This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
File:                     V7J1ubzEXc6LPvAXLJZzeACUek4.mft (raw, json)
Hash identifier:          zZ7B8tKBB6bv5pvQMtd58Y4B/2rrVRZ/+Aop2btg/RI=
Subject key identifier:   16:2D:78:4A:62:1B:93:5C:D8:00:54:08:B3:83:9C:39:18:89:7E:3D
Authority key identifier: 57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
Certificate issuer:       /CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Certificate serial:       019B416DE2E72AF79910764112591E9E14A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
Manifest number:          178D
Signing time:             Sun 21 Dec 2025 15:01:19 +0000
Manifest this update:     Sun 21 Dec 2025 15:01:19 +0000
Manifest next update:     Mon 22 Dec 2025 15:01:19 +0000
Files and hashes:         1: ABuElM6_NHXhhyjrbNO7-7-4-tw.roa (hash: RB6lZGDNmRmLvQ7wPbU3Ifx1OhDqRcQW8eOAw1dgZcE=)
                          2: V7J1ubzEXc6LPvAXLJZzeACUek4.crl (hash: tz8KYo+ENEB73iCJSYxPibBz1CXaUE/GwyM8bES+EXk=)
                          3: sIxOdNT6bFxHKmNN0CZFI4DmR-8.roa (hash: 5J0fAmw/YI6nG5pD9p8YdD7k7oyOLgeH2PS70uMH6I4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:41:6d:e2:e7:2a:f7:99:10:76:41:12:59:1e:9e:14:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
        Validity
            Not Before: Dec 21 15:01:19 2025 GMT
            Not After : Dec 22 15:01:19 2025 GMT
        Subject: CN=162d784a621b935cd8005408b3839c3918897e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:c5:41:c3:90:52:b3:3d:74:62:09:5f:0f:
                    1b:16:fa:a3:37:82:83:39:7c:99:3f:ac:c7:3e:2c:
                    0d:95:31:d3:27:f0:fb:6d:11:09:84:a3:a2:82:0b:
                    66:64:2b:e4:cb:e9:22:ef:43:5a:78:e7:91:b0:a8:
                    61:92:a9:44:8b:dd:fa:de:a8:00:e6:fa:52:57:06:
                    38:26:12:05:96:1c:0f:08:e7:ff:f2:f8:cc:91:70:
                    2f:8e:a3:48:d7:d9:5a:8b:58:9a:1f:44:63:bf:26:
                    6b:bc:95:16:95:c1:3f:19:88:92:26:c3:4c:9c:83:
                    68:4a:49:5e:4b:a9:27:d3:c4:98:2c:28:34:49:01:
                    b1:b0:d8:85:42:66:34:f5:7a:b1:68:59:f5:f1:a9:
                    e6:e2:05:fe:e7:9b:a7:b6:c1:ca:ec:8c:cf:13:14:
                    c6:2a:bb:33:3c:ff:b2:e4:c5:b1:da:70:cf:37:03:
                    b9:f6:74:60:2b:95:6e:3c:ff:72:f3:c4:ba:76:46:
                    74:94:ca:db:e9:1f:11:7d:6f:a1:6b:0b:3f:72:af:
                    99:42:95:f9:8a:78:b0:df:9d:a5:1b:71:5a:da:36:
                    e5:7e:16:68:4e:7b:21:27:bd:ec:6f:c5:37:55:ad:
                    e7:dc:ad:2d:f8:d4:67:62:ef:ee:6e:1f:24:77:74:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2D:78:4A:62:1B:93:5C:D8:00:54:08:B3:83:9C:39:18:89:7E:3D
            X509v3 Authority Key Identifier:
                keyid:57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e3:b5:6a:27:45:f2:da:a0:f8:91:6a:e4:01:73:48:62:95:
         73:ae:d7:ba:36:f3:61:1a:d7:a5:45:41:51:b5:33:23:91:de:
         b5:bd:9e:22:d8:60:e5:74:8b:55:7e:96:8a:5e:e1:3b:e2:ad:
         78:82:5b:e3:26:77:ba:29:34:1c:2e:ee:01:91:51:fb:34:66:
         3b:e6:cc:17:c6:40:cc:fc:1c:08:11:69:c1:29:8d:a6:f6:34:
         5e:b1:55:24:e1:20:44:5f:4d:ae:66:f9:65:1c:23:60:ae:7c:
         12:56:79:c8:e2:13:f1:a2:3d:e8:1a:43:c4:c7:87:95:3c:ec:
         0c:c6:36:48:5f:fb:c8:c3:37:63:67:c3:3d:b6:a1:41:cc:d9:
         03:59:89:d3:a9:39:7e:1d:0b:58:c0:a4:15:11:8d:d0:b8:0c:
         28:57:e3:bd:0b:4f:92:2b:95:67:20:33:17:5e:da:78:98:29:
         c7:90:cc:8c:c0:59:66:29:68:86:32:95:b2:0c:68:a3:4f:6b:
         26:e0:1b:d7:0a:03:18:cf:3c:53:f9:8d:37:e1:78:17:e2:ba:
         42:48:4e:7a:0a:ee:e3:bd:29:c2:32:2a:56:2a:65:f0:cc:a0:
         7b:19:de:3c:67:41:64:0a:ab:1b:36:16:26:ce:d7:50:e3:60:
         45:f6:08:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:14:30 2025 by rpki-client