This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File:                     i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier:          z4HJ+UBFwtBdqm2NBCeqrLaYwshnH3RDpS+pIECGM+c=
Subject key identifier:   A9:40:4D:D3:37:B4:37:D2:2F:EB:1F:8B:DC:FE:55:4D:ED:EA:9A:57
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer:       /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial:       019B3DC82717BFB43C3FFF55F506CDF2018D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number:          178A
Signing time:             Sat 20 Dec 2025 22:01:25 +0000
Manifest this update:     Sat 20 Dec 2025 22:01:25 +0000
Manifest next update:     Sun 21 Dec 2025 22:01:25 +0000
Files and hashes:         1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
                          2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: Bsl+UObQdaWGKo1hOicyQguqwf6qTFV3Iwkvu7ZZP7g=)
                          3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:c8:27:17:bf:b4:3c:3f:ff:55:f5:06:cd:f2:01:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
        Validity
            Not Before: Dec 20 22:01:25 2025 GMT
            Not After : Dec 21 22:01:25 2025 GMT
        Subject: CN=a9404dd337b437d22feb1f8bdcfe554dedea9a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:e9:1c:79:52:9d:cf:4f:5b:1b:95:7f:5d:
                    5d:ee:83:68:84:9b:72:c6:50:2c:b6:f8:51:f1:96:
                    42:94:f4:92:e1:f0:48:93:ce:c1:1d:b8:8a:c9:bf:
                    68:34:87:6d:a0:6e:72:87:bb:d0:c8:ae:ef:34:65:
                    10:e7:d1:29:7c:f2:11:c6:e2:76:de:e3:2e:fb:a0:
                    bf:7c:72:99:b4:0c:1e:e5:73:4f:d1:b9:79:e4:dd:
                    a9:ce:ed:68:a8:74:36:a9:a8:65:99:97:5a:f6:17:
                    f1:51:fe:a5:57:18:02:62:e4:d9:f6:4e:b0:3c:6e:
                    9f:4e:b6:35:f9:0a:9b:a6:da:0e:c1:99:dd:6e:77:
                    c7:d6:95:d8:ab:94:25:f5:8a:3d:fd:1d:eb:a8:d0:
                    28:7d:c7:77:e8:dd:81:20:84:3e:d6:b3:ab:f0:75:
                    97:8f:c7:03:3f:a9:9b:a0:f7:cc:84:19:06:f9:d4:
                    19:26:3a:92:07:ef:4e:12:45:f0:7e:c4:c6:01:bb:
                    4f:c7:64:59:bd:c0:cb:da:f3:4f:4d:62:1b:01:34:
                    89:77:1f:32:c2:46:98:76:3a:88:70:a6:41:db:3d:
                    5f:ee:b4:4e:d7:a8:5a:74:11:c5:57:a8:9d:06:d8:
                    1b:ac:d1:a5:57:c9:55:ce:cf:33:bf:65:58:b6:fb:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:40:4D:D3:37:B4:37:D2:2F:EB:1F:8B:DC:FE:55:4D:ED:EA:9A:57
            X509v3 Authority Key Identifier:
                keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:74:05:32:82:7b:98:b1:42:bf:25:38:a1:a3:2a:70:ea:90:
         6d:35:67:b1:a9:cf:0a:ba:68:6b:49:f1:19:96:f4:99:4d:d1:
         46:63:97:98:48:8c:35:74:25:66:a6:4f:f9:18:75:9f:e7:6f:
         29:c6:30:56:fc:4c:b0:cf:4c:a0:45:e3:35:70:f1:1c:47:ce:
         cd:52:e7:c9:44:59:39:69:b8:6e:8a:57:59:f7:39:a3:62:4a:
         83:77:66:6a:02:aa:fb:54:0c:4b:d1:24:14:c5:7d:b6:36:9f:
         27:c3:13:f6:70:89:43:fa:5b:76:b4:8e:aa:02:e2:e2:8e:b2:
         ae:ef:41:0a:68:50:c4:a3:30:97:38:9a:ec:6e:03:f4:54:05:
         e2:54:a6:82:4b:48:1f:29:43:6b:7d:33:ce:f3:31:46:e6:bb:
         d8:c2:de:b9:84:53:98:f3:01:e6:bf:4e:58:d2:41:ec:0d:b6:
         93:51:50:29:f7:a2:c5:e5:92:3e:70:4a:a5:f7:08:25:0b:e0:
         d8:ec:cb:bf:63:8e:89:02:7b:19:3d:7d:52:af:35:2f:d7:e6:
         25:cf:c8:27:c1:94:d0:66:a6:a1:4e:16:c5:23:27:c0:94:b0:
         9d:7e:60:7c:01:25:06:f2:32:e1:6d:16:c8:61:b5:be:09:2d:
         6c:07:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:59:44 2025 by rpki-client