This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File:                     AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier:          bcQkIxwP4TnLx0+hz33nkLYff7KTgJrtwAoLtyAAx+U=
Subject key identifier:   51:74:1C:6A:51:C5:8A:3A:C3:41:C0:B1:51:98:48:68:3C:3A:F4:D4
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer:       /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial:       019B43CA12993FA9D59285225A00F8C5F4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number:          178B
Signing time:             Mon 22 Dec 2025 02:01:15 +0000
Manifest this update:     Mon 22 Dec 2025 02:01:15 +0000
Manifest next update:     Tue 23 Dec 2025 02:01:15 +0000
Files and hashes:         1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: VRC34oUUKtS0ODftVV/7wlxplCPgMo0kPs+D9rDg21E=)
                          2: Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (hash: 7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:ca:12:99:3f:a9:d5:92:85:22:5a:00:f8:c5:f4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
        Validity
            Not Before: Dec 22 02:01:15 2025 GMT
            Not After : Dec 23 02:01:15 2025 GMT
        Subject: CN=51741c6a51c58a3ac341c0b1519848683c3af4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:24:84:d6:31:49:bc:c5:0c:03:f4:64:62:12:
                    1d:02:d2:6e:3d:5a:f4:e1:2a:2b:89:21:79:a2:40:
                    90:1b:0e:fe:0c:50:c5:a0:8e:f8:67:4b:d8:75:07:
                    0f:ac:4a:08:33:39:9a:70:22:86:8f:e6:76:ae:55:
                    a0:73:04:dc:85:ba:46:89:af:c4:99:70:d4:3f:78:
                    e9:ca:32:72:c5:46:00:5f:b2:d6:d0:3c:dc:ed:e3:
                    f2:e2:30:2b:ef:95:58:19:2e:ca:5c:f3:2f:b3:36:
                    d0:3d:99:d9:d9:6e:79:aa:26:5f:ed:4a:27:ec:90:
                    7d:d7:47:39:99:df:ae:5b:22:30:b2:56:35:3a:8e:
                    af:64:cf:69:ec:5d:10:67:ce:39:be:3f:06:9f:dd:
                    4f:c3:ac:4c:b8:85:aa:59:16:60:5d:e2:a7:77:bd:
                    06:a9:6b:df:bd:8a:23:10:1c:eb:0e:d7:e7:64:28:
                    47:d6:c6:52:89:38:ec:62:c0:ec:df:53:92:2a:1c:
                    19:eb:b0:1c:eb:de:2b:06:9f:ed:31:0e:07:9b:11:
                    d3:49:c0:5a:38:87:0e:d6:85:d2:f5:0a:72:82:74:
                    01:d3:a2:d4:12:32:a1:9c:4d:5b:88:36:54:ea:5c:
                    ef:ca:82:0f:8c:8c:e0:8f:06:47:0a:9f:3b:28:b4:
                    ff:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:74:1C:6A:51:C5:8A:3A:C3:41:C0:B1:51:98:48:68:3C:3A:F4:D4
            X509v3 Authority Key Identifier:
                keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3e:b1:d2:ed:88:55:e7:8c:1b:17:45:ad:85:c8:b5:3c:a1:
         25:a0:ee:4d:53:97:d5:b9:17:08:63:af:37:bc:38:1c:b6:4e:
         fe:3f:c3:5e:73:ff:99:78:ae:60:c6:50:25:a7:0a:69:df:ae:
         37:12:fd:8f:52:8a:c4:1b:b7:8c:ae:5b:39:51:98:c6:a2:7d:
         99:28:e4:f8:8f:9f:0d:84:97:4b:c2:e5:21:a9:a3:26:4e:40:
         4d:4a:04:55:0d:73:30:5b:3f:6d:a6:9d:9a:26:ad:06:df:1e:
         67:8c:43:9f:4c:70:60:82:e2:0b:36:58:e8:e3:fc:6f:8d:27:
         27:55:cf:32:66:31:d1:1e:4b:d1:ad:60:ea:9d:d6:7d:eb:9e:
         31:42:0c:59:cd:2a:52:38:40:99:e4:d3:c9:40:53:9b:8d:a3:
         12:03:b9:8d:e2:19:3f:3a:d7:28:87:ec:16:b8:a1:d6:49:5e:
         0f:7e:88:a0:ec:a7:5f:11:44:cd:3f:16:48:ee:2a:b8:50:27:
         91:86:35:1e:3f:f5:fa:0f:94:b9:79:95:99:9b:8a:1a:95:c7:
         43:08:a1:ef:c9:19:ce:8b:93:42:ee:4b:61:4b:d6:3f:fb:9f:
         eb:57:2d:98:b5:ca:d1:7b:1c:87:32:74:14:9c:56:f5:e3:0b:
         67:75:9b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:31:10 2025 by rpki-client