This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File:                     lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier:          hgYCZx7VBJjyQD90J89vTeZiBUCNKGiVx6/Tp1FLxNQ=
Subject key identifier:   F2:4D:00:DE:70:91:17:78:75:75:59:DF:A7:43:28:FC:0B:C6:E2:ED
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer:       /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial:       019AF276FB66D643EC0C7E411CE1A6D699D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number:          176F
Signing time:             Sat 06 Dec 2025 07:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:15 +0000
Files and hashes:         1: 1-wnHFiYjnB24GxLV0meyzqsLFuM.roa (hash: LOVK3lUPwn84ZhS3ik+53n7gRvihYYPhPwXZjIMuf0A=)
                          2: JBF4nmB_9dA41I4-h-2ocy7VHRY.roa (hash: TnEvzmeVW0oV1dW+VOZZ6uxDCsLJLLDwXJNqVjj4CQA=)
                          3: WkUeJeS2VIWyHMQB6OP6WxpRtuE.roa (hash: moR9C1uw6Uz7LXM37ENpKv40O3dD16LP7ICWKr7IDI0=)
                          4: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (hash: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=)
                          5: _9QXHDXD2W0fy8-Ix1_61oUgOdw.roa (hash: PBxel1cKi46iaG0YRLkS2zvm3xWWCreZ2nu/52SigQM=)
                          6: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (hash: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=)
                          7: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: SC8D5Q8T8k1Sa0rJ0mB2C/ab9vTDKoBgzo4831Nr6pY=)
                          8: vgcjTeJgjqzs04Lo8DPrBtZnGbs.roa (hash: iV57rW45EBrtatSEbslptILthc80jn2LQS91fPeJvUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:fb:66:d6:43:ec:0c:7e:41:1c:e1:a6:d6:99:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
        Validity
            Not Before: Dec  6 07:01:15 2025 GMT
            Not After : Dec  7 07:01:15 2025 GMT
        Subject: CN=f24d00de70911778757559dfa74328fc0bc6e2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:83:38:be:74:6a:9d:fd:17:d1:21:73:b9:06:
                    fd:b3:c9:fd:db:c3:10:a1:b3:9e:ff:52:7a:83:17:
                    ce:41:06:e0:f4:6d:20:4e:44:f7:4e:bf:6e:9c:da:
                    ed:d7:4c:48:9a:06:05:d4:b4:15:54:d5:88:ce:a9:
                    db:43:56:b4:4a:e9:49:e9:d4:fd:0b:f1:c3:8b:b8:
                    56:f3:42:18:11:3b:26:cd:1f:be:99:8f:e5:e6:2f:
                    bd:4e:bf:a2:fa:68:41:79:f9:ec:a2:29:6f:d5:4e:
                    fd:88:80:28:46:00:36:3e:ab:76:f9:de:e7:80:ec:
                    83:c8:6e:33:6f:a9:89:0c:01:b9:51:ef:63:7e:e5:
                    de:4b:af:47:0e:3c:c0:47:74:e2:04:c8:99:a6:14:
                    80:47:12:48:25:b7:29:13:a5:4c:ad:e1:da:b8:e9:
                    13:8e:4b:b3:d5:58:3d:b8:63:38:f6:39:7b:4d:5a:
                    6c:01:0f:10:8a:dd:73:99:c6:db:e7:e5:84:16:d2:
                    f8:89:4f:dc:5f:b5:0b:35:fe:be:e1:08:36:f2:ee:
                    2c:43:a6:94:35:0a:25:0d:04:6d:4d:c0:de:fe:ed:
                    78:c1:5d:c8:71:b9:cb:53:c3:99:b9:cb:09:81:85:
                    26:fc:87:b5:f2:c5:c7:55:c0:e1:60:d6:8a:db:af:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4D:00:DE:70:91:17:78:75:75:59:DF:A7:43:28:FC:0B:C6:E2:ED
            X509v3 Authority Key Identifier:
                keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:18:e8:7d:b7:c6:8a:d6:49:e7:f5:e0:c1:7d:f5:4e:18:9d:
         7c:c8:68:1d:b4:0e:c9:e7:67:78:21:2f:01:7d:79:ce:0c:e6:
         53:8a:48:86:85:65:29:82:1a:16:6c:77:38:35:2b:14:37:77:
         39:5e:77:d9:84:88:be:1e:25:e0:4e:c2:b9:70:e0:27:ee:c5:
         30:16:21:5c:c9:fd:15:43:92:e6:12:c3:3e:0b:58:e3:3b:fd:
         19:74:a7:7d:5e:b2:35:60:38:ef:c3:6b:86:88:b1:90:95:5e:
         63:00:70:b5:65:d4:db:26:85:fc:95:b5:af:b3:bd:a4:eb:b4:
         f3:4e:50:56:21:8e:68:2c:9a:f8:35:96:f2:b7:f4:84:89:e3:
         36:d4:0d:41:1c:4b:0c:67:3a:0d:8e:83:b9:cf:13:7a:e5:e6:
         3e:20:91:ac:c9:e1:9d:8d:2d:5d:51:2b:86:da:fa:be:b6:56:
         9b:c9:a8:ee:2c:ea:1e:7d:45:d6:f8:90:d9:f6:d0:76:94:5e:
         6c:4a:fe:71:c1:79:82:e7:92:0c:00:ab:10:aa:c9:9c:ba:72:
         6f:ba:e1:93:5e:4a:d6:a7:8c:d7:c1:88:61:e6:bf:9a:db:d0:
         e5:90:e3:1d:c1:64:2d:7a:9a:6f:a7:57:52:5b:d3:8d:b7:9a:
         a0:4f:1b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:00:32 2025 by rpki-client