This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
File:                     ngN01xvFfbltw5PpH-u56dWf75o.mft (raw, json)
Hash identifier:          ilEFMqfmkklzTAA7pTh3IpkpC5rmAvfp371YtUcGQQ8=
Subject key identifier:   81:A3:48:4A:54:0D:4F:75:A6:F1:A4:0B:EE:6A:61:51:C1:66:F3:D1
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Certificate issuer:       /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial:       019B3CB4A9F0FB6872BD777EEB7329416BB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
Manifest number:          178A
Signing time:             Sat 20 Dec 2025 17:00:31 +0000
Manifest this update:     Sat 20 Dec 2025 17:00:31 +0000
Manifest next update:     Sun 21 Dec 2025 17:00:31 +0000
Files and hashes:         1: 90vahj-_hJ5i1HoZpq9u0D0BXno.roa (hash: hNcbTROFVc3qb49hFAj0UmBrANu4X9fdOG7KqwGkrWI=)
                          2: aiayIUHfqJqjLTqVFWc4nu-4G4A.roa (hash: pzPbeMaNHz+Qf8EsosFYtAc0dvzeTKY+f3jQ8e+tojI=)
                          3: ngN01xvFfbltw5PpH-u56dWf75o.crl (hash: i1F6cxXhuIFBt2EVkRbESV4aJ1DVhxhUQa0LZEBkT0g=)
                          4: pchvFEtf54PSSiTi01p5PApQHUQ.roa (hash: LNaFLGgXExgOKyuOXBO2LPMxZGv4i1837UIKdLVtZOA=)
                          5: q3loLepsq8UUkjol44_uG7-Dp-g.roa (hash: HiKWGBwaGg7MLWq1sRr7H+Pilt+M4gjbpsaE+yrM590=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:b4:a9:f0:fb:68:72:bd:77:7e:eb:73:29:41:6b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
        Validity
            Not Before: Dec 20 17:00:31 2025 GMT
            Not After : Dec 21 17:00:31 2025 GMT
        Subject: CN=81a3484a540d4f75a6f1a40bee6a6151c166f3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:67:f9:9b:97:50:0b:4f:4c:27:76:c9:60:
                    eb:58:11:7e:68:39:b7:b1:e0:61:a2:d3:8a:f3:5d:
                    65:31:95:6b:94:75:6a:5c:a6:cb:3c:8c:5b:5d:c0:
                    1e:41:94:06:13:24:49:e3:d7:1d:6b:34:1d:6a:5f:
                    f2:93:40:9c:ac:33:82:e1:09:e7:da:a4:7f:c8:6e:
                    b9:2d:b3:41:cb:6a:1b:f2:e8:70:c3:09:d3:c5:d9:
                    df:b2:5b:47:13:ae:68:25:7d:5f:8a:14:6a:b7:33:
                    db:10:17:34:d0:fe:29:89:81:22:53:43:92:1d:31:
                    1c:5f:77:36:81:6a:4b:89:fc:a1:12:c8:a0:c7:bc:
                    9f:bf:b4:c5:e4:ef:56:04:ab:c9:06:89:96:91:77:
                    b3:8e:a9:a3:78:66:ab:a4:92:02:b4:77:5a:ae:13:
                    34:87:85:78:d3:ce:1c:64:2c:a3:61:7a:c8:7a:24:
                    23:32:05:26:1e:e6:b7:f1:ec:d4:e9:24:6e:a6:f8:
                    fe:b7:81:8a:89:88:10:85:bb:24:7d:59:b7:75:a0:
                    55:60:42:ae:77:9c:a3:5e:ad:44:65:a4:e1:5a:88:
                    40:6d:83:9d:cb:ca:2a:7b:9a:7e:6b:06:53:1d:27:
                    57:a0:61:a3:7c:1b:f9:c4:6a:62:31:80:45:ae:ce:
                    8e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A3:48:4A:54:0D:4F:75:A6:F1:A4:0B:EE:6A:61:51:C1:66:F3:D1
            X509v3 Authority Key Identifier:
                keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f7:5a:3f:0f:41:0f:2c:21:43:4c:3b:29:9f:6d:bf:bc:96:
         3e:3d:d9:14:aa:78:4a:c4:f8:25:99:47:9e:9b:ec:4f:34:aa:
         f4:93:d4:41:db:88:22:a1:61:0f:5f:f1:60:de:ff:89:9d:c0:
         0b:29:6a:3e:91:e4:af:d5:8b:6f:12:c4:97:94:6f:05:e0:ce:
         1c:1c:a2:54:33:ca:97:9a:14:1f:ca:c7:28:ca:95:68:e7:88:
         cb:ff:95:a2:1d:03:dc:d5:0f:15:de:c4:30:a5:fa:d6:b1:4f:
         35:ef:98:dc:5e:f9:f6:7a:23:83:b0:65:7a:c5:7f:87:d7:cf:
         82:82:eb:eb:7d:0e:24:16:2b:11:a3:21:4b:15:89:50:50:2f:
         12:69:11:fe:cb:09:db:25:0f:60:e7:c6:f7:80:11:92:56:77:
         e0:b6:d8:0a:60:98:fb:0f:50:9f:4f:b9:ff:bf:eb:b7:c2:8c:
         50:0e:4b:cd:cf:c7:dc:2e:d1:59:56:e6:08:76:7a:59:e4:07:
         19:81:64:21:e3:f0:8e:6c:e4:fb:82:10:13:d6:92:c1:15:50:
         e1:a2:7c:80:c0:60:d3:28:8f:6b:0f:aa:4e:de:ad:06:85:86:
         b6:0a:3d:87:04:61:56:15:11:66:b9:4e:b2:c3:07:b2:df:8e:
         66:17:77:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:03:43 2025 by rpki-client