This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File:                     ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier:          0KjDdERG9SJn1qClOjEjtRLetfTUsMv8XtrlX8Fim0E=
Subject key identifier:   30:CB:15:CC:A1:CB:83:F5:AE:10:AC:DB:12:46:20:D4:AE:44:0A:05
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer:       /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial:       019B277746C36C4DF6C6447D23EA01FCE7D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number:          177D
Signing time:             Tue 16 Dec 2025 14:01:26 +0000
Manifest this update:     Tue 16 Dec 2025 14:01:26 +0000
Manifest next update:     Wed 17 Dec 2025 14:01:26 +0000
Files and hashes:         1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: 8mtFJT1CgTa0gXaZsz0Tz4nMYypHMdWh15zOdWPrSLs=)
                          2: N6ILORbRZvbQFYCBBRtXEQJq4EE.roa (hash: mmnPcV9IaUAzNHOhWtx5CYix9aLEDcUiIi0yf9zddR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:77:46:c3:6c:4d:f6:c6:44:7d:23:ea:01:fc:e7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
        Validity
            Not Before: Dec 16 14:01:26 2025 GMT
            Not After : Dec 17 14:01:26 2025 GMT
        Subject: CN=30cb15cca1cb83f5ae10acdb124620d4ae440a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:3a:d2:92:41:90:11:c2:9a:70:25:2c:67:
                    38:4a:fc:73:22:f6:db:6b:c5:6e:78:da:68:f1:57:
                    87:7d:f2:43:96:d5:b1:57:0b:cb:e0:42:f5:67:25:
                    44:fd:1e:53:7d:59:66:a6:c5:38:2d:82:97:1f:79:
                    c4:b1:30:53:8c:b8:1d:b7:36:dd:76:17:25:d5:fc:
                    c3:87:8b:47:36:a6:ed:f4:b9:40:43:7a:32:68:0a:
                    fd:3f:a7:d9:29:83:fc:fe:87:e0:85:18:47:64:5c:
                    87:74:8d:0f:7f:a3:47:c5:5d:29:fb:fd:e5:51:c2:
                    1e:f4:64:3d:be:55:c9:6d:00:fb:ac:a6:ec:11:1e:
                    a8:8e:c2:3c:11:35:44:56:40:9e:6b:96:09:37:54:
                    ce:5a:c4:ed:57:9d:ea:b4:c6:2e:87:18:61:b0:1a:
                    52:eb:6d:36:bf:38:7b:43:d5:39:86:97:d6:f3:5c:
                    c0:2d:77:92:b0:ef:e4:52:e8:d5:d3:f6:c0:2c:91:
                    53:27:b7:dd:76:f4:75:e8:90:c2:bd:c3:bb:e6:f1:
                    6d:d0:28:4f:2e:2b:d5:ad:a6:86:71:61:f0:8b:30:
                    5d:6d:a3:6f:98:5f:0c:4b:b5:43:52:7c:96:f7:2a:
                    ef:6b:4e:28:f1:55:40:77:16:e9:f3:ec:75:48:1d:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CB:15:CC:A1:CB:83:F5:AE:10:AC:DB:12:46:20:D4:AE:44:0A:05
            X509v3 Authority Key Identifier:
                keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:ce:44:00:8c:6b:3e:b0:93:6a:f7:91:cd:f6:56:8e:f3:03:
         c3:3f:20:61:d1:f9:10:61:d2:9d:68:06:b2:83:65:5a:05:87:
         4c:3c:a9:54:a6:88:f5:fc:19:69:eb:63:37:fa:4e:0a:f1:19:
         17:16:76:7d:a0:84:bf:dc:6b:6a:46:1e:5f:03:5d:2e:ef:4d:
         54:a2:55:c4:59:4f:12:53:f1:ae:d5:54:d1:4e:77:b0:c3:d5:
         99:fb:05:4c:d7:78:f1:92:1f:ba:87:18:7a:81:f3:57:bd:4d:
         46:d5:43:32:80:d1:e8:94:e3:d9:46:a3:bd:d7:23:51:c2:80:
         eb:50:28:c0:ea:4d:fa:1c:de:69:a7:fe:79:15:f9:02:b0:55:
         f7:51:e9:ea:b6:79:ea:4b:44:6c:0b:a3:b6:65:ba:5a:a3:07:
         37:8d:99:bb:57:b2:e1:62:23:25:e2:7d:19:b9:d6:69:02:69:
         aa:e7:8e:83:f3:d2:55:f0:fa:48:17:ff:51:63:b2:92:fc:1a:
         a7:0f:c0:13:fd:6b:93:4f:d8:ba:fa:bf:94:97:a0:e2:85:37:
         c3:a2:05:b4:71:36:6a:4f:23:45:0e:a5:a7:af:64:68:01:27:
         5c:5c:d0:c9:ae:35:3e:65:dd:b7:40:cf:39:7e:e3:ea:83:2f:
         b3:8a:e2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:22:49 2025 by rpki-client