This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
File:                     RJsY4ylteV06nJWb4lxwqqs2UgA.mft (raw, json)
Hash identifier:          9jBKR8dB3i7o55xq64y1MOchB+jGKf1NPfWZKH2D2DU=
Subject key identifier:   6D:95:4A:92:2C:43:93:D9:34:98:49:C9:04:34:29:42:0C:05:90:CE
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Certificate issuer:       /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial:       019B20CFF1D82B6A122E9E6AAFCFC0FBC24E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
Manifest number:          177C
Signing time:             Mon 15 Dec 2025 07:00:57 +0000
Manifest this update:     Mon 15 Dec 2025 07:00:57 +0000
Manifest next update:     Tue 16 Dec 2025 07:00:57 +0000
Files and hashes:         1: J8QjZax-mkvPxfZhhHMPCwubpys.roa (hash: rmal6rcTiDBRBlMMyLquXrrXQpuz0JgUekU0ozpEKqs=)
                          2: RJsY4ylteV06nJWb4lxwqqs2UgA.crl (hash: yxkdl4Y1NdSTvf6Q0Ci8Lh7FAlLgqixDOuqlU7LOjDA=)
                          3: SoB8_0B4GOtYomyJQxt0uZ0Oeww.roa (hash: OQVaFQPCwhrwCF+WYF+druX/sOmGI/9eo2Z2LvF9GLs=)
                          4: leAAH4rGishsnZoufTD0XzRz9UE.roa (hash: XYLINiTCGoUfisGhej9/jS2otE2Loul2nvXuv/CwfdM=)
                          5: x0AcTRasjy0qWZOIGUnT1Kbz4uk.roa (hash: zaM3VnNG9RVFofm3T8ZoNUTLDhK3X/kEUyA6UhvyMf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:cf:f1:d8:2b:6a:12:2e:9e:6a:af:cf:c0:fb:c2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
        Validity
            Not Before: Dec 15 07:00:57 2025 GMT
            Not After : Dec 16 07:00:57 2025 GMT
        Subject: CN=6d954a922c4393d9349849c9043429420c0590ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:6c:ac:49:85:17:9d:84:a5:5f:fd:24:95:
                    3e:e2:7b:b2:04:37:cd:70:16:9b:d1:76:1e:91:58:
                    27:56:c0:93:99:79:5f:02:fa:16:03:0f:5d:23:0e:
                    d9:d3:82:6b:d9:02:0b:7f:ca:1d:e6:e5:9c:39:d2:
                    b3:99:61:d7:44:75:49:6a:26:68:0a:65:6d:29:b0:
                    ad:0f:ee:64:1d:27:f2:94:7f:23:00:97:91:3e:f1:
                    bc:90:34:0d:b3:3b:46:fd:a8:97:05:c7:0a:51:e6:
                    f8:24:c9:65:3b:14:c3:3c:e1:dd:29:98:2e:f9:78:
                    4c:cf:e8:0e:d9:34:b0:00:3c:bf:dd:d9:58:eb:fd:
                    29:77:c3:88:25:96:03:83:62:d5:94:fe:fe:e2:19:
                    f0:3f:96:97:c3:88:6c:b8:d5:04:2c:d1:6a:85:0e:
                    52:b4:2d:9d:78:6c:2e:c9:c1:94:46:9a:95:71:08:
                    f7:16:f3:35:7b:f6:ca:0d:49:0a:e1:e8:ed:19:a9:
                    8f:17:7e:82:31:10:95:78:5c:8e:12:db:96:fb:ef:
                    4b:b4:93:3f:fc:e0:24:cb:71:65:da:e6:a4:7d:76:
                    14:97:c8:44:32:ec:14:74:19:26:e1:65:d3:67:d5:
                    c9:b2:c5:96:2e:25:41:ad:94:53:30:49:a2:e3:74:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:95:4A:92:2C:43:93:D9:34:98:49:C9:04:34:29:42:0C:05:90:CE
            X509v3 Authority Key Identifier:
                keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:6c:06:dd:33:c9:f4:3e:eb:de:35:3f:65:7d:29:64:b5:
         93:19:22:e1:90:76:81:8c:78:67:b6:64:86:50:34:08:80:5c:
         ed:6f:64:1e:a7:b3:2a:67:70:4d:af:3b:9f:f7:fc:fd:69:6a:
         ad:2c:0e:26:44:14:c6:64:fa:7f:b7:c7:d6:2e:32:79:95:64:
         86:35:15:f9:e6:e1:71:c1:98:da:d4:5e:48:22:a1:53:83:66:
         91:c3:bf:85:74:b8:af:30:d5:d0:67:ea:af:78:88:f3:b6:27:
         4e:de:cc:79:3d:30:b7:93:3f:e3:ed:5e:b6:e4:22:3e:e8:15:
         fa:c2:90:c3:b5:b4:87:9e:4c:e3:5d:93:62:d5:6d:58:3c:bd:
         4a:c6:01:36:4e:e7:79:de:0c:eb:8a:11:6a:85:b9:b1:78:f6:
         1e:8b:66:27:39:a0:cd:e0:9d:1f:42:11:36:6d:50:c6:c9:3d:
         44:ea:ad:dc:92:bf:bf:19:70:c7:a2:13:fb:ce:50:f6:50:75:
         09:62:d1:02:80:26:4c:b4:d4:17:05:07:78:8c:ce:de:81:37:
         2d:8e:d3:a0:b9:eb:6a:6e:69:f1:17:2b:b9:8a:01:d8:cd:5c:
         dd:cf:4d:58:9d:32:6d:6c:ee:d7:70:e8:5a:31:79:b9:2c:ae:
         d5:ee:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:16:29 2025 by rpki-client