This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File:                     ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier:          E58bsrZF0QtfpAPwsUaqtnvYnmXAK7hAp743DV1EIeQ=
Subject key identifier:   D8:BF:FE:E8:65:B7:DC:CC:75:59:D6:C6:CE:26:A9:84:EB:B9:C4:CB
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer:       /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial:       019B3F11435FF3BF858E850B1626F8B580AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number:          178D
Signing time:             Sun 21 Dec 2025 04:00:54 +0000
Manifest this update:     Sun 21 Dec 2025 04:00:54 +0000
Manifest next update:     Mon 22 Dec 2025 04:00:54 +0000
Files and hashes:         1: 03xoijHJR91pQdRK4BVsUMo651Q.roa (hash: NiWV6nMnI3xd8nfLo25KyV3pkHiiEo7coUv5lu4C83o=)
                          2: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (hash: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=)
                          3: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: LMMWeuYPSVvNqsPOAXJVyM7pJjHtyDhxtL1DwN99Tco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:11:43:5f:f3:bf:85:8e:85:0b:16:26:f8:b5:80:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
        Validity
            Not Before: Dec 21 04:00:54 2025 GMT
            Not After : Dec 22 04:00:54 2025 GMT
        Subject: CN=d8bffee865b7dccc7559d6c6ce26a984ebb9c4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:31:e9:e3:69:cc:c5:95:4b:c8:b6:84:d0:
                    ae:21:37:4a:1c:de:0c:6f:e6:f1:fe:3d:21:4a:2f:
                    5d:ff:88:cf:b9:90:0f:87:92:d2:d4:10:99:49:3e:
                    10:5d:8c:d6:5c:f8:80:46:b0:0e:06:52:47:c1:06:
                    47:85:0d:7d:3a:11:78:47:a9:79:8e:36:96:1f:70:
                    5f:5c:28:84:1e:03:62:25:a6:cd:eb:10:70:88:2b:
                    69:fb:60:f7:82:5a:71:b0:56:18:f4:ad:70:0d:9b:
                    3b:12:5e:be:dc:85:de:ea:53:24:0f:c7:63:ff:61:
                    a5:90:48:66:27:a9:aa:18:0b:7a:74:0e:97:62:3b:
                    c1:0f:89:4e:8a:db:f2:a3:e1:46:f5:ec:49:af:a7:
                    31:b8:f3:aa:8a:f6:51:78:36:9b:f3:41:4f:36:1b:
                    21:7b:b7:2d:c3:51:6d:98:de:62:c7:6a:84:b8:ac:
                    a2:83:75:e9:40:21:61:de:bc:b2:8a:c2:e3:f0:64:
                    e6:6f:f9:e3:df:9c:59:a6:55:b0:c1:60:84:42:a7:
                    c0:58:7f:64:c6:6c:71:5d:b2:11:f1:2e:b0:d6:c4:
                    34:dc:f7:3b:79:f3:11:5f:68:e8:ba:3d:a1:8e:61:
                    52:24:03:aa:d0:fe:bb:47:cd:a9:27:61:dd:b5:59:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BF:FE:E8:65:B7:DC:CC:75:59:D6:C6:CE:26:A9:84:EB:B9:C4:CB
            X509v3 Authority Key Identifier:
                keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fc:47:09:9f:6e:47:d3:f4:e1:62:7e:5b:59:f9:25:00:89:
         08:ee:b3:ea:f3:db:5a:85:0a:57:15:ae:6f:f0:67:c4:5d:95:
         e2:a8:75:db:ed:06:6c:a2:02:1f:db:7a:6c:67:21:0b:18:34:
         8f:dd:3a:d1:67:9f:a5:6c:1a:af:4f:c5:2c:89:45:68:b8:3a:
         86:5c:84:45:bb:b7:59:ac:89:58:6f:b4:c0:1d:7c:2f:7f:fe:
         e9:9a:37:81:f1:16:40:a1:fa:21:05:8a:7c:0c:3d:ac:a9:29:
         c5:b4:a2:6b:04:49:1c:f3:1c:42:50:c8:f1:a6:f9:fc:fb:f7:
         c4:91:8e:31:a4:1e:ea:ee:a3:73:3d:81:92:0f:87:ac:60:81:
         dd:3b:94:7e:9f:c6:34:b6:0b:62:4a:14:f4:ca:c3:00:f3:e0:
         ab:96:37:c1:97:06:15:25:f1:40:88:ac:eb:c2:ea:1c:0e:4d:
         4e:71:04:05:a0:7c:59:5c:e5:10:83:b7:48:bf:0a:34:e8:13:
         24:c1:86:5d:b9:f9:0a:7a:af:02:ab:43:b2:43:72:b8:b5:30:
         82:15:e9:5a:42:ed:c8:ae:d9:f4:0b:3c:88:fd:9d:e4:76:a4:
         74:0e:53:38:46:35:2e:d8:0d:65:59:49:40:8e:6e:fb:16:d9:
         36:af:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:32:21 2025 by rpki-client