This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File:                     22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier:          wzMdeOzfL5FfQFiY3c+RAKh4jAdRhavWs9qaRNu2hmo=
Subject key identifier:   FC:D6:C5:B3:CD:69:D4:7A:E9:39:DC:8F:D2:38:5A:7F:B6:0B:D4:98
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer:       /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial:       019B4324F4E0CB72F76423931DDC8AA13B0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number:          178E
Signing time:             Sun 21 Dec 2025 23:00:53 +0000
Manifest this update:     Sun 21 Dec 2025 23:00:53 +0000
Manifest next update:     Mon 22 Dec 2025 23:00:53 +0000
Files and hashes:         1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: N4iaPoRtuNSeZV1AZhL8HUpGIj/cI7V6hK+Y/F+sNuE=)
                          2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
                          3: YgI-v6xyCyvCdaFE_0gi8JebnCU.roa (hash: 8nUg6t7h+Myv8fLu/m3fBl/zsOujrUMcs0usjBSVmFI=)
                          4: q5QCzkumzST46_juxutwokUmgo0.roa (hash: MDvObiRF/vbaGYpuLSQ+tLb0/l9IEYefgNBYbZcoyeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:24:f4:e0:cb:72:f7:64:23:93:1d:dc:8a:a1:3b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
        Validity
            Not Before: Dec 21 23:00:53 2025 GMT
            Not After : Dec 22 23:00:53 2025 GMT
        Subject: CN=fcd6c5b3cd69d47ae939dc8fd2385a7fb60bd498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:94:4c:27:84:34:62:ce:6d:2c:dd:a9:6f:
                    b2:c1:55:79:1e:ad:32:98:79:f4:41:52:77:71:db:
                    04:ef:82:6e:db:1a:8a:19:62:16:1c:91:36:14:62:
                    84:d4:a3:51:4b:5c:5a:22:d4:c0:16:7e:51:23:15:
                    03:b6:fb:2d:d3:50:95:0f:9f:54:d2:a4:45:6a:29:
                    0c:49:61:7a:64:8a:2f:ed:21:8e:2c:4c:47:c1:56:
                    45:81:18:5b:5e:49:c2:0b:20:cd:8d:ae:0b:82:b3:
                    6a:55:ce:54:f5:f6:49:f9:17:b0:fb:c4:47:29:d6:
                    1d:56:d2:eb:36:e9:1d:31:27:52:86:d0:17:7c:55:
                    31:f9:fc:a5:de:1a:9a:50:b1:3c:63:13:39:f6:d9:
                    fe:04:ae:72:25:27:47:77:3a:7b:74:c9:7e:3b:ab:
                    74:f3:5b:1f:0c:e2:22:4e:50:05:02:45:c7:94:54:
                    6a:aa:24:e9:fc:87:78:a0:84:d8:46:00:c9:d1:8c:
                    03:34:a4:5d:28:5d:8f:8f:27:c6:56:eb:a8:45:cb:
                    b2:38:2b:7f:b1:87:77:d2:2f:40:46:b8:06:ff:37:
                    db:8a:af:e5:d2:cb:be:c4:91:a7:4d:b3:50:72:2a:
                    e4:89:63:51:ef:ed:2c:96:0c:9f:83:fb:76:1e:c8:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D6:C5:B3:CD:69:D4:7A:E9:39:DC:8F:D2:38:5A:7F:B6:0B:D4:98
            X509v3 Authority Key Identifier:
                keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4a:80:f4:95:a4:5c:b8:21:4c:32:98:4a:17:cc:35:f1:4e:
         2d:cf:72:d5:10:06:5f:51:8f:30:f4:41:3b:08:73:01:e4:02:
         a7:7b:81:24:05:3f:13:6a:0b:a8:75:09:a4:60:62:dd:3d:55:
         ca:b7:b0:b2:29:d0:e5:3d:91:90:75:38:c7:42:fd:d7:fb:d4:
         04:ac:8a:8e:09:2a:ea:9e:57:36:02:9e:cc:20:16:94:59:38:
         66:cc:6a:2a:8b:4d:4e:1f:00:36:e0:04:86:41:e5:15:36:ef:
         57:c6:74:cb:18:ee:14:ff:7b:20:48:1a:fe:cb:bb:8e:d2:97:
         39:89:f2:0b:23:de:a2:2a:86:5c:74:bb:c6:e5:56:f0:a4:62:
         01:cc:a5:25:2b:b2:40:f4:a5:77:31:fd:57:92:3c:42:8f:43:
         03:0a:ff:a0:11:1e:d9:e3:7d:34:5e:75:0b:38:a4:b1:18:ea:
         08:97:4b:16:98:dd:fd:2a:58:2a:06:5e:7a:cd:17:f7:25:b9:
         3d:32:42:06:da:12:a8:28:e1:17:81:ab:fe:c1:53:09:73:ba:
         28:4d:2e:ac:9b:2a:72:98:ff:ec:cd:c4:68:14:b3:c1:2e:a7:
         8b:21:9c:d4:fc:27:d7:8d:2d:75:9b:87:82:20:aa:c1:99:ea:
         64:31:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:27:22 2025 by rpki-client