This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File:                     4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier:          tV7ASwg00DNYwJcg0my63DTV9+2Xts7aY4tPizLZqxU=
Subject key identifier:   DC:A1:8F:7F:73:37:A1:93:4C:8F:56:F6:18:D0:5C:0C:87:87:5B:8F
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer:       /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial:       019B19BCC5706C5800457122ACAF7C805229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number:          0479
Signing time:             Sat 13 Dec 2025 22:02:40 +0000
Manifest this update:     Sat 13 Dec 2025 22:02:40 +0000
Manifest next update:     Sun 14 Dec 2025 22:02:40 +0000
Files and hashes:         1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: HU1auQX+H+0i0u+7tGIcukbgcLRLtUP9z+EOZDrHUII=)
                          2: H7jD667ua1MTRSgNeUALgotBmYc.roa (hash: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=)
                          3: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (hash: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=)
                          4: lchTEZvN-6afhfJLiZL0vloeA9I.roa (hash: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 22:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:bc:c5:70:6c:58:00:45:71:22:ac:af:7c:80:52:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
        Validity
            Not Before: Dec 13 22:02:40 2025 GMT
            Not After : Dec 14 22:02:40 2025 GMT
        Subject: CN=dca18f7f7337a1934c8f56f618d05c0c87875b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:f9:2e:35:54:0b:c2:97:54:8a:94:aa:cf:
                    aa:a5:dd:a8:eb:6c:82:33:48:73:30:14:d2:1d:38:
                    16:65:dd:92:09:54:d3:ed:39:76:fb:8b:34:34:c4:
                    c7:2b:e9:b1:ce:00:1e:2a:27:5b:ae:76:19:4a:11:
                    77:05:d0:fd:a4:3c:87:76:d0:7b:e4:5e:b0:fc:7f:
                    af:04:76:24:fa:56:d2:44:62:c7:26:e4:21:2c:1c:
                    83:44:f7:3b:42:60:47:f4:ff:20:a7:35:fc:0c:25:
                    66:90:8e:51:10:c9:5b:db:b3:17:10:07:ad:5f:85:
                    47:bd:2f:25:7c:46:ce:94:29:70:2c:fe:59:74:4e:
                    84:5a:35:9d:bd:e7:4a:60:dd:7f:e6:fb:91:ce:75:
                    ee:07:ba:bd:ec:21:86:f6:03:0c:09:7d:d8:c9:94:
                    9e:bd:b2:eb:ac:3c:df:98:f8:8b:a5:f1:c1:2a:13:
                    72:09:f3:ae:c3:f8:1b:4c:8d:72:25:7e:91:33:f8:
                    45:d0:f8:3c:3b:1b:8d:03:c8:fb:aa:26:5f:9d:40:
                    92:6f:26:29:fc:be:44:74:a1:90:3a:8c:93:4c:44:
                    64:9c:83:92:9f:f1:8c:3f:21:a8:39:fa:29:95:40:
                    df:8a:83:f1:00:35:35:f5:46:04:07:ba:c6:18:e1:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A1:8F:7F:73:37:A1:93:4C:8F:56:F6:18:D0:5C:0C:87:87:5B:8F
            X509v3 Authority Key Identifier:
                keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7f:7f:14:60:b0:f3:4a:4f:a0:f7:9f:4a:5a:6b:8d:25:17:
         72:d4:d6:5d:70:bc:f4:91:08:43:32:86:dd:6e:b7:5f:f1:54:
         77:db:29:26:c1:5d:0f:d4:fa:f3:7f:b5:1d:71:dd:d7:62:9e:
         c9:01:94:71:30:68:ff:f5:e5:24:ff:e8:22:e8:8c:0a:07:9a:
         f1:15:e9:e4:6b:cc:ee:af:4c:4f:4b:a6:38:5f:ef:ff:a0:29:
         52:6a:be:a0:cf:59:00:a9:2b:8d:26:c3:84:a4:eb:b9:e1:37:
         77:43:31:2d:58:8f:4f:76:40:60:62:88:e9:71:02:a2:7c:90:
         2f:c7:00:e4:93:c8:97:80:2b:e1:dc:6e:ef:06:01:50:d8:bb:
         4f:0f:e4:e3:eb:5c:04:da:c0:62:9a:1c:80:e9:7a:67:9d:a8:
         2e:cc:27:64:52:97:ee:b2:91:8a:8b:66:ec:e0:6b:48:81:9c:
         9d:91:2b:ea:17:60:e5:c3:14:bd:01:39:e7:3f:8e:62:13:c3:
         fa:03:0e:34:7d:9f:d2:34:60:35:07:4e:f5:b6:df:1e:76:dd:
         ba:53:60:73:9f:bc:97:ff:63:34:4a:e4:01:3a:e5:80:80:5d:
         48:fa:9b:53:37:e0:7b:cc:dc:e9:27:d2:95:03:fa:a3:84:e6:
         ae:d2:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 07:47:08 2025 by rpki-client