This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
File:                     46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json)
Hash identifier:          7H1tN/pugxTRYcSpGHSnn1u4sLBDHR5Nf0do+U2sqIE=
Subject key identifier:   0E:E8:D0:12:C0:A4:98:A1:99:F9:56:85:3F:E2:F8:CE:A2:BA:13:05
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Certificate issuer:       /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial:       019B1013B719A4BCCC722A8A2EF66A3295DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
Manifest number:          1772
Signing time:             Fri 12 Dec 2025 01:01:26 +0000
Manifest this update:     Fri 12 Dec 2025 01:01:26 +0000
Manifest next update:     Sat 13 Dec 2025 01:01:26 +0000
Files and hashes:         1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: Zx51fQzbB0Oqf55hjAlbrgfQ0yM14uuuyvBDqkbWBeA=)
                          2: 9xuRyXwVaekffVcG8_NstMNBt-k.roa (hash: M9/x2Ndgn+GMwlguZER0SDySKrmyfH7+TGAZyq7NYpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:13:b7:19:a4:bc:cc:72:2a:8a:2e:f6:6a:32:95:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
        Validity
            Not Before: Dec 12 01:01:26 2025 GMT
            Not After : Dec 13 01:01:26 2025 GMT
        Subject: CN=0ee8d012c0a498a199f956853fe2f8cea2ba1305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:1c:34:be:5b:50:a2:7c:3e:98:7b:3c:85:
                    96:4f:1c:92:80:a0:8f:28:7d:9e:ae:31:71:dc:f7:
                    52:05:26:3c:58:38:1c:86:d0:04:f3:cb:2b:a7:77:
                    9d:08:43:1c:59:db:3b:19:b0:05:4a:36:db:48:71:
                    90:e2:c0:b7:89:3c:0c:10:ed:b6:ac:67:6d:2c:77:
                    87:80:86:e7:16:06:5f:4e:e3:a9:2d:85:56:d5:a0:
                    e3:95:c4:04:46:88:52:8f:be:6e:c1:67:b7:f8:8f:
                    80:0c:18:a9:80:b4:c5:41:90:1d:ed:9d:f6:c4:01:
                    49:a4:8d:26:9c:9f:01:f7:a7:46:03:1e:aa:86:0f:
                    e5:5d:0e:fb:a0:77:fa:15:a7:89:96:01:60:63:0c:
                    ea:e9:3f:16:e6:78:37:29:cf:ae:f7:02:6c:61:42:
                    d1:fe:c2:ca:50:b5:9c:1e:bf:03:aa:1d:40:f0:64:
                    2d:21:71:50:66:f9:d2:b2:7c:4b:47:8f:ef:28:1b:
                    1a:97:16:c0:34:20:04:f3:f3:dd:f0:80:5d:c2:0c:
                    41:83:99:57:fc:fd:51:f5:69:e8:8c:0f:5c:a3:61:
                    12:ed:d8:73:28:51:64:a3:c9:20:ff:6d:42:8d:3a:
                    58:0a:d0:69:36:35:b4:16:57:89:ac:b8:1c:50:25:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E8:D0:12:C0:A4:98:A1:99:F9:56:85:3F:E2:F8:CE:A2:BA:13:05
            X509v3 Authority Key Identifier:
                keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:d0:c2:42:59:86:12:09:dd:fc:d9:19:d3:95:22:5d:6a:d3:
         21:eb:fe:5b:e4:27:07:c2:cd:2e:35:97:db:03:b7:ba:26:41:
         9d:6e:c4:3c:76:03:f2:d6:74:55:89:8b:1f:ec:f6:35:e7:f1:
         55:55:64:44:df:5e:df:7d:31:02:a3:3a:71:c8:08:9e:4a:93:
         c4:79:6d:bb:cd:c9:0a:4c:28:06:b5:ca:dd:87:71:ef:23:da:
         5d:8d:ce:64:83:36:27:5b:09:43:85:c6:00:c2:8d:93:6e:36:
         50:dd:0d:d7:82:bc:40:d7:18:60:5e:b7:bf:c4:11:16:35:1e:
         d0:af:c4:01:b1:5d:56:9d:68:72:91:c6:c2:74:80:4b:dc:26:
         ba:91:f5:ae:f1:63:3f:11:d4:d1:90:3e:a4:69:43:14:72:d3:
         0d:2f:a0:e0:48:e3:2b:f2:b6:3b:54:69:b3:cf:b0:f4:d2:a8:
         27:b4:78:6f:d2:ea:d7:be:42:1d:4f:ab:a8:53:15:43:a8:66:
         5f:25:16:88:ad:aa:0d:9f:bc:d7:d0:4c:a8:8b:9b:34:a8:43:
         23:9f:04:d4:01:ab:f1:e0:13:3f:fd:6c:33:a6:09:7c:fd:5e:
         3a:17:a5:a7:ec:74:41:90:07:02:23:6d:64:38:3b:48:ff:61:
         12:28:de:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 02:55:50 2025 by rpki-client