This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File:                     0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier:          7vRW8OvkS4cJTJbtPt8r/zyVEnW+Y6DGSoKG1qwljcM=
Subject key identifier:   9F:64:9A:01:44:92:B0:14:F5:04:76:76:E9:DB:3D:E7:E2:FB:57:6B
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       019B2399F9F2A361994CEF48BBC1A9825115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number:          177B
Signing time:             Mon 15 Dec 2025 20:00:52 +0000
Manifest this update:     Mon 15 Dec 2025 20:00:52 +0000
Manifest next update:     Tue 16 Dec 2025 20:00:52 +0000
Files and hashes:         1: 0mHHxrKDuXooxqRJqM3AcObFutU.roa (hash: 0sIJmx7yyuOdBXcmte6YeWeL6TZg8JAjxBTze6wfptI=)
                          2: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: 07x1F+gDDuhVW0Sl0uyck11dxhppZnVZMiNKyWy6Hp0=)
                          3: 7CJziOdAfq9jwl7KYFdQlPSS2HM.roa (hash: oYgf2+8vVMNQWr/UIAh3TmOHiKE3yvmzUsWvpHQBY4E=)
                          4: AA2twhj3JjqNeEtfXh_nvFIhwUI.roa (hash: 7pwyUMMRmENXJp1YdVN9DBuKjXp76GQ7r0RF+5Zw+oI=)
                          5: NKe-wrE2WicgBb0c0Ud-bVOtGPw.roa (hash: gADDqpEfldBNZqdg/FkPxqfMdnRA+6kZ643uxJ4620k=)
                          6: dV3eLvyh7dkJSKTfdErtuw7Jadc.roa (hash: NpVV1N+SDAUUoPHhUF4/SnqeySzcrRHlw0l3druFyDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 15:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:99:f9:f2:a3:61:99:4c:ef:48:bb:c1:a9:82:51:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: Dec 15 20:00:52 2025 GMT
            Not After : Dec 16 20:00:52 2025 GMT
        Subject: CN=9f649a014492b014f5047676e9db3de7e2fb576b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:0d:9a:84:4f:04:81:05:fb:f5:76:b5:fe:
                    62:2d:47:6e:57:38:7b:88:ff:58:fb:28:37:ea:3f:
                    15:64:92:02:df:5f:fa:42:a1:96:86:ee:4f:1a:f5:
                    26:99:28:1f:18:d7:e9:36:f5:46:c7:c0:72:68:31:
                    98:3e:06:7a:2d:8a:eb:d0:2c:df:f6:a7:3c:57:f2:
                    f5:a5:23:ba:db:1d:2f:da:f0:8d:2e:36:94:bd:78:
                    43:8a:e9:57:58:d2:1f:9b:1a:70:45:0f:4c:dc:83:
                    5f:41:d1:f1:4b:cc:1f:72:3c:a5:a7:d6:8d:88:2c:
                    4f:ba:8e:94:08:87:65:d3:e5:1f:58:31:d4:fb:d1:
                    e9:c5:a2:12:56:b7:33:56:ba:dd:c2:bb:c3:93:f7:
                    ad:a1:cf:7c:6b:b1:ff:51:cc:34:ee:8d:71:6d:df:
                    10:a6:ba:41:48:97:b1:b4:01:b1:52:09:9c:91:bc:
                    2a:51:c4:69:3c:48:51:96:27:d5:43:82:51:0d:76:
                    a1:f6:fb:db:da:0b:17:d2:80:02:82:3a:5e:b5:69:
                    b0:dc:1a:d9:db:e1:6f:e1:de:84:56:70:1b:bc:f3:
                    91:3a:96:da:a2:2c:a4:9e:ab:87:6d:c3:7d:67:ef:
                    d7:87:98:4c:97:60:d9:5b:6c:f6:ca:da:cb:19:68:
                    a9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:64:9A:01:44:92:B0:14:F5:04:76:76:E9:DB:3D:E7:E2:FB:57:6B
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:bc:15:b9:1d:96:32:fb:f8:6b:60:0f:70:76:50:c1:6a:5d:
         2e:15:6c:56:72:b4:e2:b6:fa:f7:84:cc:dc:6b:32:8e:ef:ea:
         ed:18:2a:6a:4b:05:ff:5a:e1:9d:9c:2a:73:eb:99:5d:35:75:
         4f:c4:e3:50:48:88:7f:41:3c:df:92:86:0d:5c:9c:34:7b:6a:
         72:1a:14:80:a0:0b:02:87:1a:00:89:e4:6c:28:9a:0b:bc:fe:
         73:d8:8d:d8:e1:57:99:83:dc:ca:02:6d:ab:37:e9:fb:67:71:
         ae:d5:bb:7d:15:5b:7b:f6:b1:e5:45:7a:cd:54:6e:32:da:7f:
         62:88:1a:f1:cd:ff:51:83:81:69:51:76:c2:af:b2:8f:f5:59:
         ed:fd:ee:de:bf:06:ba:d8:df:b9:18:00:4e:a7:ea:e5:c0:18:
         ec:f0:75:2c:d5:1c:f7:5d:8d:24:2f:26:60:de:db:d9:45:4b:
         b3:a5:5e:18:41:db:fc:1f:95:b0:9d:51:b3:8f:ea:22:b2:c7:
         c3:da:d6:e5:34:65:cb:ba:7b:7e:4f:d9:11:57:ab:19:c5:7c:
         20:9c:c9:7d:43:a8:5d:f4:c2:ee:46:a9:06:ba:27:dc:77:53:
         51:d2:b6:77:e1:91:11:3c:3b:4f:7f:e0:ab:aa:b5:81:58:1c:
         df:ed:16:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 00:18:53 2025 by rpki-client