This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File:                     1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier:          BxIZC7YL9pDWxNM/w/tWmLQ7kWwtc9FyLacGGlZGAuA=
Subject key identifier:   DF:8A:0C:31:ED:54:FA:7C:EF:CD:1F:AF:31:0C:14:A8:20:5D:4C:F6
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer:       /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial:       019AF209538E5AC05BA384F05096BF11292D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number:          176A
Signing time:             Sat 06 Dec 2025 05:01:28 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:28 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:28 +0000
Files and hashes:         1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: 1vwIoQYBHI85S14MumOu1bFekgs7vRCnVcudOM0jBvs=)
                          2: 20JZoPz-t_mgvCADeYADS1I1_kA.roa (hash: RK32qURGpdFetMp2/p5tqjPHVuZOydtV4ypb7Fv2oMw=)
                          3: FOD3WMgpxNybQzPuOwe78NsZWus.roa (hash: aFhRTJ+99Rr5uEMBT8AVfzARvPKS5dqhwYxUDD8GnV8=)
                          4: I7kRS98TWlLCpdxkZBJ1Ghb8vEo.roa (hash: pMswfMPqF7jqU8BWibFY90ZZ9yo1kLeHnDWRYRgreMo=)
                          5: JKL9ye3UOtI1o8T1cr1S9hXZ2no.roa (hash: lqCnv+8U/mZxgsC3R6bKu9b+cHWg6szFuB9C89FECMk=)
                          6: NKAZ0yQz4XuaBkRE9662AOjULN0.roa (hash: WvZwUHQ3SYfvF1aNu0uLqAKbebVCJ8X+LsDJ8/NlJz8=)
                          7: fPkUlM10HdenIbz-4UarZNI0zVw.roa (hash: YSGgPzsusSZwFwzPhGTMehx0nsGiu8yxsdihONVOyuU=)
                          8: hjRwwruuc7xXtL8W5gfmyR6abQw.roa (hash: djOP6Nk8xft6q+iLH/g7Yin3X++Oc/uER5vpULDglLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:53:8e:5a:c0:5b:a3:84:f0:50:96:bf:11:29:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
        Validity
            Not Before: Dec  6 05:01:28 2025 GMT
            Not After : Dec  7 05:01:28 2025 GMT
        Subject: CN=df8a0c31ed54fa7cefcd1faf310c14a8205d4cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:d9:72:5e:50:b0:f4:15:30:32:a4:cb:e9:
                    bd:58:b1:ae:eb:06:fc:2a:0c:ad:e3:5f:9f:f2:41:
                    7b:a7:4f:bd:2d:8e:aa:b5:ee:92:bd:73:c6:a8:92:
                    8f:e3:df:b6:0b:62:95:04:b9:60:8d:1a:91:a5:26:
                    40:a0:07:a8:b9:32:76:db:02:f1:af:0f:18:d6:3d:
                    17:d8:c8:71:18:d2:df:b8:4b:1f:6d:8b:ac:86:2d:
                    5a:fa:85:2b:5d:99:c6:3f:cb:39:54:9d:c8:6f:b9:
                    e0:a8:08:72:8b:a8:45:a2:f8:37:ca:4d:19:f2:83:
                    d2:8a:78:87:fa:15:a4:c4:31:7b:3f:30:7e:19:c7:
                    4e:52:df:26:80:b0:50:c9:73:78:ee:5b:5b:ab:9d:
                    43:de:47:f7:19:e1:c7:7c:f5:b9:31:fd:11:59:6d:
                    57:6c:c5:01:05:9d:51:c0:9b:1c:68:bb:cb:cb:a6:
                    3e:fc:c5:b9:10:8f:ee:84:7c:98:a1:e4:19:b2:b3:
                    7d:de:c7:a8:35:ee:76:46:39:f7:c4:04:0e:b8:34:
                    5c:c0:d7:f8:5e:be:3e:e3:ae:8e:43:63:c0:5f:cf:
                    fb:22:43:13:5f:44:d6:4c:00:9d:75:2f:31:2a:20:
                    12:28:e4:97:b5:b9:09:4a:41:d2:f0:22:4a:5a:7d:
                    aa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8A:0C:31:ED:54:FA:7C:EF:CD:1F:AF:31:0C:14:A8:20:5D:4C:F6
            X509v3 Authority Key Identifier:
                keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:85:d2:7e:59:00:9f:90:7f:75:09:e0:22:11:48:64:ee:13:
         23:80:55:8e:39:82:0c:e2:78:a4:9c:f9:d3:20:97:96:3c:65:
         ad:71:77:cc:9c:43:28:c5:3d:65:73:cf:28:fb:7f:c8:5f:9f:
         3e:64:39:75:fe:f9:1e:9e:a3:d1:06:5e:7b:d9:b9:8b:5c:85:
         a6:a7:4f:c6:1a:13:09:81:1c:cf:59:7b:c7:f0:fa:c4:fc:c6:
         cf:47:39:8e:1d:ef:33:59:a8:1d:b6:ae:25:45:f1:2a:d2:c8:
         10:32:47:d4:5a:8e:ac:97:23:16:cb:fa:0b:84:83:b0:b5:29:
         c3:53:d8:ec:09:b3:89:da:5a:71:e7:de:fe:6b:fe:29:03:59:
         e8:fc:71:3e:68:2a:49:13:aa:05:78:7d:5f:ef:eb:be:9c:38:
         54:db:2b:f1:5d:46:b9:53:79:7d:12:12:93:34:09:8c:35:8f:
         ef:ad:f8:3f:b7:ff:ad:41:70:61:00:76:2b:16:f7:de:c4:57:
         c9:b0:6e:8c:ff:c5:1b:57:37:8c:c1:bd:25:41:9d:f8:c7:fb:
         ed:f6:88:3c:a6:54:23:8f:5a:8b:3e:35:14:a2:d6:99:1e:33:
         09:b3:0d:e3:fd:a8:1c:d3:a7:87:01:b2:d0:7c:f7:7f:44:44:
         90:1f:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:42:27 2025 by rpki-client