This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File:                     s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier:          uVpA4LMY3ao9guazwl7BOJvoaqhyeSWEt7uj4AkP4jQ=
Subject key identifier:   73:68:B2:4F:BF:A2:93:54:BC:68:30:E6:C4:E8:37:7E:D4:CE:0A:3D
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer:       /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial:       019B6B7BC6644E0A2C32550F07D8D0F0CEAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number:          179E
Signing time:             Mon 29 Dec 2025 19:00:32 +0000
Manifest this update:     Mon 29 Dec 2025 19:00:32 +0000
Manifest next update:     Tue 30 Dec 2025 19:00:32 +0000
Files and hashes:         1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=)
                          2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: D21bAejJ0DHceVA1lZBzbzxItsF+5qysi/0dpx9oQZg=)
                          3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 15:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6b:7b:c6:64:4e:0a:2c:32:55:0f:07:d8:d0:f0:ce:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
        Validity
            Not Before: Dec 29 19:00:32 2025 GMT
            Not After : Dec 30 19:00:32 2025 GMT
        Subject: CN=7368b24fbfa29354bc6830e6c4e8377ed4ce0a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:c4:b0:3a:f6:f4:d5:78:12:66:ca:1f:bf:
                    fa:8b:01:ce:55:b8:86:ff:a4:5f:6d:a6:cd:27:89:
                    9d:c1:49:3e:7c:bb:91:69:ff:d0:91:9f:5e:84:22:
                    bb:df:c6:2c:7c:67:b7:9d:d5:7b:77:c2:1f:28:b9:
                    ae:69:60:10:96:e5:e8:c8:ad:b9:71:ed:3d:34:64:
                    de:13:0c:4e:88:1c:da:4a:82:f5:c7:5e:ab:7a:e2:
                    ad:f3:e7:8c:6c:29:3d:40:6b:39:0a:fa:80:0c:58:
                    51:69:1b:66:55:4d:a1:cb:64:36:2e:21:a5:6b:76:
                    3e:df:1a:ac:a9:df:36:e1:28:21:3f:17:cf:cc:0f:
                    47:36:a8:58:32:7c:a2:92:46:55:ba:70:92:0a:7f:
                    4f:fe:b7:53:10:0a:2b:bf:64:ab:cf:b0:e9:0c:d5:
                    99:1e:37:02:d6:05:ae:ba:bf:28:85:97:c9:95:34:
                    0e:78:61:a6:f9:f2:c5:7e:ba:76:2d:e1:4e:7a:3d:
                    8c:74:f8:6f:84:ee:a8:cb:db:ca:f5:fc:0f:c0:a3:
                    35:1e:3b:3b:24:4f:7c:4a:f7:b1:00:3a:07:22:1d:
                    a7:36:62:e3:b4:f9:67:4d:68:10:57:dd:f6:fa:e2:
                    05:20:69:9d:47:bb:78:97:c9:34:09:ad:0a:5c:fe:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:68:B2:4F:BF:A2:93:54:BC:68:30:E6:C4:E8:37:7E:D4:CE:0A:3D
            X509v3 Authority Key Identifier:
                keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:16:bf:20:c1:c8:d5:04:a4:f9:f2:4b:75:f4:a1:b7:0d:
         47:ff:cc:3b:89:be:eb:28:b5:ab:dd:eb:c3:b5:61:24:ea:e5:
         3a:d1:d8:bd:49:14:1c:ed:5b:bc:1e:5d:93:6a:60:78:f4:1b:
         b9:8e:72:26:2d:0a:bf:ad:0b:ee:f0:50:71:bb:e4:3c:0e:2f:
         e1:32:85:fd:e8:60:32:84:71:d9:66:b7:e7:3e:d0:46:37:bc:
         72:86:98:83:0f:5f:52:5b:fb:81:cb:63:9b:77:9b:b8:44:c6:
         b5:cc:ef:5b:31:14:fc:53:b8:05:cd:c9:bd:c6:c6:c3:52:5a:
         63:81:32:7a:e2:2a:78:f3:ff:84:cf:ad:0a:1f:8e:ed:3f:eb:
         ea:ff:27:33:10:9b:39:97:6d:5d:00:85:10:ea:90:74:6d:5d:
         4f:74:a6:14:30:34:01:9f:21:b4:31:09:e6:27:09:c0:2a:c3:
         e2:a2:de:49:57:5e:7a:73:54:b7:b5:2c:af:78:38:1d:35:5d:
         f6:0f:56:75:dc:14:50:cb:c3:c6:e4:0b:d8:a8:e3:68:cb:46:
         68:bf:f6:eb:67:4b:92:85:e2:38:59:02:b3:0c:44:c1:60:73:
         48:4a:b1:af:94:43:58:07:76:03:30:0b:e7:4d:5c:0e:e8:d6:
         ad:24:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 22:47:27 2025 by rpki-client