This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File:                     I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier:          uOp4L/U9xSSmtkT3g/gPflzs1Yys4YRIB31DU2hQQYk=
Subject key identifier:   1F:CA:50:05:8C:73:E0:D3:82:1A:DA:4A:53:D2:68:8E:A0:92:01:2F
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer:       /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial:       019B25516CE1B34665791A168DB48814C574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number:          177E
Signing time:             Tue 16 Dec 2025 04:00:51 +0000
Manifest this update:     Tue 16 Dec 2025 04:00:51 +0000
Manifest next update:     Wed 17 Dec 2025 04:00:51 +0000
Files and hashes:         1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: vHBAhqbPGQuUaSvo+ZG7tW6xsQCT9uMl8fqABexop1A=)
                          2: cEnlNHZ35kSVNo2T27Ex45pap18.roa (hash: q/g4pWJ8XYH4irxAQK7i5w/oElgLduGOhld/VI56BOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:51:6c:e1:b3:46:65:79:1a:16:8d:b4:88:14:c5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
        Validity
            Not Before: Dec 16 04:00:51 2025 GMT
            Not After : Dec 17 04:00:51 2025 GMT
        Subject: CN=1fca50058c73e0d3821ada4a53d2688ea092012f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:d3:65:98:0b:d4:95:a9:de:94:4c:ff:5a:
                    fb:8e:65:13:79:eb:de:32:22:c5:70:ce:b4:98:24:
                    be:9c:c4:08:0e:fa:d7:59:13:3d:b7:97:14:34:c6:
                    cf:29:97:17:4d:99:05:d9:84:6e:c2:d3:f5:4b:c7:
                    d0:a8:7d:11:96:da:98:fa:da:f0:22:cf:90:28:1a:
                    c1:f6:3b:e9:ee:99:73:ff:5d:18:f7:1e:cc:d2:a6:
                    2d:78:0a:89:66:9d:d3:56:de:cb:a1:1e:b8:98:fe:
                    bf:54:8a:1e:0f:87:cc:e9:be:49:b7:d6:38:90:f6:
                    58:66:52:c4:79:ba:3a:33:eb:a4:cc:5f:e7:3f:3b:
                    9a:4d:6c:36:fa:1e:7f:3a:16:bf:91:b8:78:0f:7b:
                    7d:e8:a5:36:71:87:60:6d:28:da:81:c3:c5:bb:ae:
                    fc:e6:d4:f2:63:94:40:26:cb:3e:86:09:4f:c0:b0:
                    31:a0:73:e4:d8:b1:45:1c:85:2b:8f:19:63:b0:d7:
                    dc:40:1d:8e:46:8f:08:17:8b:d9:94:7f:1d:25:f2:
                    8e:07:9b:07:bf:3a:53:6e:cc:f2:e9:8a:5f:5a:34:
                    e0:16:45:53:20:d4:b7:04:92:b5:f7:50:33:6b:bc:
                    45:46:82:dc:50:86:a7:b3:1a:4a:0d:51:3d:99:91:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CA:50:05:8C:73:E0:D3:82:1A:DA:4A:53:D2:68:8E:A0:92:01:2F
            X509v3 Authority Key Identifier:
                keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:72:0d:15:ee:2f:88:7d:9e:f4:d7:c7:e4:b2:5d:c3:84:97:
         3e:ce:a9:20:57:c5:47:d4:3f:34:73:af:44:8f:d7:25:9e:f5:
         97:8e:08:c7:21:68:88:c0:86:bf:83:a5:82:ea:67:4f:1c:02:
         d5:9d:fd:b6:97:d0:08:ad:6e:72:63:d9:81:a0:3f:e9:f2:f0:
         43:24:ed:75:49:99:93:e2:7c:42:54:6f:73:7d:c0:fe:72:f7:
         47:75:4b:f9:c0:4d:73:7d:6e:ba:b8:11:55:e6:8e:1c:ac:b4:
         bf:6b:d3:39:64:d6:f3:f9:bb:7f:4b:57:a2:71:bd:1d:d7:a3:
         6a:e1:0a:2e:2c:20:5a:5e:ec:9c:9b:db:34:fc:52:32:36:b7:
         05:9d:87:64:66:db:95:e3:c9:8c:2b:af:aa:af:ef:20:e3:c4:
         13:a2:cc:9a:78:0f:e8:8b:ff:5c:ef:f5:b9:70:f1:87:2b:91:
         6f:9b:3e:59:b5:a3:3c:91:c3:ac:ff:65:73:e4:a0:e1:be:71:
         5f:d2:78:3a:da:ec:e5:66:b3:ca:ed:89:23:73:13:bb:b7:83:
         c6:79:e7:5e:60:b5:d0:04:41:22:20:00:44:bf:9a:d4:af:d1:
         7b:87:d8:05:5b:82:e6:b0:fe:15:d6:84:c2:25:58:f5:09:cf:
         ef:79:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 10:49:04 2025 by rpki-client