This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
File:                     SEAyWZVCgEO12QXY0sF8MCuLNGU.mft (raw, json)
Hash identifier:          0aYZLkiTDY+s+0Gt5/H7oT+KyWhaa4YzMDiH1Zchcaw=
Subject key identifier:   7E:20:F4:66:D2:9D:F7:B5:59:A7:48:00:04:22:BF:43:54:43:69:BB
Authority key identifier: 48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65
Certificate issuer:       /CN=4840325995428043b5d905d8d2c17c302b8b3465
Certificate serial:       019B5976D4CA4275EA30C2FFE8A679B6DEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
Manifest number:          1794
Signing time:             Fri 26 Dec 2025 07:01:58 +0000
Manifest this update:     Fri 26 Dec 2025 07:01:58 +0000
Manifest next update:     Sat 27 Dec 2025 07:01:58 +0000
Files and hashes:         1: SEAyWZVCgEO12QXY0sF8MCuLNGU.crl (hash: Vo2CbsT1G7f3GZLlkIIw+8c6eeGl+Cjqgdd0+Wu/p2k=)
                          2: i7O_oqy1hOvPc2P58vmTI6wRVkU.roa (hash: ySE4UK1lU4KlZ7T7JZOZsfcplexjqn6fZrZ127xQdOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:76:d4:ca:42:75:ea:30:c2:ff:e8:a6:79:b6:de:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4840325995428043b5d905d8d2c17c302b8b3465
        Validity
            Not Before: Dec 26 07:01:58 2025 GMT
            Not After : Dec 27 07:01:58 2025 GMT
        Subject: CN=7e20f466d29df7b559a748000422bf43544369bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:76:85:3c:6f:f0:77:65:1f:f1:42:a2:8d:88:
                    d2:81:59:b6:f1:df:48:43:71:52:b2:b5:91:6e:d1:
                    38:d8:74:71:43:86:ad:68:37:24:de:68:f8:28:6b:
                    34:b8:da:1c:4f:84:ec:c9:23:4c:06:e5:a7:3e:85:
                    2a:3b:b4:ba:4b:66:86:36:47:86:98:5d:cf:7d:87:
                    eb:ea:11:38:c6:9f:f8:47:7d:7c:f2:70:04:a6:51:
                    06:ce:3d:61:a2:e1:dd:49:95:8d:49:33:3a:3a:0d:
                    60:58:6d:51:f6:b2:7e:14:89:4f:07:53:f1:6f:bd:
                    bc:62:f2:de:fc:b5:03:66:3f:85:1f:dc:b2:68:e6:
                    9c:61:05:77:90:9d:30:37:8f:0e:7e:8b:9b:c8:2f:
                    fd:f0:95:0a:40:ec:38:91:90:27:b6:7e:44:95:93:
                    81:5f:9b:e5:11:c4:75:f6:47:10:ef:6d:d2:58:42:
                    0c:3b:9f:99:69:76:ff:65:1b:a8:34:21:63:dd:66:
                    12:a5:7b:5d:2f:d7:d6:6a:8f:ea:a6:13:ed:37:9a:
                    1c:d9:e8:31:7a:5f:8c:88:ab:e4:61:4c:80:1f:dd:
                    ed:3d:22:2d:ae:e5:32:af:06:a6:8b:49:4b:4c:a6:
                    fe:95:ce:36:fb:43:d3:21:38:e2:19:81:f2:bb:ef:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:20:F4:66:D2:9D:F7:B5:59:A7:48:00:04:22:BF:43:54:43:69:BB
            X509v3 Authority Key Identifier:
                keyid:48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1b:10:b7:56:d6:e8:1e:7b:7b:f5:74:69:ee:59:5a:0f:ca:
         42:52:d2:a6:8f:41:26:27:13:38:83:87:a3:f9:4a:c2:ce:03:
         9e:9a:0c:71:6c:3b:e0:5b:dd:c0:e5:b8:bd:f9:47:4a:79:47:
         38:84:6a:0a:a1:ee:59:a7:34:03:12:fc:10:66:21:c5:b2:cd:
         4e:e9:cd:5a:fe:54:6b:0d:d3:78:a2:c4:4e:57:1b:bb:d7:20:
         76:e7:cd:38:73:cb:1b:ce:60:7e:94:c2:d4:4e:3a:d2:c9:bb:
         b4:34:1e:85:29:35:77:da:55:5f:67:37:89:5c:0b:08:67:fd:
         5e:2b:57:a2:85:24:17:5a:b0:3a:00:21:94:fc:d4:3b:a2:09:
         14:32:71:71:79:53:e5:19:da:31:48:e1:a9:e6:48:f5:f2:4e:
         1c:53:0c:7c:47:1d:13:bc:db:1f:c0:d1:bb:d2:49:95:51:6e:
         03:59:b5:8b:0f:fc:ce:df:97:97:e2:99:23:3b:b4:a8:d1:21:
         d0:e0:b9:e8:55:79:b4:b4:3a:fe:08:b2:c3:0a:35:b7:13:46:
         2d:6f:80:bf:3c:37:8f:56:64:5d:10:e9:dc:ba:b0:27:60:0d:
         f4:cc:9b:27:6b:97:37:24:1e:c1:bb:cc:51:77:f5:07:8c:e3:
         69:5d:82:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:01:56 2025 by rpki-client