmFlMDQ4NWY3YzQ1YTJlM2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdjnQusOikWOIfWzMi+w6MB9yJTG
H8UbLQ3JLQtehf95eUJEL8wYYwXzLdOV22eJew8nCYa4Ovo+NGzr8JOl6awdBqYo
Fp9QPGC7QZYdHzW3O9jfysQ2Yneqi+JUntFwsBiIgEknvbEbPBgpTtECKq8UZKaO
U8SzKU0921Y6kRi58Dc6ysxdsKZlfyKAWhe3HLr/0sYTCGKoPZc21sV6OuxZ+Lr0
9FbZtamN222tpe6RPDwEAbRkn9lzp6rbNF4zVIClrHE6o4+vY2EojkbZmCezwq5I
3Uy/K7M8upte82MeHjhrPqKt0aWdc4Q5fHbg63X6xQoo6/gNLQ575LG3hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqVq3Mca4bGmQLCauBIX3xFouO8MB8GA1UdIwQY
MBaAFNOS+PyYbp8dPkvwX8qWWaCIHXADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yZDBiNDctZjAyNi00Zjk4LTlmZTkt
MWJiNzE2NDI3Y2E5LzEvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yZDBiNDctZjAyNi00Zjk4LTlmZTktMWJiNzE2NDI3Y2E5
LzEvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapBbl5Zv
esWNvF0VrDdZPrmAOesCTAIkDQs/sT19iPfrKU8rbylIpiu3yvBD8MD+GjcyeLlG
+MJUhjxJx4I8+kmt1tZP3w+JXkCMtiuWE29vYfffikOgRbVxuH2RS9L6pYaWtEgu
oiV8cC/y3IvlrwYcHTkhVqVLBrj59WXAoy/k1TXGE6RKYUFneK9jG/WFltmmDaMk
5ISQnTS8cNEWJkUa6pIjCdcoxiov7vG687pidcrITHtDMHBn2s5I1KT4qD9Zb3YP
FV7bQGCqoKBG6VeF81z31oe+ulRCCjahYTLAojicPViMtQLDw+NU5AeQOLiGrotA
i0HRbPds2pBN4g==
-----END CERTIFICATE-----
Generated at Wed Dec 17 21:05:40 2025 by rpki-client