This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File:                     t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier:          7o80khRm00tfGRm1wdgRTtMgEHwBUthkgiRQMC1S610=
Subject key identifier:   A2:AE:FA:1E:92:4D:74:44:A1:7A:F4:33:7D:48:7B:90:4C:56:C3:2E
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer:       /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial:       019AF12EEA683D4B479B70F9CCB823514C39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number:          1415
Signing time:             Sat 06 Dec 2025 01:02:54 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:54 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:54 +0000
Files and hashes:         1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
                          2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
                          3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: 9Lrf6PQWKhSgBO10SFwJ/2Uh7sCE0fnlu26e2XpXiF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:ea:68:3d:4b:47:9b:70:f9:cc:b8:23:51:4c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
        Validity
            Not Before: Dec  6 01:02:54 2025 GMT
            Not After : Dec  7 01:02:54 2025 GMT
        Subject: CN=a2aefa1e924d7444a17af4337d487b904c56c32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:d9:a1:38:ae:2d:92:7c:80:2c:88:0c:fa:
                    2e:7d:30:82:ab:b8:5e:b5:a6:83:09:c5:80:33:2e:
                    dd:38:2d:bd:f0:81:65:87:6d:49:f2:74:7c:3a:aa:
                    2e:5e:26:80:18:be:43:e7:8c:5c:a5:1c:bf:41:ea:
                    6d:2a:73:8a:d3:da:19:ad:cb:0e:00:1f:fc:57:96:
                    c3:0d:03:4e:56:2e:2e:7d:e7:08:a8:59:d9:7b:22:
                    a0:72:88:bd:79:5b:32:82:1d:5a:ab:e8:d2:ea:d6:
                    ff:47:ef:6c:49:c9:b6:23:6f:3d:d8:09:69:f0:e5:
                    71:a8:a8:b7:c2:c0:18:b5:68:88:1b:16:b2:be:11:
                    b1:b0:ad:e8:21:47:46:ea:3a:d1:81:dc:84:16:57:
                    70:1b:43:8e:71:a5:2f:88:10:fe:0e:47:a9:fc:47:
                    5d:c8:3f:df:cd:72:a2:af:36:22:1b:5d:6c:6d:32:
                    d8:84:64:8b:29:3f:69:87:13:d4:ef:0c:35:78:a1:
                    cb:84:2c:a5:02:80:91:45:f9:d6:61:7f:ba:e7:47:
                    f2:8c:7c:0a:f6:46:e8:a4:0b:3c:b2:6a:45:f8:74:
                    a6:68:7b:3c:36:b0:7f:ce:05:4b:b9:06:49:65:98:
                    0d:3b:34:dc:de:5f:fb:07:83:59:be:c4:a0:81:05:
                    dc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AE:FA:1E:92:4D:74:44:A1:7A:F4:33:7D:48:7B:90:4C:56:C3:2E
            X509v3 Authority Key Identifier:
                keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:0b:64:92:c3:13:e8:d5:a4:c9:2e:06:77:c3:59:bb:57:b8:
         6d:40:a2:de:b5:06:23:dd:4a:23:b1:95:a1:3a:ec:14:91:87:
         60:9e:ca:c0:01:6a:52:df:86:28:1c:6d:d4:03:38:35:67:5e:
         95:96:72:07:68:79:f6:68:64:03:d3:99:ab:8b:49:cc:91:38:
         78:ae:ee:25:5d:c4:51:fa:e4:0b:5f:6c:30:fc:8b:cc:18:2e:
         64:1a:92:5f:95:c5:f6:5f:c5:ec:f6:09:54:3c:7c:57:b8:cd:
         b7:bd:b1:6f:f8:37:c1:e7:e1:9f:6e:d5:d6:ca:ad:2e:18:0f:
         de:1e:b5:7d:2d:a1:cd:a3:d5:0c:f7:e4:f3:44:c8:e1:23:5a:
         33:54:d7:39:09:f2:84:ea:f5:5b:ed:c1:0f:3b:38:2d:8e:94:
         37:49:91:f1:04:aa:e8:18:5e:4b:37:72:25:09:58:d5:33:fe:
         04:4e:ce:74:03:87:20:dc:8d:77:70:5f:a3:1f:2a:1c:9d:e7:
         65:bb:8b:ce:bd:46:4d:db:89:77:da:95:e1:ed:b5:1f:4b:fc:
         d8:5f:45:f4:b1:3a:5b:1b:45:da:f5:5c:24:84:32:22:ea:f3:
         ce:a5:08:f1:7e:24:d6:e0:5c:bd:e6:1f:b5:53:5d:ce:ef:c4:
         38:34:86:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:08 2025 by rpki-client