This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File:                     0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier:          n4skt976eau5b3Qe2FGSto24vLwCL2YrZpcV+V3+Lic=
Subject key identifier:   2C:68:16:1E:68:05:60:31:1E:CA:50:32:6A:1C:BD:9A:6B:1C:86:52
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer:       /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial:       019AF19B50905F91319552BDB79C5C1747E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number:          176C
Signing time:             Sat 06 Dec 2025 03:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:18 +0000
Files and hashes:         1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: URElceBALlcxzLoaYkOZTRL8jkUr4lLl1INBmY1OxQs=)
                          2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
                          3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
                          4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
                          5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
                          6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
                          7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
                          8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:50:90:5f:91:31:95:52:bd:b7:9c:5c:17:47:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
        Validity
            Not Before: Dec  6 03:01:18 2025 GMT
            Not After : Dec  7 03:01:18 2025 GMT
        Subject: CN=2c68161e680560311eca50326a1cbd9a6b1c8652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3c:28:2d:dd:53:b6:2e:4b:b8:7f:60:ec:8c:
                    1b:4f:57:ba:4c:af:c3:b6:8a:dc:43:02:16:fd:80:
                    bd:c1:74:93:6b:23:a6:e9:a4:d1:0e:b0:19:10:ac:
                    01:0a:5b:92:99:f4:d2:21:cf:e0:0b:05:9b:fe:f1:
                    30:5a:3a:4e:e4:dc:a4:6e:9e:7f:c6:93:4e:6c:f4:
                    eb:f6:64:18:62:03:38:d7:e2:8e:eb:0a:92:21:40:
                    eb:8f:a3:e1:d2:0e:26:51:49:32:ef:f9:48:fd:17:
                    c1:76:1d:01:6a:7d:45:06:58:db:88:a5:53:af:42:
                    cb:1a:b8:fd:44:e6:6c:91:56:b7:d1:79:a8:c2:b9:
                    ae:22:74:0c:4d:50:04:ce:88:1a:30:36:10:2f:f4:
                    21:e3:28:b4:98:b8:51:8c:9a:60:ce:c0:08:13:12:
                    84:d4:55:68:34:53:17:07:98:2d:27:19:8e:2b:29:
                    ee:f0:68:cd:de:a4:a1:f5:65:89:36:24:c1:59:6f:
                    87:7c:77:52:cc:63:97:f2:5f:3f:40:c7:c0:e3:92:
                    fe:ee:e9:07:20:ff:de:55:df:48:2c:99:8d:01:fb:
                    fa:9e:dd:b3:83:f8:66:b6:5b:ae:61:b9:58:95:89:
                    b3:bd:5c:af:e1:f3:78:d5:b0:e1:c8:c5:c6:01:4b:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:68:16:1E:68:05:60:31:1E:CA:50:32:6A:1C:BD:9A:6B:1C:86:52
            X509v3 Authority Key Identifier:
                keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:88:ee:e6:59:7a:1b:37:70:da:9b:fb:39:43:b5:57:50:9e:
         3c:f4:34:ac:09:f7:f7:2b:d4:a2:83:70:8c:6c:bf:5e:e1:3f:
         fe:a3:6f:47:db:4f:bb:61:76:49:4e:77:f9:e8:b1:28:64:6a:
         e5:9d:8f:5c:34:ac:fe:c1:56:66:a9:05:2b:47:e1:71:0f:90:
         e8:36:88:f5:45:6c:da:11:94:84:eb:5b:0f:37:1f:bd:64:71:
         95:92:d8:73:b2:91:43:5c:87:40:cc:8e:c1:0a:e4:86:99:83:
         27:72:2e:59:72:6e:0e:ce:da:b4:2d:d7:ef:ef:13:28:e4:64:
         69:49:dd:42:f1:9e:0e:4b:dc:88:65:c5:27:ea:c1:72:a4:13:
         ea:a3:2f:93:b2:6b:a0:37:3c:55:e9:95:ee:30:10:c0:56:17:
         f3:08:7c:53:94:0d:86:47:61:03:21:2e:1a:21:13:7d:68:6b:
         e3:39:4c:a7:2d:07:f6:5e:dc:bf:79:e4:71:a8:45:ff:b8:27:
         59:c2:bf:5c:91:5b:39:fc:f5:b7:17:af:71:ac:63:8f:33:c1:
         a7:7a:fb:0a:3b:b7:a2:63:f2:dc:9d:a2:63:d7:5b:2c:f9:10:
         a4:08:f5:c9:f2:e7:00:7c:54:23:a6:86:9e:f8:dc:35:46:fd:
         a7:6d:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:12:24 2025 by rpki-client