This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
File:                     mecgmoybF2-_Yj7fPuC4IAf8LEA.mft (raw, json)
Hash identifier:          2OOhB6y2czOUib7pWNcQW1Fh0S6uUDqvw6vQ1r33I2k=
Subject key identifier:   3B:11:4D:FC:E4:67:8D:2C:73:F4:AD:FE:09:3C:F2:0C:EF:18:AB:E2
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Certificate issuer:       /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial:       019AF3C09253EEF5C122FFBD656B37F504B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
Manifest number:          176A
Signing time:             Sat 06 Dec 2025 13:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:15 +0000
Files and hashes:         1: 8Yr3TcpHaEQid4NaHBnD3vpLE84.roa (hash: nwAi63b6Bc3AJUqoLYElL2URnBMmDXAT9b7jn7wDHew=)
                          2: WTHFaTG-vHDGY12rV9LFs5D9X7k.roa (hash: bm5Oka8kHzUR4sxMLiir/pSdcS1k+69h+PZO8d7mGHE=)
                          3: fiBm-H6MZf3doc0iQRwx1WfOBtU.roa (hash: lFEwHkm3foVU/vLtJDQi6VsIU7NhnRJ+voXn3vgZZsQ=)
                          4: kQbp2qzFUZPwkhJafZeDm861YjM.roa (hash: Fkm5avfRjVcfP/ZhaPCK6QXfyeZa3X+294m6m4o5WkA=)
                          5: mecgmoybF2-_Yj7fPuC4IAf8LEA.crl (hash: fQv0KwQJlFnHq3lOcjEYq8jzqhpKytNanoJMosoSSGA=)
                          6: ow3qzF69wqcAle7bTyTRDSI-CjU.roa (hash: zPkJxRIh+4adiToqm5Gt9iWworMW5Po/0t9AKhqJJ1k=)
                          7: t1AESqjDY-KutFWdkZGisFfagCE.roa (hash: MNFsAROxqzLCXF98BXrdVFPLVe5mdJi+XK1r2Onz//o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:92:53:ee:f5:c1:22:ff:bd:65:6b:37:f5:04:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
        Validity
            Not Before: Dec  6 13:01:15 2025 GMT
            Not After : Dec  7 13:01:15 2025 GMT
        Subject: CN=3b114dfce4678d2c73f4adfe093cf20cef18abe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:0e:09:92:ce:f1:10:b6:b9:ae:cb:7c:bf:
                    f4:ba:be:ca:29:6e:b1:74:51:32:8c:45:78:b9:51:
                    5e:91:9c:a0:fa:f2:ee:e3:34:36:77:d1:f2:82:99:
                    d2:a8:ff:bf:54:b8:71:4c:29:f9:96:f8:b9:7a:0a:
                    42:36:4c:77:05:a5:29:0f:20:9c:65:32:77:76:db:
                    cd:83:7a:fa:6a:9a:70:0c:f7:d0:57:5d:4f:b5:c8:
                    38:8b:7c:4c:3c:db:b0:c9:c3:74:6f:50:94:f7:5a:
                    84:90:ea:61:45:93:50:5f:d9:94:22:6e:12:b5:7f:
                    1f:92:ee:48:85:bc:5d:c2:74:a7:e6:90:4c:07:e2:
                    87:d0:15:72:e4:36:26:38:8e:87:02:c0:4f:0d:9c:
                    9d:eb:78:14:1a:2e:92:3f:5e:a7:92:0d:c8:be:00:
                    c0:1e:03:db:50:2a:e8:c3:be:2b:70:f3:e7:8a:2a:
                    75:5f:d5:ad:a1:d0:1f:f7:9a:09:16:ec:a3:d6:81:
                    e0:86:4d:f1:64:55:fb:a5:1a:35:8d:03:11:93:ad:
                    11:63:8d:37:9d:7e:34:a0:20:b6:bb:70:b3:82:46:
                    e0:58:f5:ed:d3:43:1b:89:db:86:a8:91:90:7c:5d:
                    39:eb:f6:f4:74:e6:b6:d5:08:1d:8d:ba:1c:b8:fe:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:11:4D:FC:E4:67:8D:2C:73:F4:AD:FE:09:3C:F2:0C:EF:18:AB:E2
            X509v3 Authority Key Identifier:
                keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5e:53:ec:d8:a0:93:87:88:ab:dd:90:3e:34:ef:fb:ad:1d:
         cd:64:33:8a:8a:fb:ee:2d:d4:e4:71:5f:6f:e5:7c:bc:ed:6c:
         e1:80:2b:ae:cc:7f:90:34:82:ba:f7:6e:61:de:58:66:1c:6a:
         1f:80:b8:12:34:41:29:6d:f1:3b:d8:d1:11:6d:48:26:d1:f2:
         ac:0b:0b:2b:da:f1:5e:53:02:cf:19:e9:72:a9:75:31:21:4a:
         c9:b0:a5:92:9c:2c:5a:e8:c4:37:e0:12:47:f4:99:3e:6e:58:
         c3:77:3b:15:f4:04:03:9b:2f:5f:b2:f6:c1:63:ab:a4:e5:a6:
         5c:20:be:e7:6d:fb:17:3c:8b:97:09:bb:55:4d:b0:db:47:cc:
         e1:81:74:c1:1d:64:22:d6:76:b7:22:6d:aa:c0:78:da:54:c0:
         3f:c5:9e:84:f1:cd:dc:1f:52:00:7b:19:0d:6f:14:e5:15:56:
         a7:b4:a7:f6:93:d4:69:99:8e:b9:03:6f:6c:7f:7c:1c:3e:cd:
         b4:7b:e4:e0:1a:8a:7d:22:84:94:30:3b:b3:44:5f:d8:53:ea:
         66:99:f9:1b:c7:7a:d0:44:f0:89:28:0d:42:16:30:c0:39:99:
         be:16:43:01:4b:3b:af:d2:4f:0f:3e:d2:1e:32:bb:36:fc:0f:
         58:9a:03:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwJJT7vXBIv+9ZWs39QS4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTcyMDlhOGM5YjE3NmZiZjYyM2VkZjNlZTBiODIwMDdm
YzJjNDAwHhcNMjUxMjA2MTMwMTE1WhcNMjUxMjA3MTMwMTE1WjAzMTEwLwYDVQQD
EygzYjExNGRmY2U0Njc4ZDJjNzNmNGFkZmUwOTNjZjIwY2VmMThhYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ8OCZLO8RC2ua7LfL/0ur7KKW6x
dFEyjEV4uVFekZyg+vLu4zQ2d9HygpnSqP+/VLhxTCn5lvi5egpCNkx3BaUpDyCc
ZTJ3dtvNg3r6appwDPfQV11Ptcg4i3xMPNuwycN0b1CU91qEkOphRZNQX9mUIm4S
tX8fku5IhbxdwnSn5pBMB+KH0BVy5DYmOI6HAsBPDZyd63gUGi6SP16nkg3IvgDA
HgPbUCrow74rcPPniip1X9WtodAf95oJFuyj1oHghk3xZFX7pRo1jQMRk60RY403
nX40oCC2u3CzgkbgWPXt00MbiduGqJGQfF056/b0dOa21QgdjbocuP6UDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsRTfzkZ40sc/St/gk88gzvGKviMB8GA1UdIwQY
MBaAFJnnIJqMmxdvv2I+3z7guCAH/CxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUt
YjJkY2MxODYzZThiLzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUtYjJkY2MxODYzZThi
LzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMl5T7Nig
k4eIq92QPjTv+60dzWQzior77i3U5HFfb+V8vO1s4YArrsx/kDSCuvduYd5YZhxq
H4C4EjRBKW3xO9jREW1IJtHyrAsLK9rxXlMCzxnpcql1MSFKybClkpwsWujEN+AS
R/SZPm5Yw3c7FfQEA5svX7L2wWOrpOWmXCC+5237FzyLlwm7VU2w20fM4YF0wR1k
ItZ2tyJtqsB42lTAP8WehPHN3B9SAHsZDW8U5RVWp7Sn9pPUaZmOuQNvbH98HD7N
tHvk4BqKfSKElDA7s0Rf2FPqZpn5G8d60ETwiSgNQhYwwDmZvhZDAUs7r9JPDz7S
HjK7NvwPWJoDQg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:04:45 2025 by rpki-client