This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          FmzhbXFmk35UjDxgmqPm9qkGocd9XEoN9tALlDeyILY=
Subject key identifier:   08:D2:9A:6E:D6:B7:56:77:88:EC:7D:04:08:DA:09:11:28:B6:39:DA
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       019B0D80829C0FF129D18B36D1C2ED204AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          177E
Signing time:             Thu 11 Dec 2025 13:01:24 +0000
Manifest this update:     Thu 11 Dec 2025 13:01:24 +0000
Manifest next update:     Fri 12 Dec 2025 13:01:24 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: CJPF7USTNg9ypdFvC08rOkjA78QGuGw5PLxmzSsP4zA=)
                          2: 3mOoENhQssYcE0_jNIiNCd1IJhM.roa (hash: NxDjxUHodJorGdwgiCzGcQ9QT0JyGcub9gsrImCrSi0=)
                          3: Ap3gL9Yp7uumyoe2yxrwjvNZDxk.roa (hash: wudrm+gdegSTau2jZcPXyXW7DUxfSyZ4WVu/YKmSW1A=)
                          4: ELP7t5lJtmtgM2_pSHY2borhcWQ.roa (hash: anmJF+ajsRAns7lhsAxkAlsYncDfzcyUe/BQwnLm440=)
                          5: OT6YHDk_lhZsoGwe6NFFGa5Sz3g.roa (hash: 3UK4RMJ18E6BJ3Pt3k1N4ljIIeVHfvFurvUMotxJ7ow=)
                          6: xPlV_dPEF5A6IiGBWHJlqdqTyug.roa (hash: L4B5IhPuaoOP7uH4/YjON7e/k30j+W6z6mE0lKhs4Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:80:82:9c:0f:f1:29:d1:8b:36:d1:c2:ed:20:4a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Dec 11 13:01:24 2025 GMT
            Not After : Dec 12 13:01:24 2025 GMT
        Subject: CN=08d29a6ed6b7567788ec7d0408da091128b639da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:34:ca:13:e9:03:ee:a7:2a:f5:78:b1:de:
                    03:f6:bb:18:0f:95:24:94:78:76:cf:aa:a5:12:13:
                    10:56:4d:50:13:86:f6:14:6b:56:43:93:be:01:59:
                    5b:6f:c5:c9:92:83:de:a1:07:6e:6e:84:af:79:c9:
                    90:4a:b4:62:75:e7:f5:83:55:11:b6:4d:e3:41:b3:
                    8d:cc:dc:c8:e4:9e:e7:39:1c:73:8a:2f:9e:17:32:
                    6c:30:76:d2:27:52:e8:ad:4f:ca:de:fe:0f:06:97:
                    d3:e3:f9:d1:bc:a8:a9:5b:41:4c:67:7b:06:9b:b9:
                    d4:8f:9a:69:b6:03:7f:3e:61:68:f8:e7:e4:c0:b2:
                    95:48:02:a9:fb:33:28:b0:de:af:2e:73:9f:0f:0c:
                    8a:e1:f0:33:cd:08:4f:63:c4:1d:f8:2c:3d:2c:30:
                    43:0e:b3:a2:55:eb:1a:53:58:52:cb:ad:08:62:61:
                    d2:4e:bd:f1:ef:6e:e7:89:e8:8a:d7:95:31:c7:c9:
                    d2:bf:b6:4d:4b:99:3e:f5:ea:a8:dc:8d:c9:b4:1d:
                    f8:a3:0d:d1:2d:bf:6d:8d:af:4d:34:c8:47:86:3b:
                    20:19:3a:58:40:aa:5b:7e:57:a1:c4:03:47:0c:49:
                    6f:5b:8f:25:64:63:83:64:b8:cc:27:cc:43:68:87:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D2:9A:6E:D6:B7:56:77:88:EC:7D:04:08:DA:09:11:28:B6:39:DA
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:57:1c:13:cb:5b:8d:85:92:e1:e4:45:e1:02:fe:59:46:ce:
         d8:c5:cc:82:ab:3a:42:7c:d5:6a:7e:6f:14:7f:34:56:f7:5a:
         0a:13:87:7f:f3:ad:16:27:13:5f:02:54:1b:2f:12:47:d1:db:
         a1:91:b3:be:38:00:35:f1:1e:e5:d4:0c:2f:cf:b9:99:25:19:
         fd:7d:d8:81:c2:ba:2c:e1:13:d6:ff:06:c1:52:78:aa:61:69:
         3e:cf:f8:e7:22:80:8c:01:ab:63:dd:e8:e5:7d:bf:d3:80:46:
         b1:52:72:28:10:6f:16:48:1c:81:f1:48:17:69:bc:6f:8f:da:
         df:33:b4:8c:d8:33:a2:5d:79:4a:ff:dd:4c:b6:a8:ae:99:f5:
         5a:4f:be:69:b5:d3:2b:52:87:8b:c4:53:97:a3:85:22:af:bc:
         45:63:75:8a:c6:ff:6c:69:56:ed:e4:01:93:c2:bc:66:2c:fa:
         4b:ed:32:5f:dd:bf:b3:4b:18:2f:32:12:d9:49:f8:fb:4f:a0:
         35:97:4f:36:ee:2d:3a:a3:1c:1d:19:5e:1c:c2:16:18:50:c4:
         f5:36:57:59:95:f9:08:b9:92:9e:9f:05:e1:19:e4:c6:35:f3:
         c8:31:97:88:f6:8f:d0:bd:e5:75:41:d9:8b:9c:d1:8c:43:5d:
         7d:e6:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 19:26:39 2025 by rpki-client