This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File:                     ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier:          q5/z0zCSpzin9wcWnlsBWE4if2J8HJdU0QNHVsL+xFI=
Subject key identifier:   6B:32:F8:DB:94:0C:BD:80:26:15:99:A4:EE:AD:AA:85:26:9C:0C:E6
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer:       /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial:       019B3A8F88AFF31C046AA4DDEBEA01108FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number:          178C
Signing time:             Sat 20 Dec 2025 07:00:43 +0000
Manifest this update:     Sat 20 Dec 2025 07:00:43 +0000
Manifest next update:     Sun 21 Dec 2025 07:00:43 +0000
Files and hashes:         1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: wWnHuuVnqvmCi1eclR5tVXAl38W+F1xGdsVZCaKpTg8=)
                          2: KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (hash: Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=)
                          3: isGPTkBcxk2AKZ3pqWNrimW3LHo.roa (hash: Y2V5pd0IY6biUxiXA3E5dpmuRX9YWawCufz2noSbIak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:8f:88:af:f3:1c:04:6a:a4:dd:eb:ea:01:10:8f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
        Validity
            Not Before: Dec 20 07:00:43 2025 GMT
            Not After : Dec 21 07:00:43 2025 GMT
        Subject: CN=6b32f8db940cbd80261599a4eeadaa85269c0ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:bd:40:9b:d1:3a:0e:5e:11:a6:31:6b:97:
                    e1:d8:f1:ca:b2:fe:35:62:68:27:dc:ba:2f:8e:ef:
                    43:d1:00:7f:36:14:f6:bc:ce:45:2a:b6:71:ca:6d:
                    61:b5:c2:cf:9f:60:c5:d6:35:bf:44:2f:16:18:b7:
                    7e:5f:b7:b3:78:8c:ad:e3:07:95:bf:74:9d:b0:8e:
                    df:d6:41:c5:9e:2a:48:1d:cf:70:6c:92:47:01:89:
                    91:e0:ed:5c:6c:d5:26:aa:4b:5d:a2:8f:65:fe:74:
                    2b:f4:c6:45:e2:fe:00:a2:24:5d:b1:f3:ec:ec:04:
                    49:f4:55:8f:90:97:21:67:35:19:4e:99:f3:72:ef:
                    e8:45:69:2b:70:b9:a6:f9:0d:30:5b:b7:62:bf:34:
                    df:a0:13:f6:8f:eb:ab:94:09:ea:48:29:f1:ac:07:
                    c7:4a:3c:ac:ff:a3:83:8e:5c:58:f3:91:ed:6a:fa:
                    92:a8:83:7e:bd:36:33:bc:b4:02:b4:9a:dc:26:9f:
                    3b:7c:5d:b4:65:98:c0:c2:84:43:e1:58:8a:5f:90:
                    11:5a:f5:5c:dc:08:b2:5c:ae:51:29:d9:1a:bb:82:
                    72:30:bb:78:09:41:d8:9d:50:6d:23:dc:6f:ff:1a:
                    a9:33:22:d2:0b:aa:84:93:49:7e:41:08:50:34:58:
                    16:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:32:F8:DB:94:0C:BD:80:26:15:99:A4:EE:AD:AA:85:26:9C:0C:E6
            X509v3 Authority Key Identifier:
                keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:16:d3:34:1c:10:17:82:13:73:d3:93:98:42:8e:b4:aa:4b:
         a0:4e:ae:03:8a:99:d7:ba:1b:a2:d7:85:8c:da:4c:f6:a3:d5:
         3b:5b:8e:c5:cf:b1:55:6c:7d:58:10:8f:e8:25:bf:3b:9c:9f:
         fd:a6:a6:1a:32:c1:98:b2:88:46:15:00:5e:97:a9:ec:8a:fe:
         be:8c:dc:86:61:6d:12:6b:1d:16:e5:8a:d9:30:49:44:71:28:
         d1:2f:b2:ce:ae:23:f9:4f:05:50:c2:2b:24:e7:2f:0a:39:1c:
         64:3a:92:5f:93:11:86:e3:87:15:c5:5d:45:f1:19:a5:8c:1c:
         7c:94:f7:d4:67:b3:33:03:f3:66:57:51:f6:ce:5e:df:38:71:
         48:0d:64:9f:8e:02:07:cf:d1:c7:14:92:6f:78:0f:50:9f:62:
         1e:51:e7:05:2c:7e:fa:cf:ff:e6:57:9d:e9:6a:a2:5f:8a:19:
         48:f7:a2:b1:a3:3f:f7:99:d8:30:43:81:1c:dd:33:77:fa:dd:
         1c:c3:12:68:96:6c:f0:f3:0a:b2:f1:89:f4:af:b9:16:b9:aa:
         55:a3:38:24:71:1e:0b:59:80:2e:14:19:24:75:c3:57:4f:53:
         7a:11:c8:51:15:97:44:2d:d2:5e:a2:52:99:13:31:e5:bd:ba:
         27:8a:e7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:49:08 2025 by rpki-client