This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
File:                     iEv4DnL1Dwm_VjST69sRo0u6MS0.mft (raw, json)
Hash identifier:          XLvMakAegi+xmDNJ1VhJKbKDWLXieqgFwCCwuQIWS20=
Subject key identifier:   6D:C2:68:5B:3B:6F:01:79:EF:78:84:B8:9C:0E:8A:FB:C9:A7:6F:64
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Certificate issuer:       /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial:       019B427FF081397540588D62F25F2C923ADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
Manifest number:          177B
Signing time:             Sun 21 Dec 2025 20:00:39 +0000
Manifest this update:     Sun 21 Dec 2025 20:00:39 +0000
Manifest next update:     Mon 22 Dec 2025 20:00:39 +0000
Files and hashes:         1: IVdpbiwp8sk6RWKPU9fU_W8afE4.roa (hash: X2lQta/XLPc+pnMfam2urh0+0omvloln8L5ZX9x6bhE=)
                          2: Npq0NgAUzPmjKDeEsxuhWw6BogU.roa (hash: z3169zTT1YiBlznFXGSnMAqWRbAhW/S4LcLq7Rxd94g=)
                          3: ZZlHpEh3xq_erGKCvTsR5cenP4M.roa (hash: C4STcediFbKih1AYZM4S/g3j+Dxm18LPv+Tu0224VhI=)
                          4: detAd7FlOFGjTsX2k3rOLy2UQCs.roa (hash: cqEU+ACySIshfpJTQIUM63m1I8ih1IEP8SdQskz8PQk=)
                          5: hEIm6b1kctKQOBdo1EnRG1VjnyQ.roa (hash: Xo1DxXqBfY11s6cBh+ynDozHMZaWken4xmavWyHXw6s=)
                          6: iEv4DnL1Dwm_VjST69sRo0u6MS0.crl (hash: /Z/EB8l0FWOLyc7tYfS21yojjJviXQX3I7uAjGUlx7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:7f:f0:81:39:75:40:58:8d:62:f2:5f:2c:92:3a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
        Validity
            Not Before: Dec 21 20:00:39 2025 GMT
            Not After : Dec 22 20:00:39 2025 GMT
        Subject: CN=6dc2685b3b6f0179ef7884b89c0e8afbc9a76f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bb:32:60:95:cc:31:6e:58:bb:84:91:79:b7:
                    2a:2c:26:2a:ad:0b:53:21:ca:c1:75:37:3c:b2:8a:
                    11:4f:73:e6:10:e2:e6:55:1f:d6:77:38:ff:5f:17:
                    1a:46:ea:cc:71:68:f1:00:8b:47:d7:33:56:f9:61:
                    18:57:61:ce:8e:8d:48:f8:cd:70:aa:6c:a9:b2:b6:
                    c6:fb:12:c3:58:1b:77:a7:7e:e0:dc:3a:ae:f5:32:
                    92:3f:19:25:0d:21:eb:57:8c:32:1d:42:75:11:49:
                    78:e6:56:d0:ac:e7:d2:58:04:6a:e2:75:90:f1:c2:
                    01:e6:8d:8d:df:87:20:cd:fc:53:54:0d:44:f1:7b:
                    4d:2f:f1:ff:17:80:b3:02:c4:e7:b9:6d:8a:a5:c9:
                    ab:2c:c8:50:3d:21:a4:1d:41:c3:79:92:8c:62:62:
                    19:af:68:6f:3d:3b:d1:07:1a:bd:74:4b:c0:81:b4:
                    a9:4d:c1:dd:c4:cc:a6:d2:44:34:c5:57:ea:92:c6:
                    66:7c:57:70:5d:ea:f8:ef:a1:3d:92:17:4d:62:96:
                    58:93:ce:f7:ca:8d:44:4f:3a:af:7b:3b:f1:ab:22:
                    53:1d:76:4f:dc:b4:6d:00:37:3b:7f:5b:13:2b:16:
                    61:47:26:26:f5:93:db:5d:35:1f:7a:b1:91:11:c5:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C2:68:5B:3B:6F:01:79:EF:78:84:B8:9C:0E:8A:FB:C9:A7:6F:64
            X509v3 Authority Key Identifier:
                keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6a:0d:5c:07:58:1b:37:04:9b:30:40:49:c1:03:22:25:18:
         40:b0:87:d9:12:7a:e3:15:96:92:cd:a5:a2:13:57:39:96:19:
         d0:6f:8b:c2:0e:c8:bb:7b:81:dc:06:f7:c3:b8:6d:af:ea:9d:
         1b:77:ab:34:d1:1d:6b:21:6b:8a:e5:18:89:a5:69:cb:f6:77:
         4b:31:48:05:73:dc:f6:cb:33:b5:4d:80:81:7f:c8:df:4c:b6:
         f7:75:bb:85:d1:2c:71:39:94:d8:f7:8f:01:ca:2d:e1:1c:5e:
         61:35:ab:cf:92:bc:86:9a:50:ce:63:07:fc:59:f9:93:12:5d:
         eb:ac:b9:57:d4:56:ca:ba:42:76:b5:d3:d4:25:ae:72:d1:38:
         b4:16:34:ba:a4:3f:63:3b:2c:e3:00:6e:bf:8c:39:71:c8:d8:
         4a:4f:e8:9e:f3:26:55:c5:62:b5:0c:9d:d5:60:32:d8:60:a0:
         e8:32:07:c8:a3:30:b7:3a:71:7f:70:77:16:a2:e6:08:36:f6:
         9e:d6:67:8b:cd:34:8b:80:a5:a7:27:78:37:4b:7b:cf:d6:14:
         8a:8d:ed:99:db:d4:81:5b:b1:31:5b:a9:e6:d2:63:69:ae:0f:
         40:aa:cc:99:52:fc:61:6a:4c:f5:4b:9e:69:bc:5a:73:46:3e:
         c6:55:c5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:47:25 2025 by rpki-client