This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File:                     k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier:          t7A1WsycpauLK2daVpk+eP8xG5mJ6TFbEuGGzZn90Oo=
Subject key identifier:   10:23:52:04:4F:5F:45:DA:D3:62:6F:C0:52:0B:66:56:9E:B1:29:CA
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer:       /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial:       019B49273B2C4AC339B7143B63010B21D192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number:          178F
Signing time:             Tue 23 Dec 2025 03:01:06 +0000
Manifest this update:     Tue 23 Dec 2025 03:01:06 +0000
Manifest next update:     Wed 24 Dec 2025 03:01:06 +0000
Files and hashes:         1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
                          2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
                          3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: fbAIg2wUnt3OBVU5T7gXaDynxyLOrXyMHPA5aOOAWbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 23:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:49:27:3b:2c:4a:c3:39:b7:14:3b:63:01:0b:21:d1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
        Validity
            Not Before: Dec 23 03:01:06 2025 GMT
            Not After : Dec 24 03:01:06 2025 GMT
        Subject: CN=102352044f5f45dad3626fc0520b66569eb129ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:ff:60:a5:95:57:a5:df:62:54:08:e2:1a:
                    42:42:a1:e1:ec:76:35:8a:54:0b:38:e3:1d:68:2a:
                    4f:f6:1d:2f:97:13:60:55:1d:0c:82:ae:ac:f2:f9:
                    d4:58:34:0c:4f:b5:6d:56:29:d1:23:45:5c:b9:8f:
                    1d:ac:8f:fe:23:a7:cb:ad:dc:51:2e:de:8c:9e:9e:
                    fb:9d:66:30:86:00:16:16:b5:fb:d7:e2:1d:f9:2d:
                    e7:6c:5b:f4:4a:0c:ef:ea:45:9b:9b:a0:27:cd:e0:
                    8d:6b:2a:ff:2f:b4:3c:d7:7a:3e:66:23:fd:84:00:
                    d3:d0:43:96:6a:50:87:12:d6:cb:6f:76:e6:65:fc:
                    73:ad:be:8f:11:32:00:0c:95:4d:ab:88:a2:f2:9b:
                    bc:26:c5:4b:f8:6d:fe:5f:04:29:12:6e:d3:ef:6d:
                    48:d6:cf:31:3a:20:15:e1:23:e6:f7:fe:7c:d4:4e:
                    f4:40:2e:16:13:55:c5:22:bf:c1:70:b1:5f:7d:fc:
                    c3:e3:7f:66:30:cf:96:60:d4:07:c9:cc:38:73:8c:
                    b2:4a:17:cd:5f:f5:94:ac:c9:ca:ef:59:8b:55:e5:
                    88:35:72:30:1e:d1:32:c9:86:59:9d:84:94:44:f8:
                    f9:98:60:f4:f4:f0:44:51:e7:9d:d0:ab:5e:cd:70:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:23:52:04:4F:5F:45:DA:D3:62:6F:C0:52:0B:66:56:9E:B1:29:CA
            X509v3 Authority Key Identifier:
                keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c8:fa:e7:51:c6:b5:ad:37:bf:e5:62:42:47:90:4c:ea:8f:
         62:9e:9e:12:ce:8e:f6:de:11:61:37:e9:dd:fb:d8:3b:31:33:
         18:1f:e9:e9:60:bd:aa:7e:56:3b:39:53:d6:c9:0a:97:72:c4:
         6d:1a:c7:91:30:cb:5e:6b:19:10:ae:a0:44:5d:0d:3e:34:1d:
         53:b9:bf:19:62:d9:7f:78:06:5b:27:11:23:f4:aa:6c:97:6b:
         5c:99:11:46:20:82:b9:fc:02:53:33:18:6f:aa:cc:60:48:2e:
         16:ed:cd:58:ae:2a:fe:02:e4:e9:73:62:27:54:39:c4:64:45:
         63:28:6a:79:33:fa:28:d4:f6:94:a6:15:fc:b0:52:dd:7c:1d:
         dd:ba:38:d3:24:8b:9d:ec:da:e2:af:90:df:cd:f5:eb:44:e7:
         ad:88:2e:de:a0:a6:aa:02:c7:76:fd:aa:e8:c4:f0:17:3a:39:
         36:0d:89:3d:c1:5a:3d:c3:0c:8d:2a:11:a3:dc:61:2b:c0:88:
         e9:30:9e:49:d7:70:b0:05:ba:f2:01:ec:6f:4f:c4:9d:a7:f7:
         1a:73:8a:a3:9a:8c:61:ab:d2:0a:9d:2b:40:9a:ee:6a:89:fe:
         f8:76:c3:c3:ba:8f:c7:c0:57:b9:f7:00:16:2b:27:9c:9f:04:
         a1:c9:52:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:28:34 2025 by rpki-client