This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File:                     C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier:          84gUxmmmw6nsQ4eyP9QlSYTspBjF6J2J5euhm2+/fjw=
Subject key identifier:   C9:03:59:93:78:E0:F5:0E:4A:AE:F5:E7:05:E1:F2:FA:71:6C:84:A7
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer:       /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial:       019AF12E86CAB2DCAD4F4B5CA99E1F8591C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 01:02:29 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:29 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:29 +0000
Files and hashes:         1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: SDwzmcrFQ6YNjiPqQGbnfVccBVqZ6Cr6mdWqDhzLJC8=)
                          2: xbK0xWiY34_RomWctzp72CJLeyA.roa (hash: uGlhM5SP1wH5GgbXheJ7ZYAOlhLuCV1Bj19dNLN10ho=)
                          3: ztCPKk8w1aeaQKuLHJz_e0TSo9Y.roa (hash: eX6lgcMXGHHyxYwjBqAxjQIWBeaf2J3CyUG15tvpJ0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:86:ca:b2:dc:ad:4f:4b:5c:a9:9e:1f:85:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
        Validity
            Not Before: Dec  6 01:02:29 2025 GMT
            Not After : Dec  7 01:02:29 2025 GMT
        Subject: CN=c903599378e0f50e4aaef5e705e1f2fa716c84a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:d9:e1:6b:71:4f:bc:d1:01:82:37:c2:02:
                    80:5c:34:a2:15:d2:a6:0e:11:2f:1f:70:10:8e:fd:
                    53:53:e6:e4:0c:00:4f:6a:4c:9d:78:07:2b:bb:3b:
                    69:88:65:ce:da:3b:f8:bc:84:e8:31:c2:c0:e8:d6:
                    1a:90:07:27:4a:d2:23:da:31:17:b9:23:3b:3a:4b:
                    d2:46:8f:6a:6f:05:f6:73:1d:5b:d5:41:c9:3e:e0:
                    3a:e8:9e:30:ce:bf:d0:40:31:b8:cf:11:3c:63:d8:
                    61:51:28:95:d8:5d:e7:aa:04:07:7a:44:04:a2:58:
                    c3:97:b6:de:2f:2b:fc:2f:d9:e7:3d:5d:0d:79:95:
                    63:06:74:5e:40:5f:ee:39:4a:0a:07:14:6e:b6:2c:
                    e0:ee:7f:a4:8b:38:4f:f6:b7:68:5f:f9:8f:bb:8b:
                    49:31:52:fb:be:38:fe:67:82:0c:cd:ac:c4:28:e9:
                    6e:80:b5:a8:22:90:3a:d3:a7:fc:5e:ab:a1:38:11:
                    06:fe:23:f5:66:f8:70:31:bc:a3:f2:82:cd:8f:e6:
                    2a:c7:d3:82:0e:03:54:4c:b1:65:f8:c4:47:99:ac:
                    eb:95:1f:fb:20:41:05:a5:52:68:44:73:19:f7:42:
                    d3:44:25:f2:6e:37:79:b5:05:f1:65:b2:ed:47:f8:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:03:59:93:78:E0:F5:0E:4A:AE:F5:E7:05:E1:F2:FA:71:6C:84:A7
            X509v3 Authority Key Identifier:
                keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c1:27:e8:02:48:29:0f:57:51:50:2e:de:3b:38:c5:a5:86:
         e6:95:55:c0:56:87:c1:8c:5f:b5:bf:c0:3d:fc:3c:77:3b:9b:
         71:bf:f2:4b:99:2c:7e:06:c0:1d:a2:e0:c2:0b:96:25:e7:58:
         14:17:36:ff:f9:1f:0b:83:cb:27:f4:3b:2f:70:b0:94:56:0e:
         3f:98:75:94:b2:33:de:50:e2:76:52:c3:b6:32:33:90:fc:80:
         ca:6b:f6:d4:ca:bb:b3:c5:f5:ab:c7:a2:13:17:63:8c:87:8f:
         2b:93:57:2c:14:32:da:d9:77:35:c1:f1:a4:06:b3:b3:8b:d3:
         77:a5:bb:42:99:2c:37:42:b8:fb:c0:81:fa:6d:f5:0a:ff:03:
         78:4f:d1:5c:55:4e:63:fb:74:10:51:98:ac:44:3f:f7:0f:07:
         f5:da:26:00:94:2e:6e:da:6d:2d:36:f8:9e:d5:bc:86:7c:42:
         29:ca:70:4c:9f:56:47:4a:4e:4a:04:55:56:d4:62:9a:a8:fe:
         20:e3:01:f4:18:82:2a:67:3b:d2:64:74:dd:32:f5:00:34:26:
         f7:11:8d:65:28:5b:f0:e8:05:41:fe:64:8e:2c:08:4d:42:1b:
         fa:54:97:9d:33:1c:8b:ea:3a:f9:04:b6:c8:ba:1a:ad:9f:d0:
         87:92:9e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:42:00 2025 by rpki-client