This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File:                     S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier:          AmB1MA/sOTZMvon0G3DoOJXG3GG73VpwLGoFsq+F/O8=
Subject key identifier:   27:83:78:B6:2E:AC:3A:DB:3C:C1:F3:F7:C9:49:9E:D8:C4:98:17:7E
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer:       /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial:       019B5AF6BBAD61406D40BD5FE6F0413F4B0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number:          1677
Signing time:             Fri 26 Dec 2025 14:01:17 +0000
Manifest this update:     Fri 26 Dec 2025 14:01:17 +0000
Manifest next update:     Sat 27 Dec 2025 14:01:17 +0000
Files and hashes:         1: 8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa (hash: nQrHTPYYHsaKcsU7K7NBUNZKUwu8kquBvMwb0t9InZk=)
                          2: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: baRfN/FKTF2X/aJy2lM9enaCl1GtW0dVT6UXpBgKPQc=)
                          3: rP00SjYOc7kI37LHeR0akx0WLbw.roa (hash: HwxnGSpBCBewjdHMOMeKuWHUwmAgwVnpqM4EW67Q304=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:f6:bb:ad:61:40:6d:40:bd:5f:e6:f0:41:3f:4b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
        Validity
            Not Before: Dec 26 14:01:17 2025 GMT
            Not After : Dec 27 14:01:17 2025 GMT
        Subject: CN=278378b62eac3adb3cc1f3f7c9499ed8c498177e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:c0:05:e3:34:12:ee:79:de:2d:95:be:b9:
                    12:6c:a5:b2:da:5a:86:8c:53:49:40:94:08:41:b5:
                    ba:fb:24:16:9f:b0:48:03:07:5a:cd:b4:62:2c:66:
                    bc:77:23:df:9b:64:f9:ae:8c:7b:b8:8a:4c:77:e4:
                    87:02:14:89:94:68:db:53:d3:c8:c0:d4:45:49:1b:
                    bf:a9:77:b7:e6:03:91:c4:e5:3d:90:f1:37:bc:6a:
                    f7:b3:17:7a:d7:76:1c:d9:38:8f:d3:ca:a4:08:d5:
                    29:a8:ef:54:dd:2c:ea:cb:e1:21:a9:c2:fa:ed:ab:
                    4d:c7:9b:9b:03:4f:4b:77:40:6e:9e:01:b2:e2:1f:
                    bc:6a:e7:f8:b5:c7:a7:91:dc:b3:70:67:ff:65:89:
                    ed:66:88:61:05:3d:9a:db:3f:7e:c3:5e:7b:3f:30:
                    23:8e:19:44:d8:98:5d:d9:fa:1c:a9:6c:12:6f:c4:
                    a9:fc:85:3b:12:93:3b:67:4d:24:10:4b:d3:37:d5:
                    d8:47:b0:e5:7c:c7:c5:8c:e6:c2:3d:82:d0:c4:fd:
                    97:09:22:05:c1:8c:ca:37:7e:2b:55:29:f7:55:ad:
                    10:7e:c3:2e:e7:76:87:c5:fa:de:3b:2b:64:30:6f:
                    a5:71:87:54:41:3e:26:71:06:a3:45:d6:38:10:d0:
                    8a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:83:78:B6:2E:AC:3A:DB:3C:C1:F3:F7:C9:49:9E:D8:C4:98:17:7E
            X509v3 Authority Key Identifier:
                keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b8:01:9b:c5:66:e4:b4:42:42:eb:a8:9c:2a:75:59:29:2a:
         ab:c8:f7:52:94:fa:86:e9:23:29:46:cd:c7:08:8f:c6:25:fc:
         8e:fe:3c:a4:19:ec:a0:49:9c:7f:6c:26:37:35:58:01:2b:26:
         4d:bd:77:fa:ad:83:c9:24:3f:c3:55:05:17:0f:e2:86:17:3a:
         57:3d:6d:9e:a1:ec:2e:ae:2b:5e:81:11:31:20:54:6e:76:e9:
         2b:bc:51:fc:bf:f4:69:ec:17:ad:0a:78:45:4c:f1:37:5d:6f:
         0f:7f:7f:a9:59:21:7b:e7:80:fe:97:df:f1:81:34:59:97:ed:
         db:69:41:5d:51:ff:74:0c:92:1c:b0:0a:8c:26:91:ec:c2:5d:
         83:3e:e7:78:ce:9e:4c:67:51:c5:2a:93:44:fe:58:bf:fa:86:
         ad:6b:82:0d:42:6c:66:e6:fc:b9:74:ef:a6:9a:43:28:e7:35:
         b4:ca:11:5d:38:b3:6a:2d:10:fd:3a:70:7b:12:56:5d:3c:0a:
         78:ea:54:ac:aa:7c:40:7c:c7:b9:47:42:2d:98:82:8c:3a:d5:
         da:93:0a:aa:74:34:f8:0d:c7:0f:89:75:f9:1f:9b:57:3e:f9:
         b7:f8:9d:9f:a2:4b:67:a7:8f:1f:5b:29:32:80:52:6c:7c:e5:
         49:0c:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:44:22 2025 by rpki-client