This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
File:                     4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json)
Hash identifier:          E+kHtSEOxeBlu+IoCsxE+ARUj4gxDpnuuTivM8bbtWU=
Subject key identifier:   63:C5:F2:DD:08:AB:B3:F2:6C:72:B4:EE:AB:E3:D6:C3:96:ED:79:77
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       019AF2096C4FA7DA14DB3511C112D608AB3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
Manifest number:          1781
Signing time:             Sat 06 Dec 2025 05:01:35 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:35 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:35 +0000
Files and hashes:         1: 1Zw3dOHQdTR7vigHBw9Gl95CsWA.roa (hash: Xi/Bb5DmK6ae5rm5BeoWF06YJy3In/vvvYvcO432dxg=)
                          2: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: Bjyt3mAygFusOPIiXDRW03VzLDr+lL6h4OinyPhC60c=)
                          3: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=)
                          4: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=)
                          5: Hb7ebDFFRZqJEOZO-n-RjqAsiO8.roa (hash: 9v/kq6wq1tmBm34TkO2qwrxM6Dr/nUlLL4cuH+DHyQY=)
                          6: IRIHNrcEmYA9SiekVnQCGeb5qt8.roa (hash: tBfDnKuitVX0twdrJtQnmeN3GmNpiKza4WKEqcGuDCg=)
                          7: KOQt4Fdw-Mbd2H2laDLh-QtpT_A.roa (hash: E+ao0zcz+gKQCFRR+32WIwFe4k6aZm0mJuIHZG8OTjY=)
                          8: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=)
                          9: O2u9sNM2VsxkrEw4_x5dbnD4cmI.roa (hash: z4M4rzCbwDQczsVkru5nQYgRim30go1bSOu9yN0yWpY=)
                          10: QY62O1TbJcgHTlDdMSnc5EOOsWo.roa (hash: WrjFSmIFme7bbVEpsR+eNDIdWK8cfKHxqLCWL8lKVwU=)
                          11: ZEaWX4vp4W7zRNcPf0TP02hgItQ.roa (hash: sJ0gPMef931rqzhVp0zgr8podzklf3D6mI15/1mXqB8=)
                          12: ZhumnastnIToRU4Ujd74rA2H0TI.roa (hash: hGm8nGCE9zZ7LDb9DfN19EP4tZp//5L2NO9ThIsADfs=)
                          13: _yn-31rADEG7zTcXfVb92NptH0Q.roa (hash: Tyq49fvsXK4jK1l1SC866Zxd+HFpg8YBsLVC4Nlc/M8=)
                          14: chhwL-zj1isGKfXerZSwFuCy2Ig.roa (hash: EaAAiNMyzMZfk0/ZwRL/V1h2YZdNe3SPfk1b1YTVfY8=)
                          15: dcdUaVsbK9eNo1r-m0RN5v4IuI0.roa (hash: 16XY+REBNBY9vjc35N7Gk6wmQpGirjvhIjfgeZGXyFo=)
                          16: vjKyioN5ZLUQGqbv0hjh-k7ZHnI.roa (hash: rxK/AqCNmTQ7FTdlF/qR+joUKZx1vJKUfba0dd+y2Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:6c:4f:a7:da:14:db:35:11:c1:12:d6:08:ab:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Dec  6 05:01:35 2025 GMT
            Not After : Dec  7 05:01:35 2025 GMT
        Subject: CN=63c5f2dd08abb3f26c72b4eeabe3d6c396ed7977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c9:39:54:6f:93:9d:da:6d:c0:18:d4:94:82:
                    7a:fd:fd:c9:c9:e9:7f:5e:cf:ec:41:8a:e1:e9:f6:
                    e2:0d:b6:be:4e:cf:9e:4d:60:be:b9:ba:33:0d:af:
                    42:92:52:cb:df:1e:9d:5c:1d:a8:83:79:65:98:5c:
                    f3:15:92:89:87:df:68:ac:92:74:0b:14:ad:d3:a6:
                    4e:95:42:98:fe:4b:14:44:cc:e2:38:e7:81:b9:69:
                    7e:6e:93:9e:2c:e5:fe:f6:76:60:c4:6d:a0:c3:ef:
                    13:aa:fe:1c:07:32:30:3e:7b:ad:76:c7:22:b4:95:
                    76:b6:05:c2:45:d1:4b:60:93:ff:62:7c:15:4f:84:
                    0c:76:c8:28:1a:60:b3:dc:e8:e0:d4:9c:1f:42:ff:
                    5b:83:e3:0e:72:28:94:ed:6b:c4:55:fe:27:84:27:
                    37:27:4b:f4:21:6c:8d:75:e9:a0:a7:87:cf:d2:b9:
                    bd:e9:17:36:29:ac:68:ee:b0:e2:d7:e6:8f:43:ad:
                    51:da:ce:c9:d2:82:16:3f:33:3a:73:b9:37:3c:ad:
                    87:14:2a:73:7d:85:04:6a:8b:7b:68:3c:3a:d7:9b:
                    aa:66:a4:8a:4f:d8:3f:a5:44:78:17:b2:22:d9:7a:
                    ff:f4:18:02:f8:b9:72:75:05:d1:b1:c4:37:66:b0:
                    e1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C5:F2:DD:08:AB:B3:F2:6C:72:B4:EE:AB:E3:D6:C3:96:ED:79:77
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:d2:ef:4d:ef:ed:5a:2f:04:53:49:14:5a:19:6c:c5:35:
         6b:24:ab:b9:57:2f:17:ee:2a:33:30:5b:a0:e2:5d:aa:b4:54:
         90:e8:10:68:96:8e:a2:69:93:82:39:ec:0b:64:e8:60:61:5f:
         19:0f:11:44:12:90:cb:f2:ea:d5:d9:2b:4e:ae:60:50:bc:e9:
         39:97:19:e0:38:7b:d6:11:49:84:ed:be:3a:40:d6:b3:01:1a:
         28:19:69:eb:9c:e8:5c:95:3b:87:ab:c1:5f:c7:6e:d7:1f:31:
         aa:6f:a6:8b:ae:5a:ee:c3:57:7a:9d:7a:c6:99:df:69:05:8b:
         df:ec:e7:77:0e:bc:95:e1:88:72:a2:bc:c9:27:fa:02:11:45:
         7d:8d:ed:c0:b4:40:55:03:5c:21:d2:8a:11:b2:aa:c0:aa:95:
         dd:5d:4d:4d:2e:55:d3:13:bb:35:74:a4:3b:f5:04:8c:2a:01:
         4f:5b:18:06:73:5e:12:2f:61:01:88:3e:8e:8b:b8:22:93:9e:
         a9:69:c3:45:c6:a0:8c:50:04:06:12:6b:41:de:d0:52:e5:7e:
         1b:87:4d:24:8f:f2:d3:97:d1:cb:e3:54:38:80:53:96:66:fd:
         33:e8:e6:41:35:c6:b8:c5:65:87:44:7a:85:8f:92:65:1e:73:
         ac:5f:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:16:12 2025 by rpki-client