This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File:                     xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier:          XA2s+WO250sc19mYo1/IWAH6fZGzECE3h7aU4O0i+n8=
Subject key identifier:   77:24:29:EC:82:8E:7A:86:5F:FE:EC:B0:7D:C6:E8:99:E4:75:AD:FB
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer:       /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial:       019B4581D9A5DB5C8D8B24C2C604C91D4A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number:          171D
Signing time:             Mon 22 Dec 2025 10:01:36 +0000
Manifest this update:     Mon 22 Dec 2025 10:01:36 +0000
Manifest next update:     Tue 23 Dec 2025 10:01:36 +0000
Files and hashes:         1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
                          2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: AqXFKcUoeLrURBye3Ub1dJkE3pZLm5sVAPTgK5Z2FLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:45:81:d9:a5:db:5c:8d:8b:24:c2:c6:04:c9:1d:4a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
        Validity
            Not Before: Dec 22 10:01:36 2025 GMT
            Not After : Dec 23 10:01:36 2025 GMT
        Subject: CN=772429ec828e7a865ffeecb07dc6e899e475adfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:65:25:8a:b8:92:c8:01:43:f8:6f:aa:36:
                    4c:28:68:ab:80:26:ac:d1:e5:02:e8:2c:7e:cd:07:
                    c9:6c:22:26:eb:2b:4c:60:93:a7:3d:c5:09:5d:07:
                    22:4b:c8:58:9b:a5:07:52:e4:70:de:e9:6c:a8:e5:
                    8a:8a:46:10:2e:1e:3e:31:9f:75:e7:10:7a:3e:35:
                    48:fa:41:8e:93:dd:50:d6:b4:dd:d0:30:a2:7d:58:
                    f8:a4:d4:a9:c7:3b:bb:16:52:4b:a4:a0:38:89:51:
                    2d:a3:c2:ef:c1:ba:f2:9b:03:c6:85:c4:cc:71:1c:
                    9e:67:0b:f4:64:be:7c:79:29:e9:35:60:81:b7:79:
                    68:a8:4f:69:33:b1:4b:d9:53:0a:66:c7:eb:0c:1b:
                    14:0d:5b:4d:a3:80:15:30:6d:93:d3:2b:18:c3:2a:
                    50:31:85:f1:48:41:43:46:50:75:4f:28:ac:9d:f0:
                    d4:c1:97:c7:ce:dd:13:99:49:b4:f7:9e:ed:3f:71:
                    21:ec:09:7f:40:36:87:a0:91:8d:9a:6c:8e:43:1c:
                    00:a3:04:d2:d9:00:b5:98:f5:a3:22:71:20:36:4f:
                    87:62:40:ad:77:dd:08:f1:83:cc:e6:cb:5f:cf:88:
                    0c:27:fe:b7:5c:e5:9b:f4:35:32:40:c2:c2:a1:79:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:24:29:EC:82:8E:7A:86:5F:FE:EC:B0:7D:C6:E8:99:E4:75:AD:FB
            X509v3 Authority Key Identifier:
                keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:bb:40:b8:77:9a:4a:66:3f:db:df:e2:39:f9:7c:36:24:
         3d:93:57:eb:bb:db:1e:52:d8:23:c9:86:2c:76:97:66:96:f6:
         41:58:15:b3:81:ed:e1:a6:70:1a:c2:f3:2c:36:bb:84:03:e0:
         6d:e6:92:e5:ea:61:66:54:b7:81:64:18:a5:df:d0:8d:84:d7:
         a6:ae:26:72:96:95:eb:c2:be:a9:92:c7:81:d6:46:78:de:f0:
         0e:21:0a:60:75:3a:10:65:d4:6d:c7:52:9c:2e:ee:5c:4e:e6:
         2a:02:57:61:1c:a1:f3:dd:f0:21:1c:44:50:2a:3d:9e:83:8a:
         f1:1d:23:b3:a9:b7:20:66:e3:9b:c3:b2:ed:9d:fa:41:b1:c9:
         99:15:6e:f1:14:21:e3:1f:45:32:73:e0:f2:30:bc:c7:3f:fc:
         25:23:28:de:11:aa:fc:34:4a:86:3f:be:93:de:57:f9:53:44:
         4b:ca:14:cc:97:bf:c9:01:53:b9:4b:db:17:a8:bb:38:c8:a5:
         65:33:c0:b0:34:6a:7e:94:ec:7d:8d:cf:13:84:f5:d4:28:c0:
         c0:f2:dd:b7:24:d5:c9:32:ed:d5:59:e9:15:3a:44:8c:39:1e:
         1d:2d:74:7f:0a:92:67:5a:16:c7:d6:e5:bd:ec:50:44:ab:95:
         4f:3b:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:46:12 2025 by rpki-client