This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
File:                     Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json)
Hash identifier:          O3+VsG3ZVofKdghhkdag2W91zCrmKVTkdOcG5cRda/o=
Subject key identifier:   81:CB:97:5F:BA:91:21:E3:3E:6A:DA:94:13:77:E3:00:C6:1F:DB:76
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Certificate issuer:       /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial:       019AF164754218B3D08B927812D4E17E3B2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
Manifest number:          177A
Signing time:             Sat 06 Dec 2025 02:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:23 +0000
Files and hashes:         1: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: LP6DVc2Jz6y3jnoj3z6xgdR1Sv8rP9d06nCkykjDWio=)
                          2: sPL5rUlzKx5_eiK0H41Atshaecg.roa (hash: gZZ6IxCmuB2B723uD8tUyKBaH66Mb5llFLuK/jyTEBM=)
                          3: wgOqnnsWlsLcY-e3U904w3g_rl0.roa (hash: Ww7qe8WtK5P+D80awiXawU9bPGz6ArE4FuPa1FSF2jU=)
                          4: wub3ojVvtYVNr5_D3zKLLbWF2_M.roa (hash: 0Ivv/JEf+s+UoAgsprFNMguw897KPBdxp9YKz2VJrNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:75:42:18:b3:d0:8b:92:78:12:d4:e1:7e:3b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
        Validity
            Not Before: Dec  6 02:01:23 2025 GMT
            Not After : Dec  7 02:01:23 2025 GMT
        Subject: CN=81cb975fba9121e33e6ada941377e300c61fdb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:07:15:b6:63:1b:64:4f:c0:51:79:95:de:
                    fe:6f:3a:2b:2f:16:9e:41:ec:99:00:7f:62:eb:5c:
                    39:ea:ac:b8:d3:ab:c7:39:77:0d:89:13:53:64:55:
                    ed:18:bc:f3:8e:a9:0c:93:37:71:b1:1e:44:86:1e:
                    f1:52:db:90:ff:cf:ae:a5:d6:b7:2d:27:4e:43:5b:
                    9d:5d:43:87:3f:27:eb:c3:1a:ea:4b:7b:63:7b:16:
                    15:23:4e:60:8d:b1:f4:57:c7:14:a7:63:5f:45:cc:
                    37:a9:ff:54:8b:ba:76:1d:cd:8a:fe:72:11:d5:b7:
                    7a:ef:c0:ec:8e:49:c4:db:44:51:53:90:7e:79:6c:
                    63:5b:29:6d:42:93:21:ca:68:7c:7a:a1:04:04:92:
                    fa:1b:17:d2:94:91:60:c9:92:35:24:ba:5f:ee:46:
                    55:9c:39:c8:5a:8d:f5:8b:76:7f:29:d7:18:30:39:
                    ed:96:6f:fb:d0:39:ee:c5:c5:cc:e0:c2:15:ed:da:
                    0b:96:23:f8:8c:1b:6f:35:85:56:fa:da:09:d8:6f:
                    47:d8:5e:0c:49:f7:c3:72:25:1d:d3:83:8f:46:1f:
                    32:bd:08:87:a7:35:b1:95:5a:5b:8f:5e:68:2c:15:
                    90:a8:23:e6:82:ef:a2:6f:08:f7:62:d7:08:f6:6e:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CB:97:5F:BA:91:21:E3:3E:6A:DA:94:13:77:E3:00:C6:1F:DB:76
            X509v3 Authority Key Identifier:
                keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:aa:76:06:ab:9f:b9:ef:a6:c1:d0:70:f6:17:6e:e4:c0:19:
         a8:8b:e7:20:c4:da:1d:dd:73:d7:cb:f2:eb:62:2d:90:b2:8b:
         3d:8d:7e:10:07:6b:63:9c:44:59:f4:74:c2:e9:7c:d1:6c:c1:
         57:31:d3:5e:17:de:d1:67:71:76:ea:20:e1:b9:16:d0:0f:eb:
         f7:c7:c2:66:74:c8:e0:c4:30:a4:25:af:93:56:07:e0:f2:28:
         66:79:80:f9:45:31:c7:fe:31:c6:54:ad:70:3a:c6:dc:ba:37:
         f2:20:f1:95:be:d6:76:6f:10:03:6f:71:88:84:1c:ff:9c:71:
         af:44:57:ef:7e:6b:59:e1:e0:48:bc:ab:b2:c4:4d:23:ab:79:
         bf:ee:81:b1:ce:c5:62:35:98:4c:bb:71:d3:8c:0b:d7:0b:0a:
         5d:64:c3:18:60:11:c8:da:01:35:e5:67:78:45:ad:bb:cf:8c:
         f1:a3:65:0a:0e:13:02:3b:9a:b3:4a:d9:a5:cf:93:da:fc:34:
         76:55:2c:8a:ca:e6:57:52:da:8b:22:2b:29:ec:df:4b:9a:0e:
         f7:4b:95:45:6d:78:13:f0:14:e9:fa:c9:c2:70:f4:57:c8:d3:
         0f:f9:bc:4b:5a:5e:95:f8:9a:58:38:c0:41:b2:cc:6f:2c:c6:
         ed:87:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:11:13 2025 by rpki-client