This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File:                     84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier:          RiUpZL5ZxhZ2+H00CGrJ/BMAZdCeeBYYj+h1AqjhJiM=
Subject key identifier:   8B:C4:7C:FC:29:47:F5:55:A4:8D:5D:C4:3D:6A:1A:CA:C9:60:2A:5C
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       019AF1D1AD21CCB4D84A28152EE1D84AF63F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number:          176F
Signing time:             Sat 06 Dec 2025 04:00:41 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:41 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:41 +0000
Files and hashes:         1: 1-NLVATAgt0gJ1Aq1hVfcdxCumPA.roa (hash: uN2xa+HJ9utBDoQL6cY2MSlIep6ZvrR+uOyLGFZW9Xg=)
                          2: 4tIwWmU-n7-9mbrV6zHCUY2kgO0.roa (hash: UNWMMK2ScoKR3jrKuoJR0R5xS2Hl4Xfz/Y0cE7DjtqA=)
                          3: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: ls6wMapY7xMdKxXksP4FItcd6T/J+g4u6Baf4cU+Q2M=)
                          4: fHIbUXJ3rD_afDUuW7bvGqQS8No.roa (hash: Yby7itCujVRNXmIlVSEQ+hFevmdlv8cBYO5F1K3cxJs=)
                          5: ztZZJGj8r4t9WJVtmGb2eSruYgQ.roa (hash: sP6jU6FXG4aQWAWvj/yoi9JuC2AeECQOGtHEuOPJslo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:ad:21:cc:b4:d8:4a:28:15:2e:e1:d8:4a:f6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: Dec  6 04:00:41 2025 GMT
            Not After : Dec  7 04:00:41 2025 GMT
        Subject: CN=8bc47cfc2947f555a48d5dc43d6a1acac9602a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:7e:13:c8:88:0e:63:a9:d6:78:19:17:38:
                    9a:6d:11:9e:bf:b2:b4:5d:bc:f8:4a:82:45:ce:7e:
                    b1:67:a0:40:d0:00:e1:df:4f:53:44:2e:28:85:58:
                    9f:46:9f:d3:d9:5c:dd:dd:27:3f:34:26:d3:0b:07:
                    43:95:58:a2:c1:5a:cb:30:a3:b6:9b:8e:87:49:65:
                    85:80:bc:79:ed:84:7e:c6:68:ec:06:f3:2b:ea:d6:
                    7c:38:bb:67:8a:bb:ed:61:02:6e:a0:0e:43:91:1a:
                    42:f3:a5:1d:b0:93:65:fb:10:a0:6b:69:11:c2:72:
                    1d:af:13:f3:7e:0d:af:4d:f1:e7:5f:5a:6f:2e:61:
                    d6:ca:b1:5b:6b:32:1d:12:39:0d:16:28:d2:df:a8:
                    9b:ab:f0:1d:3d:53:62:48:db:e2:be:79:18:1f:5a:
                    5a:74:86:2b:b8:2d:1d:43:15:a6:2f:09:eb:9f:f3:
                    a1:12:91:05:b7:47:71:44:b6:35:b0:8b:d4:bc:0b:
                    d0:9c:df:5b:23:bd:c5:f5:4b:bf:20:93:5e:cb:e1:
                    5b:73:7e:2a:bc:fe:b9:0b:f5:38:3e:af:51:c4:79:
                    1e:d1:5d:ff:48:0d:00:b9:a0:c5:eb:94:00:50:f3:
                    14:31:04:71:e8:18:f9:8b:27:b7:6d:d3:0a:e5:8d:
                    2f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C4:7C:FC:29:47:F5:55:A4:8D:5D:C4:3D:6A:1A:CA:C9:60:2A:5C
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:aa:b7:f2:73:d4:4c:2d:ba:85:38:f5:97:e7:d5:7f:b5:6a:
         dd:0f:f9:6b:bd:22:dc:23:c5:73:69:6f:98:b5:a0:6c:2a:41:
         f5:10:3d:b8:a0:41:3d:40:29:e5:23:1a:3c:48:a2:9c:d1:07:
         43:46:ab:d3:5a:5e:9c:97:75:a8:e2:48:55:77:49:c4:77:ab:
         7a:d2:03:84:2f:0b:22:5b:89:30:d1:99:3f:e1:3e:19:5f:21:
         48:3f:f7:96:7d:69:da:1a:08:53:2f:98:79:5c:95:46:16:5e:
         98:d1:c2:aa:83:83:03:fc:01:dd:d5:29:fd:d2:9f:49:2e:c2:
         81:65:34:22:38:f2:6f:a1:91:85:e3:af:bd:4e:c0:b7:de:d1:
         b9:22:98:fc:56:17:c2:e0:ef:19:df:e1:cd:46:bc:a4:77:71:
         1c:92:49:91:93:68:4f:bc:30:4e:44:67:15:04:5b:ee:b2:4f:
         f3:f0:21:5d:5e:03:59:7d:db:65:8b:59:1e:0c:0d:ca:99:00:
         47:ec:2b:d8:2b:50:32:67:62:97:33:59:65:81:a6:2d:89:f9:
         93:43:f4:a3:38:c8:5b:ea:67:f9:f5:17:04:3b:b4:b1:f3:66:
         7e:32:9c:17:41:d3:ad:6a:b0:11:7f:20:eb:de:cd:21:1a:6d:
         15:83:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:27:23 2025 by rpki-client