This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
File:                     9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json)
Hash identifier:          CpopVrZz8rWFHqQeyX9K2tQLoC8wiUoyLxMFGuyst/o=
Subject key identifier:   F5:85:BE:DA:53:5A:39:B0:BA:10:A3:68:C5:55:50:63:2A:E3:DE:75
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       019B367BF6C64D28623EBF40BB72DFB9CCBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
Manifest number:          178C
Signing time:             Fri 19 Dec 2025 12:00:52 +0000
Manifest this update:     Fri 19 Dec 2025 12:00:52 +0000
Manifest next update:     Sat 20 Dec 2025 12:00:52 +0000
Files and hashes:         1: 0HKshb-mSBdiPT8rzC35f_ZU7UQ.roa (hash: hF9BYbX+aU6Xe7lbRtg8LFUuOtXHeJr7ExZ5hZljljc=)
                          2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: nlQO9mIHeTH5pX81vkMm40mnIMQplTZ316DHjBuM77c=)
                          3: BxC0D_I8cfkE04FMob8aYCC9sOA.roa (hash: 8IymUbIEXnnTEcSvkY2I75XlihbCRPpcceQZo2zPDi4=)
                          4: IVrRWFI1ry1_t1jTghjesJBZcQ0.roa (hash: Gd14w4+1RfDgCwueX1ZHqk/dUawCUFDofpaoy6972KE=)
                          5: fAbOIbHK5-PVtXMOGIO2S4Xc80s.roa (hash: A/R1dGee9i9ll3uzH2uvDgQFeaI46CgRuWCcx8V04Lc=)
                          6: pnlRPUhZWx-18cN9NyZhKYkt_80.roa (hash: 4GEIDeArajdM/SlgOWHtHJwQGutC5XfeEODamrmD5BE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:7b:f6:c6:4d:28:62:3e:bf:40:bb:72:df:b9:cc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Dec 19 12:00:52 2025 GMT
            Not After : Dec 20 12:00:52 2025 GMT
        Subject: CN=f585beda535a39b0ba10a368c55550632ae3de75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:06:31:9c:e9:93:ae:b6:dc:4b:71:d7:ab:
                    49:14:c5:d9:a4:fc:07:69:15:4d:4b:c9:b6:4b:61:
                    0a:02:36:c5:a6:fb:29:31:96:c5:5d:39:e4:ba:c6:
                    0d:43:e5:a4:7e:00:32:7d:d6:cb:b5:40:78:30:01:
                    0f:ba:e1:6f:50:5d:25:2b:64:28:c2:03:5a:be:28:
                    2d:31:04:50:61:a3:f7:6c:c5:bf:f4:16:ae:a0:bd:
                    5f:3f:e1:9f:da:95:4c:f1:34:04:69:91:39:13:e8:
                    fd:db:69:c6:33:02:e5:4a:32:b2:57:43:73:fa:f2:
                    ce:5e:48:48:3b:f5:ef:e7:64:ee:71:a3:0c:0d:9e:
                    bc:72:e5:a7:4d:7a:59:3f:d3:a9:72:7a:e8:6b:90:
                    e3:1e:e9:b3:81:d4:f0:d9:19:46:bd:76:31:d0:fc:
                    6f:13:e1:a4:f1:c1:cf:9d:3f:5f:9d:a7:84:07:36:
                    65:13:40:5b:48:ea:83:68:9e:bd:b3:7e:38:81:d7:
                    24:ed:e8:48:36:e7:cf:f2:64:39:10:1d:ea:c2:e0:
                    d0:b1:68:fb:4f:5a:e1:24:ff:64:8a:c2:ef:6a:87:
                    d9:36:85:e2:58:3c:80:cb:ee:20:5e:cf:41:1e:46:
                    e6:0d:c3:65:1f:bd:5d:7d:e7:41:08:5f:12:07:02:
                    83:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:85:BE:DA:53:5A:39:B0:BA:10:A3:68:C5:55:50:63:2A:E3:DE:75
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:03:29:70:d5:b2:6f:73:b1:1c:12:2e:a2:2c:82:c0:95:7b:
         c6:25:52:91:af:52:91:2c:a0:5a:02:3a:7c:2c:d3:b3:c6:ca:
         aa:6e:59:d4:07:76:39:ae:c7:99:6f:08:c7:a2:da:20:fe:f3:
         4e:0e:f8:59:e1:6a:ba:19:24:c8:10:71:26:33:f9:9f:8a:9b:
         44:38:65:47:ce:98:fa:01:d0:05:08:b1:db:e0:d7:15:c1:db:
         3e:6e:28:c7:67:21:68:a8:f2:04:a6:e3:97:3c:0e:1a:9b:48:
         57:f2:a2:0e:fd:d4:ab:f9:ab:af:3c:42:d4:91:2f:3c:b3:d9:
         c6:86:2e:8c:62:75:09:ed:af:86:47:4c:ce:e5:0d:14:87:f5:
         93:17:ee:eb:85:36:c4:ee:91:3f:f0:7c:b0:ef:4a:b6:9f:95:
         b0:90:02:d6:ab:84:ab:02:02:35:ee:48:08:1a:83:46:c0:d6:
         c9:e3:74:21:b3:80:ae:18:88:09:32:68:33:de:fe:c5:ed:56:
         ab:04:56:33:36:dc:06:4e:90:42:39:bc:f2:77:d6:2b:d5:e8:
         f0:06:eb:ed:2a:11:13:9d:13:aa:8a:9e:0e:82:eb:20:c9:c6:
         ba:45:9a:bd:72:85:b8:13:75:90:7c:ac:b2:28:58:0e:41:d1:
         ce:15:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:55:18 2025 by rpki-client