This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
File:                     B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft (raw, json)
Hash identifier:          5Zl8dHub214Ho3J/f176IP8wQES4HMBHSjbBBzooCdA=
Subject key identifier:   9B:E0:87:C1:57:9D:B9:25:D5:3E:B5:BF:FE:19:0A:08:47:EB:E8:31
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Certificate issuer:       /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial:       019AF5AF06501F2EBAF430433A8C3608B358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
Manifest number:          176B
Signing time:             Sat 06 Dec 2025 22:01:19 +0000
Manifest this update:     Sat 06 Dec 2025 22:01:19 +0000
Manifest next update:     Sun 07 Dec 2025 22:01:19 +0000
Files and hashes:         1: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl (hash: m9RQIUyR1REffNA+t/kPQpYzyt4i8iLpFR9pkz6VVBw=)
                          2: FtJU8J9U2_OLLatx6LfvbHOKR_c.roa (hash: dIJaTNJ0+ASaTltOhTPasps3097ycgeaovaUGMkuSR8=)
                          3: T_7VSYnKOSjvnuTWwmwff3kfcxo.roa (hash: DlCYGU13et9ewOw+1fpUIgR8MXw03I1FUpNIzAaiNtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:af:06:50:1f:2e:ba:f4:30:43:3a:8c:36:08:b3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
        Validity
            Not Before: Dec  6 22:01:19 2025 GMT
            Not After : Dec  7 22:01:19 2025 GMT
        Subject: CN=9be087c1579db925d53eb5bffe190a0847ebe831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:de:7a:49:17:ee:e9:ac:8e:f8:b0:bd:5d:
                    3b:c1:d3:04:89:4c:1e:e3:6c:bc:24:6d:23:8e:92:
                    7b:4d:62:d9:37:65:2c:01:fd:a5:e7:1c:d1:2b:6d:
                    30:df:e1:d3:9b:64:99:ea:fe:fc:c8:cb:79:b2:5f:
                    c1:7f:cf:92:83:5d:fb:0d:9d:39:3c:d4:17:7a:8e:
                    cc:65:1a:f2:ba:0a:23:bb:e2:55:57:59:39:67:c7:
                    44:f9:f8:a7:47:d8:a5:5d:f1:57:1a:68:0e:5c:b8:
                    d3:be:f6:a6:d8:9f:ae:3f:99:d4:72:38:37:f5:79:
                    0a:cd:c2:75:12:02:8f:50:ec:d6:63:4e:05:b4:8b:
                    06:14:9a:32:8d:90:38:ad:a4:61:94:94:c3:11:b4:
                    f1:5b:b9:fc:c1:94:68:72:84:a7:de:0d:7b:c3:b2:
                    92:04:2d:14:5a:39:b3:24:cc:34:81:3f:62:3f:b8:
                    b6:0b:33:c0:06:27:22:65:b7:59:35:82:84:98:b5:
                    ab:61:6b:42:e8:d7:c7:47:b0:67:9e:8b:74:2c:a2:
                    fe:11:b6:33:89:bf:2d:fa:96:70:c4:3e:1f:da:ed:
                    3b:8c:19:76:ef:7e:16:6e:0f:58:16:58:24:00:c0:
                    94:e8:93:c1:2c:a1:4a:0e:3e:27:75:32:e5:df:ec:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E0:87:C1:57:9D:B9:25:D5:3E:B5:BF:FE:19:0A:08:47:EB:E8:31
            X509v3 Authority Key Identifier:
                keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:35:3a:80:99:51:df:2c:5d:5c:36:0b:45:eb:8c:16:06:38:
         87:c8:66:62:c4:02:09:61:fe:ca:c3:aa:45:46:e9:44:84:df:
         3c:1f:88:15:2d:c4:37:89:20:30:ab:6f:ee:70:61:56:90:7b:
         f3:ec:fb:cf:46:c9:a8:b6:0b:5f:bf:f4:05:d5:8c:ff:7a:66:
         12:91:63:31:98:9e:18:ea:10:04:64:a8:13:85:2b:7e:d9:09:
         23:e4:69:87:78:1e:9a:9a:19:8d:90:85:fc:c3:69:d5:d4:7c:
         50:22:af:63:6a:03:cb:1d:30:4a:07:10:5d:45:fd:7a:2d:99:
         c2:81:c0:df:4d:d2:57:85:aa:c4:72:8b:db:06:31:1b:a9:9d:
         b0:59:a4:94:fd:c6:43:86:31:b2:cb:40:c0:8f:04:8c:08:59:
         6b:16:65:4b:ee:14:05:95:9e:e9:ee:91:23:ac:40:d0:5e:59:
         22:55:e3:ee:88:68:b8:cc:d0:9d:60:fd:9f:6e:dd:34:e7:1f:
         e0:e2:d9:fa:17:76:13:4c:3e:9f:fe:70:d3:7b:80:7b:f3:bc:
         c3:fe:e0:34:4e:d6:0b:3a:df:5b:58:fe:0b:b7:72:90:fc:c9:
         d4:f1:66:f9:22:20:97:a4:0b:72:50:e9:f4:0f:49:29:de:2d:
         42:4f:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:36:47 2025 by rpki-client