This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File:                     1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier:          OczyRuEyAWFh+lMiumZGqx1qq+nR7pzEIHBbQe5JUxM=
Subject key identifier:   73:A7:1C:9F:9F:ED:C4:8F:0F:EF:DF:6D:DB:E8:F0:6D:C7:7A:A3:27
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer:       /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial:       019B2E8BBEE24322A29FB7D0B972AB9D6A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number:          177F
Signing time:             Wed 17 Dec 2025 23:01:08 +0000
Manifest this update:     Wed 17 Dec 2025 23:01:08 +0000
Manifest next update:     Thu 18 Dec 2025 23:01:08 +0000
Files and hashes:         1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: W7eiTjWbkIbdzmTvCkPgbkWfQ+UKEf3fX/o9J7xTt5Q=)
                          2: mab9pSsP0hPfmw5pFW9oVdvDO3s.roa (hash: QMgbTzBaUnDZaZXtIzkU3/zhP2tD7XocJ5teoU1UGow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 23:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:8b:be:e2:43:22:a2:9f:b7:d0:b9:72:ab:9d:6a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
        Validity
            Not Before: Dec 17 23:01:08 2025 GMT
            Not After : Dec 18 23:01:08 2025 GMT
        Subject: CN=73a71c9f9fedc48f0fefdf6ddbe8f06dc77aa327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:1b:71:dd:14:ae:47:7f:14:fb:9c:15:80:
                    f3:e8:8c:bc:45:58:6e:f9:b1:2a:e4:31:2e:20:4e:
                    a6:5e:42:f5:92:fb:48:f2:7c:82:8d:a8:2a:a3:b0:
                    bc:7b:e6:d5:a4:81:44:92:c8:69:2d:8a:f2:6b:ef:
                    b4:3a:72:4d:82:31:7c:a4:7a:49:4d:1c:a7:80:33:
                    c8:cc:c3:00:60:94:b0:8c:40:28:5a:02:86:a0:ca:
                    01:a1:24:d1:63:50:5e:82:a9:b8:7c:0e:77:cb:dd:
                    d8:12:1e:83:e6:3a:d2:c5:fd:34:51:12:c0:8c:8c:
                    68:b8:bf:ee:2f:ec:38:1f:78:2d:d5:c2:69:d1:f5:
                    50:3f:86:aa:1b:49:4d:bd:4b:46:24:16:b0:7e:8f:
                    cc:c7:a2:56:d7:d4:8e:27:c7:70:74:0b:11:9b:7f:
                    bb:59:e2:3b:9d:16:00:87:b5:0c:63:43:6e:60:82:
                    72:f4:f0:5f:82:96:40:ac:60:8d:c4:ec:32:81:b7:
                    40:21:b4:54:b3:81:ff:44:42:f5:e5:0e:26:d3:c3:
                    6a:ce:85:5d:e7:5b:98:13:49:18:d9:50:e2:79:6f:
                    aa:99:0e:d3:f7:ab:81:f3:9e:a5:e5:78:a9:3e:3c:
                    6e:f2:01:73:e0:b6:e3:37:6d:16:35:53:e9:18:92:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A7:1C:9F:9F:ED:C4:8F:0F:EF:DF:6D:DB:E8:F0:6D:C7:7A:A3:27
            X509v3 Authority Key Identifier:
                keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:e1:28:57:8f:c3:c7:68:5f:7d:d5:5c:bf:92:d1:d2:89:
         db:4e:fa:aa:75:77:78:cc:0b:d1:e8:be:2e:f7:8d:fb:f4:1c:
         88:75:1a:18:78:67:b4:94:b0:dd:12:4b:52:52:5a:6b:53:bc:
         3c:de:77:5c:ae:c9:f7:9d:f8:4c:73:a8:8a:ab:65:2f:09:7b:
         0a:6b:38:c6:a3:da:88:48:9d:8f:10:3c:16:fe:60:31:e5:ff:
         cd:7d:6f:0d:d7:7e:53:a2:d4:0a:30:f8:8f:ee:3a:63:4e:8e:
         6b:8b:c0:f1:1a:92:21:ec:c2:eb:77:79:c7:c8:1a:08:46:26:
         2c:01:aa:c3:3b:d0:7b:83:0e:eb:6e:ae:58:79:c0:6f:70:0e:
         b8:a1:f1:e2:3b:6a:f4:89:97:99:75:9a:71:32:28:3a:97:bf:
         ee:73:a7:55:24:66:9a:f9:6a:f3:c5:d7:29:4c:26:61:e8:1d:
         71:85:ba:9c:fe:6e:fb:8c:e3:d0:ab:d6:fd:c6:78:53:5a:26:
         75:bd:0e:28:56:17:c8:e0:1b:b1:3d:0b:2c:bf:cd:0a:ef:4e:
         67:d5:91:bf:d5:9d:0b:25:bc:d6:0a:2b:bb:06:d3:13:fd:39:
         ef:74:fc:80:7e:0f:46:8c:f4:90:a7:cb:a6:5a:ef:a9:82:e4:
         09:af:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:13:20 2025 by rpki-client