This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File:                     _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier:          KhfQmef2Mf4u85WyArDBcUnyUJxT4ukgPCi60UyBMfU=
Subject key identifier:   E8:A0:2F:80:50:58:A6:32:A7:95:A6:63:10:4C:79:D2:00:40:D9:79
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer:       /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial:       019B25BFBB460D7AB204EA324D188E651B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number:          177E
Signing time:             Tue 16 Dec 2025 06:01:20 +0000
Manifest this update:     Tue 16 Dec 2025 06:01:20 +0000
Manifest next update:     Wed 17 Dec 2025 06:01:20 +0000
Files and hashes:         1: 0LP5ahEEWvnMaK30aMTVzU6uXkA.roa (hash: lB/VdYravFr8twO2oC/vGE6G8jo6civSr7gweO3k+0U=)
                          2: Poiw2E-mLT2v3vPHQ4mWn5Erbv8.roa (hash: 3V6NagY5nBDP5ry2LKf1AJl9T65osEYx7aEHS/N5Z0A=)
                          3: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: w2strAcv0yIBW1Ka7mvz6Ti27VUSD8RyOzGVTGz4jQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:bf:bb:46:0d:7a:b2:04:ea:32:4d:18:8e:65:1b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
        Validity
            Not Before: Dec 16 06:01:20 2025 GMT
            Not After : Dec 17 06:01:20 2025 GMT
        Subject: CN=e8a02f805058a632a795a663104c79d20040d979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:e5:ab:15:3a:a8:1c:bb:cf:f8:4a:9d:20:
                    89:1e:41:98:bb:4a:f3:8f:f9:95:84:89:d4:e0:6f:
                    ca:66:ff:1e:8d:c8:1a:55:46:1b:03:02:b9:08:49:
                    7c:28:06:83:3f:81:ea:c4:30:5a:8e:2a:35:42:1c:
                    dd:42:f4:7a:3e:2f:91:1d:1f:e0:d1:e6:d1:53:14:
                    4d:d6:92:3b:bb:4c:3e:c7:b2:d2:1f:be:41:6c:b4:
                    f2:51:d7:9d:57:56:20:4b:83:f4:bb:93:af:08:ab:
                    dd:67:e2:77:8e:3b:cc:1f:6f:a4:6b:94:dd:4b:fd:
                    8d:8f:d9:60:ba:52:86:fd:85:33:d9:8b:a1:55:44:
                    1c:c3:c7:e7:f5:0b:f5:37:03:46:47:55:ea:06:bc:
                    63:b0:b1:2d:39:4f:03:06:cb:57:98:5e:fd:68:f3:
                    07:be:78:23:a3:47:cc:90:96:9e:da:5d:8f:47:a9:
                    b9:02:18:86:6e:c3:92:f1:7a:cb:d2:97:e8:ee:9c:
                    d0:de:fa:12:bd:43:f2:4f:c3:79:22:ed:0a:02:e9:
                    fe:8b:78:dc:d4:d1:ea:ee:79:1d:74:3e:3c:f1:21:
                    69:e5:1d:51:4f:9b:32:ec:9d:a4:5b:55:e0:fa:b0:
                    95:73:33:19:0b:88:e9:87:67:4d:b5:c3:8e:1a:7f:
                    50:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A0:2F:80:50:58:A6:32:A7:95:A6:63:10:4C:79:D2:00:40:D9:79
            X509v3 Authority Key Identifier:
                keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0d:39:36:63:af:47:fd:1f:ea:56:f2:e2:fc:37:ef:5c:b3:
         d8:b2:db:33:bf:a1:f0:a4:d1:13:c9:92:1d:da:f2:0e:d6:d8:
         a6:31:81:69:da:ce:33:b0:fc:f6:ef:99:a3:8c:a5:06:e3:9c:
         49:a9:1d:03:d1:a8:3c:37:50:1f:e4:58:28:54:a3:00:97:ae:
         1c:57:b5:d6:a4:25:62:70:bf:3c:2e:3d:b8:96:a4:28:50:db:
         56:d3:f4:69:d6:78:b4:31:74:f0:a5:cf:05:26:1f:d3:fa:e0:
         45:e9:21:e8:34:e1:2e:cc:c5:d5:f2:1a:f9:28:ea:78:33:15:
         9e:2f:b1:10:06:5a:c0:d9:96:17:d5:a9:ab:7d:28:4f:cd:54:
         70:d8:55:90:4f:d8:11:41:16:7b:99:14:aa:24:13:37:02:19:
         e0:22:06:4a:3b:60:89:04:94:6a:59:1e:d4:f3:e9:1b:9f:5c:
         12:c4:4d:67:8d:de:af:23:1c:05:e0:24:d5:1b:6f:06:c7:6e:
         5c:2e:b1:cc:e8:92:fa:fa:17:63:4f:34:4a:dc:51:72:26:1e:
         09:d0:b5:92:a1:1f:69:3b:56:6b:55:ec:f4:4f:a6:c0:7a:a1:
         e0:75:6d:1b:fc:7c:13:c3:f4:77:74:89:1a:6e:72:45:f2:fe:
         0e:44:69:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 09:45:06 2025 by rpki-client