This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File:                     tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier:          o/tNOXYazeXNlJO7njaPj2xsyNQrbgxota1T/KIReZg=
Subject key identifier:   7E:C9:10:F7:D8:E8:B0:28:FF:53:3E:1F:54:CE:EA:B3:A9:52:7E:60
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer:       /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial:       019B3C1018F2F8501981810D129836BE9446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number:          178C
Signing time:             Sat 20 Dec 2025 14:00:46 +0000
Manifest this update:     Sat 20 Dec 2025 14:00:46 +0000
Manifest next update:     Sun 21 Dec 2025 14:00:46 +0000
Files and hashes:         1: AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa (hash: 6UVDM1JqxHmjbnJ4pDDIOsD2r8EQyy1bF6KNp9ocKGg=)
                          2: VJtvXDXYtAcS9C4LIbmlaqXh4Co.roa (hash: THcKGdc9aA5a+OjJYNnV65xxowh1d3kb8KQrHqiCPq4=)
                          3: fUXrv6-AqG-Sdl9xICl4cQAU7yA.roa (hash: jv2v4x0octz1D9witRg3iiWbwIrgi4wxjje3xLewI+U=)
                          4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: 2NLtmRaJtnYyPDgw2qnUxdEKaIu/uEgjCjNGokq5OYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:10:18:f2:f8:50:19:81:81:0d:12:98:36:be:94:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
        Validity
            Not Before: Dec 20 14:00:46 2025 GMT
            Not After : Dec 21 14:00:46 2025 GMT
        Subject: CN=7ec910f7d8e8b028ff533e1f54ceeab3a9527e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:ef:a3:9f:c8:e2:9e:59:4e:50:f4:d4:2f:
                    d6:14:77:f1:a1:b5:03:ab:a4:f7:60:ab:48:b6:f5:
                    22:ef:ee:cc:c3:04:3c:72:4a:6c:b1:41:c7:57:df:
                    8e:28:9d:01:2d:29:f0:61:67:02:9e:90:5f:d3:e6:
                    67:65:db:d7:37:7f:fe:eb:c4:a3:34:b8:b6:84:4e:
                    f4:ce:ee:c5:ad:da:7b:cb:b7:b8:cf:37:bb:53:a4:
                    a0:b8:72:54:01:82:59:21:07:69:fd:d4:d5:f0:1d:
                    c7:f4:9f:3a:7c:43:64:2c:bf:8b:2f:0a:2a:ba:b8:
                    98:ea:9d:70:91:a7:ee:8f:43:b5:97:68:55:0b:87:
                    93:48:ad:76:ea:bf:48:23:7a:d6:64:af:ce:9d:7e:
                    e1:32:da:8d:41:d2:f1:48:26:69:73:45:f3:de:e1:
                    eb:11:83:4f:06:90:8a:ac:78:63:c6:9e:6e:ef:a9:
                    30:cc:bd:7a:3a:2d:8f:b7:e9:7d:85:ca:ca:3a:9e:
                    5b:75:4b:ca:c7:19:3e:4d:9a:6f:61:c7:28:5c:5b:
                    72:a6:d5:94:86:35:eb:79:07:3b:d4:f8:14:18:e6:
                    0d:4c:a3:d9:98:be:80:da:e4:c4:70:26:c9:f1:78:
                    ba:7a:f4:cd:9d:49:7b:8d:3a:da:f0:ce:95:a0:e9:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C9:10:F7:D8:E8:B0:28:FF:53:3E:1F:54:CE:EA:B3:A9:52:7E:60
            X509v3 Authority Key Identifier:
                keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:29:ac:38:58:4f:77:bd:40:02:f9:0e:9f:d4:e1:66:56:cc:
         ba:bb:c5:6b:de:91:6d:c7:01:2f:7d:9c:92:0b:12:d8:34:8e:
         f9:fc:8e:d2:8d:87:fd:09:2b:01:c6:ee:88:c1:b1:01:eb:26:
         4c:ff:8a:a5:24:11:e1:ef:6e:bf:f3:89:8e:1a:d4:f3:b3:fc:
         5e:92:70:15:99:46:70:50:e1:25:91:49:f5:d8:64:08:ba:46:
         1f:22:0c:7b:09:08:21:35:62:ad:c7:f7:0d:8d:a3:a1:50:ec:
         9e:7e:27:47:f5:b5:f8:e9:cf:d3:7d:b8:89:2d:ef:f9:58:a4:
         04:27:e9:72:ae:07:f4:0a:f5:79:b5:2d:c9:97:f5:29:a8:57:
         d7:f9:8a:27:d4:2e:e7:6e:05:f6:2b:0c:0e:8f:ac:54:e6:a5:
         3c:c7:0a:90:37:f4:68:9b:7e:b0:51:41:ab:9a:f4:c2:21:3b:
         b8:a6:f9:a4:a5:81:f5:e5:91:2d:55:06:85:bb:8a:cc:46:96:
         61:b8:cf:ec:8e:04:b7:ef:2b:ee:6c:37:4a:62:03:a9:ed:ad:
         3e:6f:85:ff:11:0e:05:52:5e:8b:51:a6:14:0f:6e:8f:cd:80:
         d2:80:f0:91:08:2a:1f:72:36:6f:c2:1f:7d:1c:4d:29:54:61:
         fd:11:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:54:40 2025 by rpki-client