This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File:                     1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier:          Wggq4xA1rpi5tN406ODm4EFIiMA/SLcNaUrI1f7hYag=
Subject key identifier:   A8:BD:0D:B1:E1:FB:2F:F5:BB:5A:A6:7B:77:3D:D6:5A:E3:99:2B:45
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer:       /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial:       019B2552566909596C14ECC2AC158E743946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number:          177C
Signing time:             Tue 16 Dec 2025 04:01:51 +0000
Manifest this update:     Tue 16 Dec 2025 04:01:51 +0000
Manifest next update:     Wed 17 Dec 2025 04:01:51 +0000
Files and hashes:         1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: aCk6+Opjyh6ERgNzmwCvag+/5J1Yc05roonRIVP+lnk=)
                          2: GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa (hash: +PS0Zeo/h7j5Rz8hACgz8q1qwFa7bESNHkPZUu+sEMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:52:56:69:09:59:6c:14:ec:c2:ac:15:8e:74:39:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
        Validity
            Not Before: Dec 16 04:01:51 2025 GMT
            Not After : Dec 17 04:01:51 2025 GMT
        Subject: CN=a8bd0db1e1fb2ff5bb5aa67b773dd65ae3992b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:47:1e:43:00:20:8c:26:0a:a8:a3:45:05:92:
                    3d:d0:aa:77:99:90:10:c4:cf:4c:01:55:0b:85:96:
                    ba:e5:61:46:4f:54:3b:4f:20:b6:7a:32:51:92:97:
                    83:8e:03:dc:83:9a:66:5f:95:41:6f:43:56:0d:e6:
                    f6:b6:33:17:05:da:d1:ec:75:28:63:b1:30:eb:ce:
                    f6:b3:ad:15:22:7c:3f:59:a4:e8:63:55:13:31:b1:
                    06:24:71:70:4f:1e:63:99:c2:46:a9:2d:6a:c9:a9:
                    e2:05:02:cd:a9:17:13:42:d3:cf:aa:5d:90:81:be:
                    14:73:8a:59:8f:06:67:6f:21:5d:7f:ab:dd:3a:61:
                    d7:90:2a:98:a1:9b:81:e9:55:89:29:6f:ef:07:24:
                    0f:2e:bc:45:d8:c8:15:14:67:4a:95:ef:52:5a:df:
                    eb:5b:e6:4f:c0:d0:69:bd:e4:55:71:b7:7a:c6:10:
                    43:7e:1f:1a:6e:73:3b:5c:7a:d6:c8:dc:68:9a:04:
                    2e:07:8b:93:e6:52:d1:9e:19:a0:96:36:bd:ad:c5:
                    86:d1:30:8c:e5:ab:49:49:a0:1f:e7:12:5a:20:56:
                    ce:4b:7a:44:76:81:0b:54:bd:19:97:99:d8:06:d9:
                    73:b5:94:b3:be:09:fd:5d:7d:49:eb:c4:73:8d:6f:
                    ec:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BD:0D:B1:E1:FB:2F:F5:BB:5A:A6:7B:77:3D:D6:5A:E3:99:2B:45
            X509v3 Authority Key Identifier:
                keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:87:e0:f6:e1:4e:60:e5:2e:86:cf:7f:69:a7:df:7b:ec:ae:
         c3:12:5a:35:5e:9d:32:96:97:7d:08:d3:49:92:1e:a8:53:89:
         86:b9:cd:6e:bb:7b:ba:f1:f8:41:c9:11:28:5c:49:47:62:0e:
         ad:d7:25:61:a7:12:46:82:56:cd:41:4a:66:e2:20:20:a0:ab:
         b0:b6:9f:ba:28:72:2c:7e:4f:23:22:e7:78:9a:f4:10:60:c5:
         7f:82:71:c4:f8:bc:03:e9:e1:ee:6a:c3:07:de:dc:20:cb:c7:
         6b:84:57:9f:19:19:09:b6:31:8b:9e:7c:cd:f6:bf:89:af:77:
         f6:13:59:21:8f:9f:2b:f2:8b:0d:fb:80:3d:f9:01:e0:cd:22:
         5f:11:3b:5b:4b:97:0c:c2:f2:b1:8f:72:ac:81:da:87:e4:9b:
         1e:19:8a:83:5f:be:92:6a:50:8a:d9:1b:82:99:8c:ab:0a:26:
         5c:b6:7f:eb:9c:38:1a:cd:f5:6b:b4:53:98:8e:c5:da:f3:87:
         3b:15:69:ed:4d:eb:55:67:75:e7:21:1c:63:48:ae:0b:25:da:
         b2:1f:e9:2b:ff:1d:63:a6:ce:de:37:02:c8:2d:16:f5:ad:e7:
         11:0c:47:d5:0f:53:8a:22:4d:ce:a8:42:35:77:3a:97:53:94:
         be:32:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:27:51 2025 by rpki-client