This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          A2ukkd0j/Ux4Dvqm+jiBVgKcVT8mdYLC6MPOiiSHHW4=
Subject key identifier:   A3:F2:76:A7:8E:C5:6E:0B:5B:6D:F4:3B:62:3D:52:91:8E:1F:C2:49
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019B5E9C85248B4893A56D35C967C95D1FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          179C
Signing time:             Sat 27 Dec 2025 07:01:14 +0000
Manifest this update:     Sat 27 Dec 2025 07:01:14 +0000
Manifest next update:     Sun 28 Dec 2025 07:01:14 +0000
Files and hashes:         1: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: wVHDhEOVt85IZHQtqTBa3p1kfxClDi+hZlv6nX+00zc=)
                          2: Hp-aUMiKFduSFShKvppXI42_Uj8.roa (hash: lCB+C5NdYk9yj77o+dq8fC9obFb6kuE+kfqjMFwOwXM=)
                          3: fj4ybxpsDPTq3Dcp32ARk19V658.roa (hash: G3z4kx3nRpiPVloWlnA+5o5/TapLF4KViU9lT9zaU4s=)
                          4: pE4C0VroSmY26_TJM0K-lSQgc7M.roa (hash: vf7UXC4PR0yUJjr6xqwo9zqitXjZXFvwlnGZdHjjf6A=)
                          5: waFJY_9Xx4HVBca8mozwG38i49k.roa (hash: 2sqvgn5zOZZ4lehKra8TFzA3bKpHh9AvNDOTiV97aSw=)
                          6: wwsOTx-pck8zIz4rEJvLSRVOW78.roa (hash: MNbHqch8VEMBR8R4jhawYSxV/uo6TDEte38JPI3LQos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5e:9c:85:24:8b:48:93:a5:6d:35:c9:67:c9:5d:1f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Dec 27 07:01:14 2025 GMT
            Not After : Dec 28 07:01:14 2025 GMT
        Subject: CN=a3f276a78ec56e0b5b6df43b623d52918e1fc249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:16:06:e1:d5:a4:f8:f9:18:da:7d:a3:68:63:
                    9d:c2:b6:fe:3d:9b:b1:e6:56:ac:70:31:d1:1a:62:
                    98:13:71:95:55:da:d2:06:26:56:18:a4:9e:ed:64:
                    26:9c:63:af:4f:2e:ca:37:8d:2e:3a:a6:91:da:d7:
                    3b:3f:7f:c3:ab:29:cb:28:68:04:0e:84:99:f6:85:
                    75:b9:df:81:ec:03:68:99:f0:b8:fd:1f:7b:68:db:
                    f7:bc:6e:dc:4c:aa:78:bc:3d:6e:b5:4e:87:34:f0:
                    4f:2d:bd:b2:62:0c:65:41:fb:2d:f2:e5:6d:6c:c8:
                    b8:79:04:57:d4:8d:5e:ae:72:8b:2d:56:c8:9a:a0:
                    51:9d:88:0e:e8:0f:d0:0b:ba:c4:0f:bd:65:ff:bd:
                    6f:42:8b:c3:87:85:27:c7:f6:a6:92:d6:6f:a6:c4:
                    37:99:b2:a7:f9:64:64:7c:32:1d:50:07:54:2f:25:
                    34:9d:5a:0c:8a:07:05:4e:b2:90:f0:45:2d:49:7c:
                    bb:cc:b5:2a:10:b9:29:f5:54:64:67:00:61:fd:39:
                    49:9b:7d:ab:52:d1:cb:8d:80:f3:ee:4f:e1:c1:85:
                    7e:8c:6c:76:08:33:6d:94:d2:38:d4:e9:e3:0b:e0:
                    d4:be:27:26:b3:69:0e:80:04:83:73:4b:4e:e5:b0:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F2:76:A7:8E:C5:6E:0B:5B:6D:F4:3B:62:3D:52:91:8E:1F:C2:49
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:15:a3:11:f2:90:43:7d:1f:bb:a8:29:e2:c6:ae:76:ce:
         a9:c9:a6:b2:20:8c:d3:20:fd:25:51:e3:e1:8a:b8:4a:9f:f4:
         08:65:19:16:88:99:af:64:33:c3:95:db:a1:99:0c:8a:63:1e:
         30:43:ad:ea:f7:20:f7:98:b1:9c:d0:6d:5d:49:b5:99:87:ae:
         21:6a:65:f1:0c:c6:95:17:49:cb:5e:bc:40:42:4c:9a:a5:43:
         ff:54:0a:fd:e8:ae:86:72:4c:e8:20:60:f9:2c:28:c6:59:94:
         b4:ea:3e:33:54:57:6d:69:da:7f:6f:e0:e2:8a:11:05:cf:c4:
         a3:c5:bf:a1:e1:9c:53:40:14:13:c2:e3:7b:bf:6e:63:c6:7c:
         08:cc:ed:ed:56:79:64:52:38:24:50:5c:a5:6d:6f:b3:8e:06:
         fb:a0:cb:ef:01:96:bc:7d:20:e4:9f:f7:17:b5:a7:fa:c0:4b:
         9d:13:88:50:0d:33:a7:3c:2b:85:c9:80:58:12:a9:f9:f7:aa:
         84:98:ef:9e:eb:05:6c:e9:79:76:28:03:18:af:29:73:13:0d:
         ab:05:57:cc:67:9f:c9:f5:98:23:dd:bd:ac:5b:ff:a6:aa:0a:
         f3:7c:d7:cd:86:1b:78:1d:b3:f3:60:43:81:17:b8:f1:db:1f:
         25:ec:0b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 15:40:09 2025 by rpki-client