This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          nBaWrU5632XinCyULgNV670iHkyEMjb1l/x1W1Nr2kk=
Subject key identifier:   D7:E9:84:1F:95:EB:F0:57:9A:57:21:9D:E8:AB:CF:87:7F:D7:80:C9
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       019B0FA5D5C8A47581AD0E733A1947D64692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          178B
Signing time:             Thu 11 Dec 2025 23:01:24 +0000
Manifest this update:     Thu 11 Dec 2025 23:01:24 +0000
Manifest next update:     Fri 12 Dec 2025 23:01:24 +0000
Files and hashes:         1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=)
                          2: 2R3GYbP40kVDselx86gqI7AglgU.roa (hash: XLRcU1O670injcbZzqHBcbGiFZGa7M1Rl5LjE453GkQ=)
                          3: FIfoAXaxpYLmDe5rWtbqnwoZyG4.roa (hash: McAx354GUPfDHZvpRDVZ7JLef+rbJmvzLHPw8ZCGP3g=)
                          4: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=)
                          5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=)
                          6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=)
                          7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: vXykPP+2o5qaDhabijuMuC7qHDmH3YQSyEqjij5rCTc=)
                          8: qWZ64G_gV6r1a1VTWhYwuR9ilIk.roa (hash: SNBGanOggO8FdGYV/GuiVAQ6b34zKk2VTZJhKLFl+04=)
                          9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=)
                          10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:a5:d5:c8:a4:75:81:ad:0e:73:3a:19:47:d6:46:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Dec 11 23:01:24 2025 GMT
            Not After : Dec 12 23:01:24 2025 GMT
        Subject: CN=d7e9841f95ebf0579a57219de8abcf877fd780c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:56:81:6c:cd:06:1f:c6:1c:30:18:96:a8:
                    fa:e7:66:24:08:17:fc:76:de:72:11:8e:d1:38:39:
                    eb:7a:53:45:f7:c1:05:cb:c2:ea:b5:84:7a:36:40:
                    1f:a3:a2:11:15:8e:0a:6a:b7:07:e8:b9:49:24:cc:
                    8b:9a:3b:7e:d0:23:7d:70:e1:b4:9f:dc:7c:b3:0c:
                    27:f8:35:c6:9a:7c:05:56:ad:0d:bc:26:c3:0a:a9:
                    40:d4:21:3d:7e:c2:dd:91:65:6e:6c:72:fa:33:a7:
                    87:f5:d5:67:84:79:d3:63:af:80:b0:46:42:a3:ed:
                    cf:f2:cc:82:48:05:61:e8:1f:c3:f8:3c:72:bf:bf:
                    2a:79:b7:24:27:71:1b:57:4d:f4:d1:55:02:27:32:
                    c4:e3:28:d6:fb:d7:88:9c:7b:87:09:a6:82:f6:03:
                    9b:61:7d:dd:95:2d:6d:59:b3:c2:46:45:5d:1c:05:
                    c0:e0:8e:72:df:33:65:c6:61:76:9a:bc:ba:fa:3e:
                    0a:e6:1f:75:a5:cf:d7:52:10:1d:d5:ad:18:a3:c7:
                    75:30:9a:ef:f9:b9:d6:65:4f:56:dc:1d:cd:60:34:
                    56:1a:5b:7a:fc:01:03:7d:25:17:5f:ee:d1:12:e8:
                    b7:9e:ec:55:25:66:1c:fe:b3:a1:f9:14:92:43:ae:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E9:84:1F:95:EB:F0:57:9A:57:21:9D:E8:AB:CF:87:7F:D7:80:C9
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:87:9e:db:79:f3:f4:fe:6d:89:23:c8:25:e2:08:ac:f9:ff:
         79:dc:73:3b:89:7a:3c:b7:2d:b0:20:69:8b:7a:70:0b:8a:92:
         41:24:a0:33:94:28:b1:fd:2c:f5:28:47:1e:a2:d7:d4:6d:b2:
         2e:05:a5:ca:c4:9f:92:02:ae:1b:31:fb:22:bb:e8:98:85:cc:
         cb:ac:32:2e:88:08:6e:eb:26:5d:09:ab:e6:b3:16:f3:7c:7a:
         10:1e:7f:54:1b:bd:b7:c5:17:4e:b1:20:89:92:4d:74:cc:62:
         67:e4:c5:5b:06:c7:46:47:29:95:30:e4:f7:b4:47:e2:69:65:
         9d:4e:02:72:97:ed:e0:63:c1:ae:06:ed:27:64:66:58:c5:16:
         4c:a2:c0:89:6a:8a:5c:9e:6c:70:3a:e4:29:cc:e8:c9:21:70:
         1f:53:b0:f8:57:d6:08:05:b4:fb:45:2b:58:ac:e2:f0:03:7b:
         80:7a:98:37:5e:fd:71:e5:35:97:d2:5c:9d:63:36:87:32:4d:
         3e:8d:ef:13:eb:28:d5:bc:38:13:b8:3d:ca:b8:8e:34:69:4e:
         63:fd:be:1f:8c:03:99:bb:e9:31:4c:53:55:b2:75:8f:ad:4f:
         27:31:81:ec:78:92:94:16:ab:19:2e:55:f1:07:f2:ca:b9:7d:
         db:ff:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:41:18 2025 by rpki-client