This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File:                     hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier:          uo2BkPAAZ1ovy6LTnIt372qWK4sFZOmFgmwyFWOBxOQ=
Subject key identifier:   9D:F6:08:C8:8D:03:24:0B:5A:3E:AD:9E:E5:39:94:AD:DB:6C:62:2A
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer:       /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial:       019B2175561EA507909D2059C36BAFD2739C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number:          177C
Signing time:             Mon 15 Dec 2025 10:01:36 +0000
Manifest this update:     Mon 15 Dec 2025 10:01:36 +0000
Manifest next update:     Tue 16 Dec 2025 10:01:36 +0000
Files and hashes:         1: TYsIS3O-zzJUM31FOE8V5LwUjck.roa (hash: PgdOwzc5CsTmGlgxhk4B6gx5Y87krg/eEL18bNqE8Rk=)
                          2: Zqcute0EJxNZqsLIYM5IZaAu0eA.roa (hash: Ka5B3hGdb3O+/SiQ/oll6eB0Rldz6LRmTl/iQ6A8Wb8=)
                          3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: x2N/DKk14SBcCJ/oBLZSvsSXzP95T3DaZggM2jgjbLs=)
                          4: pruyBDp_cEEXKvqRx1kQTDgs6oI.roa (hash: noTc5adRBPeIH3/LBjn/ftfA3EYuQEQb7IQr66+/vn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 10:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:21:75:56:1e:a5:07:90:9d:20:59:c3:6b:af:d2:73:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
        Validity
            Not Before: Dec 15 10:01:36 2025 GMT
            Not After : Dec 16 10:01:36 2025 GMT
        Subject: CN=9df608c88d03240b5a3ead9ee53994addb6c622a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:c9:18:e0:fa:61:99:07:e2:c2:82:36:95:
                    08:93:71:c6:26:80:cb:b2:12:8d:2c:6f:1d:f5:3c:
                    d2:17:7a:df:96:1a:2f:7b:ac:e5:0a:cf:9c:fb:99:
                    21:0a:aa:d8:d9:0d:b3:8c:fe:05:fc:a0:af:3c:a9:
                    3f:ec:15:76:a4:de:08:8a:96:14:f7:70:b4:6c:8f:
                    fc:f4:b4:8a:24:1b:a7:c1:f9:15:0a:34:0e:0d:c0:
                    b6:69:6a:ee:f0:0d:aa:b4:09:69:32:de:2a:7a:05:
                    a1:b1:88:e8:0f:a2:e7:a9:a3:90:f7:5a:38:e9:47:
                    94:d9:34:e2:ab:1a:a1:f7:5b:d6:44:c2:f6:f9:b6:
                    32:a6:2c:44:43:4c:7c:d2:9e:a9:b0:40:c5:91:2b:
                    8f:b3:56:e6:94:be:b9:23:01:10:a2:88:92:35:fe:
                    d1:02:43:f0:35:64:3c:6d:34:2b:fe:3f:50:98:bf:
                    30:d1:c4:42:41:a6:b8:ce:a5:eb:40:6f:03:88:d2:
                    e1:b0:b2:d1:48:f4:09:95:4b:40:3f:19:a8:56:bf:
                    bb:a2:aa:51:d3:34:f5:81:9c:61:31:b9:8c:29:36:
                    4e:60:bc:26:c1:ca:24:15:88:49:cc:78:b7:32:c1:
                    61:80:65:89:73:d9:85:59:73:62:1c:c3:28:49:b4:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:08:C8:8D:03:24:0B:5A:3E:AD:9E:E5:39:94:AD:DB:6C:62:2A
            X509v3 Authority Key Identifier:
                keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a3:e2:38:26:d5:f8:89:21:fa:12:fa:98:33:5c:ac:00:55:
         43:c5:5d:39:ae:1f:c1:d9:2e:59:fa:fe:76:2d:aa:a8:ae:1b:
         e4:44:17:af:4e:a6:c3:8a:c0:9f:bd:1c:02:22:0c:14:a3:56:
         ea:05:3c:03:d5:75:ee:17:eb:e5:91:17:9a:e8:76:03:e6:5d:
         1b:c6:dd:27:48:66:51:e9:9b:7f:54:88:27:80:39:ab:22:fd:
         4b:0e:18:a7:6d:b9:55:5b:8d:75:a6:64:82:80:4d:c9:6c:8f:
         80:6b:7f:c4:fa:2f:48:6f:de:08:9c:8d:06:89:cc:c9:f7:0e:
         00:0a:a7:10:f9:38:99:95:93:96:6d:80:3b:66:65:e2:9c:01:
         08:fe:06:24:d5:2a:1c:5a:a5:89:16:6d:0a:ed:ed:ad:23:b6:
         82:86:fd:6f:18:13:29:43:a1:ff:10:6b:80:0c:7f:55:ad:29:
         64:44:46:2b:53:b9:01:f3:86:e8:97:26:d3:3e:42:1e:2f:3b:
         c4:e4:75:7e:9e:33:41:fb:f8:e0:48:fe:17:ba:e6:ae:02:2e:
         1f:f5:a1:ad:4c:d1:a6:3e:6b:fb:97:98:1b:25:e5:54:40:ef:
         04:7a:6b:0d:3f:f6:c5:a7:5b:1c:ae:b8:eb:f9:ae:a7:e4:80:
         9b:eb:12:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 18:50:37 2025 by rpki-client