This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File:                     N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier:          rR4e4vr064ZHNSE2F7PneOncG863Cw87ugXM/XXtaB0=
Subject key identifier:   2D:72:9C:22:E2:54:96:7B:98:BC:18:E0:71:41:FF:31:69:2F:F4:60
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer:       /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial:       019B563E17D347C93A7D9CBA0AF2D8339AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number:          179E
Signing time:             Thu 25 Dec 2025 16:01:08 +0000
Manifest this update:     Thu 25 Dec 2025 16:01:08 +0000
Manifest next update:     Fri 26 Dec 2025 16:01:08 +0000
Files and hashes:         1: HxZU0iTvv354MAx-YYeydPcZNIw.roa (hash: ZmBmkbINPjgbF7Kx8488Fp1UyAG+oYkTQNgORCAbrMc=)
                          2: Lv93kZr3FrSvC5fAGNeod6j_6yM.roa (hash: 37H9uvEBQ9sb3AaWMyi05t5K1mxRb/qz/+D6tmcVRbg=)
                          3: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: TR2wRPKQR62lXN/JYKq4rk41w8PzB61k32zqZNAz868=)
                          4: nCYRFHxESiPTOP0DiwWAA3vf6pc.roa (hash: n1iHEUmqWKjUYGzT2fByz8YLuqOJY83LkJFmv6uksFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:56:3e:17:d3:47:c9:3a:7d:9c:ba:0a:f2:d8:33:9a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
        Validity
            Not Before: Dec 25 16:01:08 2025 GMT
            Not After : Dec 26 16:01:08 2025 GMT
        Subject: CN=2d729c22e254967b98bc18e07141ff31692ff460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:9a:4e:f1:0c:53:20:1b:b9:e6:d5:83:76:
                    82:98:84:78:39:0b:fa:7c:7a:8e:15:3e:27:94:b2:
                    c7:4e:34:1a:d9:77:44:7d:e1:73:ee:12:68:2d:15:
                    ca:2d:fb:67:dc:c7:00:98:69:86:73:f6:5c:df:e2:
                    18:a1:b3:47:51:b5:39:72:d4:83:19:a3:c1:7e:48:
                    a7:29:85:58:12:28:f7:ab:0f:6f:27:16:2a:fb:dc:
                    e6:2c:c0:ec:73:0a:11:c0:84:de:76:d5:00:5b:ff:
                    a9:1d:a4:ec:4b:7f:16:12:17:66:fe:a3:d3:6c:cd:
                    32:c7:72:b9:8c:96:f9:24:ec:78:67:ab:9d:08:41:
                    df:c1:c1:70:b8:9a:b3:78:91:bb:dc:cb:1e:a2:86:
                    ae:0b:14:7c:9b:04:92:f4:7a:af:76:cc:74:4a:65:
                    07:95:fa:31:15:a5:da:f2:5f:ac:33:09:be:18:a4:
                    d0:0e:34:8a:bf:4d:2b:a2:b2:6c:e2:24:19:26:db:
                    db:74:10:19:79:70:08:e8:af:1a:e4:b1:e8:66:e7:
                    b6:e7:4a:bd:2f:72:50:ab:15:f6:ee:00:e0:63:23:
                    38:b7:6b:77:8c:2c:19:4d:2e:eb:f3:2a:c9:e9:9d:
                    1c:42:83:df:15:32:dd:ec:e7:ee:8b:6b:12:5d:3f:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:72:9C:22:E2:54:96:7B:98:BC:18:E0:71:41:FF:31:69:2F:F4:60
            X509v3 Authority Key Identifier:
                keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:01:e8:4f:dc:80:97:3c:67:32:f0:38:2d:03:11:71:ae:73:
         b9:b7:32:b3:aa:4f:15:d8:bc:b6:aa:3c:dd:18:b7:89:38:5d:
         31:6d:ba:29:56:52:91:13:58:c0:58:f3:ef:26:ad:e1:5f:0a:
         09:cf:f3:1a:13:88:cb:ed:bf:76:04:9d:17:cc:c2:4f:88:f3:
         fa:0c:b5:82:38:94:5b:55:f7:f3:50:71:c3:66:15:8e:a1:89:
         8b:a3:04:bb:1c:23:83:1e:6a:f8:21:63:af:64:69:7b:60:df:
         e3:16:ab:6f:69:af:b7:f6:57:3f:1d:e8:d2:a2:d6:e4:3e:31:
         36:95:a2:07:75:24:e3:09:b4:c2:ed:11:b6:e6:f4:3a:00:de:
         60:53:76:bb:14:a3:0d:32:0f:c5:94:44:28:dd:e7:9b:3f:b2:
         2d:e0:98:94:65:b5:6b:e4:0b:e6:76:4a:0d:f7:7b:16:6e:72:
         0a:40:a4:6d:7c:a0:a5:3c:4f:61:19:7f:83:65:e8:be:8b:11:
         35:7f:3d:5e:de:3e:b0:da:67:29:39:ca:cb:51:51:22:c3:24:
         72:c6:55:48:28:7a:a6:ad:ca:8c:1b:73:f4:92:de:c3:59:c8:
         3d:b2:c9:00:75:56:28:98:55:c3:3b:a1:e9:09:52:c5:af:78:
         e9:e0:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 22:14:13 2025 by rpki-client