This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File:                     Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier:          cbiU3frb0nBydooUsQFCcsp0blvPYvBGgWWR8+suxmw=
Subject key identifier:   67:9A:1E:F7:4F:AA:B6:1D:6A:92:CF:A0:A8:13:08:4B:4C:AA:03:12
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer:       /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial:       019B3A586898299ECFD9F487ACB9FCD06991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number:          178B
Signing time:             Sat 20 Dec 2025 06:00:30 +0000
Manifest this update:     Sat 20 Dec 2025 06:00:30 +0000
Manifest next update:     Sun 21 Dec 2025 06:00:30 +0000
Files and hashes:         1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=)
                          2: 2zlKOvbAvQZnhSVaWjsOOlM3Xzg.roa (hash: BfYATa29KVeAb0l3w0wWL4QpEZML5G/JVPVE014fS6c=)
                          3: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: ORoifP5JDClqMIQ9lY+l0DpecW/BEd8zQIyFoIdE98w=)
                          4: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:58:68:98:29:9e:cf:d9:f4:87:ac:b9:fc:d0:69:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
        Validity
            Not Before: Dec 20 06:00:30 2025 GMT
            Not After : Dec 21 06:00:30 2025 GMT
        Subject: CN=679a1ef74faab61d6a92cfa0a813084b4caa0312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:a3:2f:a2:b3:37:93:16:4f:67:e0:2d:4e:
                    98:33:ae:a5:29:96:f2:f1:61:aa:3c:a9:ba:c3:ce:
                    20:df:45:20:ec:62:f6:5f:ea:66:66:2d:8c:2c:04:
                    97:fc:a1:cd:51:ad:09:79:cd:10:94:80:80:ae:0a:
                    b4:61:9e:4e:d6:06:d7:86:64:07:a9:9f:0c:bd:49:
                    7c:5f:da:1e:5f:2a:40:00:30:b5:23:e3:ee:f2:75:
                    99:4d:91:f8:82:d2:4d:26:04:e6:5b:53:b4:c8:45:
                    b1:4c:62:16:c6:83:c1:e2:79:ed:c7:2d:f2:78:1f:
                    5d:85:96:e2:ae:d5:e2:f4:94:f0:17:c0:4d:57:ac:
                    83:44:04:45:4d:1f:2a:c0:a3:16:f6:e1:e1:d7:b9:
                    c5:55:0d:ce:b2:36:f1:25:29:0d:44:84:19:23:98:
                    bc:48:b6:d7:e6:75:f5:52:a6:2f:25:bc:91:c2:73:
                    a8:dc:b2:e2:f1:49:82:95:c9:6f:db:a5:38:17:69:
                    5f:82:d2:10:8e:93:b7:7a:60:9b:2e:2d:ef:e6:7e:
                    01:09:e1:20:8f:8e:68:e0:5b:b2:6a:3c:10:4f:1a:
                    dd:6c:50:b5:a8:26:21:e0:de:fc:7e:6f:af:b2:c5:
                    c1:2a:95:35:2f:da:21:b0:a4:48:04:60:28:f2:fd:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9A:1E:F7:4F:AA:B6:1D:6A:92:CF:A0:A8:13:08:4B:4C:AA:03:12
            X509v3 Authority Key Identifier:
                keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:06:4c:88:61:9e:12:52:0a:3b:22:5d:f4:da:26:49:61:
         0c:36:00:52:45:00:ed:30:64:4d:50:34:c3:1b:3b:02:be:d6:
         f2:0a:4d:27:fe:b7:77:cc:23:17:62:04:2f:4f:20:75:15:57:
         74:70:ed:db:e5:ac:f0:99:1f:51:e3:b5:6b:f2:8a:d6:95:b5:
         15:57:2d:d4:0f:21:8a:4e:e7:a9:1d:86:00:cc:73:42:ac:36:
         0d:b9:da:f4:87:cb:74:86:91:d3:5a:11:aa:29:27:4e:57:1e:
         ba:e7:8b:b6:d8:15:d8:24:e5:4e:65:3c:fa:c3:02:5e:37:89:
         46:33:ae:6c:0b:8c:31:1d:47:ea:61:aa:ca:76:c7:4f:0f:a2:
         bf:e8:48:42:7d:0d:bb:16:47:d5:17:8c:bb:de:ac:dd:cc:86:
         20:bf:1a:84:39:62:26:02:ba:a9:b8:21:87:53:8b:a0:6e:6f:
         25:86:30:14:a2:49:cd:89:18:b0:60:c1:36:e3:06:cf:b1:69:
         e8:e2:32:ae:74:7b:b6:51:c5:64:c9:39:06:f8:5d:08:d7:ea:
         ae:e1:7c:cb:af:e5:db:b9:3f:83:02:b1:74:82:f8:ca:71:1c:
         77:4d:d5:7e:8a:83:1c:1d:22:80:bc:20:0a:9a:8a:0c:54:3f:
         5c:de:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:53:09 2025 by rpki-client