This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File:                     TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier:          /IIoHkG4m/8qtJqaSwv4Et5JdKKcgsTt2eoN/f6YTwU=
Subject key identifier:   0A:DE:EC:DF:33:88:16:5E:A8:6F:87:84:1F:28:DF:D1:8B:25:6E:FF
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer:       /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial:       019B416DF4BEF722380B4268E2C152403C59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number:          178C
Signing time:             Sun 21 Dec 2025 15:01:23 +0000
Manifest this update:     Sun 21 Dec 2025 15:01:23 +0000
Manifest next update:     Mon 22 Dec 2025 15:01:23 +0000
Files and hashes:         1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=)
                          2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=)
                          3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: qZXbs8m87qDEQN1Xx+lr/XnpR2xMMPG92eXGerroHYw=)
                          4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=)
                          5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:41:6d:f4:be:f7:22:38:0b:42:68:e2:c1:52:40:3c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
        Validity
            Not Before: Dec 21 15:01:23 2025 GMT
            Not After : Dec 22 15:01:23 2025 GMT
        Subject: CN=0adeecdf3388165ea86f87841f28dfd18b256eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:2b:2d:01:eb:b3:d2:c0:66:ec:ad:4f:c0:
                    e0:03:c5:8d:80:84:6d:ea:04:01:72:f7:a5:6f:ec:
                    44:ef:aa:0e:8a:77:21:b0:2d:4a:7c:36:e7:2f:91:
                    f3:c3:56:8a:f6:a0:4a:be:aa:c7:c8:32:8f:b5:21:
                    54:c7:77:ee:00:61:cd:de:35:ff:4f:72:22:f5:4d:
                    d6:e1:0d:98:73:79:72:51:24:ca:98:01:28:3f:d6:
                    ae:25:48:a3:6b:ad:77:38:f2:3a:de:dd:5e:e4:8e:
                    eb:8a:bd:f1:9d:02:63:31:0e:69:48:e1:fd:9b:ce:
                    12:6f:f1:96:ed:51:81:f1:11:f8:03:3a:85:48:10:
                    21:50:8b:00:33:87:fb:c4:88:f3:c4:84:2c:f3:cf:
                    d1:2a:1c:ee:3d:d5:d0:49:b0:c1:31:b1:13:03:e8:
                    da:ec:c3:c4:48:c8:53:85:85:ca:72:33:bb:c9:26:
                    ab:8d:45:84:53:67:0d:d6:7a:12:3b:3f:c2:4c:83:
                    64:7a:19:5d:5b:d2:5b:43:e0:66:f1:cc:f9:4e:22:
                    42:22:87:76:a4:bb:74:6b:57:c5:92:34:ee:14:e0:
                    33:0b:31:83:25:6e:e5:e4:82:ab:d5:ff:84:9c:33:
                    a1:f3:ce:98:8d:46:96:15:22:c3:29:e2:54:7b:25:
                    6e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DE:EC:DF:33:88:16:5E:A8:6F:87:84:1F:28:DF:D1:8B:25:6E:FF
            X509v3 Authority Key Identifier:
                keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:43:18:d3:0d:3e:75:f6:78:56:d6:f1:58:f8:16:3e:53:
         11:67:aa:f5:f4:30:4c:9d:40:ad:d9:aa:35:da:12:72:2e:9a:
         09:94:ff:01:f2:c4:66:d0:67:50:7d:fa:d5:22:0e:69:34:98:
         32:38:e5:48:a6:3a:90:c2:e3:17:5a:3e:ee:47:92:62:61:b3:
         5d:92:3e:3b:05:9d:9f:66:e5:69:f5:1e:aa:73:53:4b:28:45:
         1f:b8:08:27:cc:f7:a0:63:62:6c:07:65:a7:aa:f7:d3:16:95:
         b4:29:bd:09:d8:83:71:86:2a:a4:2b:7c:5d:b0:1d:bc:6a:a2:
         79:70:f4:50:32:62:43:7b:c0:cc:b0:eb:6e:07:98:8e:52:b4:
         c6:d8:47:a8:4b:c2:3c:15:aa:26:ca:38:b0:64:f6:d0:74:51:
         20:61:33:81:8f:f8:52:0d:ec:45:f8:d6:c2:cf:68:01:31:70:
         86:1a:a3:bd:10:25:2a:ec:c4:bb:52:ec:04:1d:d6:4d:94:14:
         01:c0:3d:f3:62:b0:89:dd:eb:c0:28:60:bf:67:11:19:fa:45:
         a7:7c:cb:d8:99:64:79:61:7a:88:7b:c0:19:ad:52:69:5b:d1:
         08:8b:89:22:03:67:e4:99:2e:b2:10:20:77:2d:32:b1:3d:53:
         b5:8c:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:16:34 2025 by rpki-client