This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File:                     pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier:          IG9SkdQfobLbLsgla96rAKdOUL6vGGZ+pDhIb/+okyk=
Subject key identifier:   5C:F5:D8:B0:5A:FA:46:FA:16:9B:84:5C:AB:15:3D:6F:B4:33:24:18
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer:       /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial:       019B39B424BC0BDA9D7A2661F5824524E1E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number:          178B
Signing time:             Sat 20 Dec 2025 03:01:05 +0000
Manifest this update:     Sat 20 Dec 2025 03:01:05 +0000
Manifest next update:     Sun 21 Dec 2025 03:01:05 +0000
Files and hashes:         1: BuG2OAiPDQnyx6d-WMA8tpFdnHw.roa (hash: uZBmZl0o3YtVzo0taGTcZqTYaNccqkyd0kSYhjubo7I=)
                          2: lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa (hash: t/3zF86JRbmij67yXF/+H8nTDumbM7s5DdE5qv8C5Js=)
                          3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: UnNsSbzXJ+hj9GsmFygCNPgyWcUqDeoodYOY3h3qH2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:b4:24:bc:0b:da:9d:7a:26:61:f5:82:45:24:e1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
        Validity
            Not Before: Dec 20 03:01:05 2025 GMT
            Not After : Dec 21 03:01:05 2025 GMT
        Subject: CN=5cf5d8b05afa46fa169b845cab153d6fb4332418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:22:52:2d:7e:4d:6d:a7:13:9d:a7:22:45:
                    22:96:77:38:f6:df:e5:ec:5e:e5:d3:fe:af:c4:cb:
                    1c:6d:5d:a9:c4:86:1d:60:cf:75:26:8e:33:20:60:
                    69:49:45:9b:fb:2f:ec:b9:c5:f0:ce:c7:68:4d:d4:
                    43:fd:3e:19:01:60:86:e5:d6:f7:32:87:97:ce:e0:
                    bd:48:9b:59:79:16:66:0b:b8:c6:08:3d:2d:0b:39:
                    9e:50:3e:b2:8a:5d:7e:8f:eb:3b:07:83:83:ea:d4:
                    53:ed:a0:9a:4e:01:53:1c:13:ba:33:c2:9e:b7:1b:
                    69:e4:fd:e2:a4:5b:53:6b:22:eb:c1:7d:bc:86:a6:
                    78:50:54:13:5e:e2:02:a6:8d:bc:0c:2e:bd:23:14:
                    1d:a1:20:87:45:7d:18:ba:5e:10:51:48:fa:3c:d9:
                    7e:84:1b:e1:e3:ef:61:39:94:80:3f:57:60:7b:3b:
                    37:01:9d:08:0d:6e:2f:e6:05:c5:6a:0c:c0:72:04:
                    4b:7e:46:1c:79:9a:be:26:73:40:ba:35:dd:8d:96:
                    d1:d5:40:ad:65:9c:27:c1:ac:b5:79:55:32:59:5b:
                    ab:ec:1f:01:fc:43:59:02:24:27:70:f9:f1:b2:f8:
                    9c:e9:73:33:ed:ab:95:a4:2b:65:95:e3:ac:f4:11:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F5:D8:B0:5A:FA:46:FA:16:9B:84:5C:AB:15:3D:6F:B4:33:24:18
            X509v3 Authority Key Identifier:
                keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:89:e1:24:0d:f1:c0:4c:9f:5c:32:94:b7:63:86:b2:6d:fd:
         5b:87:db:9c:3e:16:bc:8d:7b:2f:9c:cf:07:bc:49:29:08:93:
         84:5d:d7:81:3a:19:48:a1:8c:0b:fd:76:af:ee:41:2f:9c:f8:
         0b:c8:08:1e:a7:c5:f5:8f:e5:8b:30:fa:ff:74:ff:7d:9d:5b:
         a7:92:45:d6:7c:16:c0:eb:b2:78:81:18:da:cb:0b:0e:30:f7:
         f3:94:64:77:b6:5d:19:d9:44:1c:08:bc:a6:7b:f2:40:9a:cb:
         4a:66:eb:9e:6d:2d:e7:17:4b:92:ca:af:bd:79:88:0f:32:86:
         7e:55:9e:65:86:f1:04:76:20:a2:e0:03:9c:70:32:ce:09:99:
         9f:bb:92:11:78:b8:87:0f:56:18:8c:63:2e:4f:a2:7e:86:b7:
         78:32:d3:f6:3a:ce:30:cd:05:34:c5:dc:4e:0e:68:15:7e:5a:
         1c:dd:b2:04:a0:5e:24:e5:33:55:4a:c9:5f:ca:ce:f6:34:46:
         95:54:02:7a:35:4a:97:e1:cc:74:64:ed:a5:20:fe:2a:38:f5:
         0f:1c:35:27:6a:07:bf:51:09:54:44:71:a0:9a:5a:d5:80:47:
         d4:81:57:66:a7:4a:e5:8b:41:f7:58:46:3d:06:df:b1:1f:38:
         20:46:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:17:28 2025 by rpki-client