This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
File:                     04V55MfaAd8EZRhiNumvJ-tzEu0.mft (raw, json)
Hash identifier:          A5zTWo+SVxE55k8GyO7QtrGN5e5yO10uP+JJJvtpt5M=
Subject key identifier:   B5:3F:31:DF:81:FC:CF:8D:FC:49:37:E8:E6:9B:59:CB:A7:BB:C7:62
Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
Certificate issuer:       /CN=d38579e4c7da01df0465186236e9af27eb7312ed
Certificate serial:       019AF2092F222B58B83F9EE46C8CE83EDDC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
Manifest number:          04A7
Signing time:             Sat 06 Dec 2025 05:01:19 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:19 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:19 +0000
Files and hashes:         1: 04V55MfaAd8EZRhiNumvJ-tzEu0.crl (hash: QE0ioC2TR4/AYDe/Yr1qb+yVUD3INosQQ6nsT5JTR0o=)
                          2: 69DdI940Yh4oMejHIlOAybu5hGs.roa (hash: oNe0WU8knWo/mXYKX1G8NRoFBB3BCMhioapXHf+HLEg=)
                          3: Uxu1JjHkshCCeiHLHxVp_E0lRZs.roa (hash: YvTnmumvwq+sxP66uResD/jRGFZs7Uiz5KOMG1wGYVo=)
                          4: lLapjcdu9pW40ntTmus4mLCMMao.roa (hash: MG8R+EP074Ya4+jL+dMKnWgExZH+J/kJfQaN+eeMgg4=)
                          5: otPEIjukLSXBX1LNzA0kpJ-Qcfs.roa (hash: s8s/CT+3vYo5BDl9VfuNpa4iWRnSeVvGtwmOw+eay5E=)
                          6: ye7c9m6rG8EHvz3fSqWQC8eRnw8.roa (hash: OFM1TpyE+vNA8yY6b7k5rCn5DIDXAB7vZilkBN1528I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:2f:22:2b:58:b8:3f:9e:e4:6c:8c:e8:3e:dd:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed
        Validity
            Not Before: Dec  6 05:01:19 2025 GMT
            Not After : Dec  7 05:01:19 2025 GMT
        Subject: CN=b53f31df81fccf8dfc4937e8e69b59cba7bbc762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:e3:f8:0b:c3:15:63:91:f8:d4:c9:6f:34:
                    84:1d:bc:70:3d:ff:7d:00:ad:7a:ff:4b:32:f1:ae:
                    a1:2b:15:b3:0b:d6:c2:99:d9:a5:69:71:4a:60:b1:
                    4d:25:57:a7:c0:f5:e7:6b:c9:68:42:15:24:18:73:
                    d3:a7:23:bf:97:58:45:d6:66:35:a4:d3:21:08:26:
                    29:fc:d0:93:0a:f9:f6:26:c7:4d:f4:25:cb:5c:67:
                    e3:41:04:d6:e4:ef:ef:26:f3:8f:04:a6:cf:70:8c:
                    22:fc:c6:05:04:bc:7f:4f:a9:8a:f3:2e:5a:0a:f8:
                    20:56:62:30:2f:ea:dc:b5:c3:b9:35:79:b1:73:1c:
                    bb:41:01:2a:a6:d3:28:fe:f2:92:66:6a:c0:cb:e6:
                    bb:24:53:bf:08:d9:e2:6d:67:26:6d:35:54:8d:31:
                    e9:36:c9:ee:c0:2e:d6:c5:d7:78:41:67:ae:10:63:
                    35:6d:80:ce:f9:a6:36:93:d0:7a:f7:39:5f:d4:8a:
                    3b:5d:8e:7a:2e:b3:92:05:4e:a2:e3:cd:5a:f9:20:
                    29:c1:cf:b1:09:10:40:43:3f:67:32:bd:7f:b3:20:
                    09:f9:01:ab:8d:af:a8:7a:52:1a:40:3c:c7:b7:0a:
                    87:aa:bc:18:b9:cb:36:ce:d1:96:29:fe:d2:2b:37:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3F:31:DF:81:FC:CF:8D:FC:49:37:E8:E6:9B:59:CB:A7:BB:C7:62
            X509v3 Authority Key Identifier:
                keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8e:f5:3a:86:a6:38:77:97:71:6a:14:54:4d:ed:92:23:8a:
         ed:46:a2:ee:c3:79:c7:56:40:f1:6b:23:01:19:ed:6f:5e:0b:
         07:fa:09:20:4e:da:9f:1f:4b:6c:c3:7f:b5:b1:d4:51:3c:24:
         02:a3:61:86:04:ff:10:77:37:1b:16:bf:59:e9:fa:9d:c6:dc:
         5b:c5:38:74:81:4b:48:dd:9a:56:30:4d:f1:52:14:22:66:3a:
         05:a2:bf:2c:07:97:ed:40:2f:37:d9:fd:0c:cf:0c:cd:6c:08:
         be:e9:05:b8:b9:09:3a:4c:a4:2b:b0:02:36:90:fe:9b:74:40:
         3d:60:3e:14:ef:56:81:b3:5c:a4:00:e3:3d:d8:34:7c:0c:d5:
         04:8d:07:7d:41:3e:8c:37:81:e8:3d:0d:8f:39:ab:11:b4:f1:
         ee:bc:29:bd:ad:93:13:f7:19:10:88:f4:fb:d4:8d:ed:d1:22:
         f0:58:3a:52:e4:24:9d:9d:00:ec:59:0b:57:8f:ad:b8:e6:4b:
         f6:a1:26:a1:b2:e4:9f:a6:7a:fa:3b:39:3d:15:14:c9:e8:f1:
         e5:99:fb:e6:d8:00:8d:59:32:32:11:76:8b:18:d2:2e:12:9d:
         55:7a:32:a9:6a:a8:d0:e4:30:40:b9:d9:7e:a3:ef:ea:7a:9f:
         a1:4a:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:39 2025 by rpki-client