This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          5lhQ2k80Qe4eB8F2ygqUO7O5YeSjA27nwqSeQv8MIkI=
Subject key identifier:   7B:DC:03:95:CA:0F:AD:6A:8C:CD:FC:36:4A:C0:43:05:B3:2D:43:63
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       019AF0BF157B48A04E50236FA8A26EE41ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          177B
Signing time:             Fri 05 Dec 2025 23:00:45 +0000
Manifest this update:     Fri 05 Dec 2025 23:00:45 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:45 +0000
Files and hashes:         1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=)
                          2: 2R3GYbP40kVDselx86gqI7AglgU.roa (hash: XLRcU1O670injcbZzqHBcbGiFZGa7M1Rl5LjE453GkQ=)
                          3: FIfoAXaxpYLmDe5rWtbqnwoZyG4.roa (hash: McAx354GUPfDHZvpRDVZ7JLef+rbJmvzLHPw8ZCGP3g=)
                          4: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=)
                          5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=)
                          6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=)
                          7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: gH/Iu8CpI7dDsVAk6rSGkfVbT127EODuh6FDwLhShcE=)
                          8: qWZ64G_gV6r1a1VTWhYwuR9ilIk.roa (hash: SNBGanOggO8FdGYV/GuiVAQ6b34zKk2VTZJhKLFl+04=)
                          9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=)
                          10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:15:7b:48:a0:4e:50:23:6f:a8:a2:6e:e4:1a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Dec  5 23:00:45 2025 GMT
            Not After : Dec  6 23:00:45 2025 GMT
        Subject: CN=7bdc0395ca0fad6a8ccdfc364ac04305b32d4363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:35:5b:12:06:47:6a:ac:ba:95:d2:57:3c:
                    61:ec:67:94:8c:92:3e:5c:53:ef:7d:f6:af:57:18:
                    06:e5:08:a5:d4:c1:e9:c9:ed:b0:b5:20:bf:50:b2:
                    4f:74:5b:60:25:04:3e:93:3d:e3:c1:26:f8:a3:cb:
                    b2:c3:0b:ba:33:fb:a9:90:44:33:19:64:be:db:22:
                    8e:13:0f:00:2d:96:75:f2:5f:da:9f:d6:19:b4:2b:
                    42:3a:18:2e:6f:6e:60:6e:c2:31:02:52:d3:b7:ef:
                    3c:5a:1b:ff:7d:5c:3c:cd:59:a0:ee:10:71:04:00:
                    17:db:5a:8b:ce:fd:32:6e:21:67:d2:da:f2:ab:82:
                    bc:73:e6:62:a0:a6:ee:4d:1e:ad:ea:9a:8c:f2:17:
                    fb:b3:3a:c1:d3:57:6d:60:69:9b:32:e7:83:31:81:
                    79:49:7a:93:9c:5e:63:97:6c:e7:a9:02:23:81:92:
                    04:50:32:98:c8:91:4c:fd:8e:d3:fc:2e:a1:8c:c0:
                    39:91:0f:bc:f5:e1:9d:24:7f:27:9f:44:75:da:52:
                    75:9d:dc:67:0e:24:82:c2:aa:4c:6b:47:85:54:ee:
                    86:bf:93:22:e6:62:80:c3:a7:b7:57:d0:42:96:59:
                    cd:0c:1e:56:48:74:97:58:70:fd:70:e5:58:f1:59:
                    a6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DC:03:95:CA:0F:AD:6A:8C:CD:FC:36:4A:C0:43:05:B3:2D:43:63
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:8c:84:fa:b3:2d:7f:10:ee:bc:bd:3e:09:32:02:6a:fc:
         29:c1:2b:ee:c8:cd:e2:39:23:36:b6:3b:ec:e4:9c:42:9e:29:
         82:c7:96:54:32:5e:c9:fa:8b:2d:75:86:7a:f6:3c:0d:b1:81:
         c7:cb:f3:83:65:e3:75:b7:04:c1:06:c3:5f:4e:53:4c:7c:59:
         0e:c3:4d:2f:d1:5b:f6:f5:21:a5:8f:69:d5:91:df:8a:ff:ec:
         42:46:45:e6:48:78:09:a2:6c:47:df:84:40:3d:0c:b0:ea:56:
         33:e4:62:2b:da:78:9e:fc:68:4a:b9:55:37:5e:26:30:70:26:
         0f:4e:6c:e8:1e:d6:ea:45:cd:f1:64:1e:57:9e:89:0f:bc:5b:
         27:4c:e2:06:54:f1:af:c8:ed:47:ae:5c:6d:37:6e:7e:95:75:
         13:80:42:0e:37:77:b2:dd:37:05:64:8b:70:a2:10:0f:89:03:
         ec:f6:64:1e:11:b1:27:2e:a4:fb:bf:de:26:0b:d5:d7:35:06:
         20:dc:03:08:f5:8b:8b:bc:ea:25:40:77:16:25:f9:12:1c:f4:
         3b:82:04:d3:6e:cf:2a:83:2a:ae:e4:72:72:42:cf:49:0a:78:
         77:42:2e:b1:c7:a0:82:60:b3:f1:17:1f:3c:4b:1b:a1:ca:36:
         c7:bf:63:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwvxV7SKBOUCNvqKJu5Bq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk
Y2UyMDUwHhcNMjUxMjA1MjMwMDQ1WhcNMjUxMjA2MjMwMDQ1WjAzMTEwLwYDVQQD
Eyg3YmRjMDM5NWNhMGZhZDZhOGNjZGZjMzY0YWMwNDMwNWIzMmQ0MzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjg1WxIGR2qsupXSVzxh7GeUjJI+
XFPvffavVxgG5Qil1MHpye2wtSC/ULJPdFtgJQQ+kz3jwSb4o8uywwu6M/upkEQz
GWS+2yKOEw8ALZZ18l/an9YZtCtCOhgub25gbsIxAlLTt+88Whv/fVw8zVmg7hBx
BAAX21qLzv0ybiFn0tryq4K8c+ZioKbuTR6t6pqM8hf7szrB01dtYGmbMueDMYF5
SXqTnF5jl2znqQIjgZIEUDKYyJFM/Y7T/C6hjMA5kQ+89eGdJH8nn0R12lJ1ndxn
DiSCwqpMa0eFVO6Gv5Mi5mKAw6e3V9BCllnNDB5WSHSXWHD9cOVY8VmmPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvcA5XKD61qjM38NkrAQwWzLUNjMB8GA1UdIwQY
MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et
ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx
LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5KMhPqz
LX8Q7ry9PgkyAmr8KcEr7sjN4jkjNrY77OScQp4pgseWVDJeyfqLLXWGevY8DbGB
x8vzg2XjdbcEwQbDX05TTHxZDsNNL9Fb9vUhpY9p1ZHfiv/sQkZF5kh4CaJsR9+E
QD0MsOpWM+RiK9p4nvxoSrlVN14mMHAmD05s6B7W6kXN8WQeV56JD7xbJ0ziBlTx
r8jtR65cbTdufpV1E4BCDjd3st03BWSLcKIQD4kD7PZkHhGxJy6k+7/eJgvV1zUG
INwDCPWLi7zqJUB3FiX5Ehz0O4IE027PKoMqruRyckLPSQp4d0IusceggmCz8Rcf
PEsboco2x79jLg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:54 2025 by rpki-client