This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
File:                     4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft (raw, json)
Hash identifier:          NyokkP2Pk/rS6aJNOsH5mhYmf2DzmNFEoK9S5eH65EY=
Subject key identifier:   53:37:21:7B:3E:D6:9D:F6:CE:C7:75:92:74:98:47:45:B1:38:B5:5B
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Certificate issuer:       /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial:       019B12029F8E62C5CF6AC0F5AD80CF874960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
Manifest number:          1645
Signing time:             Fri 12 Dec 2025 10:02:00 +0000
Manifest this update:     Fri 12 Dec 2025 10:02:00 +0000
Manifest next update:     Sat 13 Dec 2025 10:02:00 +0000
Files and hashes:         1: 22dU6SeEOk5lA-ybXbkk_F-RHPI.roa (hash: opc+OMEhIAAy9MN7L41tT+6qaGIbCCKGC8RYJFu35pA=)
                          2: 4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl (hash: xExBtda8x31QUk1fSSzZJ9LAWAloUfG+ge5W0Ro7rp8=)
                          3: 4qLU7z4WKhDamvGgGu3FYecZcUk.roa (hash: 9qwkIu/qIJXyrkkz5BO3j8+teV1VtOtIs2m6qOT2uI4=)
                          4: 7RaGRpteAPU-JEOa6gyOeUUaz1M.roa (hash: OqBBLrE7nX8ZR8+lsbAyGBi0x2gZcydxjiv43PsnDSA=)
                          5: aFtgicTtP5TQ2xvmPhZkgfQfMmE.roa (hash: XOi5YDN2Wfonsac/Qx8Uho2A7mZbabtT5+5wbH9JkHA=)
                          6: iHNmmkHnkrPi1F2vS2DFfQgsEUE.roa (hash: 3V9ILLN3TdUu9XJlmFd4WmoL+cfzk6qYW28NQJnYdZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:02:9f:8e:62:c5:cf:6a:c0:f5:ad:80:cf:87:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
        Validity
            Not Before: Dec 12 10:02:00 2025 GMT
            Not After : Dec 13 10:02:00 2025 GMT
        Subject: CN=5337217b3ed69df6cec7759274984745b138b55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:66:42:87:c3:0d:b9:23:06:40:d8:2c:f8:
                    86:a4:d2:05:fc:e3:1c:6d:79:8d:48:ba:1f:0d:11:
                    fb:b7:39:0f:11:15:64:09:41:b5:04:85:94:8b:99:
                    5a:04:be:31:e0:dd:bd:77:8e:d1:70:9c:11:c4:16:
                    f6:93:ce:cd:4c:0f:27:52:66:79:af:f5:28:82:64:
                    8d:e3:ed:67:18:f2:f1:d7:6d:c7:7d:e3:56:42:9e:
                    97:b9:11:78:e5:11:1d:31:14:79:a7:18:ca:99:dc:
                    72:fe:1b:f5:b4:e3:4e:50:95:41:d4:54:96:60:31:
                    b9:73:9b:b3:af:c6:0e:05:14:fd:f5:b0:f0:16:96:
                    8b:85:97:a5:36:64:03:78:f9:3d:1c:f5:c4:b0:33:
                    77:2d:35:3e:e3:ad:65:eb:8a:b2:97:0e:f1:2e:00:
                    80:ca:68:0d:0b:07:8f:6a:15:5c:a2:80:09:16:c5:
                    fd:89:97:46:1d:b6:fd:92:dc:a8:e9:0f:92:4f:ad:
                    af:9e:e0:b4:79:2f:40:cb:de:27:54:18:f2:1e:55:
                    b3:90:2d:11:bd:22:35:12:5f:62:f5:6c:f6:04:17:
                    2f:4e:5f:b3:15:79:24:e9:91:bd:f6:a9:f0:5b:7e:
                    0d:5b:52:2b:e8:4d:a8:01:b5:85:8c:a2:1c:1d:4d:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:37:21:7B:3E:D6:9D:F6:CE:C7:75:92:74:98:47:45:B1:38:B5:5B
            X509v3 Authority Key Identifier:
                keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:72:e6:7a:61:59:74:8b:d9:f3:88:d0:33:45:a0:c1:75:7c:
         d5:c1:ba:73:7e:94:ff:09:ae:28:9c:4e:6a:0b:31:05:93:ea:
         bd:2a:86:da:99:9b:68:18:14:67:1e:01:5f:ff:33:57:f5:75:
         ec:0f:ae:7b:45:0d:f2:7a:6c:04:b1:8b:13:37:8b:31:ce:e2:
         24:1c:bc:b4:95:b9:62:89:c3:80:0f:ce:10:72:95:1d:02:37:
         a3:e3:5a:26:ba:fb:f8:49:33:be:2c:2e:f8:0f:c0:8d:1a:75:
         8b:7e:87:77:be:7c:7f:6d:53:ab:2c:fa:33:f0:e4:41:e9:89:
         1c:99:d8:4d:3c:16:ee:03:47:a0:c4:2d:bc:ed:cd:7b:12:f6:
         da:ef:d4:9f:11:40:11:f6:9e:05:fd:bd:09:fe:8e:3f:de:eb:
         70:f0:8a:33:5f:73:3f:26:21:68:31:30:65:58:ef:63:db:ff:
         86:dd:95:73:e5:0b:00:67:e4:26:08:b0:75:04:9e:8c:69:b8:
         cf:65:96:51:cc:34:6b:4b:4e:83:c8:8b:3a:56:e1:9a:fa:ce:
         2e:47:99:c1:98:29:f8:9c:1f:b8:60:9c:c5:49:51:a9:02:3f:
         3e:98:0d:d0:51:a1:89:61:6d:83:8d:a4:8b:4e:17:47:0b:d9:
         cf:83:66:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 16:51:56 2025 by rpki-client