This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File:                     lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier:          mTyRQzZ3j2gHopoV/83LS1J0U0MUfAfAfv6ol+3fA58=
Subject key identifier:   A1:22:3F:C1:5B:11:01:50:1A:6F:58:55:9E:18:69:82:C3:7A:41:8B
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer:       /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial:       019AF1D1EA38557F17CD3F169553009EFB44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number:          05F0
Signing time:             Sat 06 Dec 2025 04:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:57 +0000
Files and hashes:         1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
                          2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: Pp59b055JNAyWeNeIHq0DHkUJfkriqnqIUE4V+9tKG0=)
                          3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:ea:38:55:7f:17:cd:3f:16:95:53:00:9e:fb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
        Validity
            Not Before: Dec  6 04:00:57 2025 GMT
            Not After : Dec  7 04:00:57 2025 GMT
        Subject: CN=a1223fc15b1101501a6f58559e186982c37a418b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e0:f5:33:5d:db:cb:47:3f:14:af:96:bb:cf:
                    17:84:eb:44:b2:2b:5b:73:b9:97:3d:3f:9a:65:57:
                    1e:77:a7:41:92:bc:2b:18:1f:86:e4:52:8b:bb:79:
                    a5:1c:db:cf:1d:be:42:ff:6d:da:4e:eb:81:d6:fa:
                    2b:10:4a:4b:95:94:bb:89:4f:c6:bf:66:89:c2:0e:
                    fd:27:58:6d:84:8c:df:4f:d2:af:43:23:62:17:c2:
                    33:aa:0b:51:98:d4:51:46:0f:79:ce:f5:1e:65:66:
                    b7:f5:70:37:f9:5f:9a:0b:0b:d2:fa:15:df:e9:ec:
                    2d:f3:99:33:47:8c:7b:bc:8f:b0:e9:7b:53:cd:f4:
                    24:fa:02:7e:47:28:9f:54:30:9d:f6:c0:b2:74:73:
                    d3:b8:b2:d1:63:ef:fe:b3:08:27:49:67:dc:b0:9b:
                    19:25:39:a7:47:d1:d4:2e:07:9a:b5:65:b4:09:a9:
                    18:24:ff:f6:c4:74:18:eb:32:72:a7:78:8f:f0:a5:
                    9c:35:be:ad:72:5c:2b:3a:99:d2:aa:a5:2b:6c:d6:
                    7f:ab:0e:a9:13:00:2d:62:4d:73:d8:d8:78:4e:e9:
                    61:30:c5:f5:2e:62:88:26:84:37:aa:53:a4:98:9d:
                    3b:3b:b9:ef:a3:a3:88:89:4d:5a:73:fe:dc:6e:04:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:22:3F:C1:5B:11:01:50:1A:6F:58:55:9E:18:69:82:C3:7A:41:8B
            X509v3 Authority Key Identifier:
                keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:23:34:d6:33:6f:16:c4:67:b1:37:af:2c:f5:ce:06:0c:84:
         0c:60:cb:94:a2:28:97:a4:ba:55:76:8c:46:a8:09:4e:20:9e:
         a5:02:89:6b:3e:5d:cb:0e:ee:84:33:38:30:c4:44:a4:51:2f:
         90:96:e7:ea:aa:d6:d0:2d:c6:a2:a3:5d:bd:aa:41:b9:de:77:
         be:19:2b:2c:9c:0e:dd:b2:23:8f:d2:89:0b:60:01:5c:d9:a9:
         2f:51:ed:09:50:5d:fa:27:2d:dc:c2:51:e0:ed:76:4b:fa:36:
         7d:09:fb:88:c4:f1:29:88:e5:14:8e:51:e5:72:6f:f3:d9:cd:
         96:a9:56:a6:05:84:52:fa:ae:dc:5a:c9:bf:d5:a2:49:12:c0:
         48:d9:36:76:ea:08:a0:0b:8a:13:ea:aa:06:5d:a4:db:ed:23:
         31:2a:65:4c:d9:13:2c:38:44:f8:c5:cc:30:49:ae:4a:9d:c1:
         a7:e3:3c:ce:74:e2:5b:6b:a4:e1:2a:e9:da:5a:29:db:f5:dd:
         8c:58:2a:fd:1c:67:30:8c:ad:d1:59:dc:bb:74:07:7b:91:db:
         92:7e:5c:19:78:40:55:ba:9e:b7:31:7b:ce:29:0d:08:d7:23:
         74:ad:32:4d:c9:8d:fb:49:e2:b6:65:4a:fd:8f:c7:66:06:69:
         d8:59:43:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:47:08 2025 by rpki-client