This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
File:                     m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json)
Hash identifier:          TtneFIErvR6XMcYy1/30m/gJc6tlo4HaoOq5V77uJgY=
Subject key identifier:   08:E0:F8:86:B4:13:0D:6C:C6:83:82:72:88:3B:85:8D:CF:49:FD:A0
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Certificate issuer:       /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial:       019B3BD9AD50A00ADEAC2613E0A0B11BA521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
Manifest number:          178D
Signing time:             Sat 20 Dec 2025 13:01:19 +0000
Manifest this update:     Sat 20 Dec 2025 13:01:19 +0000
Manifest next update:     Sun 21 Dec 2025 13:01:19 +0000
Files and hashes:         1: YOxJOhEaAlqOx1A04OY51lh73jE.roa (hash: 7Bjfyv8Xxx/gQ+ys9BXTrWHZUga2Das1hrYUJg7PDRg=)
                          2: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: f0ZudtP6jGR16wCPulK7Wp80bfTrJMwCIvJGEWfUTMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:ad:50:a0:0a:de:ac:26:13:e0:a0:b1:1b:a5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
        Validity
            Not Before: Dec 20 13:01:19 2025 GMT
            Not After : Dec 21 13:01:19 2025 GMT
        Subject: CN=08e0f886b4130d6cc6838272883b858dcf49fda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cd:93:39:a2:68:e4:ee:ee:8f:5c:94:05:2a:
                    5c:db:ab:73:a0:b7:05:30:94:9c:57:53:a7:bf:c9:
                    55:0e:4c:1b:ec:21:00:d2:2f:6f:00:4c:eb:02:3f:
                    9b:1b:4c:db:a2:b0:0e:54:63:ed:ea:b9:1c:94:cb:
                    d4:6e:dc:f5:5a:66:f9:15:2a:90:2c:f7:9d:bb:12:
                    0b:f0:78:b4:8e:b9:c5:c4:94:4b:36:25:9f:da:97:
                    4c:ee:ac:92:92:4d:5e:68:bb:37:58:b0:0e:66:c8:
                    3e:d8:41:83:a7:b8:a1:b1:5a:dd:57:ff:50:27:7f:
                    e8:17:77:61:bf:e1:1a:8e:c9:34:6a:23:43:92:51:
                    8c:b0:18:ce:97:51:da:ad:2b:70:22:b8:91:71:ab:
                    00:b8:d6:21:db:e2:ac:21:02:41:01:2e:23:cb:f4:
                    21:c7:cd:0d:0e:49:6f:8f:77:b2:5e:87:84:07:19:
                    29:2b:59:7a:fe:f6:f4:d8:63:a7:15:97:57:eb:87:
                    57:6a:ce:f9:11:30:e8:ff:6a:dd:8b:a0:2e:7d:af:
                    ec:89:a8:8e:e8:89:a1:c3:28:b3:fd:e7:e2:55:5e:
                    cd:84:02:62:65:7a:be:e8:60:2c:41:67:95:51:be:
                    ad:6b:93:c8:d2:bd:9b:85:fb:03:45:5d:de:67:cc:
                    9b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E0:F8:86:B4:13:0D:6C:C6:83:82:72:88:3B:85:8D:CF:49:FD:A0
            X509v3 Authority Key Identifier:
                keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b8:d9:a2:6b:ad:a4:06:81:98:6f:f0:2b:95:83:bb:61:17:
         d6:8a:5f:ad:41:37:04:7d:10:81:0d:a1:f0:d3:51:c0:98:1e:
         1a:3d:c8:4f:1c:35:6b:68:f1:1a:ff:f0:aa:c4:5a:59:f9:a8:
         75:ca:35:9d:f6:f2:a3:67:8a:6e:e4:80:8d:6f:e9:24:aa:75:
         bd:30:61:c1:55:dd:ef:0d:c8:1f:f6:6b:4e:a3:04:c4:f0:ce:
         59:d2:54:49:ac:04:dd:ff:f0:e2:29:c8:4b:6a:b0:ca:f6:ab:
         e5:03:0a:43:7c:d8:f5:31:db:c3:7b:32:f7:81:5e:a4:2c:f5:
         7b:56:26:c1:ea:ea:bc:0d:f9:38:a1:f3:14:d0:44:93:ba:32:
         07:b4:10:04:d3:9c:b6:0f:82:8d:db:68:50:f4:42:29:b9:98:
         06:e4:24:b9:97:b3:fc:e5:48:c6:fe:31:ca:e8:4e:04:e0:f3:
         c1:b7:b1:db:be:7a:93:d9:16:a1:c3:71:1d:38:8f:66:20:45:
         4d:83:64:30:40:0e:74:88:01:3a:00:b2:89:9d:68:bf:70:18:
         0b:58:a9:5d:9f:94:19:ee:71:e2:9e:c2:62:87:81:77:e1:a4:
         9c:ed:24:89:c6:97:d0:3f:37:02:f6:d6:7f:92:72:fd:ad:65:
         22:e3:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:08:53 2025 by rpki-client