This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File:                     rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier:          FAZRR0q2I8mn+s48bXTl0VWM2jE7tg5kc2McdIaHAEw=
Subject key identifier:   2B:4B:3F:66:0F:AD:80:E6:6A:40:1E:B8:67:46:C5:F5:68:85:4B:E5
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer:       /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial:       019AF12E437759C2551E1E9A0305785E40AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number:          177B
Signing time:             Sat 06 Dec 2025 01:02:12 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:12 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:12 +0000
Files and hashes:         1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=)
                          2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=)
                          3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: AQ/lj2+OEqQwGXv2bkC7RD/PhwYNZv5XHX+uiXT9zEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:43:77:59:c2:55:1e:1e:9a:03:05:78:5e:40:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
        Validity
            Not Before: Dec  6 01:02:12 2025 GMT
            Not After : Dec  7 01:02:12 2025 GMT
        Subject: CN=2b4b3f660fad80e66a401eb86746c5f568854be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:99:75:8c:2c:4d:0f:82:59:5d:7e:03:cd:b5:
                    0a:25:1e:e7:ac:84:74:9c:67:b0:6a:fa:3d:eb:3c:
                    5d:07:78:50:ad:7c:e2:fe:cb:f0:c1:9c:88:53:a6:
                    cc:73:84:4b:22:b2:87:80:ff:0a:42:a4:eb:d2:b1:
                    8e:ff:21:37:79:1b:c4:da:38:5b:a1:91:5d:98:8f:
                    7b:c3:9c:9b:9b:3b:27:96:0f:0a:e7:23:8b:42:79:
                    29:b4:5d:48:c8:33:d9:55:f6:a2:bc:ff:1c:86:45:
                    47:d5:94:42:ff:63:14:a4:f3:22:ae:2c:b0:9f:df:
                    f0:75:71:b2:8f:5f:c5:09:9e:7e:60:26:db:75:27:
                    9c:b5:8c:41:96:5c:e0:0f:f0:a3:42:0c:c1:19:c7:
                    26:72:fa:ee:53:d4:b8:6d:cd:f0:c3:d1:fb:a3:45:
                    99:99:5e:4e:a2:09:38:a6:7c:99:79:56:a8:c2:c9:
                    bc:aa:9a:bc:29:3c:37:a2:e3:36:a7:b9:4f:87:8b:
                    fa:9f:1b:4c:f4:86:78:2f:9a:de:9d:9d:a6:ff:1c:
                    18:25:81:08:a9:89:64:16:39:bb:e5:a9:1c:15:42:
                    12:e4:f0:3c:63:b0:df:5b:6c:1e:03:92:dd:66:1e:
                    ee:b1:21:b9:e1:88:b0:37:28:87:d5:7a:77:70:4b:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4B:3F:66:0F:AD:80:E6:6A:40:1E:B8:67:46:C5:F5:68:85:4B:E5
            X509v3 Authority Key Identifier:
                keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a6:8c:34:62:05:e0:c2:28:43:28:69:23:31:7b:b3:c7:5b:
         73:15:ab:2d:e4:85:55:7c:bc:fe:d6:cc:c4:c4:29:6e:ba:22:
         a6:2f:6f:18:08:79:34:8b:49:8a:4c:0a:f3:a5:e2:bb:31:ce:
         f3:ae:24:5f:e8:a0:31:ca:52:10:e7:d3:a5:bc:ac:63:08:b8:
         2d:87:28:c7:7f:78:f0:58:72:bb:e6:67:3a:4f:33:bd:62:95:
         08:af:57:f2:42:75:60:32:5b:fa:05:c7:05:56:44:e7:ee:0a:
         4b:b1:cd:f0:33:aa:01:13:05:94:45:3c:9b:c3:40:79:90:db:
         6d:78:60:0e:91:d3:cb:4b:18:5b:74:87:30:62:58:0a:c2:57:
         c8:f0:af:87:56:7f:09:8e:5a:92:21:b2:a2:71:39:00:a0:45:
         09:9c:de:f1:76:1a:53:8c:cb:de:d6:2b:7a:f4:13:a0:06:60:
         23:ae:5e:60:a1:00:5e:e9:67:4c:4b:0a:98:ce:cf:e7:8d:29:
         51:b6:02:3f:27:39:1a:f3:23:f8:99:43:1a:ef:61:3b:cc:60:
         79:65:d5:ca:61:22:27:49:67:5e:98:bc:ea:1d:a4:1a:60:81:
         b9:92:31:63:04:6e:5c:58:b9:cd:9f:95:5e:40:f9:b1:25:04:
         1c:62:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:08:42 2025 by rpki-client