This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          omrtdQM/cbpiEBHx3DUXGM2hIH8dAu0eN0zjRJcqAIw=
Subject key identifier:   47:3F:8D:F2:E5:9B:BC:98:6D:2E:30:6B:D7:5D:C5:A6:CC:96:04:6E
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       019B3833529970E7AE6D792F754C42059E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          178C
Signing time:             Fri 19 Dec 2025 20:00:46 +0000
Manifest this update:     Fri 19 Dec 2025 20:00:46 +0000
Manifest next update:     Sat 20 Dec 2025 20:00:46 +0000
Files and hashes:         1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
                          2: jECFVXifI2PML21GlnCLdBYUig0.roa (hash: 88xVe4+njhjbTw9qYTdy0ykyXz6/PEaM+aox252NmaU=)
                          3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: zqQMJ8R+PuEJ7hTjZg1dTXroHeC5aL3JWx9lNpYD5A4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:33:52:99:70:e7:ae:6d:79:2f:75:4c:42:05:9e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: Dec 19 20:00:46 2025 GMT
            Not After : Dec 20 20:00:46 2025 GMT
        Subject: CN=473f8df2e59bbc986d2e306bd75dc5a6cc96046e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:ed:f9:08:af:59:92:38:1d:70:dc:f5:4b:
                    e0:be:58:97:fe:5b:41:64:35:c7:a2:a9:2f:f5:37:
                    f9:c7:09:db:4f:59:68:75:66:94:ac:3b:28:b8:b5:
                    9d:61:be:c7:cb:f2:3c:21:36:1a:78:1f:9c:c5:8e:
                    78:04:01:ae:89:06:ec:f0:ca:07:15:7a:5f:22:d6:
                    8a:52:b6:0a:bd:51:81:5c:43:c0:90:d2:c9:33:1e:
                    45:09:f8:51:22:98:f9:2b:ec:88:53:fb:fe:ac:5d:
                    36:c9:0c:a6:b0:91:45:08:19:82:77:69:98:77:10:
                    41:c2:d8:97:1d:70:ed:f0:fa:0c:93:87:ee:d1:57:
                    43:23:98:18:d2:42:8c:42:8e:c9:98:f7:c8:19:83:
                    b7:95:8c:7d:5a:c8:25:12:b5:0c:a5:f0:86:5e:5b:
                    d1:cf:eb:81:22:df:9d:bc:dd:cc:9d:5f:0a:1a:8a:
                    29:d4:da:37:6e:1a:d4:ea:32:c1:ec:b5:bc:ef:92:
                    38:1b:a6:d9:ad:d5:5a:16:67:ff:8b:2f:a9:45:a6:
                    55:8a:aa:7e:45:e9:3e:3b:5e:58:4c:68:33:0e:b2:
                    ee:56:b2:7f:58:3f:12:e0:b3:7c:8d:47:2a:5b:3f:
                    e6:10:5b:20:e8:4c:be:11:21:42:40:2d:57:50:ca:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3F:8D:F2:E5:9B:BC:98:6D:2E:30:6B:D7:5D:C5:A6:CC:96:04:6E
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d7:4d:29:6d:3f:ef:d2:7b:23:e7:6e:cd:89:06:f0:cc:26:
         d1:29:cf:8d:f6:4d:b3:84:de:a2:a5:74:b7:71:8c:17:84:f1:
         65:f3:ab:a8:bf:aa:ab:e8:68:ef:d8:e6:a0:3f:3c:d9:69:b6:
         79:70:26:c7:a5:2b:32:99:44:16:10:ed:82:a0:7a:06:69:3d:
         3d:35:01:b7:4a:ea:ba:c1:29:fe:c8:88:12:57:bf:85:3e:d9:
         5b:50:04:9a:13:f0:64:7a:a6:ca:d8:bb:e0:08:7f:02:4b:18:
         71:94:9c:4c:18:fb:56:5b:92:44:db:a6:74:46:ab:79:7e:f5:
         0b:92:de:ae:28:3a:a7:03:99:51:c8:8f:39:9c:84:f8:a4:26:
         d9:a1:80:4b:6c:cc:15:11:4c:e7:32:8b:65:ce:e6:43:70:d4:
         7f:07:53:de:08:9b:c7:11:d5:fd:1b:6a:c5:3f:66:86:83:72:
         e7:d9:09:e3:c1:18:98:4f:02:63:4d:c5:a7:d8:66:5e:56:ed:
         22:55:52:95:cd:4f:e1:59:cb:f4:59:58:12:de:59:5a:37:0b:
         ef:dd:98:34:3f:e2:30:b9:78:61:26:18:06:0f:37:a2:b5:84:
         1b:16:fe:0e:1f:9a:d8:5b:3b:81:56:ec:7c:cc:c6:57:d6:f3:
         b1:59:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:39:46 2025 by rpki-client