This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File:                     SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier:          AUbSe+Dir3gM/CJYryhfQeunKLiNxsTNePjXgd9w3YE=
Subject key identifier:   62:EA:81:6A:47:E0:8C:54:1C:5D:61:E0:B6:1C:AB:03:A0:BD:D4:5C
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer:       /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial:       019AF209937035487A52AE0FC6AEC7004ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 05:01:44 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:44 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:44 +0000
Files and hashes:         1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: BjPIZkfhd2XW5xOqIHFnHktGp9iVue1whJNWWt5hqQg=)
                          2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=)
                          3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=)
                          4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:93:70:35:48:7a:52:ae:0f:c6:ae:c7:00:4e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
        Validity
            Not Before: Dec  6 05:01:44 2025 GMT
            Not After : Dec  7 05:01:44 2025 GMT
        Subject: CN=62ea816a47e08c541c5d61e0b61cab03a0bdd45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:3e:aa:fa:71:0b:4f:cc:b2:89:5d:b0:a5:
                    92:b5:a2:00:05:cb:21:4a:59:e8:6c:d5:3b:79:3c:
                    4c:1d:39:4e:0a:0c:06:8f:28:6c:89:b0:56:14:67:
                    cd:42:98:42:d3:42:f9:72:e4:1a:f6:da:e1:a6:f4:
                    9e:58:0c:c6:30:95:1d:07:62:73:f7:71:a1:ae:87:
                    39:59:4e:be:36:91:fe:4d:79:17:79:60:bd:c6:91:
                    2a:69:65:40:b1:27:b5:e8:f3:3f:74:16:aa:2f:1e:
                    81:8a:83:e7:b9:f7:e3:5c:bf:1c:69:42:f9:91:9e:
                    c3:a2:24:f8:11:7d:d5:9d:e6:3a:ed:a8:a0:32:ed:
                    21:f7:3e:6d:87:79:cf:fc:e8:ae:17:8f:d2:a6:4a:
                    07:cc:9b:60:39:e5:17:35:39:86:ef:c3:09:19:fc:
                    8b:fa:6f:c4:8f:31:0a:9d:64:4a:94:9e:0a:11:ba:
                    df:c1:4f:ba:ca:70:10:a5:69:a1:6c:2d:18:2b:98:
                    f8:0f:71:9e:d6:85:99:61:62:97:8b:61:b3:6e:95:
                    6d:c6:13:17:2d:a5:68:1e:f6:5b:9c:b3:3e:ff:79:
                    a7:b9:39:87:53:30:10:7c:f6:df:95:22:7b:96:b1:
                    d7:40:01:0b:52:60:0c:c5:f6:f9:52:f8:cd:eb:0e:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EA:81:6A:47:E0:8C:54:1C:5D:61:E0:B6:1C:AB:03:A0:BD:D4:5C
            X509v3 Authority Key Identifier:
                keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:98:20:65:98:f2:43:45:61:55:f3:bb:e3:40:75:88:7e:be:
         ca:dd:66:fb:bf:b3:e2:15:62:fb:6d:da:fe:ed:ef:66:dc:ba:
         3b:3f:da:26:37:5b:8e:c3:55:a5:57:10:36:b6:14:52:23:84:
         b7:ec:9c:b8:62:dd:3e:df:bf:36:9b:f4:ee:e3:ed:a1:82:3b:
         8b:8c:92:3d:27:f3:3a:1d:4d:cf:79:d3:b1:64:ca:cc:42:f9:
         b5:52:bc:d8:b4:5d:fc:7e:64:ef:87:59:4e:2b:f8:bb:c9:c6:
         d0:d2:21:d3:f1:d6:eb:66:30:4b:86:57:52:66:9f:9e:fa:3d:
         71:f3:85:f4:fc:d4:4c:93:56:64:23:01:d3:e0:e9:19:07:60:
         a0:5b:3a:1c:38:8f:74:ff:22:aa:77:1d:6b:6d:79:36:0c:fa:
         0c:12:ad:01:e6:5e:1d:03:54:f2:3c:06:73:50:b2:e7:92:2c:
         e8:67:a2:79:b1:ad:4c:bc:3c:ad:be:56:40:e2:fa:2a:0a:e6:
         17:f4:b7:5c:46:a4:65:da:87:38:e1:33:83:59:b7:01:c3:d7:
         9b:77:1c:ee:4c:83:99:c2:d0:bc:30:c7:60:b6:dd:c5:57:58:
         56:b4:9c:5c:02:58:68:3d:38:9a:1b:37:4d:ef:45:c1:45:1f:
         49:b1:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:21:54 2025 by rpki-client