This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File:                     n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier:          hqGx7Gm9UXnaX7CKfjFaubSlgySR+YluPPrzSWyZjvg=
Subject key identifier:   DC:62:28:4E:CC:1F:8A:5D:1D:D9:32:EB:D4:EA:56:B6:DA:7A:AD:E1
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer:       /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial:       019B1BA95832B435EA3671439D0D768069DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number:          177B
Signing time:             Sun 14 Dec 2025 07:00:41 +0000
Manifest this update:     Sun 14 Dec 2025 07:00:41 +0000
Manifest next update:     Mon 15 Dec 2025 07:00:41 +0000
Files and hashes:         1: 6WWGMBEJeVUhw0je11LNLXob3Fk.roa (hash: UR2dxpbdtKcSXZI0WPnuoltcK0Rk3PFpyvHQx4QFc88=)
                          2: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: pDNGbpdcQsJgpmA4Mt3Ry7FupLYFS4WhMhx7+L/i3fA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:a9:58:32:b4:35:ea:36:71:43:9d:0d:76:80:69:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
        Validity
            Not Before: Dec 14 07:00:41 2025 GMT
            Not After : Dec 15 07:00:41 2025 GMT
        Subject: CN=dc62284ecc1f8a5d1dd932ebd4ea56b6da7aade1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:a2:b7:77:3f:28:38:b9:4c:e1:b5:0f:63:
                    fe:bd:9d:ab:6e:e4:a5:f5:17:27:7d:6b:1a:a7:af:
                    3d:fa:e6:0d:98:d9:18:af:96:65:63:78:e6:2c:61:
                    96:6f:c7:70:0a:1b:2c:87:90:4a:a8:52:42:d9:1f:
                    f7:16:3f:36:16:19:97:b1:d3:58:49:e9:d8:91:aa:
                    b2:a3:eb:28:51:c1:0f:96:e2:00:76:32:a5:8e:5a:
                    b9:c6:5b:b3:1f:22:f3:10:cd:c6:cb:f8:d7:3f:7e:
                    52:c9:2d:89:ee:69:3f:3f:14:59:2d:59:08:fe:97:
                    01:c5:91:f1:e8:7a:9f:78:cb:ba:7a:1f:64:43:56:
                    29:9a:27:65:fc:44:34:41:78:90:c9:38:5f:f9:52:
                    8c:22:b1:10:ca:66:6f:e0:70:11:72:4c:2f:ac:26:
                    59:99:32:9e:51:f8:a4:92:a1:72:53:51:28:4b:63:
                    c0:1a:b5:9b:77:11:1d:e7:b7:33:a2:d2:68:91:d5:
                    99:ad:b1:b8:4c:d1:23:ca:da:61:15:15:f0:df:15:
                    66:f7:13:82:92:ad:40:d1:a2:83:c6:e2:f2:7f:29:
                    cf:d9:d2:3b:6f:c3:f0:84:57:c7:8d:5e:8a:58:b0:
                    3b:a9:77:5f:0d:26:5f:6c:e4:a0:c5:0d:5b:58:98:
                    ce:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:62:28:4E:CC:1F:8A:5D:1D:D9:32:EB:D4:EA:56:B6:DA:7A:AD:E1
            X509v3 Authority Key Identifier:
                keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8d:4f:9c:85:78:cb:53:ee:cb:95:2a:92:6e:e2:30:8e:2d:
         58:43:83:3b:13:40:da:ba:16:6b:4f:a5:15:09:c1:c4:33:4c:
         4e:4d:be:56:d9:7b:66:88:ed:79:e5:1e:78:a9:46:7a:1b:e6:
         96:9a:02:7c:5b:fe:c9:b8:f8:01:c2:ad:85:30:1e:be:61:5c:
         07:b6:71:b5:16:a9:ef:c6:cd:25:eb:30:26:a9:04:1f:d4:0c:
         91:6e:12:64:f5:9b:8c:8c:5d:1d:22:a9:be:72:15:56:7e:69:
         c7:b0:56:a5:a4:74:c9:f0:23:ad:87:37:5d:3c:ba:f3:ed:28:
         19:7a:53:61:38:63:7b:d5:ff:4d:84:e9:34:75:e8:2d:5e:21:
         3b:03:a1:4c:98:89:b0:a4:12:f6:b8:51:d4:0d:b8:bd:8a:c9:
         63:3c:f3:7e:ab:3d:f6:b6:dd:5b:9d:81:74:0d:4a:d7:53:16:
         1b:db:ba:f9:e7:2e:44:36:87:4a:24:5b:4b:eb:0a:fb:92:24:
         2e:1b:45:86:47:b6:5b:e3:9c:a1:6d:64:41:de:63:23:90:ce:
         84:28:18:5c:d3:71:63:e2:7f:69:a8:d1:a4:16:f6:ab:08:f3:
         fa:fb:32:f8:bc:48:3d:ee:f0:42:3d:17:69:95:50:b5:2c:38:
         fd:8d:92:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 17:28:49 2025 by rpki-client