This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
File:                     4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft (raw, json)
Hash identifier:          VrdCJTHHlUdDamycrKztPyrOaWOaCFilR3jUmVX6TyM=
Subject key identifier:   87:51:C0:61:6D:76:83:2E:14:8D:DD:8F:06:7B:63:F2:80:A4:42:89
Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
Certificate issuer:       /CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Certificate serial:       019AF23FA3E99966146D10764E13C6848077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 06:00:48 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:48 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:48 +0000
Files and hashes:         1: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl (hash: sasjjDRL5zxb93I6Lk9KbRSus7FRcjYdaG5x96xoEB4=)
                          2: lQLxDvgdpM5wdztERCLsc3tCNwY.roa (hash: Tk0E6nuunIdfuPSYgglnezBIWaLfJtMK/AmMDpED9vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:a3:e9:99:66:14:6d:10:76:4e:13:c6:84:80:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068
        Validity
            Not Before: Dec  6 06:00:48 2025 GMT
            Not After : Dec  7 06:00:48 2025 GMT
        Subject: CN=8751c0616d76832e148ddd8f067b63f280a44289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:94:ed:36:af:1f:57:9e:47:a8:ce:4e:16:
                    2b:30:f5:92:0a:fe:a4:d8:04:c8:0d:43:be:3f:7f:
                    41:4c:26:fd:cd:07:1c:84:22:dd:53:72:54:a3:33:
                    c8:36:67:42:a7:0a:af:84:bb:58:86:bf:e1:0f:99:
                    99:fc:dd:d6:d0:a7:a8:d6:0b:41:b5:d2:f0:c7:84:
                    80:90:77:6f:91:97:42:7e:a0:1f:c0:4c:d4:71:a9:
                    22:73:d2:be:11:bf:1e:61:8e:ca:ec:e9:a0:cd:89:
                    2c:29:2b:a4:78:9e:48:ec:54:0b:9d:5f:18:2a:16:
                    9c:ae:92:f3:16:c6:6c:04:a1:94:b3:bc:74:33:e3:
                    9f:77:94:f3:1a:86:4d:b4:a8:5e:04:15:36:69:c9:
                    74:e2:67:be:b1:d3:d2:b8:cd:f3:62:0f:bc:1c:ab:
                    b3:5d:2a:a0:89:3f:94:7b:48:dc:10:cb:46:97:2b:
                    a6:b4:2e:76:c3:ad:9d:58:fe:b1:46:c3:98:83:b8:
                    42:15:c0:56:6b:f4:4e:cf:14:f7:88:9b:24:a1:cb:
                    6b:d4:41:50:17:5c:1f:8d:ce:d3:85:30:6a:90:94:
                    53:1f:76:c3:77:fd:de:58:a3:1d:11:19:b1:a5:56:
                    f5:82:33:a5:c5:02:2a:a1:93:fe:88:39:b1:82:5a:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:51:C0:61:6D:76:83:2E:14:8D:DD:8F:06:7B:63:F2:80:A4:42:89
            X509v3 Authority Key Identifier:
                keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:c7:2a:a5:d9:5a:1c:63:f3:9f:48:bb:c0:22:7d:78:9d:
         5d:6c:62:d8:a2:d6:07:dc:e6:61:c9:94:2d:ef:2c:cf:fa:8f:
         4e:b7:01:49:25:59:c6:52:8f:65:f8:d0:ff:71:16:e1:31:56:
         4a:5e:a3:65:43:b6:83:d5:61:3d:22:50:5e:40:bf:0d:73:2b:
         f3:a9:48:31:3c:fd:8e:5a:5f:a8:d5:70:2a:34:03:d9:38:1b:
         ae:da:f7:bf:09:32:b2:bf:af:f7:18:57:7c:50:e2:4b:c8:6e:
         d0:73:c7:81:d6:fb:64:e9:6f:3d:1b:56:b0:08:ab:93:e6:92:
         fe:4a:98:72:39:3f:d6:ef:ff:f6:60:d3:93:a1:92:91:cf:1b:
         0f:61:80:e3:20:5c:11:e9:9a:1c:72:59:b1:80:4c:f1:59:98:
         88:50:d3:e5:e2:9d:47:27:ce:16:85:a7:65:67:8f:53:83:34:
         65:19:6e:7a:f2:b7:29:48:a5:0d:77:db:b4:89:93:e6:5e:66:
         8d:cc:f2:b0:c0:5b:1c:76:41:c6:6c:e4:92:d1:ec:7f:e2:91:
         47:59:91:32:80:bf:90:26:73:67:04:0f:ae:43:6e:65:1f:78:
         17:9e:ad:80:be:2e:44:d1:db:95:52:3d:d3:fe:37:3c:12:3a:
         4f:ce:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:32:35 2025 by rpki-client