This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
File:                     09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json)
Hash identifier:          3fv0ToVAyMxH7/WXLLNGPU0Axnv7ijGysJdgs984z4o=
Subject key identifier:   6E:DF:B2:67:50:8D:94:B6:EF:F8:DE:9F:2D:A6:19:65:8A:36:57:BC
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Certificate issuer:       /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial:       019B364579C13C680768C1E0D924F5B6AB29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
Manifest number:          178D
Signing time:             Fri 19 Dec 2025 11:01:21 +0000
Manifest this update:     Fri 19 Dec 2025 11:01:21 +0000
Manifest next update:     Sat 20 Dec 2025 11:01:21 +0000
Files and hashes:         1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: iIBzHmwSlx/2ZTNrrr70nG1m6MY7KOMvyFatKFvQBNI=)
                          2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=)
                          3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=)
                          4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=)
                          5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=)
                          6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=)
                          7: b405QCs1aUgpVCYR4Gaf0mhpXUg.roa (hash: vr3hh37YG76cIiO+7+0A0llwbOl+y0kE8NKxOJZ/Pus=)
                          8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=)
                          9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=)
                          10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=)
                          11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:45:79:c1:3c:68:07:68:c1:e0:d9:24:f5:b6:ab:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
        Validity
            Not Before: Dec 19 11:01:21 2025 GMT
            Not After : Dec 20 11:01:21 2025 GMT
        Subject: CN=6edfb267508d94b6eff8de9f2da619658a3657bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:73:61:61:1c:89:12:ad:53:f8:0f:75:ac:2b:
                    0e:d7:16:69:3a:a7:ec:00:05:f2:55:70:e0:47:91:
                    81:7b:a3:a5:ec:30:ea:b8:72:a1:a2:d6:99:12:2a:
                    13:40:2d:8c:05:f7:90:6d:4c:b8:f9:52:9b:f1:6c:
                    d0:19:c7:da:38:6c:46:01:db:2e:c1:e7:6b:7d:bb:
                    7a:82:12:37:20:9a:7a:15:4e:b4:30:f9:28:82:d7:
                    41:09:68:a7:8c:3d:da:f8:ee:46:47:be:57:4c:3f:
                    3c:42:2b:4b:c0:54:41:40:42:46:48:98:94:08:40:
                    d4:91:a8:de:f4:ef:25:59:68:cf:c2:a6:9c:e9:df:
                    b7:71:f4:8a:d6:2e:55:f2:5a:1e:0e:ff:bc:7a:12:
                    03:18:45:1e:0a:4c:50:4e:a6:cb:23:c0:18:26:1c:
                    e1:86:9e:91:96:72:a9:e0:d6:dc:b3:79:91:4d:0e:
                    e0:e4:d7:9a:b5:16:ef:cc:d6:19:a7:d4:fa:c6:01:
                    90:ce:3b:9a:80:95:fe:0b:a9:db:a0:31:06:58:55:
                    86:96:9c:f0:5a:09:39:f2:ae:ec:6a:bd:80:7b:30:
                    55:81:c9:0e:b6:11:34:e3:b8:69:68:76:97:0e:72:
                    aa:d1:e5:35:e6:d7:0c:82:41:ef:9c:3a:08:ed:b5:
                    65:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DF:B2:67:50:8D:94:B6:EF:F8:DE:9F:2D:A6:19:65:8A:36:57:BC
            X509v3 Authority Key Identifier:
                keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:99:b4:70:9a:42:90:2f:91:c5:c7:c9:ab:8e:ef:a7:7e:5a:
         a1:69:b0:f2:b9:b6:9e:69:0f:d5:d9:90:6e:21:6d:79:e6:f7:
         15:3c:b8:06:23:cc:6e:ac:d2:09:ec:4a:c4:da:42:ed:dd:3b:
         54:17:00:10:5c:cc:9d:0f:42:27:d3:bd:27:41:ca:82:3b:e6:
         44:ce:f5:24:21:29:8c:cd:29:6a:15:13:b8:f0:db:2d:b1:f6:
         f4:6b:81:fc:48:01:e7:4b:26:a2:5f:bd:ef:da:49:41:91:2f:
         0e:c1:98:31:55:38:c1:6d:84:c2:5d:be:2a:20:8c:ab:a7:d2:
         6e:ee:80:e0:32:85:9e:d1:af:0b:a0:ae:95:ba:2a:47:95:91:
         ba:08:eb:ab:ac:98:e3:ee:2f:29:d1:38:54:63:3c:37:84:11:
         f9:b7:92:34:67:f5:61:2b:fa:77:8c:22:cb:52:06:00:c6:44:
         09:03:3e:42:63:26:7d:65:c9:51:af:f9:dc:e2:81:8a:e1:a9:
         cf:26:ff:c2:b4:2e:a4:cf:e5:5f:c4:3c:ec:d2:2f:b1:b7:71:
         03:20:ce:37:d4:1f:e4:90:a9:86:2f:1b:a9:17:64:49:91:53:
         39:27:2e:ea:2f:cf:52:2e:5f:19:2e:e5:57:4d:55:11:55:96:
         83:b6:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:24:11 2025 by rpki-client