This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File:                     H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier:          BGz8P+4lrcE+V9pIlkPa8XsjQqeuz5GH3x3KgoPwRdg=
Subject key identifier:   3B:1D:8B:72:98:44:ED:A4:2D:71:D5:EF:EE:DA:3C:EF:9A:9A:3C:D2
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer:       /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial:       019B0AECDD33AC193F2FC06AEE427061B77C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number:          177F
Signing time:             Thu 11 Dec 2025 01:00:53 +0000
Manifest this update:     Thu 11 Dec 2025 01:00:53 +0000
Manifest next update:     Fri 12 Dec 2025 01:00:53 +0000
Files and hashes:         1: 6t7hlxi8baPpruqlzXZsUXkULUc.roa (hash: veH5rVNwcKXSKi3c08116y54xZT7IKZDtBE2b0Jz3CA=)
                          2: 7aUz8499DPhigJrtymvFDvH_yp8.roa (hash: XTyGxDVpkkql4iOBZC2KvGPinizfN4vZAGbc34EqO8o=)
                          3: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: f5eRzIzoeq4KKVJBflkA9e6PSiIXBbWuaNY2lyVCenk=)
                          4: eYwcDrbCOrfqP-rYaXCht21Elhk.roa (hash: WzOCjqAS7iS6+2PXJkstuDJeHt/haFGrL007cy+fVt4=)
                          5: i3i8lSutN5bZ9tuFtM92GryC3Tg.roa (hash: 5ISoDWe4dlL7knoj3DcxHOeML9tN8TdDsmOzNTKQVvE=)
                          6: jz7r0U5OaA8Q59L6HsVMDy2LM6I.roa (hash: /rl8PmJ+zraPwkfaCv5VsqQ2CSC3ynTwyG8Gqt6YLTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 23:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0a:ec:dd:33:ac:19:3f:2f:c0:6a:ee:42:70:61:b7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
        Validity
            Not Before: Dec 11 01:00:53 2025 GMT
            Not After : Dec 12 01:00:53 2025 GMT
        Subject: CN=3b1d8b729844eda42d71d5efeeda3cef9a9a3cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a9:f5:d0:e3:16:01:7e:f2:e3:dc:5b:c7:ae:
                    34:44:51:b5:ab:a5:ed:59:2f:3d:61:0e:87:51:dc:
                    f3:c3:d3:12:e7:e9:14:f7:a9:db:9e:68:ce:e9:00:
                    ea:f2:ec:b4:f9:90:57:fa:62:1a:e7:b6:e7:12:9b:
                    6d:84:20:ac:9d:20:d0:4f:b4:f7:4d:58:cf:9e:97:
                    9b:07:08:6f:16:e4:aa:3c:55:c6:34:a0:f9:27:77:
                    6f:4c:50:61:55:b0:c6:f5:1d:17:ed:a1:df:71:e2:
                    f2:e4:85:bb:53:b8:28:37:fe:6c:4d:d3:c0:ae:62:
                    20:a3:df:f1:96:b9:97:2d:98:72:30:26:eb:bf:63:
                    18:84:17:d5:0d:2c:0a:17:e6:48:c1:2e:59:6f:d2:
                    c0:ac:fd:89:1a:a6:af:35:8c:c3:f3:f5:12:7a:72:
                    f7:83:38:7b:c6:47:4e:08:d2:bf:a4:7c:dd:09:e0:
                    b5:d5:c3:81:a0:f8:98:7c:0e:c2:78:b2:87:50:22:
                    60:90:3c:16:ed:75:e8:0d:a8:63:20:e7:bd:9b:b4:
                    72:a6:97:ba:da:00:96:0a:35:a3:fb:d6:e4:dd:54:
                    8c:d9:93:76:ef:1c:e7:52:7b:84:af:80:75:89:b1:
                    f4:5e:05:d5:24:e3:f1:d9:ac:88:27:93:ee:05:3f:
                    c9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1D:8B:72:98:44:ED:A4:2D:71:D5:EF:EE:DA:3C:EF:9A:9A:3C:D2
            X509v3 Authority Key Identifier:
                keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1b:96:8a:e2:1f:f1:2d:4e:b2:27:39:97:d3:a3:4a:57:03:
         6a:d6:51:de:c4:36:65:9f:aa:90:54:db:e0:62:58:0a:f0:94:
         4f:5d:57:14:c5:ed:10:b2:aa:c3:a0:ac:be:00:4d:37:7b:ba:
         8f:3b:39:07:38:60:47:f8:11:84:57:24:c8:ea:bf:cc:8d:d5:
         a0:42:6d:37:15:7f:2e:ff:a7:d3:93:09:99:58:14:b1:aa:53:
         f0:14:20:71:fe:3d:69:87:2e:91:19:bd:e5:f3:37:1f:11:66:
         c3:7a:0e:93:40:d2:d2:9b:79:34:37:87:54:bf:de:2a:3a:df:
         45:fe:51:2f:0d:fa:28:00:ff:35:6e:85:ff:a7:02:66:33:93:
         9b:59:e3:66:75:f6:73:da:a5:74:3d:a1:08:fe:4b:e2:be:62:
         91:77:c7:1c:19:c1:84:31:4f:d8:f5:ac:49:f3:c3:83:6c:f3:
         29:6e:c3:ae:c6:e1:57:96:47:a6:ff:76:44:9d:5f:4e:db:64:
         ec:0a:87:0c:ba:18:59:af:b6:aa:a5:d0:a4:a3:a6:d0:1d:1b:
         0c:97:ad:cb:d2:62:21:55:f9:1b:65:fa:cd:df:c1:fb:71:7e:
         d5:39:9c:46:fd:c3:a5:4c:53:20:ab:06:7e:66:40:97:f9:96:
         ee:8d:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 06:46:49 2025 by rpki-client