This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
File:                     dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft (raw, json)
Hash identifier:          bxa1tm+kkgrl+B2Yg9yEK9xBboNsfHFjqiYjd5BYrEU=
Subject key identifier:   67:55:9D:8A:C8:83:76:B1:E1:A5:67:14:BF:79:29:C0:D9:2E:A2:FB
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Certificate issuer:       /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial:       019AF1D26084D6894A1E39D91960FCD50A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
Manifest number:          177C
Signing time:             Sat 06 Dec 2025 04:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:27 +0000
Files and hashes:         1: 71ShF1BCLjj0zaSeXk0AMT8blX8.roa (hash: e2hez6w1xM1fmLGyeGjPMPTWmBAzD8pwvbWMd9Ngygs=)
                          2: OP-qluzkX5DpP--tqOyTqe3xHcQ.roa (hash: jbnp8pZaghnbGo5f+Z7LlRrvT6qH4dxP9RPLOACmte4=)
                          3: dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl (hash: RDgjowzgwReTqg1XWh76fQsdlYA2fu2jtT0Se/NKMOo=)
                          4: kPZEIQD00f54ZqT4l8jT3U6aQnM.roa (hash: +0mivRqNtYBY/xMUeXXOLBAXk2BX+gr2q/xuFmdEA2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:60:84:d6:89:4a:1e:39:d9:19:60:fc:d5:0a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
        Validity
            Not Before: Dec  6 04:01:27 2025 GMT
            Not After : Dec  7 04:01:27 2025 GMT
        Subject: CN=67559d8ac88376b1e1a56714bf7929c0d92ea2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:19:b5:87:b8:41:60:48:14:9b:d9:64:57:ab:
                    8f:b2:ae:90:d0:fb:0f:63:22:0a:67:f8:bb:94:be:
                    ad:09:4c:c5:4f:cd:f5:16:ce:d8:f0:a3:d4:c0:e6:
                    ca:22:b4:4f:61:b9:0b:92:b6:39:0a:b9:1e:93:89:
                    38:84:ba:2f:16:c2:2a:06:e4:ff:ca:d6:c2:23:d7:
                    d4:f7:a2:fd:99:5a:92:14:c1:91:60:c4:be:39:64:
                    7c:65:23:54:c0:8f:71:17:aa:bb:92:3a:2f:50:f9:
                    43:a3:6f:20:48:2c:9a:19:a9:29:2a:3d:07:91:fd:
                    1a:c8:f4:fb:32:68:28:48:35:dc:2e:d8:45:99:f8:
                    76:ed:50:9b:52:a3:19:c6:dc:b8:0d:d0:37:4d:68:
                    74:fb:87:24:01:16:3f:95:57:e5:a9:0a:7c:5a:bc:
                    d4:4c:83:87:37:f2:90:c7:ca:b0:a4:c5:4c:8f:87:
                    a6:c8:35:c0:b7:a4:74:52:cf:9c:97:3c:78:4b:14:
                    fb:9b:f1:a5:59:88:38:ee:92:5e:2f:16:df:cd:0b:
                    44:c7:b2:cf:ff:a1:db:1d:57:ee:af:14:73:df:c8:
                    37:0a:55:75:84:0e:a6:00:eb:f6:54:66:79:4c:08:
                    2e:10:51:05:40:21:0d:19:36:d8:79:1f:2d:77:9f:
                    4c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:55:9D:8A:C8:83:76:B1:E1:A5:67:14:BF:79:29:C0:D9:2E:A2:FB
            X509v3 Authority Key Identifier:
                keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bb:e6:2d:e5:cf:a5:79:8d:32:b0:1d:60:53:20:a9:d2:35:
         c4:86:7f:af:f5:eb:85:1f:16:d7:c4:63:51:6b:a6:87:c7:1c:
         33:a2:2f:bd:47:12:44:50:58:a5:4e:f1:0f:45:d6:a8:73:17:
         cb:84:27:39:85:8d:1d:a6:9c:b2:b9:cb:bd:7b:b6:20:6a:66:
         53:eb:a1:99:64:7a:90:40:ec:7e:c1:bb:bf:14:26:1c:8f:0f:
         05:9c:e7:79:51:57:1b:a8:4e:d8:2c:9f:3d:f9:74:dc:da:09:
         64:7a:55:f2:8a:2c:88:ab:3a:60:1a:4d:a4:d8:6e:2d:36:90:
         16:f4:e7:b1:66:f5:69:dd:86:fb:61:1c:e1:e8:3f:0b:40:c5:
         16:9b:0c:c9:eb:d2:44:f6:ff:c1:4a:aa:20:fa:4a:bf:3a:45:
         33:f9:9a:9d:d9:aa:60:02:49:8b:f1:c4:dd:bd:02:79:66:e3:
         8f:48:70:ae:c6:49:5d:0c:e5:65:9c:bd:1e:6c:31:e1:fc:38:
         62:1a:c5:43:03:8a:13:01:d6:4a:ca:1b:a4:aa:0f:2c:be:42:
         6d:f3:fe:0e:00:f7:bd:17:c4:7e:dd:bc:c1:92:aa:89:84:62:
         62:a4:31:53:e3:b1:2f:20:c0:ff:4a:b0:96:48:08:b8:e9:4e:
         b0:08:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:00 2025 by rpki-client