This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File:                     l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier:          bBYUHi/63DgrfJi/kRAT6VQfYJq7uYz0t2OSxS7sFps=
Subject key identifier:   7B:BC:26:2A:BF:C4:D9:A3:9D:72:FF:57:4D:93:E5:73:4C:D0:7D:09
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer:       /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial:       019AF12DBFAD9039F22481445EDFC8F36279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number:          176D
Signing time:             Sat 06 Dec 2025 01:01:38 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:38 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:38 +0000
Files and hashes:         1: 0fTjjyjaiEMTmN0qEGg30Ao2zns.roa (hash: bVrLoN7n3oaO1XYgZx8crHTGWgcotUS3skM4/csJhUA=)
                          2: Eem0N3GXMChoR9TCOhSTBkWIdjc.roa (hash: igndwr3EyynLXRXaxAnOCIr8pyhy15Y9vo4ph2wbRZ8=)
                          3: SZcqM2MymNLwtybzmnw-E1d2RJk.roa (hash: jRh3gj1EqHTeeiOWY5OcArwxYUApFn4YAZHaSARNuyY=)
                          4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: Xwt97tB/zoJ/QWeFz5DQ2uhV9KCMDF0aO2DujtAOvNY=)
                          5: safrg3kATgNbdktyHNaBTUQ20Fg.roa (hash: rMOUfy4ZM5vd45QmK8llUEFz0T+7f/LFtDqbEYg/alc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:bf:ad:90:39:f2:24:81:44:5e:df:c8:f3:62:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
        Validity
            Not Before: Dec  6 01:01:38 2025 GMT
            Not After : Dec  7 01:01:38 2025 GMT
        Subject: CN=7bbc262abfc4d9a39d72ff574d93e5734cd07d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:27:0e:48:64:8b:db:ba:e6:5d:bd:9c:9d:
                    e8:24:24:ea:87:5d:58:44:30:08:67:2d:65:1c:db:
                    25:64:2e:f0:aa:c2:0f:19:ed:88:a2:43:e4:fe:02:
                    6f:7d:8b:b9:10:c3:7a:f0:18:ca:f8:f7:2f:e7:a6:
                    aa:99:95:0c:7f:5b:2b:8a:85:0b:e8:e3:28:46:ee:
                    2a:8e:9e:9e:8f:93:1a:2f:da:cc:ab:99:bd:9a:99:
                    24:20:30:75:d7:2d:74:9c:2b:df:50:69:6b:46:8e:
                    fc:7b:91:0b:4e:a6:82:5b:d3:87:f9:9d:69:3e:12:
                    25:2d:98:1c:a4:e1:19:85:14:e1:70:03:b7:df:2b:
                    e1:fc:54:2c:32:d0:d7:fc:7d:5c:aa:10:f9:3d:45:
                    bd:78:fd:91:1a:5e:d8:75:d2:02:90:0c:94:6f:8a:
                    a5:b0:dd:4d:24:92:42:00:b0:d8:47:45:01:15:08:
                    97:96:74:ce:25:d3:8b:68:d2:6d:e3:f3:a4:24:aa:
                    5d:64:9b:6e:13:8e:8e:f5:74:c8:96:46:75:70:30:
                    72:c4:e1:ed:46:cd:77:cb:49:79:b1:e5:f5:d7:73:
                    53:55:81:07:d4:32:0e:08:00:3f:13:d5:12:d1:06:
                    42:e5:3a:1d:ca:9e:b0:e8:8d:82:3a:0a:e0:50:be:
                    e0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BC:26:2A:BF:C4:D9:A3:9D:72:FF:57:4D:93:E5:73:4C:D0:7D:09
            X509v3 Authority Key Identifier:
                keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:89:92:20:a0:8e:72:b4:7c:f7:c2:ff:ab:11:24:dd:4a:
         4a:06:de:2c:6b:0e:7e:85:e1:56:fb:30:d6:b1:74:b9:6f:aa:
         4d:78:be:0c:74:2b:57:fb:ae:4d:8f:88:b3:16:f5:df:7c:3a:
         7c:83:6a:f4:ee:f9:25:f8:dd:8a:7a:52:05:79:67:42:61:7c:
         33:f9:1d:cf:55:09:0f:9d:bd:cb:f1:a9:6b:54:48:1d:04:4a:
         73:eb:f3:5b:1a:0b:78:27:3c:53:73:63:12:f1:5a:e4:43:c3:
         09:16:84:37:9e:9b:77:1f:94:ae:db:ac:0c:fa:35:2e:46:f6:
         2e:8c:e0:35:83:b3:07:86:a6:55:c1:36:a4:48:51:bb:ab:7b:
         d1:86:31:9e:5b:33:7d:b3:1b:89:ac:82:f3:c2:39:2f:11:3d:
         02:50:6a:bc:f6:a3:cf:56:93:25:35:51:59:de:f7:a7:6e:80:
         09:26:5f:1c:f5:3e:f9:52:34:84:a1:8f:a3:4d:3d:c7:d7:6a:
         fe:07:12:b1:13:67:ae:66:79:fd:62:82:48:30:af:73:ee:fa:
         7e:7c:a5:2b:46:a3:62:2a:6e:92:74:7e:cd:7e:94:59:26:83:
         29:81:81:b6:bf:9a:35:50:f2:e4:4e:72:ef:8e:79:0e:34:cc:
         0f:7f:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:19:13 2025 by rpki-client