This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File:                     1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier:          lF8vPqvQqCq1lG0Nyv7MDbxHapRIt80tMNpl3kJVY8E=
Subject key identifier:   92:60:55:44:9A:74:EF:BD:F7:EB:43:30:4B:38:16:9D:73:00:28:F5
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       019B360E8F3A3965F43B0DBCB36D8EECA4A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number:          178A
Signing time:             Fri 19 Dec 2025 10:01:22 +0000
Manifest this update:     Fri 19 Dec 2025 10:01:22 +0000
Manifest next update:     Sat 20 Dec 2025 10:01:22 +0000
Files and hashes:         1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: 4anVn3pvx1rO9qYgsMfgLSkRUq8NekAA+4YeXxMVsGg=)
                          2: lWvdh1tW9Nr29e037SncsLGwjfI.roa (hash: j1dUTiHWBt3aDo99E5yf928X8VvKCbJydPoVbx3OYLA=)
                          3: lv5jL_rYGh7Uv0rWQaR0zgeQbZY.roa (hash: aiK+jeojasCoIONEiBsew2dpW6Sl1vqGI4o1s3u6sNg=)
                          4: tpwCcvQj5buTsmFRUmHDkFF9loo.roa (hash: mW6eLdMENzR4XVFpPs8//f09RPHYqnyv9VrQnjo145o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:0e:8f:3a:39:65:f4:3b:0d:bc:b3:6d:8e:ec:a4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Dec 19 10:01:22 2025 GMT
            Not After : Dec 20 10:01:22 2025 GMT
        Subject: CN=926055449a74efbdf7eb43304b38169d730028f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:79:82:81:9c:35:99:25:b8:81:dd:2f:3f:
                    9b:99:da:30:a8:72:68:25:33:56:1a:79:4b:4d:c0:
                    75:5b:35:18:8d:11:10:db:57:54:6e:85:89:b6:5f:
                    80:79:fb:70:0c:ea:b8:b9:9f:8f:f1:ea:90:5f:b4:
                    23:6b:0e:dc:b9:85:04:ae:1d:44:85:d1:a8:52:c4:
                    31:fe:0d:85:36:b3:37:c4:bb:03:21:90:1a:2c:6c:
                    c1:d9:b4:2b:06:41:b7:92:aa:d1:bd:97:e3:1e:8c:
                    7a:73:0b:f9:e0:81:9e:64:16:67:fd:0f:83:1e:67:
                    a1:70:f6:54:00:fc:ae:74:e5:4e:a8:3e:71:a6:a3:
                    d5:60:87:19:ff:55:16:59:28:8d:48:e9:bf:07:75:
                    10:69:77:b6:14:70:0c:62:30:bd:eb:78:86:7d:9b:
                    0d:aa:fd:84:3f:eb:7e:10:a4:95:19:33:69:0d:a5:
                    7e:b1:df:a4:2b:e9:76:da:a9:ad:7f:14:d9:d1:ff:
                    b9:de:33:d3:c1:6f:5f:ad:a6:95:34:2e:20:bb:30:
                    68:db:88:49:82:e1:58:03:3f:d7:00:df:db:4d:5f:
                    06:5c:c0:44:ce:0d:4e:97:a0:8f:8d:ec:65:c6:0a:
                    00:48:43:71:63:07:a3:83:e4:7e:d0:ec:36:78:62:
                    21:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:60:55:44:9A:74:EF:BD:F7:EB:43:30:4B:38:16:9D:73:00:28:F5
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d7:14:4e:84:fe:a3:a8:ff:07:21:9f:70:f5:f9:8e:4d:fe:
         ee:aa:ad:6c:f3:d4:e1:8f:08:a9:56:85:98:be:90:6d:d5:39:
         62:ad:53:6e:0e:1b:a6:9b:de:66:24:c7:ce:e4:44:64:fb:ab:
         db:41:f9:a6:f4:58:76:e6:78:a0:6e:be:d6:19:6c:cb:11:9a:
         01:23:c3:72:df:ac:a7:c2:08:b6:12:2e:b3:f3:31:ff:47:26:
         49:4f:e0:60:61:2f:0c:9a:8e:ae:48:e6:c1:0f:9a:5a:76:bf:
         d4:32:5b:d8:b0:37:36:fc:32:5b:ee:5a:30:00:f9:43:f2:df:
         21:e5:c4:03:c2:2e:e1:ac:73:44:b5:8a:f8:a9:fe:01:3d:1f:
         df:9b:1a:66:73:40:e9:d9:1d:c1:65:8e:90:5c:f6:13:72:f3:
         c6:6b:24:98:97:fc:6c:f1:68:05:c1:18:8e:bb:4b:fd:95:aa:
         24:29:25:0d:0a:df:1a:ab:72:95:22:7c:96:de:66:dd:c5:72:
         90:82:c0:ad:09:04:37:fa:05:01:f3:38:eb:fe:aa:bf:07:e5:
         96:a2:8f:1c:d4:4f:0f:44:33:3a:cd:b1:01:85:8d:66:65:0c:
         f3:98:fd:02:01:56:80:a0:cf:09:18:e3:e5:4c:a7:91:9e:2c:
         32:8a:59:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:09:08 2025 by rpki-client