This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File:                     ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier:          EVn6Sd0sfBSX/7ChJQcZTe1mks9j3Vw+OGU6PgV8cLc=
Subject key identifier:   9A:EA:D6:93:83:97:DB:5F:92:A0:FE:95:F6:6E:2B:54:A5:9B:6D:6E
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer:       /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial:       019B2476405A8B4B77832AC899E91E187E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number:          177B
Signing time:             Tue 16 Dec 2025 00:01:27 +0000
Manifest this update:     Tue 16 Dec 2025 00:01:27 +0000
Manifest next update:     Wed 17 Dec 2025 00:01:27 +0000
Files and hashes:         1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: MqDgK9tq4av0HlmvDx4JfUO0rC0Z5KPdzJoXS0IDlp4=)
                          2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
                          3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:76:40:5a:8b:4b:77:83:2a:c8:99:e9:1e:18:7e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
        Validity
            Not Before: Dec 16 00:01:27 2025 GMT
            Not After : Dec 17 00:01:27 2025 GMT
        Subject: CN=9aead6938397db5f92a0fe95f66e2b54a59b6d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:83:90:a4:52:2f:45:31:4b:43:37:8d:62:
                    3e:f5:60:46:4c:e2:e0:48:73:cf:1a:7f:18:a7:02:
                    5e:64:d4:48:ff:dc:c7:9f:7a:72:ec:8e:2c:4d:b4:
                    65:c9:1b:5c:ce:6b:9b:66:97:33:33:8c:3e:33:bb:
                    16:b7:80:d5:84:60:c3:68:37:2a:64:57:5c:e6:9b:
                    b6:e1:c1:b5:a3:56:0b:5a:d6:d4:d8:25:0c:db:0f:
                    7d:0e:97:49:3d:af:1b:df:d9:da:9b:36:53:c8:7f:
                    29:fc:db:0d:06:25:46:60:6e:e0:2b:52:4a:f3:0f:
                    c1:d0:7d:2b:2c:0d:4e:15:11:bb:c2:51:44:7d:50:
                    1b:9d:f5:b4:9d:dd:2b:f3:d2:a7:7d:3c:e1:8b:36:
                    f9:57:25:e9:26:6b:5e:84:1b:90:99:98:c0:a6:e4:
                    5d:f3:5d:d1:8a:f6:55:07:5b:4c:c5:6a:96:6d:32:
                    5b:8e:91:30:f8:11:d3:08:42:e3:14:d8:2c:f1:e5:
                    af:6c:0f:63:0c:10:51:54:f4:be:cf:0d:cd:5a:a4:
                    a0:f7:16:1b:b3:22:f7:28:ce:6c:a6:7f:18:8e:c6:
                    c1:5c:cf:bd:76:93:86:f5:fc:42:39:2a:94:14:92:
                    92:8d:cc:01:22:6f:62:39:08:64:2d:15:34:f9:c7:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EA:D6:93:83:97:DB:5F:92:A0:FE:95:F6:6E:2B:54:A5:9B:6D:6E
            X509v3 Authority Key Identifier:
                keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ca:8b:b0:aa:f6:74:17:5f:10:e3:0b:23:f6:f3:03:0a:c1:
         67:06:9c:a2:37:f6:50:e2:68:f9:7f:34:ae:c7:cd:b9:86:ee:
         15:50:a7:f7:71:67:7f:f7:9c:63:53:53:b0:c3:63:52:3f:eb:
         c4:06:8f:52:7b:1f:e6:e3:bd:25:25:f6:34:77:35:aa:25:b1:
         09:47:1f:5f:f7:8c:c3:ef:86:78:3c:49:22:0f:23:32:54:8e:
         9d:0e:7c:36:72:f9:74:90:e6:67:09:34:c2:1f:4f:6e:6f:18:
         b7:29:4a:4a:7d:48:9e:90:1f:60:02:fa:98:ef:8c:56:9e:2c:
         ee:55:b6:f4:ba:1e:e7:7e:b5:4e:fe:0b:51:27:bb:d4:1a:6f:
         eb:c2:f1:fa:7e:4c:16:11:d7:9e:d0:49:e9:62:ef:89:7e:4f:
         df:0a:b0:3f:09:ef:c7:1e:cd:8a:5f:6c:79:2c:6c:50:f2:45:
         04:a5:21:79:72:03:f0:42:fb:b3:63:c7:ac:0f:cc:be:b5:6a:
         fe:39:4d:19:5c:3a:4d:7c:00:12:07:d6:0e:70:22:22:d3:ee:
         11:56:7b:70:e1:6b:2d:b6:35:5d:de:7f:42:59:7e:78:7b:ff:
         ca:e5:01:b4:68:78:ea:8c:3d:10:cd:c0:60:77:98:a2:82:4e:
         37:ee:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 09:45:42 2025 by rpki-client