This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File:                     IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier:          a50D1BoaAlrwdOw5PNkDk4/vDLQT9Zkp04zXKhcg6h0=
Subject key identifier:   B3:93:16:A3:29:A9:45:EF:8C:98:24:54:6D:92:DF:30:6E:D3:F9:32
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer:       /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial:       019B3DFE8D774751A5EC6A7EEDF8F9ABE992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number:          178C
Signing time:             Sat 20 Dec 2025 23:00:51 +0000
Manifest this update:     Sat 20 Dec 2025 23:00:51 +0000
Manifest next update:     Sun 21 Dec 2025 23:00:51 +0000
Files and hashes:         1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=)
                          2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: +MD94f7122EXxH281BhY6NjYjdw1l6YB4yvg9gE4FBs=)
                          3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:fe:8d:77:47:51:a5:ec:6a:7e:ed:f8:f9:ab:e9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
        Validity
            Not Before: Dec 20 23:00:51 2025 GMT
            Not After : Dec 21 23:00:51 2025 GMT
        Subject: CN=b39316a329a945ef8c9824546d92df306ed3f932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:58:83:44:46:d2:5b:56:8d:01:7a:50:4a:
                    f5:29:1c:6a:c9:a4:fb:55:8b:e7:4b:10:ce:ca:e8:
                    2d:cd:1b:ce:22:e6:7e:ab:ef:41:b3:6a:5a:76:d2:
                    ed:0a:b8:36:67:e8:a2:d4:09:3f:8c:78:ae:1c:c0:
                    4d:4f:21:43:6d:17:93:ed:8d:09:98:c1:60:41:ac:
                    af:95:4b:8e:86:db:5b:f0:46:3a:31:a7:61:e0:7c:
                    97:4f:3d:c0:6a:05:20:e3:04:b8:22:08:47:f5:3e:
                    ad:1b:b0:35:d5:e0:ab:b5:84:c6:03:01:d0:b8:6b:
                    71:c6:de:cb:ed:27:80:2b:e0:6b:78:e3:95:cf:29:
                    2d:e5:c6:3a:33:85:73:d3:ee:d5:c0:24:dd:bf:d6:
                    9c:bf:b5:07:41:7a:4c:3d:23:7d:d2:51:bc:4c:a0:
                    c1:7b:89:b9:63:69:1f:1b:ed:33:c2:1f:56:76:7f:
                    04:e5:70:2a:f2:1d:0a:24:8d:b3:64:a9:2f:f9:2d:
                    23:b4:20:58:0b:e8:a2:80:a6:39:35:c7:72:cd:f7:
                    15:05:aa:4a:5d:f7:eb:3a:1c:f7:b2:1d:f9:d4:8e:
                    4c:bb:c0:81:73:dd:dc:97:52:1a:06:f8:75:30:2d:
                    a3:42:35:ff:17:50:ad:42:f6:7f:5a:e0:1f:7a:15:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:93:16:A3:29:A9:45:EF:8C:98:24:54:6D:92:DF:30:6E:D3:F9:32
            X509v3 Authority Key Identifier:
                keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:b1:a1:03:67:aa:12:29:ad:81:2a:c4:4e:6d:d3:58:b8:
         50:41:c0:f8:6c:e5:c2:86:b3:6d:d6:12:ca:49:c8:b1:66:04:
         c6:3a:ec:e2:4e:e8:b6:0c:93:1b:07:e0:51:b3:f8:95:cb:f6:
         5a:78:de:5c:66:84:3b:50:e4:28:e5:f6:9a:26:82:c7:08:45:
         2d:31:a4:ec:05:b7:d0:af:e9:82:39:a2:3a:0c:1b:79:ee:d0:
         7e:7a:e3:e8:19:96:1f:4a:be:fc:a5:0d:36:83:7f:6e:aa:80:
         5d:f6:1c:4a:a9:34:d4:13:d0:1c:8c:d4:c3:fe:ab:26:21:9a:
         f9:6d:df:81:16:36:d1:1f:c4:b6:c8:b6:49:93:93:ef:e9:a0:
         ed:1a:89:2d:98:65:bf:ba:11:99:96:eb:b0:13:3a:a8:79:20:
         3e:ed:d9:bc:b3:4f:ba:fb:62:a7:a6:a1:dd:e9:f5:3e:25:fc:
         08:d7:93:bc:97:52:12:04:3e:52:e6:58:85:48:61:b0:25:33:
         45:8e:c7:54:e1:ee:00:24:8a:a1:a1:87:68:9b:95:fa:7d:8a:
         45:75:4e:23:8c:22:1e:16:f8:b6:32:34:0e:f1:09:2a:6e:b5:
         66:fa:6d:6b:62:7b:39:a2:e3:fc:6f:e5:98:ad:a1:1f:5c:47:
         13:d3:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:25:01 2025 by rpki-client