This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File:                     p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier:          2BWD9K1mcDRoBexDJx6xJVu2G7TxeoThI7bUdgR85Tw=
Subject key identifier:   76:71:B8:2F:EF:A4:CA:CD:32:61:7C:CB:DE:36:B6:6E:42:85:DC:BB
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer:       /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial:       019AF23F5F57614D38EA980568CBA39BA266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number:          176A
Signing time:             Sat 06 Dec 2025 06:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:30 +0000
Files and hashes:         1: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (hash: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=)
                          2: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (hash: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=)
                          3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: HcC31WhOwr9WAQ7eGQocf8XUucMNvZzLwt7SB+SRLdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:5f:57:61:4d:38:ea:98:05:68:cb:a3:9b:a2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
        Validity
            Not Before: Dec  6 06:00:30 2025 GMT
            Not After : Dec  7 06:00:30 2025 GMT
        Subject: CN=7671b82fefa4cacd32617ccbde36b66e4285dcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:ab:00:3d:84:8d:cd:10:c6:01:10:61:19:
                    53:b1:df:ed:0e:de:bd:dc:9d:9a:c3:17:bc:d7:c3:
                    61:a6:8b:33:13:26:88:81:d1:00:23:8e:ce:19:3a:
                    09:2b:03:80:b7:97:fc:ff:c7:7d:e1:a1:f1:43:10:
                    ef:f9:7e:39:eb:71:3e:3d:b9:53:78:e1:5b:35:70:
                    a8:39:08:05:74:c1:83:90:ef:cc:51:e3:31:b8:e3:
                    95:1c:09:17:e4:91:e7:50:e4:14:c3:17:76:5d:54:
                    db:ec:c4:a2:72:07:7b:77:1d:f7:19:c0:ad:5c:96:
                    40:9a:31:5b:44:f7:24:5c:9c:9f:89:ad:6f:99:55:
                    c3:fb:b0:74:e7:3c:3a:00:06:93:32:14:c4:80:01:
                    88:b6:f1:8c:e2:51:bd:c3:09:01:b6:79:3e:b6:70:
                    e2:b5:32:d9:e4:2d:a2:d4:2d:1f:21:a9:92:bf:39:
                    56:e7:63:a9:46:22:8e:4b:61:dd:3b:b8:01:81:bd:
                    94:6d:df:1c:1a:99:a2:9f:71:b2:dd:80:e3:b8:d0:
                    c0:06:ea:c8:da:df:62:84:bf:1e:58:5c:fd:c2:19:
                    3d:3a:ec:61:f6:e4:01:8c:e1:dd:3c:2b:88:54:5d:
                    7f:58:c4:8d:b9:11:48:50:7b:9e:ce:4e:62:41:5a:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:71:B8:2F:EF:A4:CA:CD:32:61:7C:CB:DE:36:B6:6E:42:85:DC:BB
            X509v3 Authority Key Identifier:
                keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:56:28:40:f0:95:6b:e4:25:9a:92:aa:75:79:ba:9c:93:
         0d:e3:30:85:19:32:c4:d7:2b:4f:5e:8f:ab:ae:f0:be:95:8f:
         64:9e:1d:5f:d2:df:82:02:da:fb:67:0b:02:9a:45:86:10:ba:
         ed:e4:7b:f2:d1:18:76:c5:08:ea:6e:a6:bb:e7:22:1b:69:41:
         b8:7e:75:60:8d:eb:ea:8d:1c:04:4b:df:bd:ed:d6:0f:45:ef:
         76:a9:ae:75:ae:4f:d7:f2:79:3d:51:bb:87:31:66:a2:c6:92:
         d5:65:c8:e3:32:eb:67:00:2f:70:8f:5a:67:84:8a:80:40:90:
         38:ca:d2:82:33:9a:45:7c:bb:78:03:cf:38:31:de:de:e0:7e:
         3f:fb:cd:c9:d6:35:c1:c0:61:47:6f:dc:b3:dc:c0:9c:f0:55:
         c8:d2:e0:b9:79:36:31:df:36:8c:d5:2f:f4:7c:ea:32:3e:94:
         cc:93:c3:09:bf:ef:f7:1a:a7:70:5d:13:ae:19:7d:eb:ba:a9:
         87:1a:ce:b2:a6:0a:2a:fc:63:70:81:66:2b:cd:83:c1:e5:ee:
         14:63:93:71:81:bf:83:68:d1:f2:66:c9:8f:bc:14:2a:13:5c:
         a7:ff:22:11:1b:8e:3b:b1:c7:a5:e3:97:79:d1:90:22:e5:0b:
         58:32:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:43:39 2025 by rpki-client