This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
File:                     pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json)
Hash identifier:          LvR0SdtNsnEzf31Ulo9wRdAtU5KWDo7oCO28/mRs/Ng=
Subject key identifier:   98:4A:12:0C:1F:EC:F3:62:40:C7:14:A0:C6:29:C4:AA:1B:70:75:59
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Certificate issuer:       /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial:       019B3BA2BDA14EC8B3F9AF2D10B73EFCC609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
Manifest number:          178E
Signing time:             Sat 20 Dec 2025 12:01:19 +0000
Manifest this update:     Sat 20 Dec 2025 12:01:19 +0000
Manifest next update:     Sun 21 Dec 2025 12:01:19 +0000
Files and hashes:         1: OpKyWUUF45asysnRnTgjMvj5UEo.roa (hash: dG/NrnY4NueXZeuAaFWy5reT48MCWKXtWJgALxpo6BI=)
                          2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: bxQ/H+elbFGnj0YJ2IP+eL6FxewMdCUPhIYCaTGEvdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:a2:bd:a1:4e:c8:b3:f9:af:2d:10:b7:3e:fc:c6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
        Validity
            Not Before: Dec 20 12:01:19 2025 GMT
            Not After : Dec 21 12:01:19 2025 GMT
        Subject: CN=984a120c1fecf36240c714a0c629c4aa1b707559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:9e:d1:e2:ad:94:c8:3a:92:e3:16:dc:01:
                    63:25:07:7a:50:13:4f:08:54:1c:c6:a8:d8:93:04:
                    2c:2d:f9:61:9f:b1:84:16:46:7d:20:fa:9e:55:63:
                    6e:ba:50:1b:1d:01:a9:ba:bf:2c:64:3d:ce:06:07:
                    e0:58:29:f6:f9:1d:03:ca:f0:64:72:a6:40:bb:da:
                    57:16:77:6d:91:08:bb:fd:2d:2d:2f:ca:bd:22:1a:
                    08:83:31:74:52:49:7f:6c:87:99:20:46:12:1d:e6:
                    99:5e:e7:83:57:f7:b8:e6:c6:51:e7:f0:86:38:62:
                    1b:11:5d:fd:03:65:c3:15:01:93:9c:8a:76:60:f2:
                    c4:67:63:2b:41:15:80:65:00:7b:c3:fa:77:94:c5:
                    9d:ae:f3:84:0f:e1:a5:6b:6f:66:f2:f8:61:82:f8:
                    56:76:f2:6d:fb:13:b3:e5:20:44:fa:7d:82:24:e2:
                    79:82:03:69:2e:f6:2f:dc:82:8f:f0:26:55:99:19:
                    47:fd:8c:74:76:2c:f4:70:9a:c7:66:5d:26:44:c8:
                    bc:02:78:ff:a9:09:d2:5c:34:2d:e0:df:02:70:35:
                    f6:1f:6e:4b:25:4c:12:7e:64:6e:a3:0c:26:2a:6f:
                    3f:6a:bf:70:10:3f:59:d1:e3:e2:38:37:46:40:73:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4A:12:0C:1F:EC:F3:62:40:C7:14:A0:C6:29:C4:AA:1B:70:75:59
            X509v3 Authority Key Identifier:
                keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:11:58:5b:ae:33:ea:8f:cd:48:a8:86:1b:c9:39:72:08:fd:
         4e:a7:b7:da:89:46:f3:b3:e9:77:50:8f:41:a3:d3:c3:1b:85:
         23:02:67:f6:21:43:65:ac:82:f1:57:94:fd:38:2d:ff:d5:b0:
         aa:85:fe:8a:d0:6b:ac:13:b0:0c:ef:f0:dd:cd:2c:2e:5d:cd:
         70:24:07:9c:08:7e:46:3c:39:0e:41:a1:60:91:23:ee:de:04:
         a3:0e:bb:1c:05:1c:a2:8c:1b:55:52:c6:ce:de:aa:42:f6:a3:
         f2:8b:81:e7:07:f6:ec:69:3b:48:2f:0b:dd:fb:ca:65:6a:6a:
         b1:cb:cb:e8:11:54:bf:87:a5:34:74:6a:c5:64:61:e5:ae:cf:
         3f:17:86:82:50:58:64:96:c6:f0:e2:08:b9:75:d3:db:c7:f3:
         41:70:3c:39:88:5f:b5:33:1b:20:7d:b6:61:17:cb:8b:24:18:
         06:d8:f0:e6:36:95:b3:a7:da:f1:8e:a5:9d:ad:7a:3c:77:e9:
         aa:f3:ee:ef:59:9d:a8:13:45:e0:37:12:33:fd:de:66:f9:d7:
         0e:d6:3f:6c:20:1d:69:e9:f3:63:b0:42:6e:47:a6:d6:1b:f5:
         79:63:97:9d:45:84:f4:aa:8d:da:70:84:c4:ab:b7:1d:09:f3:
         05:e8:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:37:54 2025 by rpki-client