This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
File:                     4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft (raw, json)
Hash identifier:          9JvZ7Tzk7FzEx1cGcQpZf5rTZT7qQBwHdkkopcVr+XI=
Subject key identifier:   21:6D:43:40:BC:17:82:01:FA:02:41:8E:CC:D5:8C:B7:94:35:25:63
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Certificate issuer:       /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial:       019B25881FF127C22CB8A20F5C806001CB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
Manifest number:          178D
Signing time:             Tue 16 Dec 2025 05:00:36 +0000
Manifest this update:     Tue 16 Dec 2025 05:00:36 +0000
Manifest next update:     Wed 17 Dec 2025 05:00:36 +0000
Files and hashes:         1: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl (hash: RhZS06k5ltUtuNZ5eNeVxMYNeTP9i8pvSRvtZgSyzK0=)
                          2: 69Gg052Fvx4I2Fe4cFxkAgmaw8U.roa (hash: 4OJvsk33eSq4Pcms3ZWUp5ICc5rvGRU0gr/rstfeV/0=)
                          3: M0_KB7YWngkVytRrWSYysj7YJLA.roa (hash: Wx2mA+u5jzHoEfTRzsY0nX3Oe/9sdMOBfbPWiWl5Xlc=)
                          4: V0Sp0TtSbp08bch-dMvX-f8oa2o.roa (hash: JjHFR/Br8lLNxd0wBIShn4KBf2iV68ca7V3XI/Bh6Lc=)
                          5: w2HliW1FxAoWboCzBC57HQK_5M4.roa (hash: 1o/6TghmsgYeou6D438p0wdWpOeCHDeKRbg9VK0Bxfs=)
                          6: z5K__5uwKXFTzaD79qKBdTd2bJI.roa (hash: Cp/izXCB0pUAYpj87c/lOI2duT2TX+EDfDIWds1Fqng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:88:1f:f1:27:c2:2c:b8:a2:0f:5c:80:60:01:cb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
        Validity
            Not Before: Dec 16 05:00:36 2025 GMT
            Not After : Dec 17 05:00:36 2025 GMT
        Subject: CN=216d4340bc178201fa02418eccd58cb794352563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:92:ae:f0:b9:e9:84:a0:bc:31:cd:0c:c9:
                    15:61:65:2e:0f:66:5b:69:8a:b9:d4:df:82:e4:4b:
                    71:7b:50:54:fc:ff:51:b8:b5:c9:ef:29:23:6b:0b:
                    fc:5b:b9:19:ea:7d:7b:86:de:70:3f:c3:3a:e9:fd:
                    3d:82:59:f4:c2:0f:7d:bf:81:d3:9c:cc:4b:f5:ab:
                    f1:7c:e2:8e:f0:32:6d:ef:b3:e8:3a:d1:36:f7:5a:
                    fc:09:52:37:1f:9c:60:b9:5f:d9:df:db:8c:87:8a:
                    97:b3:0a:d1:05:28:58:1e:e2:24:d0:be:41:30:e4:
                    60:c8:18:a1:7d:55:6d:a5:7d:81:aa:5c:42:28:33:
                    33:61:21:f1:43:a5:f9:f8:ed:3f:b2:f4:41:24:c9:
                    68:d7:46:0d:d6:cf:a5:2b:74:fa:12:7e:76:7d:c5:
                    fd:d8:8c:8a:3f:a3:69:bb:42:c6:f8:57:a1:f4:d1:
                    ee:e1:14:46:ee:79:4e:ab:56:f6:51:5e:b4:33:93:
                    12:3d:43:37:da:e8:c2:cd:04:71:b8:37:c4:87:8f:
                    8f:ca:7e:56:81:7f:16:b3:3c:af:3d:ea:d1:af:0b:
                    d8:4f:41:2c:b8:12:b2:55:3d:b3:69:15:53:a8:ee:
                    eb:8d:19:a4:ae:ac:06:13:a6:3c:26:d8:c7:43:f2:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6D:43:40:BC:17:82:01:FA:02:41:8E:CC:D5:8C:B7:94:35:25:63
            X509v3 Authority Key Identifier:
                keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:f6:39:f4:e3:e0:5f:11:9c:04:ce:64:35:10:fd:ff:f0:
         76:52:b9:b5:88:01:8e:56:e9:02:1e:02:6d:39:d7:92:60:2c:
         a8:48:9b:fb:a7:22:89:0b:32:ac:19:f7:00:e0:6f:0b:28:c5:
         79:cb:68:52:ce:63:8e:57:ae:9e:9d:ad:61:41:4e:be:f5:2b:
         5e:76:2e:b3:4c:e1:01:04:4c:18:d6:40:86:88:de:0a:47:d3:
         2d:bd:f1:bf:bd:eb:2f:71:33:05:11:2d:22:36:cb:e0:de:2e:
         81:aa:15:e7:fe:ad:54:bc:4f:6e:6b:76:b4:f7:e2:4c:61:12:
         f2:8c:8d:29:03:cc:aa:23:5a:19:3d:3a:66:f2:93:ca:00:94:
         61:9c:51:26:bd:e8:9c:06:25:f7:e2:ab:4d:2a:8c:27:f5:62:
         9f:ee:2d:11:35:62:8a:63:db:d6:75:71:ce:e1:ee:95:4b:ee:
         64:c4:72:bb:e1:41:f2:04:3f:c8:e3:61:49:11:9e:34:4a:21:
         30:9d:54:f4:06:2f:3e:33:cd:fa:1e:f3:e7:51:05:37:66:db:
         c1:d8:6c:63:51:a1:88:93:5f:37:31:97:a0:46:d3:76:62:3f:
         a1:72:d4:ab:61:ca:d7:7a:f7:76:fd:28:a1:de:60:df:bd:d1:
         62:ef:74:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 10:57:43 2025 by rpki-client