This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File:                     Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier:          zzuy8YDUkVVeph16FKyBjPGIMJjZsMtzoqvrv5YMXxE=
Subject key identifier:   84:21:6C:8F:21:49:42:4A:EF:CC:42:B1:78:46:9A:D2:88:69:66:25
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer:       /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial:       019B62793C9B49AC4A6BA3F1A3FC1A9E159E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number:          179C
Signing time:             Sun 28 Dec 2025 01:01:11 +0000
Manifest this update:     Sun 28 Dec 2025 01:01:11 +0000
Manifest next update:     Mon 29 Dec 2025 01:01:11 +0000
Files and hashes:         1: 2nLfLY9iuS0QWJUoxMXGuTVNh4Q.roa (hash: KGQN3KTkCEm9UO8mNAZfG4hkgxNjImc/0aUX1CErP0M=)
                          2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: /OODskIzzbtRoGEu1U2aLBYONNvketua5iI5pBgyRpg=)
                          3: OP_LxEh3lwkqqiARAnCPDgbwZFo.roa (hash: s8g9cGnm5CE4zgxAFLfWVnDVE/Wx0l3/tOuxqSeDbUw=)
                          4: Th0AzgJWNzEMUInk7IHPiBNTMFs.roa (hash: 0b9R/T23sDaiRJT9SmZqwKUiLRaB4TURwrsLOA1pG44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:62:79:3c:9b:49:ac:4a:6b:a3:f1:a3:fc:1a:9e:15:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
        Validity
            Not Before: Dec 28 01:01:11 2025 GMT
            Not After : Dec 29 01:01:11 2025 GMT
        Subject: CN=84216c8f2149424aefcc42b178469ad288696625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:df:b6:d4:b1:f9:ff:bd:5b:48:53:0f:3b:
                    83:95:61:07:75:0b:2c:ac:a4:38:cb:60:25:a8:25:
                    19:4b:4a:8a:57:87:8c:87:4e:bf:3c:04:29:9f:7f:
                    6c:f1:df:4c:2f:2a:95:8b:a3:99:b7:2b:6e:d1:28:
                    ec:75:9d:bb:2e:82:ff:ea:48:ce:30:0f:f1:56:62:
                    81:f4:18:f5:44:6d:7b:5b:98:02:3f:ac:e9:3f:3b:
                    2a:1c:f4:75:5a:6f:eb:1c:84:67:0d:7b:b5:6e:63:
                    6c:17:41:dd:fb:e2:89:20:bc:cf:d1:b3:89:df:00:
                    81:4d:8d:34:71:55:d8:ce:99:d4:a9:d1:14:c3:96:
                    ad:60:c2:4a:5a:f1:93:b5:4b:f9:ad:d7:28:cb:a7:
                    d9:29:96:bc:41:b0:b4:1a:c0:75:f3:71:9d:79:b3:
                    f0:43:ac:30:17:95:a6:70:39:a5:d1:c9:64:c8:28:
                    64:f3:d1:cd:c9:5d:9d:67:a5:a9:43:bf:68:bf:12:
                    25:d6:8f:2a:a0:69:57:89:c7:fc:de:7e:72:82:6c:
                    42:1d:1d:85:20:7d:a2:1e:9b:02:1d:4c:d1:3f:2e:
                    64:be:0a:71:17:dd:c1:15:ba:c4:54:d9:41:83:2e:
                    66:bc:df:d0:78:52:16:5b:40:a6:2a:cf:36:d6:92:
                    27:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:21:6C:8F:21:49:42:4A:EF:CC:42:B1:78:46:9A:D2:88:69:66:25
            X509v3 Authority Key Identifier:
                keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:dd:30:85:c1:85:2f:ed:be:af:6c:bf:2a:ea:81:bb:f4:2e:
         bc:b2:40:7d:88:04:39:19:f6:3a:33:d6:08:86:fa:10:04:fd:
         1b:fe:4b:fe:a2:fe:c4:51:95:92:4a:15:32:8a:f5:3f:e2:d8:
         3b:88:6e:0a:0c:6b:b7:27:b0:11:03:12:f0:b8:69:03:ce:76:
         0c:b4:fb:a0:a2:5c:66:1a:7c:ec:5e:ae:f9:ba:4f:83:44:04:
         08:d7:a0:6c:68:bc:fb:23:13:8b:04:e2:d9:2f:00:08:fc:ab:
         c4:12:29:4d:54:f9:ec:80:a4:6f:c5:19:47:fe:eb:c3:49:81:
         2b:67:47:67:0d:ca:42:8d:4a:5e:52:5c:7e:97:9c:d8:49:92:
         ba:e6:1e:3b:21:58:d7:c9:59:fc:b2:0f:60:cf:26:a5:58:6b:
         25:b1:95:1d:91:22:02:f6:9e:49:48:92:cd:bd:bb:9d:8b:5b:
         26:35:c1:07:bb:89:3f:65:e1:73:1a:41:60:6a:82:34:72:0d:
         5d:67:cd:be:58:14:09:bd:23:d2:94:60:c6:59:33:01:71:a5:
         9b:15:d7:2f:50:86:1f:1f:be:a9:66:3f:d0:05:9c:2b:b9:51:
         94:f1:0a:a7:07:d6:83:0c:90:f4:6b:bb:bf:06:ee:0b:00:4a:
         f4:bc:95:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 06:22:37 2025 by rpki-client