This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File:                     B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier:          dgE3fSGfPhkDVeqbhIc6T3VoogqccYXoGIMVTPTmuA0=
Subject key identifier:   B5:7D:42:24:5C:EC:C0:86:B9:FA:94:FD:F2:03:48:22:06:0F:9B:AF
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       019B28525F62CABD2D2AA8EF299C0C3EAF63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number:          177F
Signing time:             Tue 16 Dec 2025 18:00:45 +0000
Manifest this update:     Tue 16 Dec 2025 18:00:45 +0000
Manifest next update:     Wed 17 Dec 2025 18:00:45 +0000
Files and hashes:         1: 8s9AQh9G6fVBfnNbnVmZTqXsuwg.roa (hash: 7Lq9v+syjN0uylqG5ZKh6ZFMzZAMtKjXsvWJlQW3WqE=)
                          2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: WhslVk1KyBPajCPA7KgspFUVvCX9DQEr6IiJxoxM/1w=)
                          3: Co6zif6CgWxRVPx-_ozSij8EWsM.roa (hash: tL4rizo5edxFSlgftU4orevud41ccjdavnz1fdBIeh8=)
                          4: FACURSdoz5OXAwHWNlnhNICg9F0.roa (hash: 3U3F3vpoSGWG8W05XxfcjCVl5f3g2xqAcWZcxKLJRAE=)
                          5: FXRgISRr4r0qJMxDJtaKy7jfxLk.roa (hash: CNBr6epDj6lk+oP3uUMBIFKdBGZjq4jTdlf6g/B5kss=)
                          6: LbBUCL65r2B63EtnXKf7awdkLYs.roa (hash: 2aoR9do7AfxOMNUBvut0kk7xNv4cPQ2DW93XsHzKCbI=)
                          7: sJORlDIYhJ-eoVWPnOpMlTBULZ0.roa (hash: Sxfegd8dDdgBw/BGcRFtl+Zhhz8tR0R0fRjO1Pzn9hA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:52:5f:62:ca:bd:2d:2a:a8:ef:29:9c:0c:3e:af:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Dec 16 18:00:45 2025 GMT
            Not After : Dec 17 18:00:45 2025 GMT
        Subject: CN=b57d42245cecc086b9fa94fdf2034822060f9baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:08:67:8e:fc:6e:4c:85:37:57:7d:5b:02:
                    a5:5e:b5:6f:a4:2c:86:fc:c5:cf:12:b0:b7:57:eb:
                    51:28:df:7b:00:b1:d0:ba:47:d8:3f:86:62:74:7f:
                    5b:a0:00:51:6f:2d:3a:d2:c3:6a:80:a2:58:3c:fb:
                    99:57:e0:e1:9e:97:c0:e4:85:ef:0b:b4:09:6a:4d:
                    28:31:35:2b:6c:e5:86:33:fe:7b:1f:5d:ce:b4:f1:
                    0e:51:53:fd:58:10:a1:9f:d7:29:00:13:7b:9f:dc:
                    a8:75:27:a1:22:13:3c:13:13:a7:a6:61:8c:96:77:
                    04:93:99:71:26:78:28:c5:ac:12:2e:3d:e4:91:f8:
                    48:95:fb:6f:9d:52:52:2c:8c:34:91:cd:52:58:1a:
                    ad:ba:ea:ea:4e:f8:65:4f:40:a0:ab:51:22:98:6b:
                    f7:1c:2a:4d:4d:5e:7f:02:bf:2d:c9:eb:28:88:6b:
                    d7:3b:2f:a9:13:d2:47:c5:8a:f0:12:aa:a7:75:bd:
                    17:0c:5c:1c:1c:78:81:0f:f5:40:4e:b3:ca:a3:d9:
                    b4:aa:c1:07:98:8b:2c:0c:6b:51:b1:a7:01:54:0b:
                    82:18:5c:be:b0:13:e4:ed:36:03:f3:32:dc:92:52:
                    ef:16:ca:43:9a:e9:ce:65:0e:b2:c4:1d:7b:2d:90:
                    3c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7D:42:24:5C:EC:C0:86:B9:FA:94:FD:F2:03:48:22:06:0F:9B:AF
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e3:db:ef:64:bb:ba:ae:93:24:b8:c4:e7:dc:0b:c4:22:26:
         f8:61:7d:f7:2b:43:a3:81:28:90:c5:da:65:92:13:49:c2:9d:
         6a:bf:b1:29:e7:01:fb:5f:e0:2e:94:3c:98:5a:57:30:3e:5d:
         e7:3e:27:67:d8:07:99:1a:c3:70:d8:7a:73:53:50:07:74:17:
         c9:f1:8d:17:08:57:d6:88:d9:f5:7b:79:4b:6e:8f:0a:c5:6f:
         45:24:cb:9d:57:8c:8f:37:2f:38:4a:49:49:d3:d5:0b:eb:df:
         80:48:0d:24:17:8e:43:25:5d:e8:49:33:ec:49:7e:99:74:cd:
         4a:c0:40:bc:a8:da:2d:af:f0:d1:b0:e1:25:a8:10:89:eb:3a:
         ec:77:44:c0:12:2f:52:88:dc:4d:5d:a0:1e:ce:a7:ed:75:cb:
         ac:35:a0:75:0b:84:17:71:70:31:af:2e:70:77:a1:78:fa:86:
         51:bf:70:80:54:d5:25:77:39:5e:7f:98:60:8e:02:c7:e0:7b:
         a5:b5:bb:3b:c2:c5:5e:c4:ed:38:ed:22:ec:a8:16:66:d9:a8:
         cd:4a:1a:e4:f0:78:2f:4d:c5:0a:2a:69:9d:e4:d7:5a:f1:b4:
         69:09:61:a1:d1:a1:83:22:27:ac:22:d4:79:bb:ed:b5:9f:27:
         9a:48:52:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:18:55 2025 by rpki-client