This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File:                     p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier:          GB4VXd1njuf6ScPhyyO31QU8JPv4+eLeAii63atNwKM=
Subject key identifier:   78:53:E6:64:0C:AA:F6:08:D6:12:2E:AB:13:13:E9:1E:DA:42:9E:F5
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer:       /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial:       019AF19A9FA130E78AEB59D24BDEF47262E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number:          177B
Signing time:             Sat 06 Dec 2025 03:00:33 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:33 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:33 +0000
Files and hashes:         1: 6VFvznM1ivuDVDr2-zJ8Rc9HL4c.roa (hash: YFFcoS2pkj0ppsY1suyM7N1UBbz37UF87GS5rHAetLM=)
                          2: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=)
                          3: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=)
                          4: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=)
                          5: ays9--_IW8JzhtfNk76o0BfVsHs.roa (hash: m+8N0lTDKN6USUkq7MoOzNst+iEzsskPzpKLc4PITjQ=)
                          6: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=)
                          7: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=)
                          8: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=)
                          9: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=)
                          10: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=)
                          11: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: tvmac2CvXrvUvhC4hAIc7AhIqJNVgbC7v4sbNjbOIzA=)
                          12: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=)
                          13: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:9f:a1:30:e7:8a:eb:59:d2:4b:de:f4:72:62:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
        Validity
            Not Before: Dec  6 03:00:33 2025 GMT
            Not After : Dec  7 03:00:33 2025 GMT
        Subject: CN=7853e6640caaf608d6122eab1313e91eda429ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:d4:2d:8a:03:46:b6:3c:02:8d:9e:57:3e:
                    81:c5:53:70:15:cb:85:1d:c1:c8:ad:e4:7b:b2:ea:
                    c8:c3:f8:a4:19:4b:61:86:a6:05:d7:91:7c:de:0e:
                    0c:b2:27:37:b9:a3:43:96:b7:aa:30:d3:ce:37:93:
                    7e:ae:7e:cc:ad:38:b7:c9:62:8b:e7:33:df:c3:d0:
                    64:96:c2:a7:75:02:20:ea:67:4f:a1:31:b2:8c:63:
                    35:a6:3c:3a:b5:7a:06:45:cf:ac:4c:7e:8a:cb:09:
                    e5:b3:7e:83:0d:98:ad:a9:cc:c4:d3:f6:0b:38:a8:
                    a9:ba:98:3b:96:8f:53:1e:2c:7c:99:ff:2f:8e:78:
                    ff:bb:c3:be:ef:38:38:59:17:a4:6a:55:94:91:40:
                    bb:a7:6d:0f:e5:af:45:dd:ac:9f:7b:9f:75:bc:e4:
                    53:d5:63:d7:a6:09:51:5b:fb:3c:52:d6:02:88:3c:
                    f0:41:e0:9b:49:b3:6d:d0:fd:6d:d9:f5:de:82:65:
                    06:63:6e:47:e1:2e:07:63:02:0d:ea:5f:ed:4d:bc:
                    e3:ed:e9:63:a6:0f:05:8a:d3:c8:30:9d:fc:7d:45:
                    c8:b0:82:0c:53:6a:fb:c2:82:0a:09:b0:cc:80:1b:
                    60:58:25:c7:ec:f6:f0:bb:16:33:cf:b7:fd:65:c4:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:53:E6:64:0C:AA:F6:08:D6:12:2E:AB:13:13:E9:1E:DA:42:9E:F5
            X509v3 Authority Key Identifier:
                keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:90:9c:8a:74:68:af:5d:96:ff:2b:25:8a:c5:1a:81:a4:f6:
         7c:ac:78:ff:e0:95:da:8c:08:a7:68:77:3c:c2:27:ee:21:09:
         0d:b8:99:05:d3:c6:e3:31:e6:9f:1e:0b:64:bc:41:f1:40:49:
         09:10:36:26:0e:f9:df:6f:83:2d:c0:44:f1:ac:f9:7f:34:70:
         c1:80:89:9d:86:18:36:86:9f:69:da:c5:ed:82:29:c6:c9:5c:
         b5:1b:fb:7e:1a:b7:16:1e:9d:84:17:d0:d3:26:75:22:d3:75:
         93:64:2d:ca:fb:65:51:1a:da:71:98:3a:b7:f8:1c:da:d6:9c:
         84:8d:c9:fb:98:bb:83:c4:e5:f6:89:39:c9:c3:8d:ed:c4:6d:
         47:82:ec:79:58:42:3a:cb:8e:69:db:ac:9a:f6:f6:31:77:92:
         38:79:d6:30:6b:03:40:bf:fc:18:c6:2f:f9:fe:c5:0f:b1:d9:
         ac:a7:d8:af:67:ce:6d:a7:10:7b:f8:32:43:09:03:4f:8f:d6:
         0a:6a:09:81:9f:1c:fa:6e:78:8e:99:e1:4a:ae:64:94:0d:be:
         f5:a5:08:84:78:29:bc:66:7c:47:12:01:3f:13:1e:d8:b5:d5:
         26:c9:dc:0d:be:ef:a7:ac:1e:ba:e0:00:08:3d:d0:5a:0b:8a:
         48:18:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:05 2025 by rpki-client