This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
File:                     F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft (raw, json)
Hash identifier:          zGOI0IalOsMqQnp2UthBGyTejCqJitjg3evXyG14frI=
Subject key identifier:   25:2B:05:CE:A0:5A:1C:B8:68:C1:66:9D:5D:5E:5A:B9:74:97:4D:9A
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Certificate issuer:       /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial:       019B4DE02531277F55191E75E30CCE2E11CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
Manifest number:          12D0
Signing time:             Wed 24 Dec 2025 01:01:33 +0000
Manifest this update:     Wed 24 Dec 2025 01:01:33 +0000
Manifest next update:     Thu 25 Dec 2025 01:01:33 +0000
Files and hashes:         1: F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl (hash: Ob1RbAeMli5+vVnYkgh4r0Hz3QZ15zt7k+h9hoOabL4=)
                          2: HBsNTRQXWcPQbzWUzkWwFIJ-NiY.roa (hash: 8k01+u0bD23piBX5SKFalRiJFYskfuHtxEUxOGIwUkM=)
                          3: fGbepzb9A-L4azmxjWxp1naTF6A.roa (hash: YEQd3tPPpxJq6x0hqnOfDaa3PQq/39+zTmClKwCJDxI=)
                          4: i5Z-UkQ8_GCMdTDvdRVzZJd1s3E.roa (hash: hFp0HQZXTf6e9rwGzdmb+2RH6Ma6X1h19nbiCrFmx6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4d:e0:25:31:27:7f:55:19:1e:75:e3:0c:ce:2e:11:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
        Validity
            Not Before: Dec 24 01:01:33 2025 GMT
            Not After : Dec 25 01:01:33 2025 GMT
        Subject: CN=252b05cea05a1cb868c1669d5d5e5ab974974d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:dd:8d:e5:8c:58:2b:6f:08:6e:2e:68:52:
                    af:a0:01:fd:92:cd:61:1a:be:55:b0:0f:7f:c6:bc:
                    86:d6:16:aa:1e:4d:8e:b8:fa:64:86:f5:69:d1:df:
                    d4:ff:96:a7:83:a8:c3:48:df:7e:1f:60:b5:ec:20:
                    0d:8c:9f:a9:5c:b7:dd:61:3d:2e:59:85:4a:ec:d6:
                    c4:b0:fc:7c:57:6a:29:56:36:a3:38:c1:15:a6:98:
                    cb:a9:d6:42:83:ce:33:f3:b9:7a:a1:3e:e0:57:f5:
                    f8:27:f0:9f:19:99:3d:c7:57:79:6f:05:22:7f:ec:
                    fe:05:bb:38:02:82:ea:c5:27:92:90:b3:5d:80:44:
                    d4:85:98:e6:7f:2a:83:85:4f:8b:6c:b5:df:3d:ea:
                    4e:31:70:c1:de:95:fc:30:2d:4d:a6:3d:1a:86:bf:
                    ed:e3:79:e5:e2:b3:fa:72:eb:70:34:ec:33:e4:bd:
                    43:e0:1c:ea:0c:5e:54:46:51:54:43:0e:7e:26:23:
                    af:f1:34:16:5c:c9:13:43:8e:62:6d:c4:5d:3b:84:
                    81:79:7b:62:7f:4e:d3:0d:67:bc:e6:1f:ab:18:fb:
                    33:7d:d9:8a:22:11:e7:fe:9d:ea:e2:fd:3b:85:da:
                    3d:96:67:a9:6f:f7:3f:1d:47:98:0d:3c:c1:88:3d:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2B:05:CE:A0:5A:1C:B8:68:C1:66:9D:5D:5E:5A:B9:74:97:4D:9A
            X509v3 Authority Key Identifier:
                keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:15:77:af:98:56:60:bf:42:4e:1f:bc:9a:83:30:60:d4:76:
         57:cd:a6:3c:86:c2:05:a6:b0:8d:d7:de:dd:ef:52:e9:0c:c1:
         d0:0e:c2:4a:1c:95:68:00:c0:1f:0a:0e:1e:c1:1e:60:e1:83:
         67:07:dd:87:ef:3c:da:80:72:4f:ee:77:b2:b5:e0:7e:fe:de:
         f1:73:c8:42:52:7a:ca:6f:7e:ae:ea:99:4d:99:4a:ba:74:41:
         26:f7:fd:99:6c:f1:0b:b7:ba:bf:66:c5:a0:c5:21:02:76:69:
         93:bc:ce:a9:59:3d:1f:b8:9d:d6:75:1c:74:47:7a:88:a8:72:
         3a:b1:44:6b:4a:2b:b6:e0:a6:d1:f3:8c:9d:11:35:ee:1f:c0:
         ec:55:af:ca:fe:b0:53:c9:4c:64:5c:bd:ff:72:21:7b:c6:43:
         12:84:8a:6f:80:88:d9:b3:b4:5b:01:58:18:6d:3a:6d:9b:7a:
         2f:b0:96:da:52:4d:a3:ee:71:f0:c3:74:e4:71:99:ac:21:e6:
         4f:a6:4a:32:f0:52:b0:30:4b:94:95:f3:af:f0:c4:75:1f:7d:
         19:9f:7a:64:72:dd:d5:aa:1a:5b:31:a8:cf:ff:d8:fb:44:75:
         e9:49:c8:50:29:60:ab:35:f7:b4:f8:c5:22:ce:c0:ea:ff:ce:
         cc:c0:bd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:37:56 2025 by rpki-client