This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
File:                     rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft (raw, json)
Hash identifier:          gKQvn8il4jVR6Vzw4l90kWp7zVTOo+U0ygZeqKRzO2U=
Subject key identifier:   C3:21:4A:B5:EC:DB:20:06:55:CE:DF:E6:B7:07:92:0C:A7:12:97:1A
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Certificate issuer:       /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial:       019B0CDBAB17A601DDC3E719D529878A0C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
Manifest number:          1798
Signing time:             Thu 11 Dec 2025 10:01:21 +0000
Manifest this update:     Thu 11 Dec 2025 10:01:21 +0000
Manifest next update:     Fri 12 Dec 2025 10:01:21 +0000
Files and hashes:         1: 18oxWhArE0RhfvzLv5hZQE6tik8.roa (hash: PaOcC02WGlDWNTRr4QEBVY28nvkxbfJiDXU25ZKRrIU=)
                          2: 2aV3N-zVZuLxH1xgoESnI1WsF2U.roa (hash: kY//omI2YAMe7y/9xDO4ClcNSgGn4TldTCED2msOL0w=)
                          3: 39MxobbrpAQOtON-sui4Ceno-cQ.roa (hash: N9pxd/h1OsCWGB0hBqC8JheO5FgETKpxzAleviuHpyk=)
                          4: 5XvdTcJxyA4Pm4_pq9JEbtFKUUI.roa (hash: GwuUh1bHH+3sFVWj2a9pfKD+XUZ4KqBl4+B6GijU6Ls=)
                          5: B9R7j-0-BgaCSy3boeQLonLKm0k.roa (hash: WH3s6YayhFNQdUbUDmK2H25xLVDh9LZv/S7MHi6F+EQ=)
                          6: HPL5SSm-juGYaMS6oE3ZODqLcNQ.roa (hash: FXftbE3hkNwaKhmnG5qdVD3or4AxJTzdSUUIBPayFjE=)
                          7: HjFRJwOWDqBnApxaTtF0TpsbyYQ.roa (hash: OJbfZZsxLOCgQrK35DXHBmPs1yNnWYKSyp7qwV6yc2A=)
                          8: IEpIdrCrgoruzvNRphWAKjLFvck.roa (hash: 1hcuHiArqaJrsWO8fxvod3HELsUVIN5XphYvjL0kx6I=)
                          9: P8ZGABCIgKC_ep214wpUbefu2FM.roa (hash: Y4Pa9YGKLB8ROiwx2DGtA5aKxDohmm3YX8gn3D9Lf4U=)
                          10: Pr96fu6AKoC9ocgKy4gmk6FiiQ8.roa (hash: oICV/Rv8Fz6p+4kh6JDj/CQGRipc30QQX+8qXRhhMHw=)
                          11: SD_VRQTvMC7vuyqV_wFD-fKVUsY.roa (hash: mBhitXOwr6QfmoyB84HxFE/38Mo9fz7gg9e1zxivAvQ=)
                          12: TQZJDaTm6cQmDPuEOPxapZkCISs.roa (hash: 71cxCfqZNZizAvgCO5BZPTvWQFbmobZzVgCMTpsT5bc=)
                          13: VaCnyWX6jU1U7x4phZq4UQ3hGtE.roa (hash: HSskmvZRBur17htQDGL9L7zkIxXiCpAQFXJXh8sPXXw=)
                          14: XZes0nTuYVnyyfrFPRRjs8Jx51Y.roa (hash: 0BBkRTYLYp0bNpkG9KKvJ443VFVkJBIrpGAocXr8JCM=)
                          15: YtuOvUFMVo09mKrknt-ojMdPYWM.roa (hash: T3A2RIZNQBMqUeBCZdKs7FFJQLtQse8C79U49VQid+I=)
                          16: ZD4zfJBXtlUtpYCHz7StMH6hulA.roa (hash: c+18Xi5sqUiw5ex0D7d55PJHoiJTJkLgBs1qlEL1OYE=)
                          17: _7kpaS2UowFnBiDzlZIsC6T4jPU.roa (hash: Uap1nQF5HIXbd/fuDO9f3i3zi5VRkj05CB6xiL5G0NM=)
                          18: a8TJt2aulUTAwXgy16sRbNyfXr8.roa (hash: tBtH99QMKjJnlGV23+W6NtAMP0SBV9FfAh6GK1v5vA4=)
                          19: bRY87MFOFRXK_3ijOZHxEiuxCSU.roa (hash: ZoNRVUnVuV1tqZ3OI46I3nsh2LZo1vS0lIAk/gHkBmI=)
                          20: ej3Rsdg7iZ6dO_YprWJoHaQvuKI.roa (hash: hvD3zqBlyrs1GGJZ6xBTzfTDwo6icPaxgxmp7ExKh8c=)
                          21: fhdkzDTpIIzXI7UR-RRqfn8yYK8.roa (hash: 5G8k94mJ+piuCkdBnO5V9g3FiuOM9TQAN0h6Zu9iGPI=)
                          22: iSVHW1QIe7YgLfhsMRsWXDdHgaE.roa (hash: xfy4rZ1pJspjyIzKFNFqMhcKLJ7Q1syk5sZcIn8SuS8=)
                          23: ibQxcJ8BcsDznHwW8cvvdWCtIaQ.roa (hash: pIty12QAvgK/GvUKpxuo60iKFff8hEDBVoxlkVE06EU=)
                          24: ksJUh4hG5S_P4p1TTcqh_SUbIjY.roa (hash: mTM6a+O+0K+OAJZ6HZM/A5EVh+VOa0DKYpPbMPy3aoU=)
                          25: nlW2BhzbrhZqQt_kjdeJrjsFzqg.roa (hash: isLx6NhOWvsktPKmSuP99hPtTj1m+Qrqe7ue+9WegW8=)
                          26: rmopece1hPnDrxGUQXbePfbuW3g.roa (hash: LzehuaAVFk7vmeksMGf8ccgZKNu8yikV/yTbs25QbhI=)
                          27: rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl (hash: HUy73/cYJOKsvgQZGPhQo1z6M4cJvoC8fKhkte5vALQ=)
                          28: t3r2cSXLI7fMZi5tra_aZAQyFak.roa (hash: v065bTN3/ayGHNsmj2ZNOgQk8b4xLfobBPDbQcgY5/Q=)
                          29: x05F2Z9Ii5NfBHcv5t9U3DVcvc4.roa (hash: TCunqfbRifiNySN7ycYsI0OCZSixtWJdHstGs7qYQWo=)
                          30: z0zrbZGTZ0iqKhgiO4o-T6JBleI.roa (hash: ToFqBI4XuElIAABZ+J4JnW1Geuu40xhhzkV2D52WyP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0c:db:ab:17:a6:01:dd:c3:e7:19:d5:29:87:8a:0c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
        Validity
            Not Before: Dec 11 10:01:21 2025 GMT
            Not After : Dec 12 10:01:21 2025 GMT
        Subject: CN=c3214ab5ecdb200655cedfe6b707920ca712971a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:6c:9a:5a:47:24:2c:6b:d3:b3:83:b6:a5:
                    1b:4b:5c:82:a7:73:4f:99:5f:c4:86:54:80:b2:23:
                    2b:14:99:57:9b:9d:cf:da:05:16:a7:0e:68:ac:15:
                    02:d3:a0:9a:4f:3a:f2:ba:d5:6f:2d:a1:65:e3:49:
                    9a:11:84:33:f8:71:08:dc:40:0a:1e:9b:c9:fc:72:
                    f4:e1:d2:c7:d0:ce:d0:f3:51:56:29:b9:e1:64:3d:
                    61:e7:4a:0e:51:72:55:a5:e0:c9:c9:fa:e4:9a:ec:
                    d7:d6:5d:27:80:a5:ba:ca:9e:5f:58:0f:65:fd:03:
                    0a:5c:dd:95:05:3c:11:98:6b:42:6e:c9:0e:ac:8c:
                    a2:e2:21:f6:a0:95:7f:97:79:96:fd:62:f7:92:53:
                    28:4e:fc:d6:f2:06:5b:a9:f4:ff:0b:3a:d0:6e:aa:
                    0a:f9:4a:ee:33:28:c5:07:52:f7:24:ef:8e:fd:da:
                    67:e2:00:18:72:fc:f8:aa:25:7d:7d:1c:06:c6:a9:
                    33:9d:a6:44:38:95:85:47:ec:9c:4e:79:45:76:46:
                    9c:4d:5c:82:c1:07:89:10:de:71:34:3f:08:4d:3f:
                    83:9d:a9:a3:ea:53:ed:c2:86:80:15:2b:0a:2a:cc:
                    49:74:85:73:af:90:0f:28:8d:af:16:2c:3c:93:47:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:21:4A:B5:EC:DB:20:06:55:CE:DF:E6:B7:07:92:0C:A7:12:97:1A
            X509v3 Authority Key Identifier:
                keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:95:fd:95:2b:22:d6:05:57:b3:3a:d6:2d:67:aa:52:2f:68:
         22:d4:a2:b1:f3:74:07:80:5d:58:81:e6:f7:ae:39:ac:4c:52:
         09:71:94:3b:c8:a3:5d:09:61:9e:23:cc:4d:76:78:38:06:ae:
         d5:b6:88:5b:7c:b7:4a:b5:a8:c7:be:64:6b:34:97:8b:20:ac:
         08:a2:fe:20:3f:97:da:e1:95:d6:b2:5b:61:1d:7b:b2:eb:a8:
         3c:0c:f3:f6:ff:33:ba:45:8b:2a:d5:04:93:7c:1d:42:a1:b5:
         18:bf:35:b6:c9:ab:b4:62:a1:8d:32:12:aa:3d:30:be:58:82:
         c3:e6:a3:73:c7:9c:38:17:4b:20:0d:c0:82:09:f7:15:0c:8c:
         bb:93:dd:69:be:25:78:32:2c:b1:59:54:70:f4:b4:fd:7f:ea:
         62:66:2d:d2:ec:18:98:1a:78:4c:8c:8e:c3:5d:0e:7a:d7:c7:
         d3:f8:cc:3c:2d:bf:3a:1c:48:3c:90:7c:f3:69:76:ec:89:28:
         2c:a3:a3:c9:61:bc:c7:d7:98:cc:a3:fd:3b:17:57:a3:70:ea:
         43:03:2a:0c:da:86:d3:32:f9:db:da:59:61:3c:99:fa:bd:f6:
         f9:a9:17:a8:86:3d:07:ed:8e:ae:62:12:3c:58:96:54:90:77:
         11:ce:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 18:44:10 2025 by rpki-client