This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File:                     deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier:          pJ/FCJujt8D0H8f2BJZUdWFcaefO+Kza03BxwQ8J/9A=
Subject key identifier:   AB:1B:F4:60:81:42:9F:7F:87:FE:77:19:68:43:91:A3:8E:85:08:F5
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer:       /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial:       019B1B04C2EE912168C4714D0124440CCAF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number:          177E
Signing time:             Sun 14 Dec 2025 04:00:55 +0000
Manifest this update:     Sun 14 Dec 2025 04:00:55 +0000
Manifest next update:     Mon 15 Dec 2025 04:00:55 +0000
Files and hashes:         1: 1jmJ2HwhrLQ2gbaEWJqzaryRG8c.roa (hash: pO4VfZ/vbc6gNeT/zyuHOWdN7wKxeSrY9OMKhLOa++k=)
                          2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
                          3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: jfjvndg2XC8gz/4c8J3Gfou85tI0iStJFCcS80j/iAg=)
                          4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:04:c2:ee:91:21:68:c4:71:4d:01:24:44:0c:ca:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
        Validity
            Not Before: Dec 14 04:00:55 2025 GMT
            Not After : Dec 15 04:00:55 2025 GMT
        Subject: CN=ab1bf46081429f7f87fe7719684391a38e8508f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:ec:55:77:30:89:7b:d2:de:dc:a5:a4:e3:
                    35:6b:9b:4d:38:3b:98:57:aa:44:07:44:99:f2:ed:
                    80:09:1f:15:da:b7:92:e7:b0:74:a3:87:05:4a:40:
                    e3:28:f8:4a:d5:e3:64:05:bc:82:28:a2:a9:46:a6:
                    c1:5c:20:86:90:30:f8:c5:bb:a2:d3:b1:ac:ea:26:
                    4d:d8:0c:46:db:94:5d:ee:7d:c5:8b:fe:d3:ce:48:
                    91:df:8a:1f:45:30:64:25:cd:b4:7f:f4:7c:88:c0:
                    19:75:e9:92:e3:b2:30:5a:1c:46:5b:f1:b8:e6:46:
                    03:3b:ec:65:a9:83:f9:e7:55:18:57:d9:b1:37:a1:
                    e0:7e:71:32:3c:0d:1b:5e:40:f4:31:ba:30:06:d4:
                    7d:a3:12:82:95:6a:a5:38:63:42:95:f6:5f:87:30:
                    4b:5b:dc:6e:dc:7e:03:9c:a0:9b:54:7e:d0:a8:ac:
                    8c:37:e5:43:a9:1c:30:55:da:02:f0:a4:85:56:66:
                    a9:bb:69:6c:55:95:44:80:ff:5b:4b:e8:bf:d7:23:
                    53:75:d5:77:cf:5b:0a:b8:b8:98:50:ea:a4:ed:e0:
                    51:1f:30:cd:32:0a:72:1a:54:99:eb:f9:bb:6c:b9:
                    5f:bd:77:40:d4:95:14:66:92:84:d8:8e:8d:0e:1e:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1B:F4:60:81:42:9F:7F:87:FE:77:19:68:43:91:A3:8E:85:08:F5
            X509v3 Authority Key Identifier:
                keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f1:4d:d7:7c:36:ca:84:e9:14:09:0f:f8:86:63:3b:c5:58:
         5a:28:85:6b:d3:e9:ad:4d:9e:ce:9a:c1:8d:c8:1b:c9:46:f1:
         5d:14:fc:51:1a:6a:41:e9:41:16:d4:2b:43:9c:c6:65:ea:36:
         7b:6f:7b:0f:7f:61:42:5b:ca:a5:a2:bf:bb:31:96:8d:0c:26:
         d1:f2:51:fb:6b:87:8b:b5:0c:de:0a:e3:ce:12:4f:55:a7:5a:
         18:af:3d:22:f6:a3:8f:d8:d3:96:b8:d1:af:70:60:1e:62:fc:
         b7:a6:c0:af:3a:13:04:c7:ab:de:1c:d0:cf:e9:e1:9d:fc:f4:
         41:e5:c2:5f:61:7c:68:6d:79:07:f3:4f:81:46:44:99:f6:86:
         38:92:91:e0:5b:23:0d:fe:3d:a9:e4:ca:89:85:9f:6c:08:d4:
         d6:9c:df:7e:89:22:7c:a6:c4:a8:0d:de:4f:dd:9b:59:08:2c:
         4a:f4:84:25:c0:9b:0c:de:cd:13:4f:05:af:2e:81:4b:c1:31:
         1b:e3:27:47:75:ed:ae:1c:e3:71:be:86:a7:d9:be:56:58:31:
         ea:7c:79:2d:de:a1:63:bc:19:44:3e:7c:61:09:c8:17:2a:5c:
         4b:17:02:b6:4d:20:d0:fa:87:41:4a:c3:8d:e0:28:7f:8e:bd:
         97:35:99:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:44:49 2025 by rpki-client