This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File:                     nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier:          C5KzdiWNqpqRnQ7dte/3s4m8pVigkh8bC30B2iNK89A=
Subject key identifier:   26:7C:21:06:B3:2F:EF:B0:B3:74:70:9E:88:96:2A:D7:0C:D7:DF:36
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer:       /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial:       019B424A7107AF5C9D4F705A412EA5AB9A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number:          178F
Signing time:             Sun 21 Dec 2025 19:02:13 +0000
Manifest this update:     Sun 21 Dec 2025 19:02:13 +0000
Manifest next update:     Mon 22 Dec 2025 19:02:13 +0000
Files and hashes:         1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
                          2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
                          3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
                          4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: DtbmAAg0z6OGhNeD7w4CQluFAGbfI0/hzsIxU5yGLRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 19:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:4a:71:07:af:5c:9d:4f:70:5a:41:2e:a5:ab:9a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
        Validity
            Not Before: Dec 21 19:02:13 2025 GMT
            Not After : Dec 22 19:02:13 2025 GMT
        Subject: CN=267c2106b32fefb0b374709e88962ad70cd7df36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:a7:4e:9f:ec:4a:bc:97:67:16:d2:fd:34:
                    f8:27:99:46:90:ee:31:5e:80:4a:d7:0a:ef:d1:68:
                    68:0d:3c:2e:fb:3f:1c:a7:20:89:1a:39:c8:57:1b:
                    e7:24:d1:4f:a6:65:e1:65:c9:8e:5b:29:44:dd:d6:
                    55:46:c1:17:c5:03:4c:67:6a:c0:0a:4e:a1:ad:62:
                    12:9a:db:4f:50:80:c9:91:f7:9d:5e:be:74:06:b7:
                    a5:8b:d0:6e:74:83:10:83:a3:9e:d2:31:86:26:58:
                    01:a9:46:17:b8:56:4d:d8:65:6c:67:0e:30:fe:e4:
                    72:b8:2e:be:5b:a7:d9:92:df:6e:9f:ba:6d:bd:70:
                    81:1a:01:71:cb:92:b5:99:49:96:60:33:50:07:cc:
                    f2:df:4c:43:5a:da:58:d2:0d:b6:93:fd:d9:62:ef:
                    d2:b2:83:37:29:15:2b:c0:42:16:b7:6e:22:f2:b0:
                    af:6e:10:ab:f2:f7:2c:e2:d6:58:69:d1:0d:3c:8b:
                    17:b9:66:c1:b2:f6:0b:cc:ac:49:a8:12:29:8f:db:
                    63:e0:0c:1e:8a:ed:9a:09:fc:76:a9:b5:5e:65:fe:
                    2d:44:1b:62:ac:07:1e:36:d7:ee:f4:4a:42:de:f1:
                    fc:a8:d9:dd:6b:e3:d7:3b:aa:7d:6f:3f:ed:7e:42:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7C:21:06:B3:2F:EF:B0:B3:74:70:9E:88:96:2A:D7:0C:D7:DF:36
            X509v3 Authority Key Identifier:
                keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:96:0d:f1:66:e8:e9:70:a0:01:0c:99:ad:33:d8:bf:f5:1b:
         48:ec:42:b0:f6:56:2b:b9:99:9a:1f:cd:7c:ac:10:fa:f8:4d:
         04:0b:9c:64:ac:ce:af:0d:5f:27:df:09:b6:f4:e2:6c:49:ac:
         76:98:b2:31:6c:b2:48:1e:00:bb:cd:63:06:f5:14:37:b2:a0:
         a1:8b:d4:03:a3:d4:3b:00:e8:29:d6:78:72:e6:3d:3d:df:ca:
         5d:a8:7e:4b:3d:a4:49:e4:3d:ab:b5:f4:f4:a7:5a:0f:3d:00:
         81:2e:a0:26:7b:f9:3d:3d:56:84:74:0a:89:63:20:93:ae:3b:
         6e:d5:b9:c8:ce:de:90:36:5d:7c:0d:e0:6f:fe:47:4a:98:2e:
         20:23:3c:7b:b6:bd:92:13:34:79:61:aa:d0:5b:3d:85:85:a8:
         2d:b5:a4:35:da:51:3d:85:20:99:f0:b6:eb:e0:ab:aa:25:1d:
         68:00:49:f7:b9:73:01:0a:7f:98:24:34:40:82:21:ca:99:da:
         78:9d:ae:e0:de:c8:2f:04:de:23:31:46:60:b1:3c:c3:e4:f6:
         57:14:08:ca:9f:73:bf:a4:d7:07:7e:f8:1d:8a:ca:19:85:ed:
         38:ae:bd:4e:2f:f8:62:07:ca:2b:56:95:0a:27:e1:d0:b1:1a:
         85:18:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:19:38 2025 by rpki-client