This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File:                     Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier:          p5AQHjeKlEBm6X5dx8L8/40Ew7NSDXCZyWfsxLs93Eg=
Subject key identifier:   C9:02:DE:5C:8B:7A:DC:24:A1:15:59:68:EB:FC:FD:3A:D5:7D:6C:75
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer:       /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial:       019B394609AC6A751720986A0BE792251CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number:          178C
Signing time:             Sat 20 Dec 2025 01:00:49 +0000
Manifest this update:     Sat 20 Dec 2025 01:00:49 +0000
Manifest next update:     Sun 21 Dec 2025 01:00:49 +0000
Files and hashes:         1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: C1dm/L191tbq/fCjD0e/O+PNt2OKfYqJ9xqRo4pHjTw=)
                          2: Xz5fRm1rvrLEvX3nzQNpvfuqwdQ.roa (hash: 3vZNMQRQpFvLq3O7/5316ZbW91wqqPn0EJ7/sIa76eA=)
                          3: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
                          4: y4ueXY0ijBf4RZb4fGJVsXQLGA0.roa (hash: UvuMlXoUYXPwY2R/r9zwqG0BA2XfWQY7ClxJAXl4TJs=)
                          5: yoc8JMk-9f_YUHXEL_9_ZmX1Dg4.roa (hash: vHYZAYQIcTZ88hbC8SwB+Nm3QsYJxFwlJCLWjy+CEWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:09:ac:6a:75:17:20:98:6a:0b:e7:92:25:1c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
        Validity
            Not Before: Dec 20 01:00:49 2025 GMT
            Not After : Dec 21 01:00:49 2025 GMT
        Subject: CN=c902de5c8b7adc24a1155968ebfcfd3ad57d6c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:f7:14:a0:9a:4b:08:b2:81:da:63:25:e6:
                    81:36:99:84:d6:1f:72:1a:70:4d:c1:f4:a7:ae:86:
                    ab:68:17:b1:df:55:e7:30:44:81:d3:62:45:4e:4c:
                    d0:b7:e0:5a:9a:43:8b:5a:4e:55:f2:8f:72:45:9b:
                    c6:0c:cc:21:98:83:60:ac:7e:87:22:a2:05:1c:77:
                    60:2d:e6:51:ce:25:44:7d:58:79:45:f6:4d:79:c0:
                    28:0d:36:6f:0d:ec:54:bf:db:2c:6f:52:dc:5a:33:
                    bd:d1:91:46:80:0f:3e:9a:f6:40:b0:25:de:50:11:
                    59:10:15:e8:9a:82:19:c3:4c:f2:14:e0:e4:93:9a:
                    76:aa:52:5c:fb:5d:67:24:c0:e0:a6:42:94:1c:71:
                    3c:ec:10:0d:2a:0c:51:dc:75:b6:84:99:ff:cf:0d:
                    35:42:9b:98:ad:52:7e:ed:90:e5:81:e2:70:8b:f0:
                    43:76:52:82:be:ce:fe:93:e1:38:9d:f7:57:be:ef:
                    58:da:c6:55:cb:2d:14:1a:7b:9d:33:e5:dd:3c:ae:
                    19:a4:11:e3:87:64:85:de:35:8d:19:20:d3:05:ba:
                    20:16:21:1e:a8:13:aa:35:ab:3d:b6:78:8b:3e:63:
                    84:5b:66:88:5b:2a:32:4b:70:3e:54:80:a8:87:70:
                    bb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:02:DE:5C:8B:7A:DC:24:A1:15:59:68:EB:FC:FD:3A:D5:7D:6C:75
            X509v3 Authority Key Identifier:
                keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:13:3a:88:a5:9e:67:67:a4:f8:19:f5:e4:8e:cc:36:3a:07:
         85:9d:c8:44:b9:74:a3:81:c0:b3:c5:f8:e8:98:b3:79:1b:f5:
         0d:d3:fc:ca:5a:61:c9:83:98:3b:01:49:db:7e:3d:31:36:82:
         63:7c:23:29:af:fc:0f:2e:0e:9e:ed:7a:9d:6f:f4:df:40:2c:
         4d:0d:7d:91:68:d5:2c:36:b3:b5:58:39:2c:ba:e3:08:0e:59:
         be:7b:e3:8f:d0:61:0b:c4:d4:4d:29:ef:74:56:75:4d:da:8d:
         fd:08:b1:8f:67:bd:47:a2:4b:b3:3f:41:5f:ac:eb:19:99:36:
         a4:36:6b:88:aa:23:8a:a1:98:a5:80:5b:0d:51:3d:be:fe:90:
         cb:d1:2b:85:7f:c6:2f:6c:5d:e3:30:c8:2a:9a:57:e5:71:f4:
         a5:52:cf:d1:f6:03:50:51:d6:0b:15:22:dc:ea:83:65:86:72:
         98:21:19:e0:59:30:f6:d7:18:45:ba:a4:1f:50:de:98:8b:cd:
         90:e0:76:9b:9f:bd:36:5b:be:6f:cf:4a:59:de:80:e2:4c:d3:
         ce:67:19:b0:4f:67:6f:9f:a6:96:e0:4a:4b:4d:dd:58:c6:15:
         8d:03:70:13:ab:01:51:a3:6d:3f:18:b2:67:b3:f5:f7:e4:5a:
         cc:ea:7b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:57:13 2025 by rpki-client