This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
File:                     sglyH0VIwmzzYulEqBsazueyS1M.mft (raw, json)
Hash identifier:          Ta6jBINVYtbv0+ExmXGDUQcfSi5+p0zYBYFYqecwBns=
Subject key identifier:   E7:E5:7B:9D:95:44:80:0D:E2:45:82:14:4F:8C:E2:B3:24:29:73:D8
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Certificate issuer:       /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial:       019B3A22061C62278E28885CFB8D17062C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
Manifest number:          178B
Signing time:             Sat 20 Dec 2025 05:01:06 +0000
Manifest this update:     Sat 20 Dec 2025 05:01:06 +0000
Manifest next update:     Sun 21 Dec 2025 05:01:06 +0000
Files and hashes:         1: Kn5YPKTavnkR9we3GavTZvxru0g.roa (hash: xBxCBv93EeHCLyNABUtZ7jn766Ch4SgbtDnPEkzOvDM=)
                          2: aM2Mmp7rYQ9Ds0NTfBSW1lSTHx4.roa (hash: MOXkGsTfJLVwHpeFy8hnMbfGHfgWVvoGY31VFj0P0FE=)
                          3: bELo5qIIpuod7qBLIUKqwA9Ds9w.roa (hash: WzrJgL+uq92c99WVaAJUBgvncMaquptkbbkZrtxJTI8=)
                          4: sglyH0VIwmzzYulEqBsazueyS1M.crl (hash: f4BDypdUOU9EsGKS/HLUeH2KkEaaOCEsx+joVi2Ndxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:22:06:1c:62:27:8e:28:88:5c:fb:8d:17:06:2c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
        Validity
            Not Before: Dec 20 05:01:06 2025 GMT
            Not After : Dec 21 05:01:06 2025 GMT
        Subject: CN=e7e57b9d9544800de24582144f8ce2b3242973d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:71:90:f0:19:e9:34:37:7b:1c:8f:b2:19:
                    90:26:ba:b0:83:d9:29:72:1e:0d:7f:6b:6a:ef:61:
                    2a:53:de:79:ff:62:cd:73:05:cb:1f:53:f2:ee:f1:
                    cc:84:bf:c1:5f:d1:b5:13:3d:82:da:ab:cf:bc:1d:
                    46:61:c9:1b:6c:45:bb:c6:a7:ba:83:e9:74:87:70:
                    4d:23:cf:cb:86:f0:e9:e6:1c:6f:67:f7:c5:5e:8c:
                    7d:9f:a6:b3:94:0a:4a:bb:32:77:24:d1:74:10:ea:
                    fd:eb:dc:a4:f3:b6:7b:97:1d:52:b4:fc:81:ac:45:
                    f6:c9:47:f5:d8:79:36:d7:3f:16:f3:74:59:ae:ac:
                    3d:a2:c1:ac:f9:1f:e7:01:a9:a3:c3:dc:d0:71:6e:
                    b5:1e:64:2a:21:e7:e6:05:33:ba:8f:e5:9c:33:6d:
                    9c:e9:83:f6:f4:07:d0:1d:44:20:ca:cf:14:43:9f:
                    3e:f6:82:2a:f5:06:a5:f8:87:22:05:af:67:20:25:
                    6c:58:e6:bf:81:3f:44:13:38:d9:51:68:18:5e:1b:
                    26:ba:02:2f:1b:7d:6b:22:6e:ee:56:1a:f6:24:f9:
                    63:9a:c1:ee:0c:76:26:52:a8:e1:35:a6:ea:04:b5:
                    c6:06:90:23:9a:72:a9:a7:da:dc:05:81:80:d2:f3:
                    e3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E5:7B:9D:95:44:80:0D:E2:45:82:14:4F:8C:E2:B3:24:29:73:D8
            X509v3 Authority Key Identifier:
                keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:b4:10:eb:8a:66:7e:d4:16:98:20:98:ce:63:67:00:ce:
         48:39:f3:4c:e0:14:77:66:d0:aa:6a:19:cb:7a:7f:ca:c0:16:
         8b:41:d9:c9:24:d3:5b:dc:6f:b8:6a:0a:6f:ff:79:12:c1:00:
         08:93:85:ad:25:42:a6:ad:aa:7c:53:ad:00:54:12:a6:d8:23:
         fc:f1:9e:3d:0d:cd:82:43:a2:ec:8d:cf:3a:87:a7:86:40:d4:
         14:16:42:1f:79:40:95:97:13:4d:b4:cc:66:86:0b:05:8a:2a:
         f4:c4:e4:41:43:1a:89:c6:ea:ab:66:2e:7a:02:19:f0:9f:ca:
         20:aa:ae:8a:79:ec:ac:7a:ab:15:40:fd:da:80:66:2b:b8:5f:
         86:0d:a7:31:74:eb:f5:50:50:ba:e8:e1:8b:dc:22:ae:9c:40:
         0b:f3:80:ec:3e:0d:8f:f8:70:6a:a7:66:8d:20:4c:62:de:c0:
         63:a2:4f:06:86:d7:66:7c:91:f9:b3:15:b8:2a:64:ad:2f:4f:
         79:b9:08:f4:c8:b2:e2:ab:cb:c0:64:d6:5a:79:bf:c3:77:5c:
         19:e0:a2:6c:da:9f:e8:48:46:2a:4e:f2:c3:4d:b1:a0:ee:0c:
         a6:2d:ca:12:60:2f:60:ad:94:f6:1d:48:ca:89:bb:da:a2:56:
         40:ca:b9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:05:10 2025 by rpki-client