This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File:                     sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier:          LY9bc15BhFsVi7b7xoanYMe3jSpLODs/nHIMPmgjT3Y=
Subject key identifier:   A8:01:DF:51:37:51:A3:3F:A9:BF:37:D2:A5:BE:9B:8D:99:17:FD:B6
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer:       /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial:       019B5A1B2297F790E1E12D526F4088A0444F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number:          179B
Signing time:             Fri 26 Dec 2025 10:01:26 +0000
Manifest this update:     Fri 26 Dec 2025 10:01:26 +0000
Manifest next update:     Sat 27 Dec 2025 10:01:26 +0000
Files and hashes:         1: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (hash: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=)
                          2: 5bh70NDw7zp64NXJ_51b90SAuu4.roa (hash: 4ywVwFnAjMHvhsAsLPg1qryIBj6T959YwjsSeW0RTBc=)
                          3: bmIFkmc46wZv6ewcgJwZwj1cvlM.roa (hash: t+xCiPV9KaRJxGAZeXjb1sny70g09pMUXGWJ9TkswqI=)
                          4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: 5SyJDQN6BLbj/AP18wnihkdRKpeX1XjdM16s7nBbjgs=)
                          5: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (hash: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:1b:22:97:f7:90:e1:e1:2d:52:6f:40:88:a0:44:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
        Validity
            Not Before: Dec 26 10:01:26 2025 GMT
            Not After : Dec 27 10:01:26 2025 GMT
        Subject: CN=a801df513751a33fa9bf37d2a5be9b8d9917fdb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:50:88:3e:50:c5:64:77:d2:8f:9b:52:39:1d:
                    32:52:21:47:41:66:29:ba:5a:ca:2d:be:ed:d4:22:
                    26:75:3f:18:30:03:f9:ab:a4:36:53:d9:42:04:0c:
                    ba:f5:18:6d:ee:71:1b:d9:a3:e3:bd:63:f1:82:3b:
                    cf:2b:af:68:62:07:65:c4:79:39:d7:a2:40:05:0a:
                    5b:0d:30:06:ea:8a:d7:96:de:78:cb:98:6e:63:eb:
                    40:82:83:af:db:4d:e8:d6:8c:65:0e:08:67:57:70:
                    40:2b:4d:66:e7:3a:3b:c0:c3:df:58:d2:71:e8:fa:
                    2e:6a:95:e8:6d:4c:af:2f:56:1e:a6:45:c3:ef:4a:
                    5a:cc:0d:cc:96:36:57:11:c5:42:fe:82:e1:55:0d:
                    a9:1c:80:3c:9c:68:54:d1:2f:ee:f0:30:3d:bb:cc:
                    1b:98:3b:a7:e9:e4:eb:05:94:55:28:d1:9f:c6:74:
                    34:00:94:53:4a:30:4b:dd:35:a0:70:29:61:0d:c4:
                    32:af:d0:75:d1:71:ed:03:65:c3:30:6a:1c:68:7b:
                    b1:e1:63:4a:75:59:88:c3:58:5f:56:5a:49:a4:b0:
                    8f:cd:25:bf:5c:e4:fe:69:f7:c2:52:1e:79:43:65:
                    bf:0f:64:56:b4:f5:ae:1a:a6:4e:b1:75:07:8d:11:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:01:DF:51:37:51:A3:3F:A9:BF:37:D2:A5:BE:9B:8D:99:17:FD:B6
            X509v3 Authority Key Identifier:
                keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8b:2b:c2:9b:ec:d3:ac:59:45:d5:f8:4e:bf:f2:8e:ac:d4:
         16:18:d7:76:cd:2c:6c:61:3f:26:35:c1:cf:95:f8:ff:bb:e5:
         d5:fd:24:bf:55:8c:ab:b7:9f:63:1f:da:4c:43:e6:97:cd:23:
         e3:a8:f5:a1:01:ca:de:39:fc:b2:ec:75:9f:cf:86:6e:2c:61:
         4c:21:0a:cd:ea:a2:97:e7:b1:d4:26:93:c5:20:67:db:ae:11:
         ff:48:a4:e1:47:99:bb:be:39:78:4f:05:ab:55:8c:0e:2f:20:
         47:fb:17:aa:dc:b1:39:ef:fd:69:0e:ea:aa:13:ac:21:0f:1c:
         c0:73:62:0e:0a:7c:08:cd:6e:bc:5b:3f:31:f7:02:90:d6:d8:
         5a:d2:17:5a:2b:a2:0b:e4:b0:27:a6:f5:fc:9f:4f:63:00:c9:
         0b:83:30:78:8a:cd:d2:a2:0a:1e:e5:f1:4d:b7:34:31:08:90:
         ce:2e:11:e0:20:8a:62:a5:4c:f4:c1:68:a4:71:91:8c:06:8f:
         30:6a:a7:86:10:94:14:38:f1:e7:da:22:f1:68:e7:b0:0f:e1:
         64:55:15:af:df:58:4d:c4:a3:84:4e:37:ba:44:78:52:7b:23:
         e5:b4:46:a8:d5:a5:20:48:42:fd:95:e5:1f:e9:16:9b:f8:f1:
         20:78:0c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:07:11 2025 by rpki-client