This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File:                     4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier:          3i8f6UJbPm/fwC8qhFvs8v4lZFqfpyQqKwpF1AgsSag=
Subject key identifier:   4A:93:62:80:BD:5A:19:1A:F6:FD:38:A8:B5:76:A9:BF:DB:9F:C1:6B
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer:       /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial:       019AF2093EEAF81ACD6045AFC56F10361A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 05:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:23 +0000
Files and hashes:         1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: pq+7pnOIbaylVWkkYE8FYRSTMu9O8HUp5KsEQMaUMHk=)
                          2: at7Oxyqw1YSxEoUOaW5RKvIjf0s.roa (hash: yOhpw2razZhrT29WlGA/CY3Yi3Lil58jkjnW17t8rig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:3e:ea:f8:1a:cd:60:45:af:c5:6f:10:36:1a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
        Validity
            Not Before: Dec  6 05:01:23 2025 GMT
            Not After : Dec  7 05:01:23 2025 GMT
        Subject: CN=4a936280bd5a191af6fd38a8b576a9bfdb9fc16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1c:df:f2:f9:03:d4:83:ae:0f:c9:9f:84:33:
                    5c:3a:8c:e8:2f:5d:b6:f0:ce:d3:a2:04:61:91:44:
                    f0:25:e7:02:38:00:15:78:4b:7a:ab:54:49:b9:c6:
                    7e:7f:bf:07:ef:4d:a2:58:fe:ec:63:71:9a:f7:b0:
                    4c:8e:76:a3:98:89:f3:75:34:c7:c4:2d:22:9d:34:
                    ea:0f:20:58:6e:37:fb:15:6b:ed:24:9e:21:49:16:
                    fe:29:db:f8:18:d3:5f:6f:67:bf:05:7f:e4:52:59:
                    0c:ce:47:ac:14:48:7b:83:6d:2d:a6:59:97:db:83:
                    e9:eb:e6:64:73:49:58:ba:01:15:0e:e9:14:35:57:
                    3c:dd:87:53:33:25:20:f6:98:a3:2b:9e:0f:f7:a8:
                    ae:30:2d:5d:79:0e:85:f5:ff:a7:ef:58:fd:3f:84:
                    75:cc:63:36:f9:25:4f:28:e0:c0:81:4d:da:18:9e:
                    4e:b0:f1:45:57:24:dd:3f:98:ca:99:0d:d5:28:8c:
                    9c:45:29:b9:cc:87:fa:86:18:72:a6:77:10:77:02:
                    1b:0c:2b:6a:43:5f:a6:fb:11:0e:c7:88:2b:8f:09:
                    45:de:82:11:b9:af:71:c0:ee:40:84:23:39:f8:27:
                    97:80:6d:da:cd:43:94:49:79:49:79:eb:42:d2:ba:
                    59:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:93:62:80:BD:5A:19:1A:F6:FD:38:A8:B5:76:A9:BF:DB:9F:C1:6B
            X509v3 Authority Key Identifier:
                keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9f:63:59:b8:fd:b6:4f:6a:76:98:28:e0:3a:78:ba:c1:31:
         03:0e:b0:e2:50:59:35:d7:a1:ff:74:c6:bd:39:ec:f5:df:33:
         92:6f:76:2a:af:ea:59:92:f7:32:23:17:08:7f:e0:82:77:46:
         14:57:9a:67:b1:ae:b8:9a:95:34:b5:1e:2d:64:12:67:54:85:
         13:9d:8d:1b:20:92:eb:e2:7d:f2:e8:7c:59:1c:5f:44:55:f0:
         94:5f:d6:e2:39:9b:c2:f4:37:c3:60:eb:19:49:3a:c0:7f:04:
         42:7e:7c:d9:88:d7:16:af:54:4d:1d:16:8e:03:e0:f7:c0:13:
         77:f8:9f:f4:18:36:16:aa:84:d9:89:21:e0:38:48:e4:4f:c5:
         fc:65:8f:a4:ab:48:5c:47:62:3b:87:d8:ea:60:a0:2c:a4:4b:
         05:20:4d:08:3a:a0:83:93:16:bf:30:ed:ce:40:cc:fe:50:a0:
         1a:b0:37:9d:67:89:ab:0d:e5:e6:06:f8:71:cb:80:85:7b:c5:
         96:8d:17:39:0d:3b:ab:c9:47:cb:da:10:f6:24:a6:3d:07:70:
         a3:ec:fc:d4:06:77:e1:45:80:f1:67:29:75:92:d8:05:02:27:
         56:69:a9:37:d7:f7:0e:3c:b4:6f:70:a1:27:f4:61:4f:af:57:
         6b:07:fe:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:13:41 2025 by rpki-client