This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft
File:                     fyuobfeHiI9vhZKoBqb_6jBGwHo.mft (raw, json)
Hash identifier:          2EiJFEz24d0scda7LLIZ8F9cHEeygVQZS3K4NW3arLE=
Subject key identifier:   72:04:B4:8A:B8:41:D3:B3:83:82:50:7C:66:63:5A:78:D7:68:F1:59
Authority key identifier: 7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
Certificate issuer:       /CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Certificate serial:       019B3D59F8EF5D8FD241F291A1008BC222C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft
Manifest number:          178C
Signing time:             Sat 20 Dec 2025 20:01:05 +0000
Manifest this update:     Sat 20 Dec 2025 20:01:05 +0000
Manifest next update:     Sun 21 Dec 2025 20:01:05 +0000
Files and hashes:         1: 1-EBqQrT3eC_nxc7Cq29UCGXfrws.roa (hash: /fSp0NUgyT3DGS+foORd4E+QTSVz7kGcWwaPOqxB8jI=)
                          2: e_wW9zvrjOC_XNW6FAaP6katjIc.roa (hash: 6VIC6jZ1463kMQDzHIqx4Od/3Y1MNpREDwQzPEt8kvU=)
                          3: fyuobfeHiI9vhZKoBqb_6jBGwHo.crl (hash: pyQmic4IrWQtIADBA23NgGDpWk/lznAFIX/uzE9QV1U=)
                          4: mM6GiN-fB7HqQ5hEvmqNqpmWRsw.roa (hash: Ek9jyOtYbrdAk+R69tpAey1b1/LsfeE3z27cYGaMX5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:59:f8:ef:5d:8f:d2:41:f2:91:a1:00:8b:c2:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
        Validity
            Not Before: Dec 20 20:01:05 2025 GMT
            Not After : Dec 21 20:01:05 2025 GMT
        Subject: CN=7204b48ab841d3b38382507c66635a78d768f159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:c2:43:f5:7e:28:4e:f3:30:dd:80:85:33:
                    bd:6e:ce:e6:f1:fd:83:21:63:42:72:de:9d:fd:8c:
                    2a:f6:0a:18:78:20:0b:81:07:df:5b:4a:d3:6c:ec:
                    94:62:87:d8:0b:d3:44:77:50:07:8d:98:49:54:fe:
                    47:cb:2c:8f:bb:d0:a8:5d:9b:cf:05:c7:8a:8e:27:
                    b2:f3:7e:48:85:8c:31:7a:0c:88:68:63:40:46:3a:
                    e2:a6:2d:8e:ef:1c:95:d4:88:0b:0a:23:2f:ed:1c:
                    05:13:c2:19:aa:4b:82:fb:be:7e:c9:d7:84:b1:35:
                    72:be:ca:c1:f7:9d:bd:12:ce:d2:e8:e6:75:6d:29:
                    27:7c:5f:d5:6c:3d:66:e1:78:9b:5c:43:2a:86:e2:
                    f5:41:86:da:a6:86:3a:ce:c9:65:48:92:e7:2a:b9:
                    0c:99:b4:f4:e8:62:d7:8b:ec:e9:d5:44:6a:ac:12:
                    2a:9a:3d:42:f9:7c:04:38:d9:9a:16:14:3d:87:c0:
                    4a:b9:f9:97:a0:dd:db:c1:53:4c:99:d4:94:d3:0a:
                    91:ed:81:c4:72:fc:8d:fb:dd:60:95:5f:7f:0d:e1:
                    2b:3a:ee:0d:61:ef:9a:bb:da:35:be:45:64:67:85:
                    18:de:a5:a2:a1:28:0f:d6:37:94:c5:b2:69:1e:27:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:04:B4:8A:B8:41:D3:B3:83:82:50:7C:66:63:5A:78:D7:68:F1:59
            X509v3 Authority Key Identifier:
                keyid:7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:0d:24:3e:68:62:0c:93:87:c8:07:81:22:20:1b:fe:f9:
         e4:84:2d:f0:a3:07:a5:69:87:37:d3:a0:b0:3e:76:4a:56:53:
         00:67:51:14:b3:28:63:b0:f1:62:e4:d5:05:cc:9f:bd:53:95:
         6e:f0:6b:22:66:ca:48:9d:b6:a8:1b:82:1a:4e:1d:3a:a4:11:
         16:b7:12:b6:e1:d8:14:12:97:a4:82:26:1f:a7:ea:9d:42:c2:
         1e:f0:6b:21:5d:80:45:6a:9e:99:f8:7e:f0:27:18:60:87:91:
         8b:9b:03:f0:9b:b0:37:26:82:72:13:10:44:c2:8e:28:5a:2b:
         5d:f0:5c:74:5c:34:f0:f9:26:67:70:7f:78:7b:ff:fa:a7:13:
         c2:f4:cb:b1:f5:49:72:d5:ee:05:e1:a6:22:18:8c:64:2c:be:
         10:56:43:3b:75:3e:7c:fb:7f:fd:40:ff:92:79:d7:29:3f:63:
         9c:53:15:93:60:df:0d:25:80:60:cd:42:9b:64:ba:2b:88:22:
         63:5e:b9:2d:f7:b1:99:1f:96:a7:fa:58:52:fd:8e:60:55:de:
         da:de:12:cf:bc:9d:42:ac:c0:6b:ed:9a:79:42:ea:5b:ec:cb:
         28:33:70:43:b7:6f:1a:24:6d:be:59:98:74:be:38:9d:cb:44:
         2e:46:e6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:59:41 2025 by rpki-client