This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File:                     fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier:          vZm+RjX/8VGNrI0HfDUfRnGTvuRjR2igYoYDJbV05Yo=
Subject key identifier:   B7:60:0B:82:E6:BF:11:DA:C8:E9:8E:D1:5D:6D:30:A0:7D:73:31:CD
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer:       /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial:       019B21ABA13E5468BCB0F09CAA4E6D587E95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number:          177B
Signing time:             Mon 15 Dec 2025 11:00:54 +0000
Manifest this update:     Mon 15 Dec 2025 11:00:54 +0000
Manifest next update:     Tue 16 Dec 2025 11:00:54 +0000
Files and hashes:         1: KTueJxojN50dmJRK4T-lWfMfx34.roa (hash: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=)
                          2: P9fynBw8iFPWe2POj98vvDRaPtc.roa (hash: m8Rxo+QbvFH1YWY7cSkBLnzvBIux4jAWF3d5bVoDOqo=)
                          3: UPvQH8NqTEDPXNhWgpYWh0Lf6jo.roa (hash: XstlXZLlwubvWrcgmyQX4gAdUbjlGPeHGy1bUvhLT38=)
                          4: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: lDNLHUKR5JHpWvClRtJ/9Kd57rzm83lC7Qc7PYW3zZM=)
                          5: z2rex13X5_B3akG_9WMUZ3YUZ_8.roa (hash: FEf9INeCTnfvfEJYFLmPJ0rU6v2IfMIrs4GsjT+Av20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:21:ab:a1:3e:54:68:bc:b0:f0:9c:aa:4e:6d:58:7e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
        Validity
            Not Before: Dec 15 11:00:54 2025 GMT
            Not After : Dec 16 11:00:54 2025 GMT
        Subject: CN=b7600b82e6bf11dac8e98ed15d6d30a07d7331cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:ce:3b:ed:f4:e5:1d:97:39:ac:fa:40:cd:
                    9d:85:10:63:65:62:6c:69:c6:f1:8b:c1:fc:d7:b0:
                    e9:8b:bf:d8:97:b4:53:a2:c3:38:a1:c5:3f:c8:0e:
                    9e:75:5e:72:56:a3:80:a2:48:8c:b3:ca:a8:72:cd:
                    5c:1b:d7:a3:88:54:99:8e:4c:3e:62:b2:fa:73:18:
                    b2:63:39:ff:91:be:4e:9e:68:5b:f8:45:2f:86:22:
                    51:65:5e:d5:5d:4a:9f:6f:6f:0d:a7:57:2a:ba:97:
                    9e:5a:c9:a2:7f:12:3b:85:20:50:94:8d:0e:18:fe:
                    bf:b2:10:16:74:27:cd:9b:e9:8e:a3:19:ca:92:1b:
                    28:d1:81:da:4a:d4:ab:a2:53:18:1e:dd:43:58:cb:
                    76:61:ef:f0:14:5e:e3:38:9e:f8:1d:c5:21:19:a0:
                    db:20:c7:a3:d9:72:a0:20:af:bb:e2:6b:d8:62:b1:
                    ef:a3:bc:93:3d:18:f1:dc:01:1f:0e:b2:79:99:45:
                    ac:5a:9a:67:db:54:5e:8c:80:91:9e:a2:d7:eb:0a:
                    73:4a:04:b3:b1:28:2f:d5:1d:75:5d:67:10:62:fe:
                    cd:6b:9f:c6:bb:30:e4:bd:b0:55:81:24:87:b3:e5:
                    29:96:96:55:a4:64:ee:9c:f5:9c:6d:36:58:80:cf:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:60:0B:82:E6:BF:11:DA:C8:E9:8E:D1:5D:6D:30:A0:7D:73:31:CD
            X509v3 Authority Key Identifier:
                keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d4:7a:f2:b9:98:3e:3c:2e:53:69:92:fc:24:8c:a8:db:09:
         1c:2b:fd:bb:bc:7a:b1:8f:45:aa:c0:ea:db:7a:04:fb:f1:56:
         d5:8b:97:9b:6a:92:7d:dc:ac:b9:c5:84:fc:90:2a:07:96:5c:
         b8:53:8a:85:84:66:29:e5:df:10:fa:48:8b:82:6f:84:30:03:
         4a:01:de:1b:8d:66:0c:3a:99:f0:92:3b:97:57:fc:19:c2:5e:
         88:33:b9:22:f4:85:30:ee:6b:6b:e3:17:f5:b3:67:69:31:a7:
         3b:ab:41:40:25:21:66:5c:d3:29:16:86:65:ed:43:4e:78:eb:
         af:0a:7a:a8:12:f8:33:7f:e2:c7:76:f6:04:e3:08:af:7c:3a:
         0a:bd:ed:2e:84:97:11:71:7d:b2:b6:40:65:24:13:f8:1a:f4:
         ab:4b:9e:f8:9d:ff:1b:6f:32:f5:f4:ba:90:82:c6:05:86:a9:
         11:5f:8f:36:d5:14:3a:9f:a6:3e:54:11:bd:96:eb:6b:a9:22:
         89:f4:b5:aa:39:68:5f:d4:43:bc:53:03:e9:6c:d7:78:9f:e3:
         b9:f2:1b:48:c0:88:7a:46:5e:73:48:88:21:f9:92:0e:c5:24:
         f7:05:0a:b9:8e:fd:05:7d:d1:1c:bf:53:8f:ea:c2:7a:d4:92:
         d8:b4:ff:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:50:43 2025 by rpki-client