This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          Y7lzQl/0Um6En57EuOZE0thhqq5Vd1aQZ88HMHQqlDA=
Subject key identifier:   E4:31:B9:1A:AB:6D:41:A2:9D:E5:E6:F4:D2:B1:29:A7:95:FA:45:55
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       019B0EC9A70E2B485671A03DDBFF1CE0ACBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          179F
Signing time:             Thu 11 Dec 2025 19:00:55 +0000
Manifest this update:     Thu 11 Dec 2025 19:00:55 +0000
Manifest next update:     Fri 12 Dec 2025 19:00:55 +0000
Files and hashes:         1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
                          2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
                          3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
                          4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
                          5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
                          6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: C5bveAKD0g/IrydJS+CmU/DHcSrCmjRuwRC8EyndppM=)
                          7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:c9:a7:0e:2b:48:56:71:a0:3d:db:ff:1c:e0:ac:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Dec 11 19:00:55 2025 GMT
            Not After : Dec 12 19:00:55 2025 GMT
        Subject: CN=e431b91aab6d41a29de5e6f4d2b129a795fa4555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:00:63:4f:0c:b8:3f:e5:13:02:a0:0e:03:
                    38:9f:9f:ea:43:88:09:46:44:c0:77:b4:71:58:69:
                    ac:b2:43:b3:23:2a:7e:25:0e:3e:7e:86:c7:49:c8:
                    3f:ce:b7:dd:b8:83:a9:bf:f5:86:cc:3d:89:63:15:
                    79:2b:b4:d4:e4:18:e0:1b:19:ad:ed:95:d9:39:02:
                    17:4d:bc:32:e1:df:87:72:38:38:da:64:2d:5c:5c:
                    5b:71:0e:de:b8:f7:53:e6:49:7b:5a:5c:6d:5f:95:
                    bb:d3:bd:ab:d6:a4:6f:1f:0c:c0:e2:d7:f1:4b:e7:
                    e9:e4:79:d8:9e:80:f2:99:dd:6b:0f:55:76:e1:de:
                    d0:02:a5:db:01:36:0e:0c:e7:58:4f:08:95:e3:86:
                    e6:72:62:e4:33:7d:be:04:c1:d8:c3:3f:eb:33:f8:
                    d8:a0:76:d3:df:a8:e1:8a:94:71:ca:56:57:d7:17:
                    cc:2e:b1:61:9a:dc:94:23:a6:6e:5e:15:7f:4b:98:
                    28:f0:8a:65:6f:5a:b0:2b:3e:4a:d7:24:3c:08:18:
                    73:fa:4f:ed:72:16:44:60:02:34:f8:e5:5a:06:be:
                    7a:ae:bc:e5:d7:a6:79:27:b9:84:0f:f5:41:3d:5f:
                    e2:a4:1a:dc:ec:b7:2d:2e:24:c9:2b:7e:49:7d:38:
                    bd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:31:B9:1A:AB:6D:41:A2:9D:E5:E6:F4:D2:B1:29:A7:95:FA:45:55
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c7:85:c4:fb:a6:bb:32:1c:40:54:78:d1:25:24:9b:0e:c9:
         be:56:ca:ef:ba:dd:32:79:b4:cf:69:24:9d:4a:01:0e:db:3a:
         6d:c4:3f:8f:18:9c:45:db:21:02:2a:77:a0:3d:dd:63:05:51:
         0a:3d:ff:74:62:14:82:c9:ad:e2:81:82:d3:02:c4:f5:0a:eb:
         7c:e8:94:4c:dc:5e:64:dd:fd:b2:8d:91:13:fe:95:76:be:d5:
         b2:6e:b8:96:f9:9c:fc:8b:d9:96:c0:4b:16:ca:df:4f:73:6e:
         fe:6f:9a:89:48:56:96:ff:3b:42:6e:ff:80:bf:35:70:15:a4:
         5f:f7:30:18:fc:08:fa:9c:6a:78:65:ca:d5:bc:3d:4e:97:b4:
         95:2b:bd:07:84:2c:50:c0:f5:0f:52:cf:cb:f0:0e:8a:23:28:
         b5:b0:03:bb:2b:eb:d2:fd:1d:bd:42:3f:c8:c9:bf:01:55:4d:
         17:e4:5f:d0:b4:c8:e1:e9:6d:32:a5:c4:fb:46:33:f0:83:17:
         c5:1d:b1:50:ee:4a:09:11:82:c1:77:63:e3:e1:fd:2d:93:3e:
         6d:6a:a9:ec:b3:e0:ad:27:7e:4d:fa:75:04:05:46:ce:86:e6:
         6b:d3:d2:60:00:fe:5b:ae:7b:29:a5:47:97:f5:84:1a:7c:c7:
         66:f9:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 03:41:58 2025 by rpki-client