This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File:                     ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier:          E44bfdKexhhrachfH3LgypF7AgF+1DDFa37lwAWOITA=
Subject key identifier:   4B:4F:CB:55:23:CD:C9:03:D3:3A:81:A0:F6:A3:E5:EB:B7:F2:A0:D7
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer:       /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial:       019B424A434C689C4236939006929AA527D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number:          178A
Signing time:             Sun 21 Dec 2025 19:02:01 +0000
Manifest this update:     Sun 21 Dec 2025 19:02:01 +0000
Manifest next update:     Mon 22 Dec 2025 19:02:01 +0000
Files and hashes:         1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
                          2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: ET4autvCiB7R7qBWYwfsYUv4DN6rgCIMggRqEW1daG4=)
                          3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:4a:43:4c:68:9c:42:36:93:90:06:92:9a:a5:27:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
        Validity
            Not Before: Dec 21 19:02:01 2025 GMT
            Not After : Dec 22 19:02:01 2025 GMT
        Subject: CN=4b4fcb5523cdc903d33a81a0f6a3e5ebb7f2a0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:43:2f:1f:ee:af:5e:db:ab:ef:62:67:a0:
                    d1:37:6d:d7:a2:25:5d:7e:61:15:36:c7:83:f6:ba:
                    23:06:36:41:9a:c3:e5:8e:46:59:6f:b8:8b:78:8c:
                    6d:cf:d4:fc:52:4a:cc:f1:12:4f:65:1e:56:ac:8b:
                    6b:b3:24:b5:ea:79:fd:0e:df:a4:3b:ea:05:62:46:
                    bd:5b:25:11:e6:85:1d:cb:6d:17:0b:53:63:e2:67:
                    09:31:29:28:3f:ea:32:50:9c:3a:0f:e0:89:08:d7:
                    06:c6:4d:42:bd:21:0c:5b:5f:06:9d:11:c6:e0:1f:
                    53:3e:9a:88:0f:ad:a8:70:89:91:6f:6e:63:92:0a:
                    da:b3:a5:d0:be:ca:cd:fc:ec:36:91:b7:0f:b0:6b:
                    b8:cb:43:9c:01:fb:7f:8e:23:cb:71:04:49:ad:cc:
                    f3:a8:ef:4b:6f:2d:64:3e:58:c0:30:6d:ad:b7:f7:
                    a3:20:7a:62:82:39:64:6c:c9:9e:40:64:82:a0:f0:
                    05:45:58:6d:4b:b2:41:24:8a:2b:76:d2:b0:b5:5a:
                    9f:ef:3e:de:3f:0e:ad:e7:f3:27:63:f2:07:3e:5c:
                    ca:88:24:33:87:f8:f8:6d:df:87:40:92:5e:c1:ac:
                    b9:a8:c3:07:83:a1:43:52:ad:cd:49:8f:f4:33:3f:
                    d5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4F:CB:55:23:CD:C9:03:D3:3A:81:A0:F6:A3:E5:EB:B7:F2:A0:D7
            X509v3 Authority Key Identifier:
                keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:00:31:66:9d:4a:b0:86:a3:82:85:60:01:90:89:54:f7:ea:
         97:a5:b5:47:bf:65:06:78:26:50:7b:e2:a3:a5:55:44:e7:84:
         5f:3e:e0:d5:2f:d1:5f:db:a8:ae:6c:3d:36:e5:20:38:72:6c:
         ff:27:64:3a:08:b4:d5:6a:b8:73:05:50:59:a1:d2:e0:56:c7:
         f6:40:aa:a7:5d:f6:30:54:e9:36:cf:1f:7e:6f:53:93:63:6e:
         43:d0:1d:d6:73:0b:8c:2a:82:9c:77:9e:5c:5d:31:9a:f3:56:
         09:47:c2:eb:d1:e1:5f:2b:c6:a2:df:2d:b9:44:47:95:46:e8:
         8d:06:d1:57:35:17:9d:ac:df:05:22:43:05:82:c0:0b:53:1a:
         4c:5f:86:0b:48:84:70:48:85:09:8b:93:60:41:42:b4:d6:95:
         25:ee:9e:85:93:2c:8f:92:98:f6:c0:16:14:2c:c1:25:ac:a6:
         69:66:b7:5b:f6:4b:f3:b7:b8:cb:eb:7e:f7:1b:07:24:a5:ab:
         74:bb:2f:54:31:af:47:38:9d:b6:a7:fc:68:81:74:d6:10:fe:
         1f:25:8b:1f:8e:0d:7f:77:4a:f8:61:07:b0:ea:f7:ac:9b:0e:
         a9:b9:2c:03:0a:94:08:d7:79:48:33:8e:aa:11:c9:dd:71:36:
         ed:6a:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 20:54:49 2025 by rpki-client