This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File:                     7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier:          +pP3YDUj1eGpoPc3RL2v8M23tqcBVaBlDYHkmEM1Z2Q=
Subject key identifier:   88:F4:57:80:98:B6:41:D5:56:37:8A:B2:CE:1F:B5:B7:C3:13:46:B3
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer:       /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial:       019B35322A2248F4E99CDE7A7E10A38027F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number:          178A
Signing time:             Fri 19 Dec 2025 06:00:38 +0000
Manifest this update:     Fri 19 Dec 2025 06:00:38 +0000
Manifest next update:     Sat 20 Dec 2025 06:00:38 +0000
Files and hashes:         1: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: rreEKhDff/aCv0XTiT7+vVKxp17u1Z4c/7Njtvp7K8o=)
                          2: Vhh-HEWHbYSTjQgTrRsDTKlOjO0.roa (hash: nZHSxicdSyoslUfdZCmnypTUsy3rNzow8v41t9pPW+0=)
                          3: cXrx1ROqbRYTJpBaY9JfsPVk3Ow.roa (hash: e0I94SNdLBs+vaXUAirpLtLE8FeKHQEH/NhmFQRxO+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:32:2a:22:48:f4:e9:9c:de:7a:7e:10:a3:80:27:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
        Validity
            Not Before: Dec 19 06:00:38 2025 GMT
            Not After : Dec 20 06:00:38 2025 GMT
        Subject: CN=88f4578098b641d556378ab2ce1fb5b7c31346b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:51:4f:16:14:13:0e:b4:e4:3a:3a:3f:e8:3c:
                    37:6f:7d:53:ca:48:f3:7e:9e:be:3d:a0:f1:9f:e4:
                    c2:4b:f2:b8:eb:94:54:76:dc:be:45:c7:5f:08:32:
                    20:cc:5b:df:bb:29:a9:08:81:20:b6:c3:84:0d:b1:
                    ab:f2:63:5a:3b:27:3f:7b:30:90:7f:64:5a:64:16:
                    60:04:2e:d2:03:c9:5f:b7:24:26:92:6f:b6:ee:e1:
                    a1:fa:ad:93:f7:75:36:8b:61:85:90:85:3e:cd:eb:
                    be:7a:c5:e0:98:24:b4:2b:89:a5:fb:9d:c8:0e:ef:
                    52:16:8a:12:1b:92:2a:cf:eb:51:ee:fc:f8:cc:72:
                    ea:7a:9d:f2:7a:77:f3:76:a2:b9:55:31:0a:32:bb:
                    f8:56:92:b0:74:d7:bd:f2:f1:9b:6b:4c:39:01:b6:
                    08:7b:c2:29:aa:35:cd:e9:84:fd:ae:b5:e1:0c:9f:
                    17:14:30:dd:da:5c:9a:88:29:64:50:0a:b0:07:50:
                    1b:49:88:ed:39:c7:b4:05:01:1f:17:aa:a4:f2:41:
                    1f:9c:1f:74:1d:9d:6c:88:3d:94:e6:95:61:4f:74:
                    76:80:39:85:0d:67:99:b1:ad:43:7f:6d:39:ee:65:
                    89:4f:3a:c0:d9:7c:10:6f:9e:2c:af:d0:05:ac:f3:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F4:57:80:98:B6:41:D5:56:37:8A:B2:CE:1F:B5:B7:C3:13:46:B3
            X509v3 Authority Key Identifier:
                keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3b:eb:57:6a:1e:79:c3:3e:92:6d:31:ba:ff:7c:db:88:2b:
         20:c0:9b:1c:d3:17:8f:4c:0c:6b:ff:33:42:b3:d7:aa:b4:8d:
         03:45:81:85:79:61:b6:fb:82:eb:e0:31:d6:52:dc:48:30:af:
         dd:b1:b5:f6:31:6c:90:0e:ff:7f:ad:f3:c4:b1:43:50:63:8c:
         cf:32:bc:3a:5b:64:91:aa:bd:44:79:12:ff:7d:8f:55:ce:6c:
         5b:9b:65:c0:e0:a3:69:e8:e0:76:20:c1:59:ee:5f:0a:1b:75:
         2b:f5:8c:70:71:d8:8a:55:7a:08:1e:32:7d:1f:0a:cc:9f:80:
         79:04:23:72:73:b0:f4:44:48:2d:6e:72:91:f5:35:cc:b9:77:
         1f:b3:b9:78:df:68:84:69:f2:29:00:77:fd:5d:2a:df:d7:4f:
         6e:a1:01:44:ef:71:46:d3:06:22:62:00:af:94:40:59:d9:f4:
         09:3d:99:31:69:a3:16:26:1d:b7:aa:59:f9:37:36:d3:d1:ec:
         55:57:b6:a4:f4:74:0e:d1:e4:3f:86:d9:85:a2:fb:dd:ca:26:
         58:d3:89:4a:df:bd:1a:6f:81:dc:f4:43:0c:1c:c5:58:07:99:
         f8:d6:b0:f4:c7:72:20:84:2c:d1:8f:84:9e:72:99:20:68:15:
         ae:0f:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:39:02 2025 by rpki-client