This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File:                     p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier:          BT9yDDdvJJzHJ/P9eYQHa/CDFY/4RiuRy8Cfkg9rvs8=
Subject key identifier:   A7:D4:82:7E:84:0A:F3:C7:D2:97:5F:50:92:07:B8:29:79:79:BB:B9
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer:       /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial:       019B191643D4DDCB8CEB477DBF4C6D458F54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number:          1790
Signing time:             Sat 13 Dec 2025 19:00:47 +0000
Manifest this update:     Sat 13 Dec 2025 19:00:47 +0000
Manifest next update:     Sun 14 Dec 2025 19:00:47 +0000
Files and hashes:         1: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=)
                          2: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=)
                          3: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=)
                          4: ays9--_IW8JzhtfNk76o0BfVsHs.roa (hash: m+8N0lTDKN6USUkq7MoOzNst+iEzsskPzpKLc4PITjQ=)
                          5: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=)
                          6: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=)
                          7: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=)
                          8: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=)
                          9: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=)
                          10: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: xz721mrBREuwKdlX7D2qnXtuXpcVmzTlivSueTilSNA=)
                          11: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=)
                          12: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:16:43:d4:dd:cb:8c:eb:47:7d:bf:4c:6d:45:8f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
        Validity
            Not Before: Dec 13 19:00:47 2025 GMT
            Not After : Dec 14 19:00:47 2025 GMT
        Subject: CN=a7d4827e840af3c7d2975f509207b8297979bbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:e0:d4:70:19:c8:1a:2f:5a:98:a8:cb:62:
                    a9:66:b3:20:b7:9f:cd:19:b0:5b:b8:a3:4a:c1:33:
                    a7:f7:aa:69:f5:d6:87:fe:0b:8a:df:4f:7a:bf:6a:
                    a8:c1:2d:2f:f2:65:71:05:4a:91:e1:bb:78:02:11:
                    84:f5:40:3f:db:d8:21:d9:da:f0:95:fe:16:63:13:
                    7d:f0:87:e2:b5:43:2c:ce:73:9f:fa:ed:c3:d8:52:
                    8e:cc:fc:d3:5b:ff:22:88:73:74:41:8b:93:e5:b2:
                    32:ff:93:f5:83:72:3a:79:07:7c:b0:20:c9:a5:90:
                    4f:3b:9b:dd:7a:c1:2a:40:6b:5f:cf:25:0b:5f:f6:
                    62:89:2d:64:83:0b:2c:41:63:c5:0f:a4:62:64:57:
                    8a:8f:3a:54:15:bf:8b:f8:3b:0a:14:51:6f:42:7f:
                    85:95:19:2e:1e:af:3b:85:57:f3:e6:09:6e:a5:50:
                    4e:05:d4:e4:8a:e5:9c:fe:e4:19:f9:80:80:45:4f:
                    36:6d:95:8a:3e:1e:b8:07:b3:a5:68:99:22:51:4c:
                    f3:43:b5:34:4d:fa:24:c1:e6:8b:40:7a:51:3b:8f:
                    d4:10:bb:55:70:74:0f:52:28:54:1a:a2:9c:b3:be:
                    4a:03:32:f8:65:ee:2b:ab:9f:fc:30:2e:49:b2:bd:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D4:82:7E:84:0A:F3:C7:D2:97:5F:50:92:07:B8:29:79:79:BB:B9
            X509v3 Authority Key Identifier:
                keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:42:9e:84:43:2d:69:a4:97:d9:38:6e:3e:c1:4a:2b:c6:20:
         29:a3:f9:07:5e:f0:d3:d5:24:81:28:51:b5:46:1b:c9:6c:84:
         b3:f1:c3:ac:13:8c:ab:20:53:a1:85:65:c5:12:7a:9e:51:f2:
         f2:1d:b4:fc:00:b0:11:2f:9b:66:d0:aa:8e:be:c6:7a:4c:7e:
         16:10:48:4d:90:73:09:00:e1:c6:bf:84:0a:ad:5e:f2:19:73:
         26:06:68:cb:02:93:dc:47:84:24:1e:08:7f:9d:4d:5f:2d:ec:
         8e:f0:b7:0e:82:6e:f6:7e:22:88:74:d2:6e:7a:82:c0:38:1e:
         6d:dc:20:78:07:4e:8d:24:58:7a:5c:6a:8f:38:c7:95:1f:56:
         f8:dd:ea:c2:89:2f:53:6a:3a:0c:cd:b9:20:c4:39:2c:e7:ab:
         e4:4f:e5:1c:6d:2c:1c:b7:39:75:a4:6b:b6:23:a9:44:83:a4:
         ee:a1:40:73:26:af:6a:69:80:17:6b:31:32:4e:ec:14:f1:40:
         79:15:ca:0a:ba:69:65:e8:31:5d:67:e7:7a:3d:e7:50:99:0b:
         15:bc:d9:92:cf:e3:5c:74:27:7e:f2:8d:3f:29:f9:dd:3a:22:
         2e:5e:12:24:3f:f9:e0:ec:03:f9:d9:a3:1b:02:81:40:f8:23:
         91:54:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 05:13:44 2025 by rpki-client