This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File:                     45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier:          IIR8NxL+QlsXsuhx9zIOpBXkcj5Itr8LM4yGSC35M8Q=
Subject key identifier:   43:E9:FB:89:78:BA:73:F4:DC:EE:4E:CB:38:82:3B:7C:59:31:53:42
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer:       /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial:       019B1B04CC6603BC626B91666DC64AE24A80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number:          0319
Signing time:             Sun 14 Dec 2025 04:00:57 +0000
Manifest this update:     Sun 14 Dec 2025 04:00:57 +0000
Manifest next update:     Mon 15 Dec 2025 04:00:57 +0000
Files and hashes:         1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: BV+PQc0MAsJDjbCxGodyHAmbQM0YyRaD/7drjOhm2tQ=)
                          2: K_JZgBsGAVe42CM82ldUkYg0iAQ.roa (hash: bwVI85s3fTqLxVepdOjVCwyC9itDatE9AOSLnrN/zKU=)
                          3: O2ig3X7VNdoIgqEvSRSWulSevo4.roa (hash: b2vyXh49fwCqIp7fN7Ci84lv9+cxy1rLXbG95tTjerQ=)
                          4: df6ORV0T3_b0RdsmM3_USMPqdsg.roa (hash: q2PmH++N3IE0kcfGnwBqmXQjUmmTRWDH+eBviEbSMVk=)
                          5: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:04:cc:66:03:bc:62:6b:91:66:6d:c6:4a:e2:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
        Validity
            Not Before: Dec 14 04:00:57 2025 GMT
            Not After : Dec 15 04:00:57 2025 GMT
        Subject: CN=43e9fb8978ba73f4dcee4ecb38823b7c59315342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:59:3f:48:98:f1:c6:4e:4b:13:04:3f:7b:
                    e3:f8:e3:fc:0b:aa:64:96:87:27:96:52:a4:c2:97:
                    cc:9b:c0:5a:46:7f:4e:75:23:b0:0a:ff:9a:2e:a6:
                    ba:ce:83:78:ab:0f:df:00:44:a3:52:87:88:1d:54:
                    86:62:ae:76:ba:d9:d7:62:c3:1e:e9:04:f2:de:01:
                    6a:bf:c1:f8:74:6b:3d:24:7b:7d:37:d1:9c:f4:b5:
                    3f:7b:bc:55:f5:1c:77:1a:48:19:bf:e6:31:83:d6:
                    a4:ee:f2:c6:7d:8d:7f:51:69:f7:e3:a4:cd:e9:3e:
                    27:9e:b3:0a:9a:d9:1e:90:5d:cb:e9:58:af:15:f7:
                    a2:ea:56:1c:05:c4:a2:41:7c:cb:a9:6a:38:43:bc:
                    ea:cb:6b:df:60:c1:60:63:49:43:16:00:f5:92:0b:
                    87:3a:0a:21:54:26:80:b0:d0:28:bb:4a:d3:77:f3:
                    f7:d1:cd:df:17:00:09:99:7f:cb:60:53:ee:c3:c2:
                    78:17:f0:28:41:e1:3e:4a:f7:a7:dc:31:ad:75:ef:
                    26:bf:3f:ff:87:17:d3:63:d4:81:a2:d1:2f:e8:8c:
                    99:74:44:5a:5b:41:24:45:af:a2:09:40:70:13:ca:
                    71:1e:99:a8:e1:d9:3b:29:80:24:72:de:c2:74:1a:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E9:FB:89:78:BA:73:F4:DC:EE:4E:CB:38:82:3B:7C:59:31:53:42
            X509v3 Authority Key Identifier:
                keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:01:7f:ca:c6:69:c7:17:6d:11:14:ea:f2:5b:ba:a6:70:49:
         a7:b0:e0:78:58:82:d7:09:48:74:8e:61:80:48:43:0c:22:a4:
         ac:75:ee:33:27:77:b8:ed:94:05:24:87:4b:7f:f3:17:e1:3c:
         a8:f0:fe:79:91:cd:46:fc:73:8a:83:18:cd:77:2a:48:74:8c:
         c9:97:ab:aa:af:69:2e:80:e2:66:11:d7:be:d8:db:4e:3a:ba:
         5a:6d:7e:d2:98:3e:97:5e:b0:59:91:4c:d3:50:1c:17:eb:21:
         47:ff:68:c2:17:11:9b:ac:40:f4:e6:4b:e9:7b:47:08:4f:4a:
         c0:19:9c:55:02:bf:05:94:79:ab:5c:10:07:d5:f3:df:63:be:
         92:80:83:f5:82:0a:8d:69:04:49:c6:a2:71:c2:b2:bd:b5:92:
         0a:b1:c4:57:1e:ac:ef:e6:76:1f:38:91:5d:c5:c6:89:d9:52:
         a2:25:b4:b1:82:2c:9f:aa:be:38:b7:cc:44:11:5f:47:b8:ee:
         3b:df:3b:d7:b1:97:36:5e:df:bc:78:1d:af:44:d1:1a:7c:18:
         88:21:0d:ba:60:b5:3c:27:66:91:ea:3d:cd:30:95:a8:89:a9:
         94:b5:ee:fd:91:d1:d2:b5:7f:74:5f:25:2a:73:e7:d1:a8:40:
         5b:b1:f7:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsbBMxmA7xia5FmbcZK4kqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTU1NzI1MDU0M2U0NDc2YWY4OGM0NjEyZDRhODk1MzEz
MTNiNTcwHhcNMjUxMjE0MDQwMDU3WhcNMjUxMjE1MDQwMDU3WjAzMTEwLwYDVQQD
Eyg0M2U5ZmI4OTc4YmE3M2Y0ZGNlZTRlY2IzODgyM2I3YzU5MzE1MzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQVZP0iY8cZOSxMEP3vj+OP8C6pk
locnllKkwpfMm8BaRn9OdSOwCv+aLqa6zoN4qw/fAESjUoeIHVSGYq52utnXYsMe
6QTy3gFqv8H4dGs9JHt9N9Gc9LU/e7xV9Rx3GkgZv+Yxg9ak7vLGfY1/UWn346TN
6T4nnrMKmtkekF3L6VivFfei6lYcBcSiQXzLqWo4Q7zqy2vfYMFgY0lDFgD1kguH
OgohVCaAsNAou0rTd/P30c3fFwAJmX/LYFPuw8J4F/AoQeE+Sven3DGtde8mvz//
hxfTY9SBotEv6IyZdERaW0EkRa+iCUBwE8pxHpmo4dk7KYAkct7CdBowJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPp+4l4unP03O5OyziCO3xZMVNCMB8GA1UdIwQY
MBaAFOOVVyUFQ+RHaviMRhLUqJUxMTtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUt
MjA2OTUxOTNhYzA3LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUtMjA2OTUxOTNhYzA3
LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQF/ysZp
xxdtERTq8lu6pnBJp7DgeFiC1wlIdI5hgEhDDCKkrHXuMyd3uO2UBSSHS3/zF+E8
qPD+eZHNRvxzioMYzXcqSHSMyZerqq9pLoDiZhHXvtjbTjq6Wm1+0pg+l16wWZFM
01AcF+shR/9owhcRm6xA9OZL6XtHCE9KwBmcVQK/BZR5q1wQB9Xz32O+koCD9YIK
jWkEScaiccKyvbWSCrHEVx6s7+Z2HziRXcXGidlSoiW0sYIsn6q+OLfMRBFfR7ju
O98717GXNl7fvHgdr0TRGnwYiCENumC1PCdmkeo9zTCVqImplLXu/ZHR0rV/dF8l
KnPn0ahAW7H3yQ==
-----END CERTIFICATE-----
Generated at Sun Dec 14 05:13:52 2025 by rpki-client