This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File:                     nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier:          wZqR1Ndf0n5/wlrKyQEUo1NQHA5+wD7PK4HWxxALJBw=
Subject key identifier:   D1:3C:41:AF:C7:59:67:9D:7E:8B:24:7B:75:A6:E7:29:FE:61:E7:16
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer:       /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial:       019B3A8FC4750568708074B04AC5F4A77E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number:          178B
Signing time:             Sat 20 Dec 2025 07:00:58 +0000
Manifest this update:     Sat 20 Dec 2025 07:00:58 +0000
Manifest next update:     Sun 21 Dec 2025 07:00:58 +0000
Files and hashes:         1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
                          2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
                          3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
                          4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: NnjQf2rq8hMpB99YRj9gG3x9IP1VL5Z3IVbE6n66/bU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:8f:c4:75:05:68:70:80:74:b0:4a:c5:f4:a7:7e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
        Validity
            Not Before: Dec 20 07:00:58 2025 GMT
            Not After : Dec 21 07:00:58 2025 GMT
        Subject: CN=d13c41afc759679d7e8b247b75a6e729fe61e716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:98:ee:0c:68:56:52:30:b0:35:b4:9e:12:
                    87:5f:5e:c3:c5:89:94:03:5c:1d:c2:65:4f:37:7c:
                    a6:c3:21:67:58:a9:ea:b0:87:b5:03:65:9e:c2:82:
                    5c:80:01:f0:96:df:30:7e:de:db:bc:af:0a:6c:f2:
                    c1:28:50:34:30:12:c2:1f:d3:b3:6b:4f:a4:74:a2:
                    21:58:01:ad:ee:33:e6:a2:6a:f9:7d:8b:26:25:41:
                    69:02:88:5d:2b:86:fe:05:5d:0d:ac:41:75:9f:0e:
                    35:c6:43:3c:2d:8a:d4:61:6a:ad:5e:d1:b5:f6:de:
                    10:43:eb:64:44:e4:4c:ef:78:13:77:6e:4e:c2:2c:
                    bb:40:86:c9:07:2f:94:63:32:f9:04:6d:56:22:f1:
                    3d:1d:60:db:86:b3:e5:4d:43:96:dc:8d:43:0e:57:
                    67:54:80:95:f3:a9:c0:21:0b:94:21:4b:fd:5e:2d:
                    62:2e:a0:56:c2:b1:bf:92:52:de:62:83:91:aa:c4:
                    29:90:28:2a:d3:af:c9:61:cc:f0:46:7b:7e:e8:bf:
                    b3:27:64:ab:13:00:8d:17:1f:19:02:a4:2a:87:1e:
                    c3:7c:e7:e9:10:e0:77:eb:cf:78:01:b6:42:5b:ff:
                    d1:e6:a4:1a:f2:bb:30:57:ab:02:84:35:44:f9:ed:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3C:41:AF:C7:59:67:9D:7E:8B:24:7B:75:A6:E7:29:FE:61:E7:16
            X509v3 Authority Key Identifier:
                keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:02:af:27:b9:fd:11:1f:97:06:e3:83:4b:88:d1:71:d5:7d:
         67:0f:cc:8a:1b:fb:30:3c:99:e2:35:12:f7:c3:fa:83:7d:81:
         d5:d2:60:50:06:cc:bb:3a:ec:49:db:14:32:29:b8:8b:b5:34:
         30:d6:a7:fe:1c:ce:a9:c2:1b:67:c4:c1:24:ae:15:d2:a6:33:
         a4:cd:6d:6c:05:e3:b2:06:26:44:88:63:30:6b:1e:06:b2:9e:
         da:90:3a:b2:75:6b:12:e7:e4:f0:ae:2d:60:28:57:d0:98:8b:
         15:6a:92:56:bc:6b:4c:eb:f0:c2:cf:12:1c:4d:8c:df:55:70:
         de:95:28:6f:a5:46:db:60:23:49:d9:7a:ee:1a:84:e9:75:35:
         33:28:c5:18:0d:0a:90:e2:d1:73:e1:a3:ad:2b:10:88:52:79:
         56:89:42:79:0b:5e:bc:99:71:af:9c:b2:1e:55:a8:4a:51:2a:
         80:15:7e:12:6b:50:f2:9e:07:61:67:c9:1b:c8:71:cb:88:51:
         5c:d8:47:2f:4c:65:15:fb:bb:46:c3:1e:6d:b8:8e:c6:7c:e8:
         79:e5:68:c1:6d:f6:37:b0:fd:4e:c9:6d:b7:cd:07:f6:ff:8c:
         36:1f:07:bd:44:67:0e:d3:eb:ee:8d:6f:65:99:24:f4:ce:0d:
         02:2b:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:24:39 2025 by rpki-client