This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
File:                     4WgoY-mYep64ZougfJbJmhst_mk.mft (raw, json)
Hash identifier:          KGk3e4DjNzMl60KBmDAsGZPpzBZxJMTF/tLNgp9YwaY=
Subject key identifier:   C6:F3:90:69:AE:C4:EC:00:1B:76:0E:50:7F:64:E4:1C:C2:42:A7:86
Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
Certificate issuer:       /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Certificate serial:       019B7D4B55ECDD85BD37E24D1306D997D655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
Manifest number:          011C
Signing time:             Fri 02 Jan 2026 06:00:47 +0000
Manifest this update:     Fri 02 Jan 2026 06:00:47 +0000
Manifest next update:     Sat 03 Jan 2026 06:00:47 +0000
Files and hashes:         1: 4WgoY-mYep64ZougfJbJmhst_mk.crl (hash: JvmQz5a9wQJBGw9qr9zpGpcJSORBUA5/60YhxZxTkdM=)
                          2: Ac2bylIr7B437ec52nmYNkxcBLU.roa (hash: NVzCCl4oqQBqLlnzk4NHLtjdOZIYGTwFiCs0i6US8YQ=)
                          3: VurYQADeNAyQZfVqHtE93Y07CDc.roa (hash: zo7Q7XfiMqpPBNsTQ58E9qm/cSZ4esMUjH52zOEyenA=)
                          4: ey-McRgW79AZU_fzpE-27yI2jAk.roa (hash: pO+sInd8rxx8H+MS6Ps1T/UlLYjOIIjg8OASDn/RsGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:4b:55:ec:dd:85:bd:37:e2:4d:13:06:d9:97:d6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
        Validity
            Not Before: Jan  2 06:00:47 2026 GMT
            Not After : Jan  3 06:00:47 2026 GMT
        Subject: CN=c6f39069aec4ec001b760e507f64e41cc242a786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:56:ce:44:54:69:70:43:17:75:2b:c7:39:
                    d4:3d:06:5c:2f:81:f6:00:2e:d1:57:f5:08:f3:d3:
                    40:e2:8e:29:1f:6f:c7:8a:96:b4:fc:5d:8a:4f:32:
                    82:e9:20:5e:a7:2c:dc:25:56:c8:f6:81:82:cc:d3:
                    48:11:18:9d:51:c1:85:1a:0f:de:d5:99:e3:d0:af:
                    72:d5:14:4b:b1:bd:b4:72:0f:f4:f2:11:67:e6:40:
                    e6:fb:d2:5a:9e:e6:85:92:d1:d8:fa:44:74:8e:f1:
                    fe:b1:eb:74:3d:99:1b:aa:cf:01:cc:dd:03:e6:16:
                    a4:88:40:4f:b3:65:a5:f0:66:f3:75:c1:75:c2:9a:
                    98:8e:cd:ee:08:fa:f0:c3:34:21:26:bc:43:99:79:
                    4e:2c:a7:f1:1c:04:98:e6:e0:34:60:c1:a6:0e:d1:
                    57:27:00:b4:d6:81:a2:6d:2d:c1:2a:6c:a4:08:4b:
                    67:d5:af:f7:5d:7a:70:3a:0d:f9:df:21:a6:42:e0:
                    cf:6d:68:8e:3e:22:f9:78:54:40:b2:de:d6:08:e2:
                    e8:57:8f:35:90:a5:ea:77:91:3d:e8:6b:a4:ba:34:
                    3c:13:77:72:0d:fd:f2:43:3a:9d:ec:a0:5d:b7:0e:
                    e1:49:31:86:ae:19:2d:1c:c3:0f:23:48:77:7c:5e:
                    54:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F3:90:69:AE:C4:EC:00:1B:76:0E:50:7F:64:E4:1C:C2:42:A7:86
            X509v3 Authority Key Identifier:
                keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e5:24:b9:2b:63:2a:5c:f3:e9:1c:54:60:88:67:3d:be:79:
         53:73:5e:d8:bc:f3:b1:22:a3:02:0f:b7:6a:d0:70:46:a3:c4:
         49:92:99:13:68:70:c7:0c:81:39:de:f8:26:5e:1f:91:26:5d:
         fb:9a:a2:0b:87:d4:00:d6:c9:3f:84:db:1b:af:16:58:15:e2:
         19:d7:b2:b4:06:72:16:5a:45:08:9d:96:95:90:b9:1c:81:0a:
         0f:3a:a4:e8:94:b8:68:88:4f:3d:24:9a:97:ef:b5:df:78:f3:
         88:f5:d2:1f:0a:9d:7b:6e:52:26:4d:15:ab:03:1e:af:f1:33:
         94:9c:6b:d6:66:49:a3:6e:14:e1:3f:dd:07:65:b7:6a:e0:dd:
         b8:cd:41:f4:0c:94:5e:a4:84:5a:3b:4b:9a:7a:b8:ea:c3:6d:
         f4:4e:ff:72:0d:22:8b:c9:65:a3:7b:cb:ed:4a:f5:7f:77:6a:
         e7:03:69:15:a7:04:32:60:37:42:4e:34:12:de:4d:be:a4:bb:
         5c:01:13:61:aa:e7:43:6e:75:d8:ae:8f:16:9b:f9:40:7c:f2:
         20:ce:53:3f:51:f4:8b:de:1d:fe:7a:17:74:c4:16:06:52:13:
         d8:fa:40:83:aa:65:39:3f:67:8c:73:cc:3b:a3:53:fb:7d:93:
         b5:e4:18:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 14:22:21 2026 by rpki-client