This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File:                     8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier:          khH2ECqnx82CX40Uva3s6CB+NRHEseuFvnSpKHkMwSA=
Subject key identifier:   F2:C4:1F:61:43:BA:98:6A:4E:9B:64:46:EB:99:86:C4:AA:9D:14:64
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer:       /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial:       019B6278BB6FF2F83FFC952B70827818A681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number:          179D
Signing time:             Sun 28 Dec 2025 01:00:37 +0000
Manifest this update:     Sun 28 Dec 2025 01:00:37 +0000
Manifest next update:     Mon 29 Dec 2025 01:00:37 +0000
Files and hashes:         1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=)
                          2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: Ug2EMAQYwAJy7T9cyRhegm9oWlczWJ1te+YxieDqtLA=)
                          3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:62:78:bb:6f:f2:f8:3f:fc:95:2b:70:82:78:18:a6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
        Validity
            Not Before: Dec 28 01:00:37 2025 GMT
            Not After : Dec 29 01:00:37 2025 GMT
        Subject: CN=f2c41f6143ba986a4e9b6446eb9986c4aa9d1464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:4c:4f:1d:84:37:77:43:7c:08:71:3d:9d:
                    ee:85:10:61:9e:cf:cb:46:e1:9e:6a:c5:15:d1:0b:
                    33:de:0e:54:a7:05:75:7f:d0:5a:87:a9:7c:37:0c:
                    55:18:b4:7e:f7:25:7f:84:df:00:76:81:1a:5d:6d:
                    00:06:1e:c8:7a:3d:a6:ca:73:05:fb:0f:23:16:b8:
                    9c:fd:b6:06:a5:37:bf:de:3e:42:fa:c5:3e:6a:5e:
                    71:c1:3a:36:0d:cc:28:c4:49:02:83:34:47:de:0c:
                    16:21:c8:57:c7:07:5e:e8:85:5a:2a:3b:dc:61:aa:
                    5b:4a:68:3a:a9:36:ac:cb:30:c5:41:58:8b:37:1e:
                    ee:46:50:24:77:4d:39:73:6d:52:a8:61:bf:3c:5c:
                    79:94:e9:81:a3:ab:32:85:e2:e6:5b:bf:fc:2b:de:
                    2e:38:06:94:c7:96:03:f5:e0:22:f1:43:c1:b8:44:
                    99:66:3c:52:63:27:51:c0:47:15:d1:4e:31:ca:e4:
                    40:64:73:f3:1a:4f:81:d4:95:8e:51:d9:c3:73:91:
                    9e:c9:0e:26:56:84:f7:9c:a6:0b:bd:1f:65:64:35:
                    3f:dc:99:0d:d1:52:7a:77:42:d6:05:05:40:bc:22:
                    02:03:46:0d:f7:19:77:d2:d3:2c:90:0b:e8:da:b2:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C4:1F:61:43:BA:98:6A:4E:9B:64:46:EB:99:86:C4:AA:9D:14:64
            X509v3 Authority Key Identifier:
                keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:28:46:21:19:21:fc:f1:b4:b7:c1:cc:93:8c:a9:93:70:3a:
         6c:cd:72:8a:7a:32:e7:8a:a1:3b:a8:02:fe:f7:9e:6d:89:d1:
         dc:de:93:d3:82:28:68:97:6f:c0:48:4e:6c:b4:8d:cc:63:0c:
         21:c8:15:d5:62:86:49:90:bf:ec:5e:1b:b0:40:0d:90:14:08:
         d7:d7:c5:60:d1:9b:aa:2d:16:9f:e3:9f:05:01:2f:7b:e8:c0:
         2a:9a:01:82:6e:2a:4a:8d:27:46:82:7f:73:5c:8d:c0:7e:ed:
         d2:18:f4:40:bb:ce:43:1d:8c:6b:82:40:4c:4a:35:24:49:74:
         b5:f5:2e:68:25:fd:4b:f0:6a:46:ca:2b:1f:e4:c8:6d:63:10:
         56:75:2e:2f:6c:b1:f3:7f:d8:c5:92:31:64:dd:27:55:f6:19:
         63:f1:4f:b2:d6:91:39:3f:c3:0c:e9:d1:61:0d:e6:05:56:94:
         f4:a3:dc:90:7c:86:30:20:b0:05:32:18:5d:67:de:ad:95:84:
         3a:58:7d:ee:c0:c3:11:4f:68:5a:c2:de:53:a7:83:27:ba:05:
         fa:5e:af:f4:18:41:b7:ff:6d:51:c6:fa:4d:26:fd:ac:6e:6f:
         e9:91:a2:41:f9:a6:99:fc:6d:fb:e2:f1:99:47:a6:ed:41:82:
         91:5f:d1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 08:03:18 2025 by rpki-client