This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File:                     eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier:          8TTjjFCky+8bhO2fGylnmMTYaNXCad5hwldxsgZ1BCo=
Subject key identifier:   1C:D2:98:04:9A:7E:9F:91:62:E1:F2:4F:AD:8B:08:DA:41:70:19:06
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer:       /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial:       019B3A9005F8DF0B1FAC77B893DAA350FC58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number:          178A
Signing time:             Sat 20 Dec 2025 07:01:15 +0000
Manifest this update:     Sat 20 Dec 2025 07:01:15 +0000
Manifest next update:     Sun 21 Dec 2025 07:01:15 +0000
Files and hashes:         1: GrkcftVthMbuFOuUmrwl5HnX76A.roa (hash: vQYdY8EKtEz2Hu89OKKocq2BRdvKpSXmSdv2pqjq+sg=)
                          2: JGZf0kINrFpmjWepb2PsAYcmWTs.roa (hash: U1eRU67s2DvJxllsDjz9sUyozODDDexgknm9DQzTkEA=)
                          3: WRR5LY8_1pJUgURwLaVmIo-E2-o.roa (hash: +qrg2tL2ng6DI1UCOg4tOsQWLYbjmu9xrdicU5ox5vQ=)
                          4: aTmEQc7rZSqiS9xlo8D5J910hiA.roa (hash: gp8EnuKJWDEH/vTaQx7oV8ya6rcqLHa/Gr9Zkh0GUXA=)
                          5: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: 6dxwMzteJwsSMznNKt1doz7Z+UGRlnzGZjl5YZpmG74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:05:f8:df:0b:1f:ac:77:b8:93:da:a3:50:fc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
        Validity
            Not Before: Dec 20 07:01:15 2025 GMT
            Not After : Dec 21 07:01:15 2025 GMT
        Subject: CN=1cd298049a7e9f9162e1f24fad8b08da41701906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:94:93:d3:b2:fc:48:24:4a:21:a0:7d:2e:
                    dc:fb:81:f4:8c:ad:78:42:b5:26:18:e9:18:a1:16:
                    30:cb:65:20:c7:5e:db:29:92:af:b3:cd:10:c1:36:
                    65:44:c6:0b:58:94:84:b4:c9:6a:b5:73:89:85:40:
                    18:db:f1:ea:47:c0:6a:69:3c:9a:6a:c1:52:cc:db:
                    31:d1:bc:3b:ea:6b:b5:16:cb:e8:0d:9c:72:d7:f9:
                    15:15:3d:fd:e3:3d:d0:b2:01:f9:d6:f6:1d:e1:0c:
                    51:50:34:c6:c8:88:05:0d:cd:10:b9:6d:04:cf:0f:
                    a3:1a:eb:57:9f:a9:07:2d:65:8d:f7:b7:a1:9b:46:
                    cb:e1:8d:fd:c6:1a:4f:69:dc:bb:80:97:7e:fe:85:
                    3c:d4:e8:94:f0:be:08:59:69:c1:dc:37:60:10:a7:
                    0e:1f:e4:7b:e8:20:d2:2a:13:05:01:00:61:89:50:
                    1e:9b:74:5d:38:80:4b:75:ae:fa:f6:98:6d:0a:cf:
                    7d:a0:50:00:ae:f1:68:01:cd:45:c1:5a:aa:b6:c4:
                    9e:ce:b8:d1:2a:7f:8a:86:bb:15:ca:64:a1:76:99:
                    09:7b:68:c1:33:39:18:f2:29:fe:c3:69:e2:eb:43:
                    dc:a1:63:5d:38:a8:c4:e6:f3:36:af:d2:98:c7:af:
                    04:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D2:98:04:9A:7E:9F:91:62:E1:F2:4F:AD:8B:08:DA:41:70:19:06
            X509v3 Authority Key Identifier:
                keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:98:2e:4a:75:3b:93:c7:87:84:5c:05:a3:9a:8f:d1:d5:7c:
         80:b6:e0:f4:2d:fa:a8:85:82:1c:ce:15:89:15:5d:08:ba:c9:
         4d:e9:e7:8c:b3:aa:b1:5f:84:63:a1:eb:b7:93:68:d4:b9:c1:
         44:2e:3f:85:d1:b0:fc:fe:a0:c9:99:a5:77:aa:17:0d:f4:88:
         b3:f6:28:60:31:27:e3:a7:1f:03:07:d5:a7:10:95:70:1b:e7:
         9b:27:d1:4b:67:6e:f6:26:9d:e8:de:ac:f7:d2:bd:e0:b7:9a:
         c0:7f:00:03:81:4b:77:f6:51:b0:29:5e:6c:12:75:1f:b8:56:
         6d:3f:61:95:f7:f8:97:a7:e5:43:a7:b7:3e:3c:60:17:95:65:
         ac:5d:5a:cf:6b:96:f4:de:94:e5:ed:c0:1a:e9:84:69:b1:bf:
         60:28:e0:87:1f:91:7c:5f:94:2f:f1:ba:64:ec:ea:e0:41:7f:
         d4:67:7f:c6:8c:82:ed:1b:70:72:a9:d1:83:7f:ea:24:b1:3b:
         22:0c:5c:d7:d1:89:27:fe:77:da:2b:eb:a8:ca:44:24:2b:f0:
         dd:28:86:50:84:9f:fa:d3:cc:d9:a1:39:53:c3:89:c5:f9:be:
         d8:53:2e:f9:17:6a:23:cf:73:58:79:bc:0f:51:77:ef:d3:86:
         cb:90:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:19:50 2025 by rpki-client