This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File:                     S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier:          X2PU7WlRn2lAeFOJj7y5LWzw9vegdlBb1gbSxlJ3SAI=
Subject key identifier:   E8:6C:79:19:A0:B8:82:2A:2A:6A:1E:1F:31:B7:A1:A2:65:A6:9C:E2
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer:       /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial:       019B439333C3B00036102903D91C0B343462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number:          178C
Signing time:             Mon 22 Dec 2025 01:01:19 +0000
Manifest this update:     Mon 22 Dec 2025 01:01:19 +0000
Manifest next update:     Tue 23 Dec 2025 01:01:19 +0000
Files and hashes:         1: Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa (hash: reqjwr/lIQUNR5CfmDP6LbkF/9R8ba/CN2hm8CCraWc=)
                          2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: DlAPfu2IeTMVIQe18/+u7ZsEOzi0R1eEbt0oBMuuI0w=)
                          3: zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa (hash: 1fee2j1QaONApl9ibC5gkmW09S49dKdtErXLxO2GvfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:93:33:c3:b0:00:36:10:29:03:d9:1c:0b:34:34:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
        Validity
            Not Before: Dec 22 01:01:19 2025 GMT
            Not After : Dec 23 01:01:19 2025 GMT
        Subject: CN=e86c7919a0b8822a2a6a1e1f31b7a1a265a69ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:f1:ef:0c:a4:09:90:7d:24:9d:ad:ce:af:
                    e7:f5:ec:46:a4:42:f5:c6:7f:77:07:5b:51:31:31:
                    db:15:cb:57:de:f6:12:2d:b1:49:1a:4d:93:d8:a4:
                    5c:09:b1:a5:9a:c0:0e:ba:e3:02:fe:64:09:e8:44:
                    e0:84:3b:ae:6e:9b:52:f8:a5:2b:d9:5e:a0:3f:67:
                    5d:76:91:0a:43:8a:4d:6e:d6:90:00:0c:43:f9:f3:
                    a6:55:5b:3a:11:25:2e:4a:9e:db:fd:da:d6:b2:2a:
                    d5:d1:8c:3a:96:45:d8:9d:23:7f:ba:09:07:74:ea:
                    ea:1f:fb:48:bc:26:9a:02:dc:e8:f4:b4:7a:a8:75:
                    38:f8:cd:e8:c4:de:bd:24:8b:a6:cb:57:54:c6:5c:
                    f5:86:97:4b:81:89:94:b0:96:8c:11:a2:e7:ac:2e:
                    01:99:b4:6d:cb:24:bd:95:f4:d2:89:e1:bd:2b:38:
                    41:f4:7d:cb:4b:06:3c:b2:cc:2d:77:4b:d2:33:af:
                    27:1c:2d:18:eb:cc:f1:ab:9d:5c:5c:57:3a:6e:d2:
                    b6:53:0f:78:57:c7:fc:79:b8:61:40:86:31:8b:7d:
                    87:f3:57:6a:1d:2a:f5:07:f9:70:ad:54:bc:9d:35:
                    ac:51:7a:0e:a8:e0:0d:42:77:6a:f4:a9:5e:95:c8:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6C:79:19:A0:B8:82:2A:2A:6A:1E:1F:31:B7:A1:A2:65:A6:9C:E2
            X509v3 Authority Key Identifier:
                keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:57:87:04:24:11:49:80:30:09:df:5b:bd:cf:0d:2c:e9:18:
         97:3f:24:11:4a:32:16:08:ae:5a:19:3e:ac:9b:96:fa:90:5c:
         50:db:2e:b8:0b:77:2a:7f:d5:46:ff:8c:52:0d:7e:0e:2d:eb:
         75:65:40:27:05:50:3f:d8:ae:ea:65:42:94:45:6c:11:67:44:
         b1:14:38:ae:69:b5:6a:ad:d9:69:e6:86:ce:c6:92:57:cc:68:
         af:be:07:b2:91:82:67:31:6d:42:04:9e:a3:c4:0e:73:d7:09:
         de:46:74:7a:a6:28:98:d4:43:16:e1:a6:69:87:52:b0:1e:6d:
         ba:11:39:28:bb:8c:a5:ab:c2:28:52:92:6f:ac:e5:63:18:c9:
         2f:ec:57:fd:ba:67:42:19:3a:be:c8:46:13:c4:8b:fa:f0:f3:
         69:28:f5:4b:ce:99:c6:1a:10:17:ad:7e:83:17:9d:63:b5:f6:
         e4:77:f5:75:27:7e:83:1a:67:c1:ef:2d:98:49:81:c5:c8:22:
         42:c8:84:3f:7a:74:c2:fe:6c:57:98:a2:53:f9:5d:f3:0d:f4:
         a3:a0:34:e0:c1:17:f4:57:a0:77:cb:4c:6d:e5:46:96:03:4a:
         6d:5a:28:f2:44:d5:84:00:af:e9:dc:4a:b8:9d:9f:c0:e0:ac:
         e6:33:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:53:52 2025 by rpki-client