This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File:                     kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier:          9yhc59Au3XreMEekybcV1x2UMkoPjsdVf0mphjJXU/I=
Subject key identifier:   8E:D3:5E:5E:1A:02:0C:63:3C:6A:DB:C0:82:3C:85:44:76:31:05:6E
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer:       /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial:       019B20CFECB1C977D637EDB86829C352EC71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number:          177B
Signing time:             Mon 15 Dec 2025 07:00:55 +0000
Manifest this update:     Mon 15 Dec 2025 07:00:55 +0000
Manifest next update:     Tue 16 Dec 2025 07:00:55 +0000
Files and hashes:         1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
                          2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: S1fteLpPr/rbx/CBuNIEcbw47h3RsW8TGGtjKv982YM=)
                          3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:cf:ec:b1:c9:77:d6:37:ed:b8:68:29:c3:52:ec:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
        Validity
            Not Before: Dec 15 07:00:55 2025 GMT
            Not After : Dec 16 07:00:55 2025 GMT
        Subject: CN=8ed35e5e1a020c633c6adbc0823c85447631056e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:97:cc:71:32:bf:92:e1:15:7b:4b:ee:98:b2:
                    e8:96:7e:be:f4:ce:46:2e:df:8d:76:83:b5:8a:df:
                    5d:e0:ab:7c:29:02:fb:9c:ea:76:c3:ac:21:11:2a:
                    c6:46:2a:56:e3:40:36:22:b8:53:7f:a6:14:f8:67:
                    a2:2b:35:f4:21:4b:8f:ca:61:83:8a:75:70:aa:56:
                    b7:25:68:2a:1e:7a:24:2e:d0:68:4c:f7:bc:b4:be:
                    6f:42:1f:ce:b8:98:58:c0:25:59:d5:4f:3d:d8:dc:
                    51:4d:e9:8d:44:48:02:45:b8:ca:eb:84:f1:90:f5:
                    b0:60:cd:08:30:f7:bc:68:66:a9:b0:c5:32:a6:9d:
                    a6:03:c1:7b:51:36:b9:6e:75:46:a9:2e:88:71:d4:
                    9c:b9:57:79:8a:a0:37:0d:e6:91:ff:83:3f:dd:19:
                    f9:f8:8d:e4:06:9b:20:96:b6:a8:77:62:09:32:5d:
                    8b:b2:1e:5e:c8:1a:ab:36:15:5c:70:8c:90:25:97:
                    19:76:49:a4:f0:57:e8:e3:77:50:ac:86:3e:f7:ce:
                    14:70:17:15:71:41:9a:7f:92:32:6f:ff:74:73:75:
                    1c:fa:2b:69:ef:42:85:1d:60:96:07:b6:36:e7:3f:
                    51:cd:b7:1c:75:48:db:45:2d:0d:fb:83:db:21:36:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D3:5E:5E:1A:02:0C:63:3C:6A:DB:C0:82:3C:85:44:76:31:05:6E
            X509v3 Authority Key Identifier:
                keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:da:2e:9a:f3:ab:33:0f:e6:fb:63:d5:8a:58:b4:6c:9d:5e:
         cc:df:5f:40:f1:d4:26:49:bc:67:a9:ea:8a:21:3d:4f:d5:1a:
         8f:ad:04:3b:25:54:2d:37:6c:cb:ef:c4:08:66:ab:9e:6e:d1:
         cb:72:37:b4:0f:4a:98:48:78:bb:8b:60:7d:45:40:0e:18:1e:
         a1:39:69:39:32:62:6e:cd:b4:f2:d4:fd:49:08:6c:7c:cd:63:
         9b:b5:18:fc:16:7c:26:a3:d9:be:9d:48:80:5e:42:de:0d:47:
         2b:f9:a9:58:90:9b:e9:43:5a:32:47:66:64:59:4d:6b:05:38:
         fb:3e:7a:af:57:46:87:7d:3f:9f:90:aa:da:e2:7f:f1:8e:a8:
         d4:5a:ff:83:f6:74:47:f5:10:e7:5b:1f:27:f8:ed:86:a7:58:
         c3:41:e2:c8:88:07:a2:b6:0e:e0:2e:bc:97:d3:50:22:bb:74:
         d1:fa:85:d8:bf:b0:7d:b7:48:ec:98:fd:70:ca:ac:7b:fc:4a:
         46:4f:29:36:75:71:e2:06:94:28:2e:cd:79:66:8e:95:a9:ff:
         e2:ee:9e:06:72:4a:a5:8d:77:8c:dc:47:51:38:0a:e7:ba:c6:
         11:2c:d5:c2:35:a8:a5:83:ee:82:19:7e:d8:a5:12:6e:39:1c:
         9d:ef:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:56:33 2025 by rpki-client