This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
File:                     4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json)
Hash identifier:          pbA9jst7XFB9ZtDqzO60XeP/AUxKNkntY+BrBmVcv6k=
Subject key identifier:   9C:73:91:76:2C:15:97:2D:1F:1E:E7:C9:67:AB:B7:C2:95:5B:15:F6
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       019B0F00E923279AEEF4D132981E46277928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
Manifest number:          1790
Signing time:             Thu 11 Dec 2025 20:01:16 +0000
Manifest this update:     Thu 11 Dec 2025 20:01:16 +0000
Manifest next update:     Fri 12 Dec 2025 20:01:16 +0000
Files and hashes:         1: 1Zw3dOHQdTR7vigHBw9Gl95CsWA.roa (hash: Xi/Bb5DmK6ae5rm5BeoWF06YJy3In/vvvYvcO432dxg=)
                          2: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: RCmWtYTLgKA02rYB688QULs48NgTsTiJnWDiwkXzaWc=)
                          3: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=)
                          4: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=)
                          5: Hb7ebDFFRZqJEOZO-n-RjqAsiO8.roa (hash: 9v/kq6wq1tmBm34TkO2qwrxM6Dr/nUlLL4cuH+DHyQY=)
                          6: IRIHNrcEmYA9SiekVnQCGeb5qt8.roa (hash: tBfDnKuitVX0twdrJtQnmeN3GmNpiKza4WKEqcGuDCg=)
                          7: KOQt4Fdw-Mbd2H2laDLh-QtpT_A.roa (hash: E+ao0zcz+gKQCFRR+32WIwFe4k6aZm0mJuIHZG8OTjY=)
                          8: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=)
                          9: O2u9sNM2VsxkrEw4_x5dbnD4cmI.roa (hash: z4M4rzCbwDQczsVkru5nQYgRim30go1bSOu9yN0yWpY=)
                          10: QY62O1TbJcgHTlDdMSnc5EOOsWo.roa (hash: WrjFSmIFme7bbVEpsR+eNDIdWK8cfKHxqLCWL8lKVwU=)
                          11: ZEaWX4vp4W7zRNcPf0TP02hgItQ.roa (hash: sJ0gPMef931rqzhVp0zgr8podzklf3D6mI15/1mXqB8=)
                          12: ZhumnastnIToRU4Ujd74rA2H0TI.roa (hash: hGm8nGCE9zZ7LDb9DfN19EP4tZp//5L2NO9ThIsADfs=)
                          13: _yn-31rADEG7zTcXfVb92NptH0Q.roa (hash: Tyq49fvsXK4jK1l1SC866Zxd+HFpg8YBsLVC4Nlc/M8=)
                          14: chhwL-zj1isGKfXerZSwFuCy2Ig.roa (hash: EaAAiNMyzMZfk0/ZwRL/V1h2YZdNe3SPfk1b1YTVfY8=)
                          15: dcdUaVsbK9eNo1r-m0RN5v4IuI0.roa (hash: 16XY+REBNBY9vjc35N7Gk6wmQpGirjvhIjfgeZGXyFo=)
                          16: vjKyioN5ZLUQGqbv0hjh-k7ZHnI.roa (hash: rxK/AqCNmTQ7FTdlF/qR+joUKZx1vJKUfba0dd+y2Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:00:e9:23:27:9a:ee:f4:d1:32:98:1e:46:27:79:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Dec 11 20:01:16 2025 GMT
            Not After : Dec 12 20:01:16 2025 GMT
        Subject: CN=9c7391762c15972d1f1ee7c967abb7c2955b15f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:02:e3:1a:0d:a4:a2:3d:58:b0:e1:e3:f1:
                    2b:67:23:6d:d1:bd:61:f0:32:b4:f1:d9:6f:29:8a:
                    99:d4:ca:7f:ed:93:90:8e:cd:58:db:90:58:7b:0e:
                    d0:a5:e1:97:fd:56:62:4d:cd:7f:60:87:b5:eb:5e:
                    75:51:cf:16:b1:46:ea:09:fe:56:87:64:fe:d1:c6:
                    06:c0:1e:d3:fe:3f:68:ed:d0:71:a3:85:9e:9b:cb:
                    bf:79:2e:90:7a:e5:17:7b:17:b3:13:b7:c9:d6:b0:
                    c0:d9:78:fe:4e:9c:66:22:c6:6d:be:dd:45:8d:e5:
                    83:a2:85:6e:92:31:f8:d4:80:62:30:b9:31:c9:a9:
                    aa:44:3e:77:d5:7b:00:5b:a6:6e:6a:62:a6:84:31:
                    e4:c2:0e:ef:f5:d3:0c:a7:d4:d0:1a:5e:0e:f3:cb:
                    a3:90:07:de:70:65:1a:9b:19:cd:77:5d:bb:84:01:
                    3b:a3:14:a7:f0:06:0b:a3:0a:07:94:bd:b5:28:05:
                    8e:1b:01:76:ac:5a:76:65:79:ac:4c:ee:3c:6c:3e:
                    65:42:a7:b1:1c:50:74:99:a9:f7:d3:45:ab:c3:31:
                    99:77:d7:98:ff:8a:67:bd:b1:50:f1:19:fe:d8:dc:
                    c6:62:ad:bd:7a:fb:6c:2c:db:37:0d:53:68:b4:d5:
                    1f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:73:91:76:2C:15:97:2D:1F:1E:E7:C9:67:AB:B7:C2:95:5B:15:F6
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:11:72:65:84:02:97:91:69:3b:4b:66:a2:bd:02:e3:66:97:
         43:9d:a9:7f:b1:8e:04:77:29:cf:ff:05:2d:db:47:91:2c:d5:
         4d:2c:68:9c:0b:07:20:9c:79:c5:09:c4:5a:b5:96:0b:19:24:
         c5:4d:82:4a:0d:fe:ee:9f:05:d6:9d:53:b5:43:40:c2:a9:42:
         de:41:63:f1:81:c0:59:4f:f9:92:86:bc:81:bf:c3:0b:e0:db:
         b5:25:86:89:74:08:e1:95:ee:65:dd:1c:1a:b0:92:38:2a:0d:
         ce:43:f9:d3:13:df:42:8e:ea:d0:68:b8:36:6e:93:de:b9:aa:
         79:c6:ee:dc:01:fe:15:09:84:35:48:fc:6b:4f:c2:50:e6:c5:
         fe:aa:67:9c:ed:82:3c:9b:9a:47:8b:3c:b0:13:ef:f5:2d:6b:
         95:58:96:53:50:89:ba:61:54:e6:15:47:22:e7:2f:e1:d3:1e:
         b6:49:72:e4:c9:86:89:68:00:96:9c:e1:f1:37:2f:33:79:b0:
         4b:c2:76:e6:1f:25:f9:ef:4e:c0:82:8f:93:d6:0b:c6:d7:9d:
         d9:93:38:95:51:39:ed:bc:90:8e:74:ac:46:d2:d6:91:b0:d9:
         99:83:7f:31:2e:dd:c5:50:02:8a:40:70:b8:db:0e:a6:b6:2d:
         ea:68:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:07:46 2025 by rpki-client