This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File:                     S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier:          YhuYwJCqra8luscIAbXvr6ns3nIj4Jcj9uCgwECJCa4=
Subject key identifier:   32:0E:4E:8E:F2:AA:1D:80:8D:A1:5D:97:8C:9F:08:05:33:89:A5:7B
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer:       /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial:       019B30429FDF57028569BE1F6726E58A0D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number:          1782
Signing time:             Thu 18 Dec 2025 07:00:31 +0000
Manifest this update:     Thu 18 Dec 2025 07:00:31 +0000
Manifest next update:     Fri 19 Dec 2025 07:00:31 +0000
Files and hashes:         1: Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa (hash: reqjwr/lIQUNR5CfmDP6LbkF/9R8ba/CN2hm8CCraWc=)
                          2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: U7027Jdv4ypKJAUR0m1WlcAzsbEV+DBlCe/8QhW0CMM=)
                          3: zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa (hash: 1fee2j1QaONApl9ibC5gkmW09S49dKdtErXLxO2GvfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:42:9f:df:57:02:85:69:be:1f:67:26:e5:8a:0d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
        Validity
            Not Before: Dec 18 07:00:31 2025 GMT
            Not After : Dec 19 07:00:31 2025 GMT
        Subject: CN=320e4e8ef2aa1d808da15d978c9f08053389a57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:4d:bd:87:b5:35:a8:16:58:08:d0:81:8d:
                    2e:9a:05:62:6e:08:c9:cb:cc:de:91:3c:c9:8e:ae:
                    60:13:c5:37:05:49:1f:d2:7a:71:24:98:5e:4e:40:
                    97:84:a5:2d:1f:d5:76:63:49:0c:d4:77:0d:88:94:
                    17:93:3e:6e:c9:68:be:f4:07:6f:21:51:82:0a:d3:
                    7f:75:e7:99:fe:a8:40:06:31:d2:e6:00:5c:04:fc:
                    23:51:23:73:1e:79:8a:80:f2:cc:7a:0d:86:1b:ee:
                    01:c2:86:f7:44:45:f5:ff:6d:fd:64:f3:61:27:cd:
                    e7:ec:68:ba:21:82:67:b8:7d:1c:f4:3c:0a:42:88:
                    5c:09:f2:23:ab:9a:12:b2:53:f8:13:18:94:77:cf:
                    50:8a:bf:16:a5:0e:a0:f7:16:95:5e:b0:8d:7a:40:
                    37:0e:12:ea:40:a4:ec:7d:72:46:1f:9a:3b:32:1f:
                    f3:6a:34:0a:99:20:ad:ce:ad:f9:33:a4:17:e0:b5:
                    d7:12:cf:a1:2c:c7:18:b1:3f:d8:82:53:bd:9a:4b:
                    01:d3:ea:eb:69:dc:24:a8:77:98:e0:34:97:f5:e2:
                    73:21:28:cf:8f:50:e7:90:37:9a:99:d3:95:49:8d:
                    02:74:a2:f6:2d:81:98:47:c5:5c:0c:15:a5:90:ef:
                    f7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0E:4E:8E:F2:AA:1D:80:8D:A1:5D:97:8C:9F:08:05:33:89:A5:7B
            X509v3 Authority Key Identifier:
                keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f3:64:92:52:df:30:38:b4:86:be:5c:8b:70:ea:04:ae:32:
         7b:4f:08:2e:07:a4:e2:b6:f3:2b:ae:15:ca:03:cd:ea:7d:90:
         ff:b8:e9:c2:4e:cb:57:72:24:4d:1c:b8:3d:1e:a5:66:9f:ee:
         6f:0a:aa:3d:4f:98:27:a1:7f:a2:f1:e6:6d:50:4d:6e:f7:aa:
         25:58:a0:90:df:48:19:2f:e5:2a:d9:5f:e1:b3:19:06:bf:0a:
         94:38:d2:63:0c:54:61:c1:9d:2e:3c:95:49:5c:07:93:c7:ac:
         4a:ac:9a:8b:39:6f:61:ad:c7:13:17:ce:b3:14:fb:99:ed:58:
         3a:ea:1e:82:15:c1:ce:22:30:98:fc:45:e7:a6:58:62:3c:33:
         0d:fd:90:07:c3:65:62:31:af:82:00:45:e8:c6:0a:2c:48:3d:
         7f:93:6c:42:8f:95:49:62:bf:dc:83:54:86:cd:f2:b0:be:c5:
         d4:9a:e6:6e:c4:d5:7b:c9:a8:ca:b4:9e:ad:09:86:29:ef:6f:
         5b:91:86:da:37:bc:3a:93:79:ee:95:d3:61:3b:7d:ae:86:89:
         1f:21:7d:8e:07:db:21:fe:d1:40:31:d8:59:6e:83:b3:34:57:
         87:ff:95:0b:b9:2d:96:0e:64:dd:f6:da:5c:dc:25:0a:c3:bd:
         08:84:fd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 14:08:18 2025 by rpki-client