This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File:                     c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier:          klTbGPgh9s50H9Ur8WVfZjAn/D1ERHYG5yZMe1KJm98=
Subject key identifier:   00:01:35:6C:9A:67:32:28:A7:2A:1C:AD:29:C8:D1:1C:98:17:CF:44
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer:       /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial:       019B3AC67E5C3764D6F07039B60E1C68D9C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number:          178C
Signing time:             Sat 20 Dec 2025 08:00:45 +0000
Manifest this update:     Sat 20 Dec 2025 08:00:45 +0000
Manifest next update:     Sun 21 Dec 2025 08:00:45 +0000
Files and hashes:         1: TTDv1twa5Oq2wS4kqb31Wa4mKwc.roa (hash: kNwC0HcE7BSu6NKB5QfTvVm3I8iIUDuBU4W9LJhw8AE=)
                          2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: 0WLsVlQ1JEr0hUanD6nHan2siVK+Jhqum5dhYahwneM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:c6:7e:5c:37:64:d6:f0:70:39:b6:0e:1c:68:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
        Validity
            Not Before: Dec 20 08:00:45 2025 GMT
            Not After : Dec 21 08:00:45 2025 GMT
        Subject: CN=0001356c9a673228a72a1cad29c8d11c9817cf44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:0c:76:ac:6b:b4:8e:52:25:14:ec:47:58:
                    b0:ed:c7:39:43:ba:36:48:75:9f:00:6a:11:da:00:
                    75:00:a0:89:e6:e4:9b:3a:ab:64:92:a9:91:bc:91:
                    c2:69:c6:8e:2c:d3:a6:58:78:1d:7d:d9:78:73:df:
                    86:c4:dd:84:0b:a5:ba:45:02:81:ce:a4:09:31:6b:
                    21:91:b2:da:39:bc:00:a3:1d:70:7a:48:2c:48:a6:
                    ae:23:51:f9:9d:9b:d7:65:cc:b7:6b:4a:58:1e:a0:
                    04:cf:0b:ea:65:13:e2:dd:97:8f:f0:37:a3:21:90:
                    d8:c0:dd:10:4c:73:1d:46:6f:ba:0f:39:b2:f5:36:
                    1d:87:43:f2:61:1c:31:26:69:85:24:f7:20:d0:9d:
                    8d:66:1f:b0:98:a6:51:7a:b8:07:0c:80:cb:7f:cb:
                    b3:3c:2d:4f:c7:dc:3d:0b:ca:f3:b4:9d:e2:e8:32:
                    aa:4e:46:59:b3:5d:98:2e:0a:07:69:b4:eb:80:1e:
                    42:e8:ea:72:5f:02:31:32:97:72:52:19:23:7f:90:
                    40:66:99:a7:2e:20:97:66:ff:bc:6f:18:15:1b:08:
                    95:6b:34:ff:36:7b:04:5d:36:e3:45:58:23:d3:50:
                    18:27:ab:f0:5a:fc:ca:73:2b:04:58:c5:de:5a:4e:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:01:35:6C:9A:67:32:28:A7:2A:1C:AD:29:C8:D1:1C:98:17:CF:44
            X509v3 Authority Key Identifier:
                keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c7:5d:9c:d7:5b:57:86:65:e2:60:cf:ba:51:44:06:75:03:
         c9:d9:4b:4b:4f:f3:1d:ac:54:9b:a9:f8:3a:e3:9f:bb:55:3f:
         44:57:95:43:b7:1d:b4:29:f3:35:15:22:34:c6:44:9b:a8:fe:
         b4:59:6e:98:86:0b:09:50:30:cc:01:59:09:c4:27:77:71:4e:
         dd:43:e2:2b:06:55:f7:09:c9:df:bc:e1:34:70:fe:6e:ba:ee:
         63:4a:fd:ed:8c:52:2e:9c:2f:e5:e7:18:22:40:e0:11:65:e9:
         ac:c6:a5:48:ca:68:4d:dd:8f:ae:01:b3:d1:fa:6c:30:34:12:
         f8:36:9b:ad:37:ec:1b:81:fa:57:64:af:3f:b4:01:fd:7a:13:
         95:61:4f:62:7d:8d:d1:f1:1e:7e:fe:27:59:ed:8b:8f:39:8c:
         a2:14:ab:18:f9:95:22:dd:19:8e:d7:32:54:f9:6a:f2:a1:c2:
         e1:8c:8d:09:77:ba:e8:5f:fe:1f:d4:2e:58:8d:f3:77:08:55:
         45:58:2c:47:82:ff:ac:2d:09:77:07:63:18:18:48:8c:71:71:
         9e:cb:3d:29:94:65:ce:6e:b9:9b:78:fd:27:e3:1d:c2:5e:8a:
         8d:b7:37:a6:17:15:35:45:4c:5f:d2:e5:67:c9:22:6a:8b:7b:
         82:76:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:53:38 2025 by rpki-client