This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
File:                     1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft (raw, json)
Hash identifier:          StCp2CE5CcSIR177IIle3T+PrhaizRa817cjqVqTltM=
Subject key identifier:   7A:4D:92:D0:B1:7C:AC:BA:0E:51:62:B9:F7:2C:56:71:C8:49:48:8C
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Certificate issuer:       /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial:       019B0859A863B96D9906B18EA17529B183E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
Manifest number:          148B
Signing time:             Wed 10 Dec 2025 13:00:52 +0000
Manifest this update:     Wed 10 Dec 2025 13:00:52 +0000
Manifest next update:     Thu 11 Dec 2025 13:00:52 +0000
Files and hashes:         1: 1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl (hash: jU8B077MBqfklmCyYNBr342ggoESVn/D5dWTlx2YyD4=)
                          2: 7bkiaxj1mJyn5f4KlBTJLur42vQ.roa (hash: roAqW3cn2LtovgFslg2PIXk4GMEbNrgZKpv5sOiiSXE=)
                          3: ZDtb6VK_z3ewy6AjomuVHbdGB9A.roa (hash: A+fMJqKL65CjFiSFdF9jXOzQklOA0P7AbHo2uxd2CEY=)
                          4: mEGQsBNEE6R4v2nvqd09POEfynA.roa (hash: lk6cIpuyIvmnE5ZP8kUz8Ag2VnywuJlr74x0buev+f8=)
                          5: pbC0h4-ZQBAU6ItrChfkOJ1ZY10.roa (hash: PH8eMe1Sc0Ex/e3D9TFvy3te90ULqyE7p3IjYiFbYKY=)
                          6: rKizpanRwBJzijXvx7bJn1rhw_o.roa (hash: 5muARz3AtNkaEYoR9PPKe6ZNmmAul/betoVV1PW2+3g=)
                          7: s1Pt-54WEyVmli6rDAOg5exksLI.roa (hash: +qBfOcJX2O/bn+twU2P+RzeeUC9ErPq85SULjl0hJS8=)
                          8: tvRSeXQrAZZAT29yjtZ_7KQawB4.roa (hash: hpP1eRenYzQA7QTMLizhwWDHvaoDIHsy9V8YHR+DYto=)
                          9: vTxpWsq09BWKUrPdlE-R7slfYvE.roa (hash: stVMdMmGc0TbKwRIFj7GhH7rI1l5EwcJOw+4r3qAf4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:59:a8:63:b9:6d:99:06:b1:8e:a1:75:29:b1:83:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
        Validity
            Not Before: Dec 10 13:00:52 2025 GMT
            Not After : Dec 11 13:00:52 2025 GMT
        Subject: CN=7a4d92d0b17cacba0e5162b9f72c5671c849488c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:48:2f:57:d3:bd:35:17:cc:86:e5:c3:90:
                    2c:46:c6:0b:03:4b:20:4f:13:8b:3e:25:81:74:fa:
                    9c:f6:0f:9d:b3:8b:10:8f:40:2d:4b:bf:11:8e:b3:
                    21:7a:3a:e9:11:96:1b:ec:7b:96:57:cd:98:be:77:
                    56:46:57:81:90:49:bf:78:59:6d:37:6f:de:59:97:
                    b4:dc:34:84:4e:db:d4:41:7e:24:03:5c:19:a6:fc:
                    0b:c1:c1:3a:3e:6a:0c:d9:e6:50:2e:07:06:60:52:
                    03:f3:10:ae:71:03:7d:d4:89:b4:aa:c5:bc:ad:57:
                    3b:45:2b:ae:3e:a9:b3:90:43:94:4c:85:eb:d9:7e:
                    33:02:8b:d8:22:36:a0:8a:15:3e:a5:9c:03:2c:54:
                    4b:94:b2:b2:fb:dd:23:7e:7b:c0:2f:3f:14:0d:b4:
                    23:ac:5c:83:43:3f:1a:89:72:1b:c2:f1:53:23:d1:
                    4e:56:8d:ce:3b:82:74:78:ab:32:fd:17:c8:fc:5f:
                    6c:9c:a4:5a:4f:55:e4:1b:05:2a:28:a2:34:69:4f:
                    66:2a:43:fb:39:0b:ec:47:a3:86:1a:2f:d3:21:b6:
                    33:27:25:ff:63:3a:05:a5:fd:30:b1:b1:40:3f:e8:
                    b7:34:28:de:08:f6:60:0d:0f:69:00:24:1f:5b:76:
                    e6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4D:92:D0:B1:7C:AC:BA:0E:51:62:B9:F7:2C:56:71:C8:49:48:8C
            X509v3 Authority Key Identifier:
                keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:31:90:5a:83:46:44:cb:29:49:2a:94:d9:03:f1:b6:fe:0f:
         4a:ae:79:4d:5b:4f:03:4f:bd:9c:bb:2b:37:e6:88:66:e6:81:
         55:f9:25:6a:e2:c0:f4:6a:b7:04:ab:8b:bd:06:86:74:e5:31:
         27:c9:10:61:a3:5f:14:7f:98:ac:83:70:7e:d7:7b:1b:d9:7d:
         2c:70:40:fb:9d:8c:0f:fb:89:40:b0:12:bf:e4:c5:02:43:15:
         ee:1d:0b:a6:99:b7:c2:5e:71:b8:8b:82:2b:41:61:47:63:a5:
         54:4f:7e:e0:10:e2:a1:e6:9b:85:aa:c6:e0:00:fb:33:bc:11:
         39:6f:30:9f:1c:42:57:a1:d3:77:8e:77:4a:3c:eb:c7:32:0d:
         3a:48:c9:43:d5:94:c5:5a:86:e4:e6:38:7b:bb:ee:a1:fb:89:
         0f:41:39:5f:34:58:5f:10:f6:e7:9b:0b:17:1e:8f:77:21:fe:
         16:8d:fb:16:5b:b7:58:d6:cb:e6:30:98:84:04:ca:a7:2d:2b:
         d2:f5:bb:a3:0c:65:48:0f:cb:10:d1:c9:e6:66:78:ca:9e:d5:
         50:d5:3e:5c:d6:e3:1f:4b:a0:65:06:1e:dd:9c:53:0c:a2:b7:
         c3:98:5f:b0:5b:57:fb:34:0d:0d:c1:ae:0e:85:8d:5f:d4:53:
         09:ce:48:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 18:27:19 2025 by rpki-client