This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
File:                     vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json)
Hash identifier:          BsN030jC7RzEsPBpZK7s2Rz8PZkH/l0U/Q7UPEhOOGQ=
Subject key identifier:   91:57:1F:47:4D:BF:81:C9:C4:F6:D2:25:0C:CE:69:04:96:01:38:71
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Certificate issuer:       /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial:       019B3B35056D3DA5EF0FE7C846C56C9D34D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
Manifest number:          178B
Signing time:             Sat 20 Dec 2025 10:01:29 +0000
Manifest this update:     Sat 20 Dec 2025 10:01:29 +0000
Manifest next update:     Sun 21 Dec 2025 10:01:29 +0000
Files and hashes:         1: BNqfmpLmjYM_hMvzjjiD1hvhjAw.roa (hash: i4CNGeJ+mFFlH8LiDeZQtBRRw7N8oDxdjkoS0v+qObY=)
                          2: aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa (hash: ZEy+TRl03r70LlIyNTMVcl1yqBTFe/vMwXgXOHeWwSU=)
                          3: boEHtK6TX4b8tA4ZE52KAM2BJmo.roa (hash: +7NNF3zI76oRfEmOt6I7AY03Pn8U8YF2KqGhoMWLwNw=)
                          4: uV1M3fky2AaC8kOeiqG8vtH6340.roa (hash: 1utJq4cOepQgwTmFBjPYmXLoibI08Xbs4pkw4aA8F7w=)
                          5: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: 0pipGTgzfZ8JNf4c1vdLZ+xnvfcGfjdJZQ/4YZeemX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:35:05:6d:3d:a5:ef:0f:e7:c8:46:c5:6c:9d:34:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
        Validity
            Not Before: Dec 20 10:01:29 2025 GMT
            Not After : Dec 21 10:01:29 2025 GMT
        Subject: CN=91571f474dbf81c9c4f6d2250cce690496013871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:92:d5:05:5b:c6:21:ce:a2:33:fe:cc:e8:52:
                    e9:58:10:73:27:f5:08:40:2f:43:38:f5:d0:fe:ef:
                    19:10:0d:45:fc:b2:6f:44:5a:a8:22:50:83:3e:27:
                    e0:e1:41:05:c1:62:b2:00:71:4b:0a:00:2f:e7:b1:
                    22:24:58:32:bb:41:69:7b:35:2b:92:9c:0c:4d:45:
                    8b:6c:d8:3b:a4:66:61:3b:11:89:71:ff:33:68:17:
                    60:54:13:35:71:eb:aa:b4:81:ab:11:47:21:da:d5:
                    fd:f5:7f:07:8f:2a:d4:7c:aa:91:9e:e2:14:32:17:
                    2f:36:d5:35:0f:3b:d2:71:01:64:a4:e6:2a:e5:62:
                    78:16:ad:c0:96:70:15:94:de:8d:63:4e:41:ab:65:
                    a9:39:9e:8d:8e:40:9a:91:30:a9:e4:58:d6:6b:19:
                    74:3b:1c:17:81:3f:73:14:62:87:f2:eb:33:0a:6a:
                    b9:90:8a:e8:39:69:9d:23:5c:0a:ee:f7:e5:7d:ac:
                    c0:b2:79:fb:a7:4e:b4:20:28:eb:94:e5:d2:5e:db:
                    cd:81:4d:cc:17:b5:61:d4:00:1b:ea:28:1f:bf:63:
                    82:6d:37:df:d1:d1:83:55:a2:c7:64:c5:bc:8c:de:
                    ce:12:ac:62:06:24:0c:9f:b0:db:26:9b:1e:cf:75:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:57:1F:47:4D:BF:81:C9:C4:F6:D2:25:0C:CE:69:04:96:01:38:71
            X509v3 Authority Key Identifier:
                keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8a:56:0d:30:3e:63:2f:d7:c4:a4:e7:a7:22:26:f7:5a:b4:
         40:ea:c4:a7:4d:55:39:e2:e8:89:57:97:1b:f1:f6:31:95:15:
         fe:06:82:17:e6:a2:3b:cf:ac:36:00:b0:fa:6d:81:08:0a:b6:
         03:4c:d5:2e:5b:35:17:a0:1b:37:e7:b0:8f:93:9f:f2:7f:5b:
         3a:a0:71:b3:ed:d5:db:ac:cc:ef:55:ec:3e:5e:95:f7:ac:b1:
         65:55:40:c9:48:44:a7:66:f0:c9:78:5b:f7:b4:b9:a1:60:1f:
         7e:50:bb:23:07:9c:3f:3f:56:04:61:95:21:76:a5:f8:3c:7a:
         ea:b2:0e:80:b8:48:ee:7e:f7:c2:2d:01:a2:da:57:ad:38:20:
         43:c6:4d:ba:35:40:68:79:b6:7b:d2:39:31:fa:1c:db:d6:ce:
         b1:2d:f7:b3:f0:80:59:7c:2a:7b:a7:ed:ee:33:98:3e:e1:6b:
         ea:73:1e:7d:a6:6a:a6:ee:4e:48:b7:b5:dd:40:8e:5f:cd:81:
         9a:b9:c0:57:81:eb:22:38:98:82:c0:05:f6:0a:62:a6:ca:a6:
         4a:86:39:c4:a0:ca:be:dc:77:08:4c:8f:86:a8:b9:23:54:02:
         db:ae:46:2e:38:05:c1:2f:e3:fd:4f:22:a0:a1:e4:1a:7d:41:
         f4:cd:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:05:49 2025 by rpki-client