This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File:                     818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier:          1Xd6AoaBa+fcVIpNbCcj3ARYUo/wCL0X8+MGxFDfuzc=
Subject key identifier:   BA:1F:E3:4D:4F:84:45:D3:43:DD:F1:BB:79:74:6F:8D:10:3A:BB:73
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer:       /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial:       019B58D0E86C4E21D038DEB6EC8348A132FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number:          1794
Signing time:             Fri 26 Dec 2025 04:00:44 +0000
Manifest this update:     Fri 26 Dec 2025 04:00:44 +0000
Manifest next update:     Sat 27 Dec 2025 04:00:44 +0000
Files and hashes:         1: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: RiNfqmnB/Y/WgtK0rz4zPxNBNSn/Bor0tbPWTAiZaT8=)
                          2: POD0rcdBSvDIH2xQjNK7FTsBiSU.roa (hash: qqDcVkaCep5jyj7VmzlXWQJNTWjPppQG+dngjp5gRWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:58:d0:e8:6c:4e:21:d0:38:de:b6:ec:83:48:a1:32:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
        Validity
            Not Before: Dec 26 04:00:44 2025 GMT
            Not After : Dec 27 04:00:44 2025 GMT
        Subject: CN=ba1fe34d4f8445d343ddf1bb79746f8d103abb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:81:ca:50:f2:ce:63:22:db:be:0b:7f:49:
                    5d:81:14:3a:04:49:2e:6b:ef:67:6c:9a:cb:f5:94:
                    e9:b8:41:8f:11:bb:a8:3d:19:b7:56:7a:70:e3:dc:
                    95:8a:0d:d7:57:db:6f:d9:d4:cc:79:79:a3:57:05:
                    a9:b9:b7:2b:32:d9:43:0a:18:06:c6:84:cf:54:42:
                    54:c4:c7:7b:a7:45:5e:4f:94:1b:d8:ef:12:64:35:
                    96:c7:68:4d:a4:71:08:e1:d1:30:5e:43:c8:25:31:
                    94:c0:79:ab:ca:df:a8:29:52:f0:54:c1:70:b9:d0:
                    3a:2f:f5:e4:90:ec:92:14:90:b4:0d:06:09:61:3d:
                    1c:ce:cc:05:09:fe:5c:6a:a1:8d:a3:4d:44:b8:3f:
                    69:15:40:44:a4:67:8b:eb:e4:4d:9c:ea:cd:e3:ce:
                    6a:f1:f1:4f:77:89:93:70:9e:55:9a:d9:36:4f:5a:
                    94:84:a9:4f:83:aa:9f:6e:3f:6d:37:a9:d3:5b:42:
                    c8:3f:68:4d:7a:ce:1f:42:34:96:ff:2e:90:bc:99:
                    f3:c7:50:21:35:cf:79:a9:f1:e6:06:8b:3e:6f:dc:
                    3b:74:07:73:96:02:42:c1:1c:12:68:e8:55:9b:9e:
                    95:97:90:29:fa:19:c9:80:4a:56:20:59:b2:54:c0:
                    cc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1F:E3:4D:4F:84:45:D3:43:DD:F1:BB:79:74:6F:8D:10:3A:BB:73
            X509v3 Authority Key Identifier:
                keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2e:ab:58:fe:03:95:d5:30:8e:d6:ce:00:6d:f0:95:08:ba:
         4e:28:85:ab:f3:03:1b:8f:7f:88:b6:ae:c8:42:92:79:41:c4:
         bc:39:48:1d:dc:85:67:24:ae:35:93:87:2d:ca:06:ed:1b:0c:
         a4:37:73:d5:7b:3e:9f:5f:db:60:07:39:4a:7e:f0:1c:d6:75:
         4b:79:a7:6f:ac:c7:d4:64:78:69:35:03:d5:96:47:78:d6:c1:
         0a:c8:3b:ea:41:db:23:62:5e:e8:25:8b:4b:d7:63:74:f1:d3:
         ed:cc:80:ad:3b:b7:ac:24:f2:8e:52:58:df:e6:ec:77:11:50:
         cb:e3:1a:66:74:cf:a1:95:07:77:17:c9:98:95:4f:10:94:cf:
         5c:b5:a1:35:c9:de:69:61:8c:cb:5e:69:f6:86:e9:40:8c:0e:
         1c:28:da:a7:29:33:07:bc:e9:22:ce:20:58:b0:3f:7d:7d:cd:
         8c:5a:8a:d1:9c:f3:c9:8f:5b:3e:fc:7d:bb:71:a3:e8:40:52:
         7f:e0:52:b5:84:1f:35:b2:0b:e4:ed:91:15:af:97:c5:85:2b:
         8d:c9:02:3c:c7:53:56:7c:14:ea:ff:d1:39:51:dd:a1:15:d4:
         96:83:dd:e2:8b:26:93:2e:e5:ab:f1:63:d4:b3:77:6e:50:9b:
         83:08:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:17:06 2025 by rpki-client