This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File:                     N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier:          cp64WzNgk58yhI359pgIiqsLNY7B65XCzxOgoQYr2bk=
Subject key identifier:   16:17:9A:87:1C:AF:8C:2F:02:5C:D6:FF:D9:5D:81:87:B8:5B:2A:17
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer:       /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial:       019B428046BF37C194CAA0D736C7540A701F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number:          178B
Signing time:             Sun 21 Dec 2025 20:01:01 +0000
Manifest this update:     Sun 21 Dec 2025 20:01:01 +0000
Manifest next update:     Mon 22 Dec 2025 20:01:01 +0000
Files and hashes:         1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: S5cK4yml8D7C+Vy569qrZ5AyaGPADhwiECw7zslkwQQ=)
                          2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:80:46:bf:37:c1:94:ca:a0:d7:36:c7:54:0a:70:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
        Validity
            Not Before: Dec 21 20:01:01 2025 GMT
            Not After : Dec 22 20:01:01 2025 GMT
        Subject: CN=16179a871caf8c2f025cd6ffd95d8187b85b2a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:68:8c:23:8f:1f:99:62:37:6d:b8:49:70:
                    a6:bb:62:2b:60:50:21:c1:59:3c:6a:f5:84:fe:83:
                    c4:6e:e7:f6:b8:53:0a:17:1a:a5:6f:78:3f:cc:42:
                    4c:9d:98:e8:54:21:64:e0:0e:5f:25:80:0c:be:44:
                    3f:16:cd:eb:80:c1:55:2b:fd:ed:c1:2c:53:57:3e:
                    a7:9f:7d:01:bf:86:1c:89:77:1d:2e:d5:5b:11:d6:
                    67:54:45:25:59:94:34:d3:69:a5:0f:f0:8e:ec:f6:
                    5f:af:ee:d7:d3:35:e5:68:bb:95:de:81:f7:f6:b6:
                    9d:eb:88:44:dc:ab:7b:04:e9:19:ac:d2:7d:1d:c7:
                    6e:de:87:c4:2c:84:6f:a5:95:0a:a9:5a:fa:1b:5f:
                    39:58:d7:a4:46:b7:cc:4b:e7:02:97:ce:23:36:47:
                    e0:e3:2a:b5:1a:65:34:4b:97:66:74:ee:1b:9b:08:
                    e0:b3:9e:73:0c:f8:55:84:01:81:88:7e:96:22:f2:
                    7d:d3:42:09:d5:85:44:a6:7a:02:10:7e:58:ed:c7:
                    e6:d0:dc:41:1f:0c:57:ab:51:fb:6d:2c:c9:92:e8:
                    c6:bd:c5:af:83:65:06:f2:9e:6b:20:c7:e9:75:f5:
                    bf:a4:ce:37:1d:a4:f8:eb:7c:09:7f:e9:45:e6:87:
                    1f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:17:9A:87:1C:AF:8C:2F:02:5C:D6:FF:D9:5D:81:87:B8:5B:2A:17
            X509v3 Authority Key Identifier:
                keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a3:64:21:c9:b8:93:9e:8a:92:9d:35:65:a0:8c:49:ee:85:
         27:cd:e3:ed:ed:ff:3e:4a:0d:99:83:c8:c7:40:21:0b:7b:d9:
         5b:56:6a:93:ff:81:b9:26:c1:d9:ac:ed:53:55:90:0a:12:7b:
         eb:81:4c:32:65:e0:39:65:b2:f1:48:9c:0b:e9:c6:2d:57:f9:
         81:4d:ce:e0:cf:30:d3:97:7e:c8:ad:bc:f1:f0:72:ff:22:04:
         31:1c:45:6b:f0:91:f7:46:de:a5:2e:64:3f:06:e7:0b:df:4a:
         72:bd:1a:85:71:81:33:75:45:a6:72:c1:41:28:34:d6:f7:02:
         e8:fb:db:7e:06:e6:70:70:6e:92:ca:12:75:02:aa:f8:33:86:
         e8:13:b8:f8:8f:32:de:0a:74:fe:04:f2:88:ba:4b:b5:51:54:
         79:c8:9a:38:72:3a:aa:6a:4e:2f:72:b4:69:39:6a:0d:87:91:
         f5:59:f0:31:3f:a4:6a:bd:f1:63:a7:97:f6:7c:da:9d:37:58:
         1e:95:47:35:6d:80:5d:cc:d6:da:94:a4:3f:24:c8:db:74:72:
         0e:3c:d7:72:38:59:4b:4c:94:5a:c9:e5:0b:b0:d9:6a:05:b1:
         9d:3d:0e:9e:98:86:5d:bf:65:23:3f:0e:26:44:c1:df:93:b6:
         62:a8:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:31:59 2025 by rpki-client