This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
File:                     d6W3Uxx6reukfRwv65uee6qxu7c.mft (raw, json)
Hash identifier:          /6/lvKc/gQuST2Hcpc3iOqcj2GhgxgPfs2idTGDsvyo=
Subject key identifier:   50:AB:22:C1:C4:D6:06:94:98:26:92:D4:0F:41:B8:76:64:AB:22:E8
Authority key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
Certificate issuer:       /CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Certificate serial:       019B2EFB0797450A56E0BBAAF6B8E32D7B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
Manifest number:          177F
Signing time:             Thu 18 Dec 2025 01:02:41 +0000
Manifest this update:     Thu 18 Dec 2025 01:02:41 +0000
Manifest next update:     Fri 19 Dec 2025 01:02:41 +0000
Files and hashes:         1: d6W3Uxx6reukfRwv65uee6qxu7c.crl (hash: uny8Vz1O1DqbPU19t7jMcAHOkQC5udIZbKBXxa5sRVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:fb:07:97:45:0a:56:e0:bb:aa:f6:b8:e3:2d:7b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
        Validity
            Not Before: Dec 18 01:02:41 2025 GMT
            Not After : Dec 19 01:02:41 2025 GMT
        Subject: CN=50ab22c1c4d60694982692d40f41b87664ab22e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:9f:a0:90:91:03:5c:06:88:03:91:5e:c6:
                    c2:ca:6c:86:93:12:03:1c:dd:62:67:b8:bd:38:bc:
                    1c:7b:1f:9c:0f:02:61:27:0a:b5:21:e9:97:e5:40:
                    ab:ee:53:97:c3:ea:2d:47:d4:54:53:23:ef:84:89:
                    a2:a0:4f:d2:aa:e3:66:7c:88:b4:8e:aa:17:63:7b:
                    9d:4e:50:ed:1e:d3:b6:2c:3d:c1:2e:cc:ee:77:44:
                    01:e5:f5:68:73:2f:2a:e9:34:43:7e:74:6b:fc:b9:
                    fd:30:aa:73:92:7d:a9:48:53:50:4f:0e:b2:6b:db:
                    fd:5f:7c:aa:17:c9:c3:05:eb:17:41:95:bd:07:d8:
                    38:45:9b:ae:98:9b:c7:8c:d7:1a:bd:93:23:b8:ec:
                    af:77:ab:2b:66:8a:8f:f3:48:03:52:ef:54:01:15:
                    8e:e2:12:18:ab:9d:d2:22:0c:95:e4:d2:c4:81:7b:
                    b9:77:a1:d8:ff:03:cf:79:95:cb:6c:a7:4b:ca:a3:
                    d4:d4:82:39:2c:1f:b6:57:b1:88:89:65:65:5c:39:
                    2d:41:67:fb:17:67:e5:dd:df:ae:e0:2a:8f:41:19:
                    f9:02:5c:86:69:88:10:b3:bf:e4:e5:c9:fc:bb:f5:
                    c0:fb:7a:39:56:ea:9e:3d:ce:a1:8b:e9:34:44:8b:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AB:22:C1:C4:D6:06:94:98:26:92:D4:0F:41:B8:76:64:AB:22:E8
            X509v3 Authority Key Identifier:
                keyid:77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a7:5d:ba:89:9b:94:c4:b0:0c:31:5e:c3:7b:91:96:eb:1c:
         78:00:46:c7:20:6e:73:94:b1:01:3d:40:09:b1:e7:ed:43:95:
         b5:8f:e3:35:a7:cd:13:f4:d9:59:d5:ad:da:81:d5:f6:52:c6:
         ef:1a:dd:a1:ff:cf:97:68:92:1d:63:9f:40:93:8c:67:c7:11:
         db:99:aa:3c:9b:74:27:86:36:04:60:8a:0b:1a:56:d0:49:81:
         ea:0b:8d:ff:8a:b4:a8:6e:a1:a5:26:45:89:b8:5d:53:47:59:
         1e:d3:4e:e7:b9:85:fb:af:6d:76:a2:c8:5f:02:1d:d1:d5:cc:
         34:f7:c4:34:98:24:d5:e6:59:24:10:8c:f7:89:81:75:44:4d:
         8b:7c:c1:7b:14:5b:55:59:05:69:17:02:3f:a5:29:b4:ee:91:
         73:60:9a:52:aa:44:ea:1a:2a:0a:f1:88:c6:98:94:e9:03:fb:
         9e:af:85:b3:bf:a1:84:d4:87:5f:80:67:f5:45:48:9a:de:d3:
         3f:c3:d3:00:cc:9c:7f:24:49:6e:99:e3:c8:dd:ec:31:d5:0b:
         29:d8:c9:e7:09:b1:d3:1d:da:20:b2:23:18:7b:57:7b:54:fc:
         60:6c:35:38:c6:a5:d8:36:b2:2f:02:84:27:26:76:24:60:4f:
         d7:2c:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:14:01 2025 by rpki-client