This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File:                     xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier:          fq4jc+28ltiCKvsTpZD4N0QkVx5e5/6EwBSCs7Co0Mo=
Subject key identifier:   C4:12:17:3A:1A:67:05:41:F7:BE:FA:FC:17:7C:A8:D4:BB:AF:5E:DB
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer:       /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial:       019B3DFE42BB3DF2D8738A6FDA40F3133DEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number:          178C
Signing time:             Sat 20 Dec 2025 23:00:31 +0000
Manifest this update:     Sat 20 Dec 2025 23:00:31 +0000
Manifest next update:     Sun 21 Dec 2025 23:00:31 +0000
Files and hashes:         1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=)
                          2: WppkWIxYDl7yRokwyQv6w_qkTkM.roa (hash: pMxyfIHw8b62QMs/8crKL+TvmHlR2BI1fy3D9pIMtBI=)
                          3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: b6ljCIUUw5kaF2wmF6uYxgA0KXzaHPyRcLv8IEGp3HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 23:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:fe:42:bb:3d:f2:d8:73:8a:6f:da:40:f3:13:3d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
        Validity
            Not Before: Dec 20 23:00:31 2025 GMT
            Not After : Dec 21 23:00:31 2025 GMT
        Subject: CN=c412173a1a670541f7befafc177ca8d4bbaf5edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:f7:4f:7c:6e:93:3f:b3:ab:dd:e4:fb:c7:
                    fc:29:fe:d3:a7:6b:a6:da:13:cf:9d:a3:15:53:a4:
                    5f:28:59:77:e3:3b:45:9b:c0:0a:9a:0f:66:05:82:
                    7a:de:0d:91:bd:ff:5c:a6:e4:f3:43:f7:15:92:70:
                    96:56:49:9a:69:02:e6:4f:98:19:81:25:35:0c:ef:
                    9b:ce:d1:56:8c:4b:de:c4:96:ea:e0:8f:b6:d8:22:
                    0d:5b:c8:bd:70:d1:e2:73:1a:41:81:c7:1b:38:a4:
                    a1:3a:d0:13:47:a3:c7:1f:61:97:e9:6e:50:eb:84:
                    f6:bf:d1:85:5b:f2:08:8d:a4:7c:7a:47:2f:79:d1:
                    94:c6:05:48:a2:ea:60:9d:21:95:43:4c:29:e7:00:
                    69:c6:3d:5e:ce:7e:45:9c:6a:b2:a2:1f:90:c3:ca:
                    b2:02:79:44:f8:3b:84:9f:3f:d6:35:0f:61:15:b6:
                    e4:01:50:e0:47:af:08:09:b4:04:59:4f:5e:21:78:
                    63:40:2b:16:8a:25:5f:c6:b8:6b:d6:aa:95:fe:d8:
                    6a:4b:f3:6b:1d:dd:b9:90:e5:aa:14:60:bc:81:73:
                    58:67:26:21:b2:85:ce:87:1a:0e:97:3f:f0:dd:e4:
                    78:51:15:5a:0f:cc:f8:dd:a1:70:b5:96:39:b0:c2:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:12:17:3A:1A:67:05:41:F7:BE:FA:FC:17:7C:A8:D4:BB:AF:5E:DB
            X509v3 Authority Key Identifier:
                keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:42:b9:d4:7c:9f:3a:19:3b:20:b7:bb:f4:70:87:5f:c2:a4:
         f8:11:17:81:7e:79:12:93:c0:4c:dd:20:a8:b7:2a:ff:a2:c2:
         e3:e5:e3:0d:28:5a:7f:f2:98:57:a2:d8:0a:78:d0:16:3a:85:
         4a:b9:a3:4f:4c:ce:c8:75:66:02:e7:e2:f0:99:e8:4f:a5:4c:
         13:ae:fc:47:92:e1:b7:7f:b4:27:bf:5e:e3:9f:a7:3b:fa:a8:
         27:02:cc:62:ce:37:d0:e1:c4:1d:1d:6b:5f:81:28:63:7c:14:
         c9:6d:f0:77:1c:7a:a1:b1:65:f1:22:e7:57:a4:83:aa:74:fd:
         4e:ce:0e:29:58:dc:06:d8:aa:0a:c2:b8:dd:4a:c6:1d:aa:92:
         f4:6f:2a:02:43:5d:5f:66:03:e5:98:43:c8:6d:47:de:0b:cc:
         59:6c:a1:61:b4:4c:76:15:4c:dd:d1:8b:b5:b5:e9:74:91:57:
         7c:ac:50:6c:46:55:1a:ed:2b:59:08:9b:b9:fa:99:b9:33:7c:
         6f:3e:b8:ce:e6:75:03:6c:1b:77:13:1a:9e:40:fb:88:45:e9:
         88:b8:b1:dc:1f:fe:4b:d7:43:fb:6a:6d:5b:de:d5:46:57:f3:
         da:aa:63:41:a6:42:e6:c2:5f:5f:ca:1b:85:7f:5c:5a:a4:ad:
         28:1b:fd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:38:58 2025 by rpki-client