This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
File:                     1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json)
Hash identifier:          WnzxaUZcSYyFEFD8KOSwlnoJswqL3D4LtAJqJmizhFA=
Subject key identifier:   14:8B:A6:7D:9B:93:35:D6:00:DC:A4:68:0D:9D:F7:02:75:D5:4A:9A
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Certificate issuer:       /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial:       019B0FA59E8CE0A046AE2C0A84D818CC9DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
Manifest number:          177D
Signing time:             Thu 11 Dec 2025 23:01:10 +0000
Manifest this update:     Thu 11 Dec 2025 23:01:10 +0000
Manifest next update:     Fri 12 Dec 2025 23:01:10 +0000
Files and hashes:         1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: dzh+6ezfapcIfnH03JNhaDNlxqKRMIAYTzhyNe5MlsQ=)
                          2: 5VEZ7JcFmXiaWyk5RVHAojQYYGI.roa (hash: 3yUSESCkJd78E2LmJL5uepnC54miAABRgJPm19V647o=)
                          3: CllSsfXgtjjisiube1lsdtc0kX4.roa (hash: IgLYkmfyQAPOJzsCtlO5MW7jkHWE2+u5SDGaPrBxNOc=)
                          4: qmDrGumGDOW5sLdGxjK5ZVPdScI.roa (hash: pxjIJn6ld0n69osy4iN6fgrz9dhYKfwqt4Ocwx8tfiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:a5:9e:8c:e0:a0:46:ae:2c:0a:84:d8:18:cc:9d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
        Validity
            Not Before: Dec 11 23:01:10 2025 GMT
            Not After : Dec 12 23:01:10 2025 GMT
        Subject: CN=148ba67d9b9335d600dca4680d9df70275d54a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:c4:75:e8:42:87:91:12:79:09:0d:b3:9f:
                    d4:80:61:7d:d1:3b:78:fd:2e:49:bf:c8:b6:16:ef:
                    09:8a:e4:f4:ad:32:35:23:e9:1f:bf:c3:19:0f:31:
                    a0:0a:8a:9c:91:9d:ea:58:18:60:a7:eb:4c:29:51:
                    08:65:86:d3:da:f0:76:41:bd:7c:8f:b7:cb:22:39:
                    b5:9e:a8:8d:79:c8:75:0c:14:a8:85:4e:7f:6b:f2:
                    a0:d7:bb:05:2f:27:d2:e3:b5:11:4f:8c:7a:60:39:
                    09:b9:a8:30:49:88:1b:54:73:31:24:dc:a3:5f:ef:
                    dd:a8:d5:8b:77:80:38:f6:93:1e:2b:e9:91:65:43:
                    e3:13:af:8a:c5:12:3f:75:51:9a:07:76:94:73:a1:
                    63:33:9e:84:ae:5f:d3:75:21:61:54:24:8e:2a:c2:
                    6b:fc:d8:56:6e:ff:62:4b:1c:e0:50:36:47:71:c9:
                    20:f3:18:69:a4:bd:67:b7:12:c1:d6:b3:8c:3c:62:
                    e1:48:95:c9:78:49:22:43:ec:d3:01:f7:43:31:f5:
                    eb:e3:17:e9:dd:3a:9d:6d:85:fb:fd:44:11:51:2b:
                    ee:4b:be:c3:ee:b1:b0:09:cc:b3:c7:24:d4:6d:16:
                    39:94:b6:7f:35:a8:39:a2:93:73:42:2d:0f:3f:69:
                    9e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8B:A6:7D:9B:93:35:D6:00:DC:A4:68:0D:9D:F7:02:75:D5:4A:9A
            X509v3 Authority Key Identifier:
                keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:30:11:1d:22:32:bd:ba:6e:53:c6:67:69:69:61:f6:68:cd:
         aa:42:ad:4a:aa:5e:e5:6e:45:f6:f4:77:69:b8:22:7d:84:40:
         04:59:9c:c5:b9:7e:60:dd:81:08:03:5f:57:83:9c:0f:62:48:
         b0:f4:74:cd:30:1a:08:8e:35:f5:6d:04:e6:af:8d:56:ff:b8:
         c9:2e:c6:42:79:62:25:2e:00:4d:a8:82:87:62:f8:c8:51:f7:
         12:f7:48:8f:b9:4b:93:55:81:9e:58:20:24:83:6b:63:94:ea:
         89:9f:5a:53:1d:5a:ed:dc:9a:0c:88:db:58:09:65:2d:00:85:
         41:29:0f:1b:33:e8:b3:2b:30:82:a3:a4:3f:72:2c:c8:2c:00:
         21:d2:c9:a7:47:fc:49:08:92:bc:d5:08:6e:97:b3:52:d4:0d:
         41:e1:0c:c4:95:df:d7:ad:52:1d:a0:48:7b:c0:80:b2:52:a9:
         c4:a5:fb:4b:e4:87:16:aa:1f:ab:cd:10:86:31:18:64:07:54:
         18:83:b4:db:5b:d6:c6:b6:17:07:0a:2f:d9:33:48:9e:33:bd:
         6f:dd:a0:49:fd:43:3b:c4:da:fb:af:83:51:3a:f8:3f:31:e1:
         2b:d3:cd:14:17:14:b0:32:0c:81:2c:53:e0:db:2a:01:7d:cb:
         56:ee:37:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:35:01 2025 by rpki-client