This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier:          /WUTA0BltGxlrwyvtmCOED8MAeQiVf0bwZdfNCz4TSA=
Subject key identifier:   CA:51:72:3E:19:EB:5F:28:52:09:1F:5A:0D:58:C4:1F:9E:96:3C:8A
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer:       /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial:       019B10816ECAAB7F6435A597C61447CE7A78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number:          177E
Signing time:             Fri 12 Dec 2025 03:01:16 +0000
Manifest this update:     Fri 12 Dec 2025 03:01:16 +0000
Manifest next update:     Sat 13 Dec 2025 03:01:16 +0000
Files and hashes:         1: EOilBiIenaox7njpqs3_DfcHwlA.roa (hash: fzNbr06IBLk41vJ4PfPSo6OIziKfU6CFjSqPnCza+iE=)
                          2: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (hash: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=)
                          3: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (hash: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=)
                          4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: NJS+9I1Vc6DKaLhopD0C8xQGhYha2NzcYT9HiwHlDhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 03:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:81:6e:ca:ab:7f:64:35:a5:97:c6:14:47:ce:7a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Validity
            Not Before: Dec 12 03:01:16 2025 GMT
            Not After : Dec 13 03:01:16 2025 GMT
        Subject: CN=ca51723e19eb5f2852091f5a0d58c41f9e963c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:fd:ba:3a:49:3b:6f:c7:8f:33:8d:eb:b3:
                    ec:91:90:37:43:e5:42:d6:21:d8:31:41:7c:be:62:
                    fa:39:47:81:32:ea:07:df:bd:13:1c:87:80:6a:5d:
                    b6:9c:1a:0e:dc:da:ff:ac:51:53:44:58:6f:fa:9f:
                    b9:32:71:ba:64:2c:16:a7:6e:91:34:d2:17:8a:07:
                    c9:11:32:6d:65:0e:e0:c5:74:0c:43:04:4d:9e:49:
                    5a:4b:d6:8e:65:83:37:a8:85:82:26:4c:c5:d8:5b:
                    1c:ae:ea:8a:33:7c:68:f2:9f:28:91:5b:c9:54:df:
                    59:13:bf:2a:ca:74:a3:45:e5:2f:f8:55:a0:49:d3:
                    04:b6:9f:2a:1f:ba:8e:a7:53:bc:b3:30:1c:58:c3:
                    a4:b2:1a:e3:02:8d:00:11:78:41:44:aa:66:a9:12:
                    14:1a:7e:f4:a8:c7:e2:ed:8d:1c:ca:6e:c5:11:15:
                    6e:f9:1f:30:d2:f8:22:79:25:96:48:01:7a:fe:e9:
                    9a:92:b8:7e:42:86:2d:a6:ac:d0:b9:92:5d:42:cf:
                    9e:96:77:f5:d0:72:cf:1f:d1:d7:85:fc:35:f1:be:
                    d7:ad:85:ec:c3:19:e3:82:eb:e0:3a:86:e4:1c:29:
                    53:9f:b7:68:f1:54:46:80:3d:bb:10:29:30:4e:a4:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:51:72:3E:19:EB:5F:28:52:09:1F:5A:0D:58:C4:1F:9E:96:3C:8A
            X509v3 Authority Key Identifier:
                keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ee:50:e3:bb:8f:16:ce:28:55:51:46:3b:6a:3b:66:bc:8c:
         9a:c1:cb:37:5b:82:74:9e:9a:8f:f6:ef:1f:6a:a4:37:c9:35:
         aa:74:8d:b2:14:f0:54:af:47:3f:91:eb:60:93:48:18:1a:46:
         a3:9b:16:ab:5f:1f:9f:62:6a:02:ea:59:98:64:57:c4:f5:ff:
         85:fe:ed:20:b6:d6:96:5e:74:f3:fa:5c:26:9c:e5:d6:d1:10:
         ee:0a:fb:8c:69:9e:53:c8:7c:87:99:04:c1:ba:4b:c5:ae:74:
         fb:29:06:b6:96:32:e5:cb:6d:e9:14:f1:b9:68:e3:63:54:24:
         d4:97:43:ed:40:c3:29:41:5b:14:ad:e0:c3:5f:67:14:bb:5b:
         83:64:d1:3f:ff:78:c2:0b:ba:36:c3:c0:08:3a:6e:e7:c4:1f:
         ae:85:ed:18:6a:54:b7:c7:88:18:1c:a5:9c:91:2d:ab:39:02:
         49:ab:cb:9d:83:97:96:38:eb:66:66:dc:4b:bb:72:1b:3e:9c:
         3a:58:a9:fb:bc:86:c7:96:43:c8:0e:f5:6f:b2:6b:6b:d9:40:
         f4:61:bd:af:85:35:b1:98:fe:60:4c:9f:5e:97:fa:02:d8:20:
         04:b0:2a:ad:f0:ab:28:5c:69:b9:42:6c:8c:3d:38:53:7d:cd:
         7e:a9:e0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 11:48:39 2025 by rpki-client