This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
File:                     4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json)
Hash identifier:          2Tt896shUi0zHLAOVlJcKXThvteR0P09BJiHIhLw1u8=
Subject key identifier:   C9:37:08:C0:30:70:36:AF:F3:34:82:19:C7:93:32:1D:74:95:B7:4C
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Certificate issuer:       /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial:       019B101403422E0DC21BBF9AF569310D1751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
Manifest number:          0C3C
Signing time:             Fri 12 Dec 2025 01:01:45 +0000
Manifest this update:     Fri 12 Dec 2025 01:01:45 +0000
Manifest next update:     Sat 13 Dec 2025 01:01:45 +0000
Files and hashes:         1: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: /owII5Z7Iy4gLwtaXK6eABZDSJ3r4qp6f/7Ux9TfxNw=)
                          2: O0VEzp-OH_xjiLZy3Uqgd8JheUQ.roa (hash: bRkZXZhDlUd4TGWoN3UvYTMqPRoPQQ3RohAzYIARoRY=)
                          3: exE6Ut3mUQ9a9aNWDZix4WcMzvE.roa (hash: L1gAescOmgvvCSriS7QJBXICpNWmr7dIsSMrsFotRNw=)
                          4: oXaw6fDaPf-aCFWq6--7fP8PfNo.roa (hash: T/GzBAIF7xC4cPBnpxI0RpkOSIvxEnLWEiEZKvaP0H0=)
                          5: uVDY6PyUuy1nXZci6asUkfr791g.roa (hash: souJp5O+Y8ld96qNW2UmMguzsgXAcLNBUoBdApPqkIw=)
                          6: uwL3ypGLb_CaISyODq46_j9FKrM.roa (hash: xCrbMi0hxh88kUV/oxrokW/pEF8foYlLuuOWDjfscJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 01:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:14:03:42:2e:0d:c2:1b:bf:9a:f5:69:31:0d:17:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
        Validity
            Not Before: Dec 12 01:01:45 2025 GMT
            Not After : Dec 13 01:01:45 2025 GMT
        Subject: CN=c93708c0307036aff3348219c793321d7495b74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:b6:6f:ac:d9:fe:0f:4f:a1:cd:84:e8:2d:
                    0c:45:9f:77:f2:2b:64:88:59:a4:9a:93:5b:b7:9a:
                    8f:03:4d:aa:4d:1c:df:d9:94:08:73:d7:6e:19:85:
                    0f:c1:14:68:66:2b:d4:e8:03:15:0c:1d:71:53:fa:
                    78:20:93:0c:b7:5f:79:29:bc:8f:5b:c0:fd:0b:ba:
                    70:60:24:73:76:10:b8:50:9e:f8:0b:bb:d4:d5:65:
                    ab:fc:86:e5:df:df:97:a7:fd:12:e9:b9:8b:d7:13:
                    cc:a2:91:02:26:99:e9:ac:39:aa:81:88:bc:20:81:
                    37:92:b3:cb:f2:17:c4:c2:30:ec:21:61:d9:3a:01:
                    e0:6c:e1:59:66:46:0b:cc:dd:b6:45:16:28:f2:f1:
                    09:78:c5:1d:b1:95:76:b4:d9:04:d3:4c:c9:17:c1:
                    bf:61:80:21:70:03:4d:38:ad:cb:2e:f6:6b:35:b7:
                    8d:e7:cc:d8:01:cd:e3:8c:85:dc:aa:4d:87:4b:2b:
                    fe:0a:29:4e:46:09:8f:01:2a:20:36:00:bc:b1:e5:
                    99:93:a8:d5:73:08:e5:4b:82:cd:f0:e6:48:3e:12:
                    82:d8:81:0e:c9:5a:e1:ae:12:87:d0:cf:8b:2b:ad:
                    c0:91:81:c0:aa:ca:04:a4:74:79:e9:eb:f9:94:97:
                    41:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:37:08:C0:30:70:36:AF:F3:34:82:19:C7:93:32:1D:74:95:B7:4C
            X509v3 Authority Key Identifier:
                keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:4b:65:0b:b2:58:c7:b5:b4:05:25:84:ff:c0:fc:71:4b:
         dd:81:95:d8:98:3b:44:e9:37:4f:6f:f0:58:74:5c:bb:98:2f:
         22:03:52:4a:b6:c4:31:9e:e7:bd:54:e1:8d:42:87:52:15:f2:
         ba:3c:ed:c8:db:77:18:d4:12:d7:95:39:3d:d3:86:c7:b1:7f:
         f3:eb:73:52:c0:cf:66:25:7a:c8:d2:d5:04:7c:a1:cc:76:7d:
         49:98:f4:34:07:af:15:cf:9c:50:dd:75:f9:9f:70:99:37:33:
         f0:9c:d1:e9:03:3c:09:60:aa:91:6e:bf:34:ea:87:9d:39:a4:
         4c:8c:1e:0f:67:04:bc:00:2c:d1:30:11:f7:3e:af:03:59:eb:
         c6:c9:ff:65:0d:3f:e3:c3:e5:06:13:3d:f5:ae:95:ff:92:53:
         08:69:71:eb:a0:6b:07:1a:13:d8:5d:f2:6f:b0:32:d7:47:59:
         db:fe:06:5f:80:18:4f:44:9f:d5:2b:58:1d:10:7c:34:83:5f:
         92:9f:74:55:94:01:1f:fe:79:78:2e:dc:0a:5b:04:81:5f:17:
         3a:4a:9c:28:62:31:e0:7d:ae:ec:0f:98:bf:f8:e0:14:a6:9b:
         31:7c:c8:6d:72:0f:60:60:a7:9f:39:2d:27:7d:62:86:e1:9a:
         42:4d:07:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsQFANCLg3CG7+a9WkxDRdRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZThiN2NhYjUyMWU4OGU4MDIyYTM2NDI0NTQ0MTg1NTM4
YTdiMzMwHhcNMjUxMjEyMDEwMTQ1WhcNMjUxMjEzMDEwMTQ1WjAzMTEwLwYDVQQD
EyhjOTM3MDhjMDMwNzAzNmFmZjMzNDgyMTljNzkzMzIxZDc0OTViNzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqK2b6zZ/g9Poc2E6C0MRZ938itk
iFmkmpNbt5qPA02qTRzf2ZQIc9duGYUPwRRoZivU6AMVDB1xU/p4IJMMt195KbyP
W8D9C7pwYCRzdhC4UJ74C7vU1WWr/Ibl39+Xp/0S6bmL1xPMopECJpnprDmqgYi8
IIE3krPL8hfEwjDsIWHZOgHgbOFZZkYLzN22RRYo8vEJeMUdsZV2tNkE00zJF8G/
YYAhcANNOK3LLvZrNbeN58zYAc3jjIXcqk2HSyv+CilORgmPASogNgC8seWZk6jV
cwjlS4LN8OZIPhKC2IEOyVrhrhKH0M+LK63AkYHAqsoEpHR56ev5lJdBdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk3CMAwcDav8zSCGceTMh10lbdMMB8GA1UdIwQY
MBaAFOHot8q1IeiOgCKjZCRUQYVTinszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYt
MjFjNTg0NzBiOGQyLzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYtMjFjNTg0NzBiOGQy
LzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8ZLZQuy
WMe1tAUlhP/A/HFL3YGV2Jg7ROk3T2/wWHRcu5gvIgNSSrbEMZ7nvVThjUKHUhXy
ujztyNt3GNQS15U5PdOGx7F/8+tzUsDPZiV6yNLVBHyhzHZ9SZj0NAevFc+cUN11
+Z9wmTcz8JzR6QM8CWCqkW6/NOqHnTmkTIweD2cEvAAs0TAR9z6vA1nrxsn/ZQ0/
48PlBhM99a6V/5JTCGlx66BrBxoT2F3yb7Ay10dZ2/4GX4AYT0Sf1StYHRB8NINf
kp90VZQBH/55eC7cClsEgV8XOkqcKGIx4H2u7A+Yv/jgFKabMXzIbXIPYGCnnzkt
J31ihuGaQk0HPQ==
-----END CERTIFICATE-----
Generated at Fri Dec 12 09:25:34 2025 by rpki-client