This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File:                     25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier:          Gvx9mXu4Za/CXcVBbpYq+Po9B6d7d0uf7mRB+oDVD30=
Subject key identifier:   AA:DD:20:C4:04:DD:D3:05:41:AE:59:1E:23:20:F1:E6:9B:75:17:E8
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer:       /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial:       019B5D52D65E0C1212C0BB8BF3367378B7C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number:          179B
Signing time:             Sat 27 Dec 2025 01:01:08 +0000
Manifest this update:     Sat 27 Dec 2025 01:01:08 +0000
Manifest next update:     Sun 28 Dec 2025 01:01:08 +0000
Files and hashes:         1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: 1EVF+aA/wscKtEskwaMu91GPkikOQXwyElHI8sfbQu0=)
                          2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
                          3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5d:52:d6:5e:0c:12:12:c0:bb:8b:f3:36:73:78:b7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
        Validity
            Not Before: Dec 27 01:01:08 2025 GMT
            Not After : Dec 28 01:01:08 2025 GMT
        Subject: CN=aadd20c404ddd30541ae591e2320f1e69b7517e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:44:e1:ae:29:41:98:40:b9:a3:88:30:54:5b:
                    a4:78:14:19:aa:2f:85:26:c5:91:66:62:5e:59:ab:
                    ec:d6:12:1d:0a:2d:1e:a9:bf:72:8d:0d:c4:5a:fe:
                    eb:f3:e4:0c:fa:18:91:33:80:ea:d0:58:ce:43:27:
                    44:3c:2f:54:56:12:af:18:ad:b2:28:2b:92:4b:bd:
                    3f:39:f7:67:c6:f4:00:a2:64:9a:2e:92:ae:7e:4a:
                    87:0f:e7:70:43:ee:f4:db:08:23:ae:60:c6:eb:f4:
                    60:79:de:ee:b1:ad:0c:6c:5a:79:ee:5e:e2:3d:1c:
                    a4:41:74:56:a4:eb:5e:f2:f0:7f:a0:d8:bd:c9:d2:
                    e9:9f:46:d0:63:ab:6d:23:f9:9b:ab:06:3c:1e:b9:
                    bc:df:2b:d0:97:02:3f:aa:72:20:4d:4b:c1:f3:df:
                    98:54:d6:7b:be:67:d7:b0:92:5a:94:5c:cb:ac:28:
                    e4:30:02:6f:86:89:0e:89:a1:e6:7e:0d:24:15:09:
                    11:a6:5d:17:28:e1:88:c7:43:81:ad:7c:5b:15:e4:
                    fe:88:07:cf:40:58:2d:ac:7a:3b:c0:af:dd:87:a3:
                    34:d9:7d:49:3a:d2:2b:73:6f:b6:93:f1:26:35:c0:
                    f0:b2:74:5b:b6:ad:6c:f3:a6:1c:d2:37:41:1c:ec:
                    cb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DD:20:C4:04:DD:D3:05:41:AE:59:1E:23:20:F1:E6:9B:75:17:E8
            X509v3 Authority Key Identifier:
                keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:db:03:52:d4:4d:07:64:ab:89:88:95:cd:8c:77:83:88:fb:
         e8:fe:51:4f:ad:07:e1:09:83:6e:44:df:29:4f:4a:15:09:1c:
         e6:ba:ae:e6:4a:d4:f8:b6:7a:88:48:37:06:c1:2c:32:8e:42:
         b8:8d:d4:60:fc:d5:df:1c:7e:ea:d0:0e:59:f6:d6:29:a6:28:
         4b:ea:96:29:3e:19:99:35:c0:6e:bc:27:4b:ba:3d:1c:a1:78:
         8c:bd:b2:51:2e:b5:0d:4d:42:ac:38:ba:75:c0:5f:2c:ec:00:
         8f:82:87:c9:be:ba:ba:68:fe:d1:f7:b8:40:ef:e8:f5:29:1b:
         9a:d2:73:46:66:ee:d1:c6:30:0a:f2:cb:f8:16:a5:d3:51:5f:
         04:42:27:50:95:ec:ba:1d:e8:25:c4:73:c2:7f:07:2a:81:2e:
         53:23:7f:e0:a5:56:09:ce:eb:42:f5:f9:a6:c2:8e:66:90:21:
         24:3d:19:19:fc:c8:ca:9d:5e:58:9d:91:ff:93:79:99:21:5a:
         c5:f9:5f:f2:ec:c1:79:c2:e9:05:85:67:76:d9:2b:ef:c2:5f:
         b4:d8:3a:56:8a:f2:a6:c3:d6:ad:23:79:8f:c8:c1:6f:72:fd:
         a9:9c:17:2a:5d:93:f3:c2:a3:6a:83:11:e1:e7:5e:78:ed:98:
         a0:d9:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:10:06 2025 by rpki-client