This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File:                     9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier:          XG/gu/4w6ez4uQCafaY8oknVZwgmJHrc5uHs3zHhIc4=
Subject key identifier:   50:B3:AC:19:4B:D6:84:D6:19:0F:7D:AD:F0:9A:F6:45:87:61:61:A1
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer:       /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial:       019B38A26DA29004C0101402D1AE3B77A18E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number:          176F
Signing time:             Fri 19 Dec 2025 22:02:07 +0000
Manifest this update:     Fri 19 Dec 2025 22:02:07 +0000
Manifest next update:     Sat 20 Dec 2025 22:02:07 +0000
Files and hashes:         1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: +F8e6Yixl4dBtW4RacbKrArLU2qx5OJPJRkGBlgQinE=)
                          2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
                          3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 22:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a2:6d:a2:90:04:c0:10:14:02:d1:ae:3b:77:a1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
        Validity
            Not Before: Dec 19 22:02:07 2025 GMT
            Not After : Dec 20 22:02:07 2025 GMT
        Subject: CN=50b3ac194bd684d6190f7dadf09af645876161a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:39:ca:b2:7e:6a:11:a9:b0:a5:d7:f1:0b:
                    d4:c1:e3:81:5f:fd:6a:9a:d3:d0:0b:10:5e:96:6a:
                    23:8e:a3:86:dd:4a:48:6f:8e:00:f9:7b:2c:37:a4:
                    ca:30:13:55:f5:4b:5b:c4:9b:c7:df:5b:af:88:53:
                    c3:02:6f:de:2a:b4:58:0a:48:4a:af:5d:c1:8e:2f:
                    f7:bc:7f:e4:e3:7d:3c:ec:bf:bd:6d:2e:37:dd:75:
                    f6:84:a8:fc:38:84:85:c6:52:d6:95:3d:53:77:97:
                    40:7d:f5:88:35:0b:bd:ef:3f:d2:24:38:3c:c9:00:
                    4c:67:17:91:e1:f2:4d:0b:d0:40:64:be:73:4c:8a:
                    86:50:08:6e:95:16:ad:2f:0e:a3:29:58:f7:4a:49:
                    31:ea:a2:26:68:ab:cc:ef:68:6f:43:01:dd:c4:96:
                    97:50:77:e6:15:09:2e:72:69:72:92:09:5f:5b:4a:
                    5f:36:8e:08:c1:d1:ed:39:3a:09:0c:48:bd:45:a5:
                    50:56:de:d7:b1:a9:b2:97:70:66:3e:9e:b4:ff:9f:
                    43:ec:38:3d:21:fa:d4:34:dc:44:9e:2a:f8:8f:8c:
                    be:89:d0:d6:c2:5f:c5:0c:c3:dd:bc:cf:8a:3b:9c:
                    05:29:aa:0f:60:bc:c3:92:2d:65:be:35:1f:dc:25:
                    bd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B3:AC:19:4B:D6:84:D6:19:0F:7D:AD:F0:9A:F6:45:87:61:61:A1
            X509v3 Authority Key Identifier:
                keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:11:a8:e4:dc:5d:ee:af:7d:82:94:d0:c0:70:a0:6e:6c:81:
         3c:0e:fc:2a:f4:bd:54:3a:06:2c:fc:0c:a6:5f:ef:0b:14:c9:
         1f:b3:d1:bf:e9:e7:8c:49:cd:97:ed:ec:39:59:f7:bc:f5:52:
         0e:66:fb:df:fc:82:7e:a6:dc:26:eb:9c:19:df:59:cc:b4:a8:
         5b:19:a8:5d:2d:86:e5:95:fb:8e:a5:57:9f:13:16:b8:a7:ea:
         6b:e2:53:07:88:3c:be:66:e0:d3:3c:62:18:76:31:98:35:ee:
         80:d7:23:2c:f5:3d:32:42:13:c0:75:9c:f1:83:40:59:d1:13:
         af:9f:db:79:47:ed:08:ce:7d:ac:8f:ea:ce:18:4d:6c:0c:46:
         95:2d:85:79:dc:a8:82:f9:70:1e:b0:c3:86:11:7b:04:c8:57:
         a9:5b:d9:81:6e:c8:2e:24:cf:60:9c:a5:25:05:ac:be:4a:e6:
         59:a1:cd:a9:35:6a:c2:b2:52:95:6d:c9:81:e8:b1:b0:0b:e3:
         1b:a4:8e:16:3c:eb:a5:c1:b9:b4:d3:39:16:b2:da:22:1d:c4:
         e0:38:b6:cd:86:5f:6b:82:8a:eb:86:f5:7b:44:47:9d:74:82:
         ee:bc:dd:28:b3:95:df:56:e8:5e:83:bd:9e:11:0e:9a:55:67:
         62:76:73:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:29:56 2025 by rpki-client