This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
File:                     AdbvBHn5_fqCZlff2ODvNmjKGr8.mft (raw, json)
Hash identifier:          TNaJQNqSdyUFy5bByKYTZbdYFfqin0GV380b6CwCoPw=
Subject key identifier:   39:53:4A:CE:EE:B3:FC:A3:B6:2F:68:7A:13:73:1D:80:12:8D:BE:97
Authority key identifier: 01:D6:EF:04:79:F9:FD:FA:82:66:57:DF:D8:E0:EF:36:68:CA:1A:BF
Certificate issuer:       /CN=01d6ef0479f9fdfa826657dfd8e0ef3668ca1abf
Certificate serial:       019B58639DEDDF4EFBD43EB0F88C87702B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
Manifest number:          172B
Signing time:             Fri 26 Dec 2025 02:01:21 +0000
Manifest this update:     Fri 26 Dec 2025 02:01:21 +0000
Manifest next update:     Sat 27 Dec 2025 02:01:21 +0000
Files and hashes:         1: 7EOzLcM3E8sNA4PjSFrYUsbrEd0.roa (hash: no++UKlw2Jo1Bu83dbRNy2X31/EQKIzfSNC5oFSK5Ew=)
                          2: AdbvBHn5_fqCZlff2ODvNmjKGr8.crl (hash: eieiwvhk1e0v3sQqi2wVqkNdOhB5V6jJWitAm27Csy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:58:63:9d:ed:df:4e:fb:d4:3e:b0:f8:8c:87:70:2b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d6ef0479f9fdfa826657dfd8e0ef3668ca1abf
        Validity
            Not Before: Dec 26 02:01:21 2025 GMT
            Not After : Dec 27 02:01:21 2025 GMT
        Subject: CN=39534aceeeb3fca3b62f687a13731d80128dbe97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:5a:dc:f5:2f:fb:38:db:fc:73:43:c2:59:
                    3a:1c:f0:68:0e:5c:90:e2:8d:a7:9e:ef:f7:65:d1:
                    ca:c3:95:cd:a5:70:52:09:ac:5a:60:76:ea:89:7c:
                    4d:b5:47:ff:7b:15:57:75:e9:99:1b:b2:f7:d3:bd:
                    35:61:ca:fb:c8:00:fc:10:5f:68:ca:9c:55:42:a6:
                    6b:4f:4e:87:7d:d4:06:68:1a:38:34:e8:88:95:1b:
                    20:0f:87:79:12:3a:f8:0e:b2:02:11:47:95:f3:df:
                    84:0f:dc:6e:4a:cf:8c:93:f3:a4:b2:b6:d7:0d:9a:
                    db:5d:9c:b4:76:91:04:ce:d7:5e:78:e8:cd:e7:8b:
                    25:67:65:c6:af:64:0d:eb:34:da:77:f6:1f:06:d3:
                    8c:fa:3b:f9:d5:71:49:98:be:74:22:40:24:7f:89:
                    ef:8a:98:66:eb:a3:62:4f:50:a5:77:28:ee:68:29:
                    cb:56:24:ed:79:4c:4d:31:de:d5:59:12:09:cc:7b:
                    1e:98:07:71:6d:a4:d9:9d:64:d9:a4:b3:d5:df:ff:
                    3e:a6:9f:6c:82:09:73:d0:62:db:66:ee:ab:09:a4:
                    fe:be:c1:25:7d:df:31:60:63:a1:d5:9c:01:54:fa:
                    5b:76:6d:e6:48:7d:64:42:85:f2:e3:e0:d2:1e:81:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:53:4A:CE:EE:B3:FC:A3:B6:2F:68:7A:13:73:1D:80:12:8D:BE:97
            X509v3 Authority Key Identifier:
                keyid:01:D6:EF:04:79:F9:FD:FA:82:66:57:DF:D8:E0:EF:36:68:CA:1A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ad:58:cc:d2:a1:0b:3b:ed:1a:fc:da:f2:af:1c:4e:41:49:
         9c:50:bf:56:52:a2:d0:64:48:e4:ed:a9:18:c0:e8:d2:12:3f:
         16:57:98:fd:71:08:a9:38:07:3b:78:7b:8f:71:72:80:44:21:
         4a:88:fc:6d:b2:a6:c8:57:29:59:bc:59:b1:03:6b:8d:a0:4b:
         29:80:1b:6c:12:53:7b:0f:89:3f:6c:9a:5e:35:c9:04:ec:53:
         05:ef:da:27:94:27:cc:65:54:b8:64:11:c3:73:1a:b4:67:bc:
         9e:36:e6:48:bb:fa:d7:b3:80:06:c1:25:e0:66:76:33:fc:03:
         c0:70:36:8d:00:2e:64:65:24:da:56:1d:1d:68:f4:45:8e:cc:
         8d:1a:98:db:c3:70:0c:30:d6:5b:ee:03:62:b1:b1:f6:92:4f:
         8a:18:39:31:52:b3:32:b4:7e:ee:6f:a8:c9:69:46:03:b3:dd:
         2d:a8:88:1f:b9:69:0e:77:0a:08:01:e4:41:43:34:5e:35:26:
         fc:fb:4a:66:b6:9e:16:89:3a:56:6d:73:70:1c:d9:dc:b3:fb:
         09:94:14:a8:af:89:52:23:52:9e:1b:32:04:d2:62:29:d0:d7:
         17:1d:e2:3c:a2:33:47:a8:69:5c:92:ae:9a:9b:ad:47:db:8c:
         d8:7b:d7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 11:16:36 2025 by rpki-client