This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File:                     4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier:          Wh7Odsd3VftSXuZtB1aqrniAGE0lkMYS0N75QlJs+2Y=
Subject key identifier:   0F:49:83:D6:DB:31:9E:69:B5:78:6C:86:43:D9:30:87:F3:6F:8A:12
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer:       /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial:       019AF0BEFF85B3239A6B08A8B8D865BA465B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number:          1764
Signing time:             Fri 05 Dec 2025 23:00:40 +0000
Manifest this update:     Fri 05 Dec 2025 23:00:40 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:40 +0000
Files and hashes:         1: 1-rU3n-MmX0x7vSSIglpKrM6p7wc.roa (hash: c73xh5XkAcPFRSo/oWqlfjE2NzFubQ+3BLO5+whFr6o=)
                          2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: qufINiZDTBimEZIhxKWXPBUmFWvqfXRA6+baXaTid/0=)
                          3: lAPGewAMTsg2zoYnnReshsfQhuc.roa (hash: cQriD0k+t33lYmHxMgkTAtEHjw/RaZJ3vs4rH148M98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:be:ff:85:b3:23:9a:6b:08:a8:b8:d8:65:ba:46:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
        Validity
            Not Before: Dec  5 23:00:40 2025 GMT
            Not After : Dec  6 23:00:40 2025 GMT
        Subject: CN=0f4983d6db319e69b5786c8643d93087f36f8a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:30:f2:e0:22:b8:a4:a0:4d:b5:dd:43:a2:
                    d1:e3:c0:85:13:18:1d:f3:3e:fc:df:28:64:95:28:
                    83:3b:0e:b4:44:73:2a:0c:e4:ed:cd:bc:ac:9b:d6:
                    ae:d8:57:59:49:1a:ff:59:7d:c1:31:c0:e3:6b:a5:
                    6f:f1:61:10:16:ea:8d:fe:99:dc:70:76:3a:5d:7d:
                    a0:e9:81:a7:bc:18:af:17:94:bb:17:12:bb:64:6d:
                    57:49:03:c5:b0:7e:6c:4e:ac:c0:60:80:5b:13:81:
                    b6:77:17:b9:1b:ba:c1:5c:16:7b:49:c8:97:2b:64:
                    69:10:dd:df:98:cf:79:9e:43:50:39:8f:27:fc:93:
                    ad:03:99:c0:71:89:b3:28:fd:28:1f:27:5f:b7:0b:
                    af:3e:fe:d3:d1:5f:b8:48:dd:7f:f5:90:b2:7f:5d:
                    66:c3:db:83:1b:93:20:b2:8a:56:49:76:66:fe:93:
                    13:0f:02:90:6b:80:cc:75:ce:ab:48:9c:27:8c:7a:
                    82:36:ff:b7:b6:dd:55:ee:01:e8:09:61:6a:4b:a3:
                    25:32:f3:d0:d8:37:4b:f6:b3:07:fd:61:82:6c:99:
                    bd:50:d3:fa:b3:4c:89:b9:f3:94:24:7a:ff:1f:17:
                    a9:1f:d3:65:f4:77:53:51:b1:43:4e:a5:67:8a:2a:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:49:83:D6:DB:31:9E:69:B5:78:6C:86:43:D9:30:87:F3:6F:8A:12
            X509v3 Authority Key Identifier:
                keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:e8:e3:db:d7:47:ab:20:b6:db:7f:27:52:f0:fb:13:ca:
         73:f8:c2:8f:84:0b:c0:59:d1:66:ca:47:ea:fc:9c:1a:ef:01:
         ba:9b:7b:6d:a9:d2:f5:d4:af:b1:82:98:3b:3e:c2:a4:2c:72:
         aa:fa:a2:fc:e0:f0:65:3a:07:9a:6f:67:1a:bb:24:1d:3b:f0:
         18:29:c1:cd:be:43:d3:a6:e6:8c:b5:ee:5c:96:21:1b:f8:af:
         7f:f1:48:5a:e2:10:4d:42:01:80:28:3a:ef:5a:af:41:e5:36:
         12:fe:09:51:b7:b8:6b:f0:1e:42:32:a6:b8:ca:f2:6f:d2:ca:
         0e:63:51:7a:be:db:3d:e6:71:f5:74:bf:38:56:28:2f:a1:32:
         0a:33:19:77:4c:11:33:ca:2a:d7:dd:97:18:13:0b:51:0a:57:
         8e:65:d2:3c:12:d2:c1:ce:24:52:80:35:97:7c:c5:6a:a7:b5:
         87:f5:3e:ad:26:15:a2:36:63:88:06:22:51:d7:c4:f5:cf:34:
         6b:92:e1:72:04:dd:72:d2:8d:57:84:ed:a9:1a:08:19:29:27:
         76:d6:6e:c9:96:d0:ce:fc:64:36:bd:ba:b5:71:bc:df:7c:1a:
         19:d5:25:3f:a3:5e:c8:04:4f:8a:f4:8f:76:9e:21:bf:11:51:
         13:2e:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:56:14 2025 by rpki-client