This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File:                     4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier:          3G9+EhNvnCoTNeKtIJ5Ps2oIlRr7wDoQInCG5W7e0Sc=
Subject key identifier:   D5:82:14:10:30:94:DD:2E:B7:93:89:9E:E9:E6:CA:64:BB:3B:60:B3
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer:       /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial:       019B59E3E090A67C37C04C7AC280C298135B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number:          0B3C
Signing time:             Fri 26 Dec 2025 09:01:04 +0000
Manifest this update:     Fri 26 Dec 2025 09:01:04 +0000
Manifest next update:     Sat 27 Dec 2025 09:01:04 +0000
Files and hashes:         1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: /HxEcB/Wit3KORVEtQSVDUYPacJwOZDN5kA88K9Jtug=)
                          2: QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa (hash: N6OU5OMUXPa8ri34/Wuotfq2VOjXlYSfy+37I0hPZzM=)
                          3: qswjHcqLBQY9Z2nmcWTR62TphaY.roa (hash: p4pPSzszW4Gf4Jz9O3n/L0PF3Vv3naASMu8aongMgFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:e3:e0:90:a6:7c:37:c0:4c:7a:c2:80:c2:98:13:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
        Validity
            Not Before: Dec 26 09:01:04 2025 GMT
            Not After : Dec 27 09:01:04 2025 GMT
        Subject: CN=d58214103094dd2eb793899ee9e6ca64bb3b60b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:cd:64:cb:f2:4c:92:22:90:b5:d1:29:89:
                    63:cf:aa:fe:e0:40:1e:ca:00:bc:9b:b7:47:e3:49:
                    03:33:06:3b:9f:31:bc:17:e7:9d:66:47:d7:da:bf:
                    d7:10:c5:d0:4b:6d:f5:1a:f5:0a:66:4e:f4:a3:18:
                    fa:49:d0:4f:d0:88:3d:8b:2d:9f:11:77:ce:d1:94:
                    91:2d:13:57:92:e6:76:fe:8d:ea:4d:51:e4:cd:17:
                    2e:32:63:88:98:95:74:8d:80:cc:5e:43:4a:1b:a5:
                    bd:01:d4:3f:92:d9:3f:ce:4d:3b:b5:a6:52:9d:24:
                    b5:b7:29:15:c6:8e:d7:18:c3:69:96:8b:b8:7a:6e:
                    af:ed:52:8c:1b:ab:ef:8e:fb:fa:d1:43:eb:20:10:
                    5b:f8:98:61:a7:1d:72:99:8d:5d:f3:a3:86:d7:1f:
                    f0:d8:4a:91:f5:1c:25:01:7a:d1:dc:0a:a0:82:38:
                    69:68:2b:54:57:86:a2:07:30:a2:44:9c:b9:a1:f8:
                    c6:d6:f6:4c:b7:6a:09:7d:88:43:03:20:00:2a:54:
                    48:e7:ee:cd:25:7b:ab:ee:48:4f:01:19:58:46:15:
                    1e:b8:97:fa:74:1d:42:c0:a2:a5:5d:1c:dd:8f:32:
                    b3:62:c5:03:ad:d6:e7:1c:30:2e:62:f4:62:dc:2e:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:82:14:10:30:94:DD:2E:B7:93:89:9E:E9:E6:CA:64:BB:3B:60:B3
            X509v3 Authority Key Identifier:
                keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:72:65:bd:00:2e:f6:9f:7a:72:ec:ca:43:7a:0c:fb:22:41:
         9e:6d:27:2b:51:85:31:25:85:a9:3a:e3:0b:00:8c:87:3b:37:
         b9:6a:45:d5:f8:16:d2:ad:7c:a9:18:1b:07:ad:5c:b1:e8:7f:
         1a:cb:b1:02:a1:a8:3c:a0:1b:1f:a1:32:c6:a4:5c:1d:4f:7f:
         43:a1:4c:1f:0a:0f:57:34:d8:1e:0d:ff:04:9c:96:50:70:c4:
         6f:76:8c:5e:28:2d:bd:05:b0:59:9d:55:ad:98:53:8d:9c:56:
         81:10:a9:b3:91:ee:2b:26:bd:25:fa:3b:52:f7:22:fc:fd:ea:
         df:86:dc:b0:af:45:f9:31:cb:c6:0d:15:c6:26:fc:df:75:be:
         f2:dc:14:46:c4:94:e4:7f:1b:24:02:2a:0b:09:b6:1c:82:5b:
         f9:ff:d1:97:e0:b3:fb:52:f1:ab:15:a2:a9:48:b8:aa:4f:7b:
         cf:77:44:a1:53:c6:92:ac:c0:b7:b5:21:8c:c8:dc:c6:a2:23:
         f2:99:ce:bb:fd:38:56:5d:2f:4a:8f:c7:35:fc:b4:33:cb:1f:
         72:b9:4e:1c:90:a6:eb:f8:12:50:13:96:bf:5f:da:06:98:b9:
         81:d5:e5:c5:e5:36:02:43:ea:b4:e4:49:d7:54:f9:9f:24:a2:
         5c:7a:87:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtZ4+CQpnw3wEx6woDCmBNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTRjZmU0N2FlZDUxZWM3MWFhNzVmNTM2MTg5YmFkNmU4
NjJkZWIwHhcNMjUxMjI2MDkwMTA0WhcNMjUxMjI3MDkwMTA0WjAzMTEwLwYDVQQD
EyhkNTgyMTQxMDMwOTRkZDJlYjc5Mzg5OWVlOWU2Y2E2NGJiM2I2MGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFrNZMvyTJIikLXRKYljz6r+4EAe
ygC8m7dH40kDMwY7nzG8F+edZkfX2r/XEMXQS231GvUKZk70oxj6SdBP0Ig9iy2f
EXfO0ZSRLRNXkuZ2/o3qTVHkzRcuMmOImJV0jYDMXkNKG6W9AdQ/ktk/zk07taZS
nSS1tykVxo7XGMNplou4em6v7VKMG6vvjvv60UPrIBBb+Jhhpx1ymY1d86OG1x/w
2EqR9RwlAXrR3AqggjhpaCtUV4aiBzCiRJy5ofjG1vZMt2oJfYhDAyAAKlRI5+7N
JXur7khPARlYRhUeuJf6dB1CwKKlXRzdjzKzYsUDrdbnHDAuYvRi3C5sYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWCFBAwlN0ut5OJnunmymS7O2CzMB8GA1UdIwQY
MBaAFOLkz+R67VHscap19TYYm61uhi3rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVUUDVIcnRVZXh4cW5YMU5oaWJyVzZHTGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9lNGNjYmItZmQ2MS00ZmM0LWFhYmQt
YTE4ODNjOGIxZmU0LzEvNHVUUDVIcnRVZXh4cW5YMU5oaWJyVzZHTGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9lNGNjYmItZmQ2MS00ZmM0LWFhYmQtYTE4ODNjOGIxZmU0
LzEvNHVUUDVIcnRVZXh4cW5YMU5oaWJyVzZHTGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3JlvQAu
9p96cuzKQ3oM+yJBnm0nK1GFMSWFqTrjCwCMhzs3uWpF1fgW0q18qRgbB61cseh/
GsuxAqGoPKAbH6EyxqRcHU9/Q6FMHwoPVzTYHg3/BJyWUHDEb3aMXigtvQWwWZ1V
rZhTjZxWgRCps5HuKya9Jfo7Uvci/P3q34bcsK9F+THLxg0Vxib833W+8twURsSU
5H8bJAIqCwm2HIJb+f/Rl+Cz+1LxqxWiqUi4qk97z3dEoVPGkqzAt7UhjMjcxqIj
8pnOu/04Vl0vSo/HNfy0M8sfcrlOHJCm6/gSUBOWv1/aBpi5gdXlxeU2AkPqtORJ
11T5nySiXHqHYQ==
-----END CERTIFICATE-----
Generated at Fri Dec 26 14:05:25 2025 by rpki-client