This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File:                     _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier:          DfobWTcKM9vT1UCHXypyVkj+kI4nckJ4/kAOUWqh4Vs=
Subject key identifier:   35:16:4B:FB:00:05:41:23:74:D4:C5:D6:BF:66:7F:89:E8:EE:02:0B
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer:       /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial:       019B3E6E1D6319E822B85DAD961917CD5D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number:          178B
Signing time:             Sun 21 Dec 2025 01:02:42 +0000
Manifest this update:     Sun 21 Dec 2025 01:02:42 +0000
Manifest next update:     Mon 22 Dec 2025 01:02:42 +0000
Files and hashes:         1: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: YAse9g0DWAiGuM9gvc6/IwiSdz5uLrsLZaqn0b5e1Z0=)
                          2: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=)
                          3: tmBvyCU9dS1RGbck9AhZ77ixbZ4.roa (hash: LYRTheb+KiohViLX8r9l59ZvW37F3uyl1qPERmyYOaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6e:1d:63:19:e8:22:b8:5d:ad:96:19:17:cd:5d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
        Validity
            Not Before: Dec 21 01:02:42 2025 GMT
            Not After : Dec 22 01:02:42 2025 GMT
        Subject: CN=35164bfb0005412374d4c5d6bf667f89e8ee020b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8f:c5:8f:cf:08:eb:1d:7a:8f:30:36:c6:9d:
                    51:50:7b:b0:4d:ad:28:a1:7f:df:9a:f2:56:98:60:
                    7d:43:56:a6:bf:43:5f:25:f6:04:32:30:e1:fb:46:
                    fc:cb:f2:36:ca:1b:7e:f2:db:3a:14:5b:61:e8:63:
                    6c:b6:cd:50:65:24:d4:1c:db:93:a5:83:7b:94:5b:
                    53:51:bc:fa:65:a8:45:7d:d8:b5:0b:62:be:87:a8:
                    f4:e7:0d:1d:32:b6:6f:f5:3f:79:da:f5:e3:1d:af:
                    0a:40:04:3c:0f:df:5d:ba:ec:fc:2d:2b:02:1a:f4:
                    23:12:db:7a:06:4b:13:1b:33:21:ae:ed:7f:4e:2b:
                    44:48:01:fd:64:29:52:e2:d8:09:ef:f1:90:e9:6a:
                    a5:e1:af:5a:4f:61:14:0b:f0:7e:1c:54:1b:af:c0:
                    42:c9:39:6b:67:7d:b4:44:4b:85:3b:ad:a9:68:4a:
                    f8:5f:7b:67:5e:57:ba:f1:c5:87:f0:34:ec:47:65:
                    30:91:ed:24:6c:9f:05:49:9a:17:30:90:c8:dd:6c:
                    88:fd:42:17:f5:79:47:b3:17:47:38:73:2b:09:c2:
                    87:fc:b6:fe:00:dc:b9:41:c4:26:5c:d6:2b:76:a8:
                    f3:f2:3e:ed:04:7c:35:39:a3:f3:79:4b:5f:68:68:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:16:4B:FB:00:05:41:23:74:D4:C5:D6:BF:66:7F:89:E8:EE:02:0B
            X509v3 Authority Key Identifier:
                keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ce:81:29:16:fe:27:09:ad:5c:3e:06:41:f3:26:7c:a3:96:
         a8:b9:26:69:4b:65:5c:c2:45:4e:d0:dc:5f:bd:f7:df:e9:0b:
         c4:71:d4:82:7b:37:21:e2:80:4b:8f:53:8f:83:9d:7c:e8:48:
         a8:a3:ae:73:37:19:4f:91:21:5a:76:42:8f:15:97:2d:be:4e:
         c5:a2:67:70:d4:b0:1c:e7:d0:bc:aa:f7:aa:b5:a5:ac:84:1a:
         e6:2d:41:ff:e4:43:8e:c7:ea:b5:98:64:20:1f:83:1b:43:7a:
         cb:d3:88:7c:28:45:cd:c0:24:23:06:e4:99:e8:3b:a7:0a:00:
         7a:f2:05:0f:89:ff:de:72:ad:ea:6b:a1:9f:b0:08:eb:f1:5f:
         2c:a5:bf:89:c8:90:6c:7d:0a:40:a3:2d:42:f0:62:5c:04:f4:
         5f:12:dc:97:db:09:0e:8e:c1:d2:52:ef:dc:af:1b:64:fb:cc:
         47:c5:7e:2d:3c:f1:ee:3a:97:ee:4b:69:83:f0:eb:75:9b:4e:
         f7:65:07:30:46:4e:4e:01:8a:d5:6f:38:53:4d:48:33:7c:90:
         32:12:68:56:e6:a0:8a:7f:aa:3c:64:bd:ab:2c:bb:be:ed:10:
         6d:56:a0:cd:e1:28:cd:8e:ac:89:7f:21:f9:89:3e:ca:fa:b9:
         15:c1:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:24:35 2025 by rpki-client