This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
File:                     57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json)
Hash identifier:          nyoIvP0HYL4VMLsjTIY9Nmhmin9hjMiAiQveLEzhBXo=
Subject key identifier:   A0:52:66:DE:28:95:00:29:9F:71:02:13:3E:13:B9:AF:19:D0:25:38
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Certificate issuer:       /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial:       019B4B83782D1972A3045EEE5AD43B6E50EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
Manifest number:          178E
Signing time:             Tue 23 Dec 2025 14:01:05 +0000
Manifest this update:     Tue 23 Dec 2025 14:01:05 +0000
Manifest next update:     Wed 24 Dec 2025 14:01:05 +0000
Files and hashes:         1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: auQhay0RYLQxyKFFQJp5xETTJOsZ8aFSQL/IHvzU5zE=)
                          2: 6Zhe4pOz-rb9TWMRRFPsmtYyKog.roa (hash: kI1Y/0VuhQsjj4DLuvZCMsfABY7cci9OBnCvkDAkun8=)
                          3: bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa (hash: 6T/s2wCU61VJFzvpy751/OsAnKk42N0ClHJAb6F+ja8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:83:78:2d:19:72:a3:04:5e:ee:5a:d4:3b:6e:50:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
        Validity
            Not Before: Dec 23 14:01:05 2025 GMT
            Not After : Dec 24 14:01:05 2025 GMT
        Subject: CN=a05266de289500299f7102133e13b9af19d02538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6d:47:e8:28:5d:8c:70:f7:05:ad:4a:6d:66:
                    c9:28:07:de:73:42:de:06:8b:f8:08:10:23:19:fa:
                    19:77:b4:ee:51:18:71:8f:f4:9a:34:ec:2e:9b:03:
                    83:80:a3:36:a5:41:9e:a3:d5:70:c1:14:9d:5a:6a:
                    96:d7:26:b0:41:42:83:61:82:07:c0:7a:75:78:50:
                    a9:8d:21:61:9b:18:e5:ed:63:55:ae:b6:eb:31:ec:
                    b5:0b:d3:16:2f:c1:9f:fc:a8:e4:44:b3:37:2f:b0:
                    69:69:28:2b:4c:62:6d:3c:02:48:d4:a3:75:d9:47:
                    20:8b:5e:6d:c4:23:3a:f3:2c:a7:3a:0f:b9:b0:df:
                    76:55:84:4e:5f:e1:e2:ee:49:6f:8a:6d:ac:e0:c5:
                    53:87:17:f6:bc:db:6d:f8:dd:da:74:c2:12:64:b3:
                    b5:5e:f4:4f:78:a9:14:2e:92:3b:52:f7:ca:8d:18:
                    f0:47:c2:1d:ad:c1:d5:aa:f8:bd:b4:85:e3:74:e2:
                    c0:c5:6a:e9:17:13:97:3d:38:e9:73:90:fd:2d:66:
                    b3:19:fa:9a:ec:ef:0c:ec:20:6d:df:1b:9f:9f:18:
                    6a:a1:6a:ba:a6:c8:67:4e:51:94:f7:d4:b9:96:60:
                    b1:9d:5e:ea:a6:e3:a7:7d:eb:cc:7b:52:cc:09:72:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:52:66:DE:28:95:00:29:9F:71:02:13:3E:13:B9:AF:19:D0:25:38
            X509v3 Authority Key Identifier:
                keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f4:13:fe:9e:d8:3b:27:33:22:33:07:2a:ef:b0:c8:63:7d:
         14:ba:43:ed:34:5d:61:39:9d:97:48:54:44:9a:5e:4d:ec:5b:
         f4:8f:fd:ad:88:fe:9d:cd:8b:b5:99:bf:21:27:31:a8:35:bb:
         1e:e4:d1:0c:b5:82:a2:77:6f:d5:fb:b8:eb:26:a0:62:d0:6a:
         70:85:6c:4b:f8:4a:86:52:20:70:85:b2:b4:b0:ca:f9:33:e0:
         01:9c:1c:f9:ea:44:15:b9:93:1c:27:b1:b8:45:5a:a1:47:5e:
         0c:8d:53:82:48:5e:46:01:4c:c1:c5:17:6f:3b:d1:bf:5d:23:
         2e:4e:55:ab:36:3d:0f:48:8f:35:cc:80:a0:6f:e4:dd:de:59:
         9f:5f:3e:0f:e7:0e:69:0f:8c:b7:ae:95:22:54:39:76:d1:52:
         aa:23:63:5a:0c:73:90:03:49:1b:2c:22:91:42:7f:80:99:0e:
         75:5b:02:70:6c:b7:17:10:d9:36:75:da:82:a4:3e:83:d9:21:
         b8:2b:ee:1e:23:b7:e8:78:f5:07:b1:66:84:c9:cf:5d:f5:70:
         85:db:44:2a:2d:ba:a8:01:2b:45:87:f8:7f:09:48:73:20:f4:
         ee:2f:2e:3d:c6:d0:bb:7c:6d:13:23:19:a1:cf:4e:2b:0d:84:
         2b:2d:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:27:31 2025 by rpki-client