This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
File:                     4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json)
Hash identifier:          Vm/d0V5f4NSSuiod+mLQDg3G7tSij7qVdVyvRx9Kprg=
Subject key identifier:   86:20:55:D7:DB:92:C6:66:16:38:82:66:EE:39:9F:B8:09:39:57:6A
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Certificate issuer:       /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial:       019AF20921D65A52C65EBA153706452962DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
Manifest number:          1792
Signing time:             Sat 06 Dec 2025 05:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:15 +0000
Files and hashes:         1: 1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa (hash: gNrv97avvDkank7EdDvcD5kAcTLpL7MBGtGaNujTfjw=)
                          2: 1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa (hash: YFDJetm10wMx3y43nkOzbjWKZjU+niDmUY27/YG6EhM=)
                          3: 34IsY0jO75pV7BAMdtZC6Y7R63Q.roa (hash: iHXM2CyDHwFZsOpk2M0YYfJaVLusv8i1hjOCk9r9pn0=)
                          4: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: eopF+HqgEAC/7XLVUWHJ/w+f/v7vyNW3HGpj9K/f3Vg=)
                          5: 7nkssnprFjXAOld7WKHfkEWzNzM.roa (hash: Skwqi1fOlMCKRKFWmUaMkFVWVXCxT4HsubhdV1vB7J0=)
                          6: P54Qz9AI09JDOlqysqt799AeQRI.roa (hash: nIDEtW0TBUZxo5dIDtHdP7iLVF2Wse6E2BuTqfPasv8=)
                          7: Y4y_3m4POfZlVUhwqm0uVd4P9vQ.roa (hash: dZrOM2p3noTvf6KyFY1PrTf2FDGKF1aorRCqRis2DzA=)
                          8: _dP89dJHE-YZKAUIAMAKH5hCybo.roa (hash: RwLTyGyMw54nCLsLFUIuCCv0sJSfUYZ8s2qq98bQOs0=)
                          9: eAV-d8BbWJ1sJQuFdRvhLNIzJUA.roa (hash: T3JT9dws49hGRBqX3Lqw/F5GMKuYnFZbEjUfdpuIhGs=)
                          10: erLKl2-7SPNGcOtJ86A0RSv3cdw.roa (hash: 1hNGg1BiH4BJWJitgxTwu0nBQpz2c5fg0q3Qy8a1iuo=)
                          11: r2_uEzNLhBHjD8nrsm_28O-I61I.roa (hash: MQGSyx9ipk0r/WYHwP9ZlzljWRWQN1rdWtX2fCTKqeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:21:d6:5a:52:c6:5e:ba:15:37:06:45:29:62:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
        Validity
            Not Before: Dec  6 05:01:15 2025 GMT
            Not After : Dec  7 05:01:15 2025 GMT
        Subject: CN=862055d7db92c66616388266ee399fb80939576a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:cb:39:54:f1:9e:d4:0c:2e:a9:ec:6c:93:
                    a5:07:2a:51:b9:54:87:96:55:19:e3:31:95:9d:d3:
                    86:9f:98:ee:be:01:55:4d:c4:7a:73:e2:5a:30:61:
                    e9:6c:a7:ac:49:f6:73:ac:d3:83:10:e2:1e:24:29:
                    4a:8e:18:d3:c3:cc:e9:a1:63:19:d0:11:78:c8:b3:
                    e0:fb:87:de:04:24:4b:96:7d:42:d3:ed:1e:1e:d1:
                    a9:97:b2:b1:85:53:d9:bd:34:98:ff:01:01:80:bb:
                    3a:f0:b5:10:c8:f3:cf:d1:85:ff:32:3f:d0:50:2a:
                    2a:60:eb:7f:4b:1c:ed:4a:7d:52:12:03:29:5d:b6:
                    5b:64:3c:5d:be:05:20:8b:fa:30:2d:ad:40:b2:a5:
                    94:44:ce:6b:43:46:aa:5f:2f:97:59:18:ee:d0:37:
                    79:c5:ee:d5:42:b7:d1:5c:0b:65:fd:0f:44:d1:fc:
                    28:46:2e:e9:f6:e8:07:6e:96:1a:a6:93:a3:c0:75:
                    4e:79:3e:30:3b:a0:a3:a2:a3:71:a9:d1:99:7e:e1:
                    82:06:3f:f0:aa:43:90:8a:db:7a:d6:2f:e4:d5:15:
                    75:89:3f:a1:49:5f:6e:fa:68:4d:90:30:8c:1e:b2:
                    b8:c7:2e:d1:e2:90:a5:47:84:6b:59:f0:10:f7:9e:
                    14:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:20:55:D7:DB:92:C6:66:16:38:82:66:EE:39:9F:B8:09:39:57:6A
            X509v3 Authority Key Identifier:
                keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:ff:f3:d2:ee:3d:61:a0:e0:0e:26:2a:b5:bb:69:1d:26:
         dc:b3:b6:66:89:3f:68:56:49:58:b5:94:05:d9:ba:3e:3c:66:
         30:98:dd:7c:61:4c:cc:2e:86:cd:f8:b9:ec:70:6b:c2:15:1a:
         b0:90:62:c4:f4:dd:af:a7:dc:d4:21:eb:0a:58:39:de:94:fb:
         6d:ac:9a:c5:5d:ef:34:02:11:fd:d7:f3:a5:b4:2f:5a:84:f8:
         21:03:f9:e4:e8:dd:38:9d:f7:75:04:44:ec:9a:4b:5c:4c:5c:
         85:58:e0:a8:e9:a5:a1:5d:8d:7c:3d:56:82:e4:d1:c9:a5:fa:
         e1:8b:5f:45:5a:b5:eb:b3:0d:08:e5:64:c6:a8:ee:82:b1:0c:
         75:dc:75:c3:68:18:7c:b6:4a:3a:80:f5:f0:45:b1:aa:5e:0b:
         6b:91:ba:a5:51:c2:0f:2d:eb:eb:fa:56:c7:f6:80:f7:b7:e2:
         e9:ad:25:eb:1f:d5:b1:65:75:9f:5a:cf:53:f4:07:37:83:5b:
         53:14:a6:b5:25:bb:ee:2e:bb:22:b6:5a:dc:09:6c:6c:1e:85:
         22:ba:d2:cb:8f:5a:d0:73:8c:28:3d:14:45:5f:6e:47:7d:5d:
         d4:01:1a:53:15:8c:80:b7:75:6f:e3:4f:50:14:0f:88:83:08:
         be:b1:e7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:08:51 2025 by rpki-client