This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File:                     1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier:          I3BAK7Rd0TBNd9OfGVO0LQT2/Ht5PUuZCJnj1fEEosY=
Subject key identifier:   82:FF:5C:BE:FA:5C:67:ED:4A:09:5A:11:8C:68:29:20:5B:29:3B:6E
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer:       /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial:       019B45136FCD89E4BA5B118B48FA9226F150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number:          178C
Signing time:             Mon 22 Dec 2025 08:01:00 +0000
Manifest this update:     Mon 22 Dec 2025 08:01:00 +0000
Manifest next update:     Tue 23 Dec 2025 08:01:00 +0000
Files and hashes:         1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: vuc4Lh56l7yCjyLTq1WRtRhp5OitcHE3LCvDMkB1IPo=)
                          2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=)
                          3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:45:13:6f:cd:89:e4:ba:5b:11:8b:48:fa:92:26:f1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
        Validity
            Not Before: Dec 22 08:01:00 2025 GMT
            Not After : Dec 23 08:01:00 2025 GMT
        Subject: CN=82ff5cbefa5c67ed4a095a118c6829205b293b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:13:d0:52:bb:be:47:c5:f2:19:21:9f:29:
                    1a:1e:b4:1d:c8:3c:26:c7:56:f5:be:c8:7b:6c:3b:
                    00:9b:3e:77:a7:c5:dc:c4:c3:a6:5e:50:d3:0e:c4:
                    39:d2:f4:2b:72:a0:b1:37:2c:2a:14:a0:66:75:76:
                    94:ff:2f:ed:05:c2:6e:f7:a0:9f:fc:aa:2e:a4:bc:
                    33:c9:0d:a2:ea:98:6e:c9:d3:4e:77:d4:9a:e5:68:
                    e2:7c:96:62:cc:30:7a:12:41:0b:2f:64:a8:a7:a1:
                    27:38:2f:a6:02:b8:e7:b8:3c:48:8d:2b:70:c5:bf:
                    71:70:d5:ac:2b:f2:3f:b8:12:f7:6a:42:57:cc:cc:
                    c4:e2:f4:b5:9d:cf:aa:9a:fa:5a:b5:cd:f4:63:89:
                    a4:18:cc:cc:bf:fc:5e:d1:1e:15:44:fa:99:7f:63:
                    0f:60:73:1e:d5:e9:e0:fb:a6:b8:eb:5f:ed:78:8c:
                    42:12:d9:3e:84:bf:cc:c5:19:50:5e:2f:ae:16:75:
                    9c:5a:21:54:7b:cd:53:5b:23:48:de:a9:8b:3a:8f:
                    eb:b8:ef:5c:79:b1:ec:94:63:33:8f:3b:61:b6:c5:
                    c0:ef:f9:9e:0d:9a:46:7a:51:44:d1:50:ba:ae:f3:
                    a3:d3:ca:5e:35:00:e6:14:49:b4:11:ad:1e:d6:06:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FF:5C:BE:FA:5C:67:ED:4A:09:5A:11:8C:68:29:20:5B:29:3B:6E
            X509v3 Authority Key Identifier:
                keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:4b:2f:f5:01:69:e4:cc:19:9e:6a:ff:71:7b:8d:61:be:
         6f:53:e6:1f:22:e7:a7:a3:17:a0:93:77:5d:fb:a1:70:f8:30:
         5e:15:32:80:48:16:f2:dd:d4:47:cf:d8:20:ad:d3:e9:ec:50:
         ed:2c:c3:2b:37:9e:a8:30:95:95:ab:33:f0:5f:64:20:5b:44:
         e8:93:e3:fd:2d:0b:58:97:60:5a:a2:f1:54:af:8a:4a:5b:81:
         d9:fb:7c:59:f6:c5:72:17:ac:9d:42:d7:cc:36:4e:64:58:15:
         4a:40:06:a7:f0:ee:e4:0c:ca:62:21:ec:56:0e:0b:f9:be:16:
         3f:a2:9a:7a:fa:15:6f:e3:66:bf:39:85:33:63:fb:d1:69:c9:
         f0:19:24:27:c6:43:c6:19:f0:61:97:8a:67:0f:29:8b:35:d9:
         4d:c7:fa:80:6a:97:34:a3:c2:ae:01:65:9e:ff:04:04:d6:51:
         d9:71:19:e5:cc:16:89:0a:7c:ca:62:da:b8:01:54:4f:13:de:
         66:41:e4:f5:f0:06:ab:fc:d3:43:36:75:26:4c:a8:2c:3c:ba:
         96:e7:56:79:ac:fc:11:6f:1b:31:b9:54:78:2c:ef:a9:74:39:
         c0:25:84:a1:41:61:63:34:57:cc:e7:83:71:d2:4b:af:ba:4b:
         60:75:35:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:42:58 2025 by rpki-client