This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File:                     tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier:          fZzVkS/GjynLSTPiRREiVBoabsYzm8vT3jS1ZX8V4uo=
Subject key identifier:   30:34:51:87:BF:C1:5E:CC:05:95:E9:DF:C7:68:74:90:BC:72:90:EE
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer:       /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial:       019B4A39B13EC2CE7038F64A7C0F08E13F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number:          178F
Signing time:             Tue 23 Dec 2025 08:00:53 +0000
Manifest this update:     Tue 23 Dec 2025 08:00:53 +0000
Manifest next update:     Wed 24 Dec 2025 08:00:53 +0000
Files and hashes:         1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
                          2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
                          3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: Id1sWXa0WtHQ9Cmipyci5ldboMI+c79KtcLCpuXZpp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4a:39:b1:3e:c2:ce:70:38:f6:4a:7c:0f:08:e1:3f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
        Validity
            Not Before: Dec 23 08:00:53 2025 GMT
            Not After : Dec 24 08:00:53 2025 GMT
        Subject: CN=30345187bfc15ecc0595e9dfc7687490bc7290ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:ed:48:28:5c:7f:09:27:b2:f5:b5:da:e0:
                    ff:40:24:3e:45:5a:31:8a:7a:0a:01:f8:22:e8:25:
                    07:e6:f9:dc:93:65:d0:39:83:3f:1f:2f:7b:6e:66:
                    fb:f2:87:b6:bc:c5:60:20:cb:4e:83:9c:0a:cb:15:
                    65:a8:30:b2:7e:05:7b:fa:59:d0:0c:b0:96:7c:17:
                    f8:93:16:61:b1:16:61:5f:81:ee:b8:00:79:46:31:
                    07:9d:37:91:3a:27:f9:a2:36:7f:b5:0a:ce:05:fd:
                    d2:40:e2:e2:eb:02:0f:ac:fb:01:ce:59:27:f8:84:
                    b2:c5:c4:05:3b:66:fc:6c:ea:f6:07:a5:50:6d:24:
                    7b:d5:f4:03:69:d2:bd:bd:d0:b9:55:1c:d6:e5:3a:
                    5e:89:c8:0f:d6:c0:f1:65:4c:8f:18:44:9d:97:f9:
                    a3:70:5e:58:12:84:ab:9f:01:98:14:1f:ca:4b:53:
                    4a:b2:9e:fb:d1:7a:a8:bb:f1:32:e2:67:36:e8:8c:
                    ff:f1:36:4c:7d:1b:ed:59:e9:0e:07:ea:2d:53:74:
                    d2:61:21:14:87:a2:38:93:ac:02:e3:1e:fc:bd:39:
                    a8:2a:7b:51:9c:bd:2c:79:08:44:b3:98:54:05:0e:
                    37:61:87:c8:35:80:d5:52:15:ea:a8:14:18:e8:f4:
                    bf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:34:51:87:BF:C1:5E:CC:05:95:E9:DF:C7:68:74:90:BC:72:90:EE
            X509v3 Authority Key Identifier:
                keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:12:7b:01:2a:e1:81:5b:76:b8:d2:81:af:cc:9f:d7:8d:61:
         05:01:bc:7c:bf:d0:04:22:8b:94:16:83:4f:e6:a1:a3:44:96:
         81:b2:02:88:c1:0a:3f:12:b8:8c:ee:9b:5e:ab:9b:ab:27:27:
         77:f4:6c:ef:3d:5c:8a:b3:c3:d6:6b:12:c1:54:54:0b:3b:55:
         3f:12:83:d0:60:be:61:68:e3:ea:fb:df:a4:fa:6c:60:f8:56:
         d9:0d:27:b6:b6:15:69:be:6d:d0:35:ef:20:e1:26:89:3e:98:
         6a:09:e7:0f:7b:56:13:ee:de:24:f1:cd:be:b1:d0:8d:2a:d9:
         06:65:1e:4f:a7:2f:fa:7a:a7:71:28:f1:09:75:26:1e:83:d1:
         af:23:a5:95:e8:22:7f:31:c3:9b:cb:e9:b9:46:c2:a1:d0:c6:
         bb:30:74:7c:2d:90:b9:f9:bf:a5:7a:7a:59:c1:bb:12:33:be:
         7f:79:48:3c:57:1f:60:4f:7d:00:35:ed:5c:5a:aa:2c:67:f1:
         2f:e8:8b:a5:a7:51:ef:f6:bd:5a:46:fd:dd:84:68:f0:69:24:
         1c:7a:ae:a6:c5:12:0a:5e:8c:4e:0d:19:9b:7c:c5:f6:aa:8e:
         5c:bf:82:fb:22:de:01:95:8b:ca:a9:df:25:7b:cf:ae:20:02:
         bb:c7:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:05:19 2025 by rpki-client