This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File:                     d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier:          RnsoV76CMqqNqZi+LBAD8WgLvNX5ltm4/9Nu+Y9ANIM=
Subject key identifier:   41:8C:9D:81:32:E2:FB:F0:4B:9C:03:A2:55:FD:DA:65:3D:14:5E:34
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer:       /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial:       019B405B82469AF3A83E4956168AA5F56E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number:          178C
Signing time:             Sun 21 Dec 2025 10:01:37 +0000
Manifest this update:     Sun 21 Dec 2025 10:01:37 +0000
Manifest next update:     Mon 22 Dec 2025 10:01:37 +0000
Files and hashes:         1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: lOuTqMuo+TruwSWDQ4/ZMx/KqlMPqZJQUmInsZhZRqM=)
                          2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
                          3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:5b:82:46:9a:f3:a8:3e:49:56:16:8a:a5:f5:6e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
        Validity
            Not Before: Dec 21 10:01:37 2025 GMT
            Not After : Dec 22 10:01:37 2025 GMT
        Subject: CN=418c9d8132e2fbf04b9c03a255fdda653d145e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:01:9d:1d:9e:cf:2d:af:0e:2e:63:b4:da:
                    34:b0:38:12:2f:fb:ec:7f:a5:66:d2:bb:5e:4e:f5:
                    f2:d4:ea:fd:a4:7f:15:e2:2e:6b:ab:fa:3e:76:84:
                    04:b3:11:a9:52:23:51:01:4f:b2:d5:7f:b1:f0:a2:
                    3a:ec:ab:84:cc:d4:8c:29:11:ef:d2:23:fb:a2:8d:
                    03:3c:46:97:99:8f:bb:8b:ab:c2:87:f1:07:8e:ba:
                    62:bf:8a:10:03:99:13:64:0d:14:70:61:82:b5:c3:
                    62:8c:e8:5d:c8:f0:49:ea:8c:ed:bc:c2:d4:29:70:
                    25:3e:9c:31:a4:e3:bf:93:a8:e1:4a:04:fc:7b:34:
                    38:3e:8a:13:ac:2a:66:0c:43:f9:9e:d2:f6:da:6b:
                    2d:48:c9:1d:23:98:f9:25:17:56:8b:30:07:ce:e6:
                    06:34:03:c7:19:27:9d:c6:cc:7c:12:95:90:1a:c2:
                    29:da:12:26:d5:7c:59:aa:4d:e8:3e:2f:0e:78:41:
                    54:bb:ea:aa:e6:10:34:66:2e:67:da:90:7f:de:59:
                    65:a1:cf:7e:d8:40:47:2f:20:a2:d6:5f:e1:9a:76:
                    2a:40:c0:24:05:ba:00:2b:10:a4:94:80:0e:95:e7:
                    f8:29:ce:11:68:47:75:95:cf:d7:e1:47:2c:d7:ed:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8C:9D:81:32:E2:FB:F0:4B:9C:03:A2:55:FD:DA:65:3D:14:5E:34
            X509v3 Authority Key Identifier:
                keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:72:27:4f:d7:7d:20:38:1c:94:09:81:ca:29:c4:ba:2a:b1:
         79:a5:7d:02:be:79:6d:ce:a0:f5:b1:ab:8f:ea:f4:a9:58:93:
         d3:94:69:91:c6:df:d9:7d:ff:84:68:08:02:3a:57:ff:ec:09:
         fc:a5:3e:6b:85:53:fe:20:07:68:0c:44:a6:44:0c:11:ea:c0:
         82:41:e7:1e:7d:be:f7:2b:87:76:1d:45:88:eb:62:56:0a:1a:
         08:fa:cf:f9:07:5f:3f:c7:0b:11:ab:44:1e:9f:d9:d1:c8:33:
         d9:1c:6d:50:de:0a:70:d0:b7:da:de:b6:4a:a3:0b:af:42:df:
         70:a8:fd:61:7c:82:49:a9:61:a2:ba:2c:e6:af:93:f3:4c:76:
         f3:3f:45:e2:55:c0:b6:34:56:10:46:92:82:1e:1d:34:72:40:
         3c:ea:47:db:6a:2c:7b:24:64:35:b9:cd:91:1b:c9:d2:d2:dd:
         ab:b4:3a:6c:67:fd:98:93:3d:1a:52:50:43:ca:c0:8b:ea:4e:
         24:eb:28:72:6f:7e:8f:8a:f3:03:55:45:3c:a4:79:c3:8f:73:
         af:4c:5c:89:07:ae:5b:ee:4d:d3:8b:fe:78:16:a4:b4:ac:80:
         c4:2b:3d:c2:ca:e3:1a:30:f5:a8:16:2b:d6:6b:a0:a8:e6:b7:
         ee:0b:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:41:06 2025 by rpki-client