This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File:                     pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier:          Tc/NgxGDvNWBnPVA0UKSLgNpbV5o5NN0kxt4FboTPo4=
Subject key identifier:   10:15:1A:4B:38:54:A1:3B:39:69:CD:A3:3F:2A:42:CF:F3:17:9C:67
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer:       /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial:       019B435C3F7801AE277B86A7475EA20598AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number:          178E
Signing time:             Mon 22 Dec 2025 00:01:17 +0000
Manifest this update:     Mon 22 Dec 2025 00:01:17 +0000
Manifest next update:     Tue 23 Dec 2025 00:01:17 +0000
Files and hashes:         1: 0jMTux-3swOFYJuHmZf_7dIUV-M.roa (hash: FrxVTzFJQeHe8mjWBidC6aBhDpb0ro+aRCPDmQWBbvc=)
                          2: C68Jy4vS9ZhrosrQ0hLHm1uIuZY.roa (hash: KriDQtKp0/6qr4HNTZ8vH7ju161mMdjIkNUJn2wDbds=)
                          3: TTYqeImd9Bx1jE17xCXwGjIy_ds.roa (hash: zl9hhkn8MVjXkdNWr2SWdYWZOS+aR6DMyQIaYbl32sI=)
                          4: aLyfJT6We20ULVg1UbujnE5UVaI.roa (hash: XttwXUAYz6CHALtumX6fckhDuT6Y4LNJR+NAILB010U=)
                          5: lixJMjo5-_bNmfYtadlmrrGpsCg.roa (hash: OW5E61Tvo1LN0X4Q2KSxHXhfLjcuHjhFHfnXTwr/DjA=)
                          6: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: 5EwCgYi+O0jbHF8a18TU+vjvG06IC94jf3R4eGFZRww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:5c:3f:78:01:ae:27:7b:86:a7:47:5e:a2:05:98:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
        Validity
            Not Before: Dec 22 00:01:17 2025 GMT
            Not After : Dec 23 00:01:17 2025 GMT
        Subject: CN=10151a4b3854a13b3969cda33f2a42cff3179c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:47:a9:7e:c4:fc:60:50:be:7f:5c:44:84:
                    46:ae:01:a8:ef:ac:cd:d4:4c:f9:b5:c8:8d:c2:46:
                    46:a3:d8:39:bd:6d:dd:d5:c7:d5:8a:7c:24:79:06:
                    10:5c:b6:63:d6:bf:b1:f0:24:f2:34:2b:04:8b:8e:
                    4e:81:3a:19:de:76:d3:64:d5:87:ce:3c:17:77:3e:
                    34:2b:8d:0e:23:dd:d2:db:d0:05:de:73:87:25:84:
                    d4:94:c9:2e:c7:fc:50:98:2b:7e:a7:57:53:c7:8e:
                    46:f8:e1:f2:d4:d8:0f:16:43:f1:86:de:58:c7:d2:
                    cb:d9:b7:11:21:83:f5:02:42:d1:62:ab:bd:50:10:
                    1b:cd:87:71:63:5e:74:4d:d5:58:16:d3:5b:ee:d0:
                    56:34:3a:6a:8a:49:57:3c:f3:c5:9d:1d:f9:e5:08:
                    a6:00:cc:6a:4e:0b:19:84:ee:d3:bc:ee:85:4d:4b:
                    f5:40:7a:34:dc:6f:c3:b6:d8:ca:fb:3a:25:56:3a:
                    ec:63:19:09:71:fd:80:e3:8e:40:a4:61:a8:df:9f:
                    55:72:91:4f:2c:b5:ef:a3:1b:be:c4:9b:19:24:34:
                    e8:96:1e:f8:3a:d7:c1:f7:3f:77:05:e4:ec:27:b9:
                    b7:d2:ec:23:76:53:81:0b:6c:f1:6e:ae:98:20:93:
                    63:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:15:1A:4B:38:54:A1:3B:39:69:CD:A3:3F:2A:42:CF:F3:17:9C:67
            X509v3 Authority Key Identifier:
                keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:fd:fe:8e:3f:10:58:6e:e4:c8:2e:d5:6e:b0:ca:83:ab:1a:
         5d:27:cd:d5:7f:eb:e0:07:89:4a:45:fd:79:fa:84:f4:18:90:
         ab:82:e5:5b:6e:00:6f:0b:2c:b6:57:de:aa:0e:37:86:07:5c:
         df:a5:fa:29:95:65:ed:8c:86:e5:13:19:bd:83:2e:f4:69:52:
         10:83:8a:84:88:97:5b:95:6b:0c:50:bf:71:06:59:7f:b6:6f:
         c4:7b:24:ee:d4:b6:2e:4f:2c:b9:cb:f9:8f:ae:5a:45:36:c6:
         03:89:94:d5:a8:04:64:81:b5:2f:53:e1:bc:63:ed:2b:b5:de:
         4e:f0:9c:ee:6c:9c:c0:d3:60:e8:74:27:18:62:83:d6:fa:49:
         90:be:22:d3:ec:a5:77:c8:61:f2:9e:8e:d8:c5:ec:d7:88:d2:
         9d:0e:17:21:d9:86:d3:7d:f9:34:c0:ee:c3:c5:45:76:e3:dc:
         55:b8:c8:2d:cf:fe:61:c2:af:2e:0b:93:c4:a4:6f:d5:c2:1a:
         33:a1:68:57:a2:0f:88:6c:ff:6e:ba:97:e1:cb:bf:10:c0:32:
         77:2f:c8:b1:a7:74:4a:9b:e7:42:6a:d8:5a:84:a8:e9:77:72:
         e6:7c:65:cb:7b:83:73:3c:da:8e:e7:02:48:e4:51:ab:12:85:
         4a:ae:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:30:38 2025 by rpki-client