This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File:                     Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier:          LJB6wkAj5HAtyHw7EeWy4kbymYNLwtEA0xJP27fCgbc=
Subject key identifier:   9F:85:18:EC:43:A3:42:4B:BF:69:75:05:01:79:49:F7:6B:77:1F:C9
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer:       /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial:       019B3FECD3B30BD334CD09C603AF15AD88DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number:          178B
Signing time:             Sun 21 Dec 2025 08:00:43 +0000
Manifest this update:     Sun 21 Dec 2025 08:00:43 +0000
Manifest next update:     Mon 22 Dec 2025 08:00:43 +0000
Files and hashes:         1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
                          2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: 9VB4MdcXdDaGpMzf+Gc/EHD435lvlWrX3LnHcSm4an0=)
                          3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:ec:d3:b3:0b:d3:34:cd:09:c6:03:af:15:ad:88:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
        Validity
            Not Before: Dec 21 08:00:43 2025 GMT
            Not After : Dec 22 08:00:43 2025 GMT
        Subject: CN=9f8518ec43a3424bbf697505017949f76b771fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:4e:ce:0f:f0:f9:17:75:e6:1b:0b:10:22:
                    27:a9:36:e1:8a:ed:17:94:04:6a:00:36:69:2e:b9:
                    2b:c7:7e:0f:b8:b5:ed:8b:e3:34:83:f5:2c:da:ac:
                    f2:51:2e:24:41:4b:bb:b2:f6:45:a5:20:6e:3c:9d:
                    70:9e:ec:ec:0a:90:fe:df:bb:65:2c:ff:07:62:4a:
                    75:1b:7f:59:20:57:50:06:61:a7:c9:23:f8:38:ef:
                    55:bf:8a:4f:54:b2:c8:1b:7c:4c:4d:4d:85:6b:25:
                    24:f7:f5:41:43:3e:fc:fd:af:7f:2a:d0:bd:1f:94:
                    04:9e:ee:c7:f4:3a:44:85:51:d5:01:46:f9:c4:f6:
                    61:69:a5:b6:c4:25:ae:33:9f:c8:dc:62:9e:18:7f:
                    77:6c:d8:26:c8:0d:6e:ad:10:7c:fd:64:a9:81:24:
                    d4:ab:4e:f5:de:9d:c5:45:b7:cd:49:e2:93:16:fd:
                    60:2c:67:af:a4:cd:b3:7f:46:47:82:78:2c:8e:6b:
                    a8:79:14:5b:87:05:e0:2f:32:93:20:f1:bb:ed:b2:
                    da:64:65:86:bc:71:79:17:27:b6:c0:03:e3:51:be:
                    39:94:5d:8e:64:24:4d:c3:f1:38:f6:eb:40:ce:eb:
                    70:8d:f4:17:f2:09:a8:be:43:6c:f0:28:3d:f4:9c:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:85:18:EC:43:A3:42:4B:BF:69:75:05:01:79:49:F7:6B:77:1F:C9
            X509v3 Authority Key Identifier:
                keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7e:82:9c:54:85:cf:59:32:7c:58:75:7b:69:b3:09:4b:6e:
         34:bf:3b:5c:17:79:40:b7:9f:37:6f:d0:62:0f:c6:f0:35:fc:
         2b:46:cd:68:4c:43:63:5e:46:c4:5a:75:be:28:15:25:6b:87:
         73:92:8d:7e:81:b2:d5:bf:27:be:63:0f:f7:47:d8:68:e5:8a:
         5e:83:46:78:e8:72:ea:d7:a1:e5:b1:1c:c9:b5:d3:ff:63:3a:
         bb:d6:98:32:3b:ac:68:1d:84:9d:55:2a:3f:7b:8b:59:bc:8c:
         c9:4b:72:f8:00:aa:c8:40:dd:48:06:85:01:49:50:33:d8:40:
         8e:c3:42:81:af:e4:e7:0a:48:c9:57:e8:97:da:ba:96:70:da:
         10:3b:69:dd:2b:ca:9a:b1:39:32:a1:5b:93:1d:a7:ab:84:01:
         25:08:03:a6:d3:75:6d:13:2e:8d:31:43:d6:dd:f2:7d:e2:76:
         40:f8:8f:31:97:16:eb:c5:d9:48:f5:de:1d:0c:92:f0:f2:da:
         59:d5:22:bb:45:59:e2:74:9b:60:b4:1a:fd:c7:9b:dc:f4:44:
         64:c5:4c:db:95:28:63:e2:9e:2b:af:97:48:55:f6:cc:49:25:
         c5:51:c6:8f:a8:61:46:13:f3:49:3c:a9:bb:e7:92:d7:c0:53:
         4c:b1:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:39:18 2025 by rpki-client