This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
File:                     4VhJEBJK93bjDlrPBV1rrhdhpTY.mft (raw, json)
Hash identifier:          pOxUEYt0LPRo8cI9+YG0Dl8Jmqmd7JjKVV7r45eXsyk=
Subject key identifier:   1B:51:36:58:47:01:FF:35:8C:F6:D5:B9:4E:96:52:46:55:E8:30:78
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Certificate issuer:       /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial:       019AAC8263AF92816547083815E8DC4DEF3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
Manifest number:          0C2D
Signing time:             Sat 22 Nov 2025 17:00:17 +0000
Manifest this update:     Sat 22 Nov 2025 17:00:17 +0000
Manifest next update:     Sun 23 Nov 2025 17:00:17 +0000
Files and hashes:         1: 4VhJEBJK93bjDlrPBV1rrhdhpTY.crl (hash: edlMNoIfFf5A3k/9f2wfol/qBp3kkWACgfcrI5zLWCg=)
                          2: IQROvr2vBd7jckj4JxxLTVqcojM.roa (hash: ly/jdFkHJ3s46OFRx+V8sZxwJQeghZczRi1B0/DdTGw=)
                          3: XGKVKtjzrhIqJnitbSPu8PfZ3U0.roa (hash: DZhN7yGkT4Q124D/acmARQUP1NDYURt0Aavi3iNxtYY=)
                          4: eSKsGHyxbWYwro-1UQoDIzgXZL0.roa (hash: Z+2EIYf0yK8lCQZu34hQ6FGPR1zzM9h/hZgRWuizAuo=)
                          5: uwdEf76PatEiBG1-AwvVJD3ZSLI.roa (hash: L5a+PChE20DmyqcNgzL4srrFg9fTUoR13MIkAL4T2o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ac:82:63:af:92:81:65:47:08:38:15:e8:dc:4d:ef:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
        Validity
            Not Before: Nov 22 17:00:17 2025 GMT
            Not After : Nov 23 17:00:17 2025 GMT
        Subject: CN=1b5136584701ff358cf6d5b94e96524655e83078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:82:46:b1:87:39:80:5d:f4:a6:dd:74:cb:
                    e2:91:4c:b8:b6:34:59:c5:3b:2d:07:01:e2:e4:fe:
                    f9:b6:29:95:37:dd:9e:fc:f2:c5:9a:53:c5:dd:e6:
                    a9:be:40:bd:b2:c6:b2:49:41:3a:c6:c7:88:89:31:
                    e9:89:34:14:33:1e:2d:2b:3d:25:27:e1:a3:d4:a8:
                    e8:01:1e:25:c9:08:94:b5:ac:5c:35:5b:4d:21:ff:
                    e0:ba:47:2d:06:ea:d5:b3:d1:a9:a8:d5:7d:92:2b:
                    35:65:df:25:5c:ce:6f:cb:9e:f1:de:a1:a9:d6:68:
                    fb:e5:f2:53:29:93:cb:5b:cb:8f:25:1c:60:49:7e:
                    df:b9:fb:7d:26:4e:f6:b5:38:df:fc:97:f3:2d:1a:
                    25:fb:4b:54:5c:f5:71:dd:76:d4:65:73:13:38:56:
                    99:00:de:bb:da:54:0e:4b:da:f1:54:27:47:dc:19:
                    4c:a1:84:28:e5:45:dc:b7:92:6a:cc:b6:cb:df:19:
                    c7:37:2a:9a:40:7a:3b:5b:d6:08:d4:a1:49:f8:75:
                    60:94:34:3f:ec:fd:e4:89:f8:03:fb:86:ff:aa:85:
                    46:50:81:3d:16:ae:25:68:c4:21:d3:4a:22:88:d3:
                    61:ce:91:14:0a:ec:b9:bb:62:90:9c:03:74:70:3c:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:51:36:58:47:01:FF:35:8C:F6:D5:B9:4E:96:52:46:55:E8:30:78
            X509v3 Authority Key Identifier:
                keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:cb:71:e1:1c:bf:e8:2e:74:1d:97:49:c2:17:f1:6f:68:
         33:3a:d6:fd:ba:35:4a:9a:47:60:f9:d2:78:90:85:98:a6:30:
         86:6b:56:fe:41:24:06:52:31:42:97:cc:e0:cc:86:56:b7:03:
         6d:26:9b:86:f6:19:6e:38:6b:ba:3a:46:b1:be:e2:dc:9d:df:
         f8:2e:47:62:17:d4:81:5f:cb:03:6e:b5:b4:31:f1:5c:ea:78:
         6f:e2:7c:82:4b:8d:60:96:76:69:90:6a:27:20:b0:fa:84:36:
         a4:38:7a:9e:aa:1c:83:d2:d4:60:92:c5:d1:af:37:19:b4:7b:
         ae:a1:0d:2d:a7:34:0a:0e:68:98:15:f3:20:5e:50:f6:ec:07:
         db:b5:6a:8a:3f:f6:45:6a:83:e5:c8:62:2b:e5:34:83:0d:fa:
         30:ec:14:a2:f3:01:fc:c3:cb:c6:cb:87:3f:f0:3c:c2:93:4f:
         99:c8:72:f6:92:84:7e:e3:65:ab:2d:ac:1c:cd:b5:51:e4:7c:
         36:b0:a6:b8:7f:8b:ef:ae:71:e2:78:3d:4b:1d:16:f8:3d:05:
         1e:4e:a7:dd:5c:7e:dd:07:7f:45:ce:a6:89:bb:77:3d:67:6d:
         7b:2d:3b:7f:63:a9:50:c7:0a:e6:58:c3:21:05:06:f9:8a:59:
         ff:30:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:42:56 2025 by rpki-client