This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File:                     RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier:          Ejb46dTfbeHYyM+ETXd60r7w5/zSYbAB6Trzqmo+v4Q=
Subject key identifier:   6E:22:D8:ED:D9:42:44:3C:EC:5C:9A:65:0E:5E:E3:5F:45:14:36:15
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer:       /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial:       019B41A4B50E3B00659C7E5EA233B6828101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number:          178E
Signing time:             Sun 21 Dec 2025 16:01:11 +0000
Manifest this update:     Sun 21 Dec 2025 16:01:11 +0000
Manifest next update:     Mon 22 Dec 2025 16:01:11 +0000
Files and hashes:         1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=)
                          2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: ngbxaVnHByBRkBgK6FV5qu55jyeOWAiw0qWFq+4DmEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:41:a4:b5:0e:3b:00:65:9c:7e:5e:a2:33:b6:82:81:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
        Validity
            Not Before: Dec 21 16:01:11 2025 GMT
            Not After : Dec 22 16:01:11 2025 GMT
        Subject: CN=6e22d8edd942443cec5c9a650e5ee35f45143615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:ea:ae:07:34:01:99:8c:b3:b6:3f:b1:88:
                    92:72:86:29:c2:cd:ed:ea:90:aa:0c:1a:69:e8:b1:
                    2a:94:73:37:e0:c4:dc:66:01:f1:66:5a:6e:e6:62:
                    3e:46:cc:b2:5e:6d:86:c7:73:91:69:76:dd:62:10:
                    01:4e:3f:7e:2c:fe:a8:63:d2:fa:53:e8:f0:15:58:
                    a4:28:83:6f:49:09:ed:2d:e0:30:07:06:12:ad:6c:
                    33:fc:00:b0:90:9f:f8:07:91:e7:eb:2e:62:aa:d9:
                    b1:3d:24:3d:c4:24:8e:05:3b:f6:2b:87:5b:a9:0d:
                    fe:04:c7:4d:26:a9:e4:00:37:20:ee:14:9d:b6:9c:
                    67:ee:f5:7d:1c:04:cb:b4:0b:78:86:13:ba:1a:21:
                    7b:18:6e:ad:c7:eb:d7:b5:7b:e0:ef:fa:fb:e9:c3:
                    21:e9:a0:88:9d:b3:e8:f6:f6:b7:04:cd:7d:a2:44:
                    af:ae:44:60:05:9d:b7:5d:9e:5f:03:ae:41:9c:d9:
                    c8:d9:0e:ea:c4:ba:86:db:7e:2c:5f:34:55:4e:f8:
                    07:b1:8d:2c:e6:89:a6:c4:99:d5:80:28:78:88:74:
                    f2:db:49:0e:e6:fc:bb:25:37:ee:00:5c:2c:fe:56:
                    16:4c:47:48:08:ad:35:5d:2a:3c:d5:52:af:5b:77:
                    e4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:22:D8:ED:D9:42:44:3C:EC:5C:9A:65:0E:5E:E3:5F:45:14:36:15
            X509v3 Authority Key Identifier:
                keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:45:2b:1d:ea:4c:44:af:e4:cf:e7:9d:de:15:d8:1f:37:0e:
         d7:44:e6:76:e3:4d:77:6d:34:71:de:0e:8c:6a:3c:15:18:6f:
         5f:7c:95:cd:59:e2:07:70:18:c3:83:0e:1d:43:10:07:45:80:
         e3:72:ed:72:03:80:b9:9f:ee:86:aa:64:d7:c0:fd:47:45:c3:
         14:6b:13:95:da:ed:0e:5f:09:b7:97:a4:3c:d5:35:2a:3f:6e:
         91:68:fd:1c:80:14:5d:c4:1a:8e:9b:64:0e:68:a4:ce:5d:a3:
         23:8c:6e:59:ea:73:50:02:b3:4f:f0:be:e9:ac:89:fb:26:cc:
         a4:7f:fd:a4:45:57:8f:5f:30:52:23:b6:1e:82:d1:5f:77:9e:
         97:09:35:fc:d3:9d:81:24:4b:1a:27:fc:22:d1:20:50:53:7e:
         2c:ad:fb:93:2a:f6:df:7e:78:f1:c5:0e:50:c9:ec:73:4c:e2:
         e7:a6:4c:1d:9a:ed:42:08:cc:a3:14:3f:97:d0:86:c6:6a:40:
         8c:6b:33:13:d0:69:89:57:06:66:54:1a:ce:3b:42:85:e0:69:
         bb:5b:23:6c:96:df:16:c3:47:91:e9:b1:00:8e:3f:25:2f:bc:
         3b:58:51:4b:64:2f:5e:9b:57:ae:93:d8:23:c7:ff:f3:f3:78:
         ca:be:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:58:02 2025 by rpki-client