This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
File:                     9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json)
Hash identifier:          7XXuCaOEY5k4u4rPIEG64cGhlpvpUecSFjK8Rlruy00=
Subject key identifier:   E4:4C:17:98:20:BF:93:6B:ED:02:B5:49:B0:02:29:87:04:BB:F1:8B
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       019B348D57C4070FBF69654421790AD82295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
Manifest number:          178B
Signing time:             Fri 19 Dec 2025 03:00:36 +0000
Manifest this update:     Fri 19 Dec 2025 03:00:36 +0000
Manifest next update:     Sat 20 Dec 2025 03:00:36 +0000
Files and hashes:         1: 0HKshb-mSBdiPT8rzC35f_ZU7UQ.roa (hash: hF9BYbX+aU6Xe7lbRtg8LFUuOtXHeJr7ExZ5hZljljc=)
                          2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: cv5Ki4ECe6Wy1ALNk6KSBWejQpQHy7qndSmaYxcScSM=)
                          3: BxC0D_I8cfkE04FMob8aYCC9sOA.roa (hash: 8IymUbIEXnnTEcSvkY2I75XlihbCRPpcceQZo2zPDi4=)
                          4: IVrRWFI1ry1_t1jTghjesJBZcQ0.roa (hash: Gd14w4+1RfDgCwueX1ZHqk/dUawCUFDofpaoy6972KE=)
                          5: fAbOIbHK5-PVtXMOGIO2S4Xc80s.roa (hash: A/R1dGee9i9ll3uzH2uvDgQFeaI46CgRuWCcx8V04Lc=)
                          6: pnlRPUhZWx-18cN9NyZhKYkt_80.roa (hash: 4GEIDeArajdM/SlgOWHtHJwQGutC5XfeEODamrmD5BE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:8d:57:c4:07:0f:bf:69:65:44:21:79:0a:d8:22:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Dec 19 03:00:36 2025 GMT
            Not After : Dec 20 03:00:36 2025 GMT
        Subject: CN=e44c179820bf936bed02b549b002298704bbf18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:9e:b9:c2:ed:15:72:71:e7:17:93:65:df:
                    20:12:1b:a7:a7:3a:77:d3:09:5e:b4:37:66:90:57:
                    dd:17:30:d0:ac:e4:f1:63:19:de:15:db:8f:fc:bd:
                    d6:9f:ac:69:4d:b9:ca:c0:29:29:75:f1:5f:89:b7:
                    64:6c:ad:46:12:8e:a7:c4:df:a3:4d:42:68:d4:97:
                    80:29:3c:71:b2:67:6c:b3:1a:9b:a0:be:23:99:dd:
                    44:89:63:eb:ba:e5:74:91:ec:24:6f:a3:7a:c8:d0:
                    52:85:5f:57:e4:65:ae:6b:45:a9:ab:5d:e2:26:b1:
                    a8:4f:74:ed:fc:53:a1:81:10:3e:3f:0a:d0:8d:d5:
                    bc:37:0c:d8:1c:fb:07:eb:63:f6:11:ef:64:58:14:
                    43:cd:86:5e:2c:b5:67:a1:5d:8e:c5:54:3d:01:cc:
                    25:a7:2a:9f:39:ce:c4:9b:a9:95:de:1f:e2:13:53:
                    7c:48:97:c9:06:29:6c:50:4f:e0:5f:6d:7b:fa:3b:
                    ba:44:d6:b2:a7:59:83:01:ba:83:69:c6:55:7a:71:
                    92:b2:a3:68:32:12:2e:6e:fc:d7:e7:af:58:c1:e4:
                    dc:ce:d8:2a:7c:68:73:85:94:55:0c:81:89:6f:81:
                    96:33:c6:d1:66:c0:d8:cd:9c:a8:71:d3:39:ae:b6:
                    a6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4C:17:98:20:BF:93:6B:ED:02:B5:49:B0:02:29:87:04:BB:F1:8B
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:36:1a:97:82:f9:6a:d3:14:19:2a:00:e2:3d:d6:59:fd:41:
         35:71:ed:20:07:d7:8d:4a:71:0b:4e:7e:5c:90:48:cc:ed:42:
         12:e3:4e:c3:1f:b3:54:e9:b7:8a:32:2c:84:d6:a0:6a:b4:e9:
         fc:7b:3a:ce:cd:a5:81:46:d2:84:87:c7:ba:f5:33:af:12:b6:
         2f:97:f1:17:2d:99:f9:58:0f:75:e5:a7:3b:9d:3b:88:c4:9b:
         cb:b2:3a:8e:3f:f6:9b:21:bb:8e:bb:59:99:ab:0f:09:cf:87:
         8c:b5:39:97:24:52:a7:3b:15:50:3e:be:ef:81:ca:05:82:b9:
         86:bf:b2:2d:d2:6b:ac:2f:13:7a:ee:e4:e5:59:6c:2c:4a:52:
         b3:9d:61:81:5a:1b:46:cd:f2:16:b2:d6:f4:54:f0:ec:44:ec:
         81:ce:ff:d7:67:82:fb:93:9d:9f:5c:6c:30:81:eb:3f:bd:7b:
         c7:01:e9:c0:d7:d4:c1:16:7b:4f:bd:15:34:7e:9f:00:a8:c4:
         60:ce:5b:1c:3f:fa:6f:f4:6e:69:e9:cc:c0:a3:ce:f8:e9:f4:
         57:80:14:db:32:c3:f8:1d:d4:98:d8:45:12:91:c5:02:4d:84:
         12:9f:f1:7a:f8:36:68:40:70:32:ce:36:b7:14:f7:7a:7b:f5:
         e9:26:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:36:10 2025 by rpki-client