This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
File:                     NVi7R941Tgng_CyywfoU1x2Sbug.mft (raw, json)
Hash identifier:          I1NzoNwV2viPpM/LTdrMxLLBl09/uN6yPQ6EKUss5mY=
Subject key identifier:   AB:A3:04:94:D2:6B:D7:37:64:05:D5:9E:59:70:1D:32:03:AB:5E:91
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Certificate issuer:       /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial:       019B5A1ACB2BF9FB1FAA21E009BA0E61060C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
Manifest number:          179F
Signing time:             Fri 26 Dec 2025 10:01:03 +0000
Manifest this update:     Fri 26 Dec 2025 10:01:03 +0000
Manifest next update:     Sat 27 Dec 2025 10:01:03 +0000
Files and hashes:         1: 0iLUxeXNyLeCeJPOBWFetpkhzr8.roa (hash: GzvKjvrXUQtFRvTqnLO3SZbgmgXYnbU1huTzG2YJ5xg=)
                          2: NVi7R941Tgng_CyywfoU1x2Sbug.crl (hash: 1wMiMZyEmBA8jwrM2OPd79s87wSuhITGIUV12+ThggE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:1a:cb:2b:f9:fb:1f:aa:21:e0:09:ba:0e:61:06:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
        Validity
            Not Before: Dec 26 10:01:03 2025 GMT
            Not After : Dec 27 10:01:03 2025 GMT
        Subject: CN=aba30494d26bd7376405d59e59701d3203ab5e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:44:a9:e5:c2:f6:1a:8e:e1:d3:d3:4f:54:c2:
                    2d:e6:3a:1c:f3:75:c8:de:5e:03:11:4f:3d:03:8e:
                    49:5a:af:7e:6e:45:3c:fb:f2:32:6c:9a:4f:7d:93:
                    9a:12:df:70:cb:8f:b1:4e:96:36:7f:dc:48:45:6c:
                    70:e7:68:6e:aa:bd:07:f6:39:89:3e:aa:84:c7:60:
                    eb:c6:b6:aa:a8:11:6e:bd:82:3f:64:86:ef:90:0a:
                    8d:13:b6:fa:67:fb:ba:38:13:10:79:ab:58:74:e1:
                    13:07:60:e6:0a:83:7e:0a:ba:06:f5:94:61:d2:e2:
                    8a:2e:29:2f:2e:11:3e:af:66:74:68:03:43:3f:0c:
                    34:37:85:3e:8d:68:f2:18:bc:75:ea:32:eb:ea:47:
                    a5:fe:aa:53:28:c2:64:54:a3:00:b1:55:5b:69:48:
                    01:be:dd:18:10:e9:bb:cc:e9:5c:e4:76:d4:0e:d1:
                    b2:8a:2c:48:c6:a5:b7:43:4c:6a:82:7d:4b:f6:47:
                    12:ae:9d:86:04:05:3c:ba:24:b9:64:d6:5f:fd:e7:
                    5e:b4:0b:e5:45:af:08:72:56:3c:60:f6:7e:67:6c:
                    63:ec:88:23:ee:b8:89:db:4c:ca:71:1b:ff:97:04:
                    63:ab:0f:0e:d2:58:09:53:59:fb:22:7a:75:33:4a:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A3:04:94:D2:6B:D7:37:64:05:D5:9E:59:70:1D:32:03:AB:5E:91
            X509v3 Authority Key Identifier:
                keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:56:19:0d:2d:7e:39:e3:0b:59:2d:88:0e:33:f3:8b:8f:31:
         fd:5d:a9:cd:cb:e1:b3:fb:f2:5c:b5:c0:01:56:68:e5:80:ff:
         56:73:0a:d0:31:21:59:96:48:47:f1:0a:fd:d2:1b:64:69:7f:
         2f:60:33:68:c9:a3:b6:b2:e3:bb:9a:67:9e:28:ab:9b:76:75:
         c2:f2:e8:14:5f:e1:76:ea:e3:98:81:b1:be:06:14:6e:c8:c4:
         22:64:55:5f:c2:35:af:9a:14:79:c6:56:27:27:31:11:9e:f9:
         6a:88:5a:34:0f:08:2e:15:81:3d:83:af:13:e5:f4:f3:04:18:
         94:9b:74:fc:9a:e9:12:68:13:5b:e8:1b:99:8a:ce:c0:0b:e8:
         bb:73:cc:53:8b:7e:21:b8:62:c3:e3:29:eb:e4:3a:08:b5:2c:
         cb:5a:90:76:ea:3c:6f:52:51:e5:d2:13:54:78:f7:57:9f:88:
         88:4d:63:09:47:3d:b9:fb:a0:74:03:04:30:21:3b:4b:f3:3a:
         c9:92:74:1d:b9:20:00:46:17:f2:a2:3c:74:68:0d:10:51:82:
         91:c3:95:ea:15:6c:7d:ae:2a:91:64:42:f9:e4:4a:63:09:31:
         a7:a1:40:31:13:fa:cb:3c:23:86:d3:ab:76:8b:c5:76:f6:26:
         35:8a:f7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:05:05 2025 by rpki-client