This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
File:                     _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json)
Hash identifier:          H0R1tY2IIec0pLbBw1BN7sgWQa/kv2MS6gKLMjwII6w=
Subject key identifier:   42:1B:6B:37:4C:1B:3C:FC:3D:E6:74:46:25:8B:75:C2:6F:DC:EA:70
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Certificate issuer:       /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial:       019AF0F5E73C0D3062C84D5E1008BF31018A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
Manifest number:          177E
Signing time:             Sat 06 Dec 2025 00:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 00:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 00:00:38 +0000
Files and hashes:         1: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=)
                          2: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=)
                          3: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=)
                          4: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=)
                          5: VHd5a_VapfxG7J2dY8XaTIvUAnI.roa (hash: qmUiIRsWjUguSkm/l6NKSA85XaSwk7dvLg/NHHYCogc=)
                          6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=)
                          7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=)
                          8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: z8kU0MdWmyOPQSRmdK63Vh/p9ABJqPJFCarIX18hBog=)
                          9: iB5O2Dv_O9SgoFmPn7K4puMBzos.roa (hash: K+etiy0pRWQK1jSmyGFXzRfY6HxDEmZPOQqgSoVB5WI=)
                          10: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=)
                          11: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=)
                          12: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:f5:e7:3c:0d:30:62:c8:4d:5e:10:08:bf:31:01:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
        Validity
            Not Before: Dec  6 00:00:38 2025 GMT
            Not After : Dec  7 00:00:38 2025 GMT
        Subject: CN=421b6b374c1b3cfc3de67446258b75c26fdcea70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0f:a6:81:e1:7a:ff:fe:b7:a8:4d:38:ff:d9:
                    b4:9d:c0:f9:07:b0:77:f8:b7:25:d1:da:38:96:9e:
                    a1:ba:63:86:7c:d4:cd:37:30:35:71:c8:91:9d:20:
                    2b:75:4a:97:01:d2:38:37:c8:4d:fa:14:4e:30:54:
                    2f:74:48:a8:d4:c6:df:52:9d:0a:2e:fc:e4:34:c1:
                    91:79:09:97:1f:fa:75:c8:8f:d4:43:42:52:3c:1d:
                    a3:4a:bb:d7:4a:5d:a8:89:ac:cf:42:51:8a:5b:a9:
                    b2:5c:bf:23:a3:95:11:65:b2:b5:8c:2d:38:29:a7:
                    47:ba:67:3d:97:3b:84:d8:08:30:d1:d7:38:ac:1c:
                    24:4c:49:86:11:21:90:26:8f:ad:80:aa:ae:52:f6:
                    23:14:82:a1:5e:91:7b:58:e4:42:08:89:41:2c:3b:
                    0e:7e:9b:69:1e:74:9a:49:4d:05:9d:83:f1:03:c9:
                    ad:0b:48:d2:8f:ce:1b:f3:a6:42:e4:19:f2:9a:fd:
                    37:19:7c:cf:c7:12:1c:04:67:5c:1b:29:1c:35:b6:
                    af:ac:4b:ac:0d:e6:7e:fc:2c:e8:5d:ad:57:bc:1d:
                    a6:aa:15:13:fe:14:b0:be:65:04:51:5e:0a:eb:11:
                    62:4e:c5:de:da:4d:db:f3:b8:ba:ec:96:95:75:ac:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1B:6B:37:4C:1B:3C:FC:3D:E6:74:46:25:8B:75:C2:6F:DC:EA:70
            X509v3 Authority Key Identifier:
                keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b9:d4:33:6e:95:1f:41:cb:f7:67:fc:40:88:e8:96:5c:5a:
         dd:16:fe:86:58:85:24:4c:fd:81:c3:84:9a:1c:a1:55:7f:6d:
         aa:29:68:5a:c9:5d:43:f1:3d:0b:63:fd:6d:75:6e:71:b4:8f:
         5f:8b:77:dd:d5:b4:40:25:4f:17:a2:44:16:d9:df:f9:18:3e:
         a5:a2:53:de:cb:58:aa:04:83:f1:4e:08:73:7a:1e:23:04:e9:
         3a:85:fa:b5:5a:9c:cc:99:b4:45:e5:3c:c8:98:6f:e1:61:8e:
         62:a8:4e:19:2f:0e:ad:52:d0:84:12:e3:c8:10:89:50:9a:b6:
         7e:84:aa:00:52:8b:78:48:8c:20:03:3a:60:04:a8:e2:6a:06:
         0c:11:19:5a:aa:0d:a9:16:d6:b1:fc:93:17:c2:d6:72:20:4f:
         8e:d8:d1:10:b8:dd:16:a3:1b:3c:dd:eb:6e:b7:02:24:92:c0:
         9b:51:b3:37:9d:35:c1:35:a5:92:ae:7b:30:7a:a5:dc:2e:0b:
         87:42:80:c3:bd:fe:be:b9:90:ad:04:5e:e1:e3:ba:a3:54:36:
         2a:49:f8:13:90:a8:40:22:57:70:30:fa:2b:1a:a6:c9:a4:6e:
         16:53:e1:ab:fa:46:75:de:e1:d9:2d:80:0a:e5:af:a3:25:bf:
         82:0d:94:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:49:45 2025 by rpki-client