This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File:                     l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier:          snnA5Px1RFM0CTn5C7Rt4aEZWCITBjziHXXwjj9a9Og=
Subject key identifier:   18:9F:DC:8B:0F:D2:18:12:DF:8C:69:E3:8E:69:15:C7:7C:E8:8C:8E
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer:       /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial:       019AF27695638B0B9576C861D849468D0D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number:          063B
Signing time:             Sat 06 Dec 2025 07:00:49 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:49 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:49 +0000
Files and hashes:         1: 0u5MB7MHn7bL2gqyo5sqX2hHnxg.roa (hash: dTLKNW3bqLmuZGafffFw/K7jFyKobZ/sSRa/waRYTh4=)
                          2: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
                          3: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: e/VZRMMaXfDF6OhrIilbLcRBO4aAMfqYk2NtCYJVIJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:95:63:8b:0b:95:76:c8:61:d8:49:46:8d:0d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
        Validity
            Not Before: Dec  6 07:00:49 2025 GMT
            Not After : Dec  7 07:00:49 2025 GMT
        Subject: CN=189fdc8b0fd21812df8c69e38e6915c77ce88c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:11:c4:20:5c:87:c0:75:d1:48:47:09:48:bd:
                    da:b7:eb:32:ce:bc:c0:b2:9d:a5:5f:d2:25:72:44:
                    28:ee:bf:c4:7e:30:95:c5:b2:7c:f9:89:15:55:5d:
                    58:2d:f0:f3:16:9e:6f:c6:ab:73:f0:f3:2d:1c:e0:
                    c6:cf:72:42:ea:4f:ff:df:4d:b1:04:92:36:46:7e:
                    00:c9:fb:85:67:31:b2:c5:0c:b6:d6:75:44:21:d2:
                    45:29:1f:b2:0a:33:f5:f4:52:05:2e:fe:64:13:a0:
                    3d:7e:81:e3:82:01:e7:82:23:21:67:cb:8d:84:c3:
                    66:de:6d:ef:0d:0e:69:01:f7:6e:b8:0a:bc:0b:f5:
                    87:ef:28:a6:c8:71:b2:3a:09:0a:45:ac:fe:d4:2e:
                    b3:d8:a8:df:6e:2c:fe:b0:5a:f2:23:93:60:63:e7:
                    7e:8f:10:e4:34:d2:eb:58:2c:1b:ee:e8:d7:91:53:
                    41:a3:ae:19:99:49:a7:67:ce:60:c5:79:23:e0:b2:
                    de:b4:9f:8b:c5:ad:73:00:46:23:00:33:13:3a:93:
                    e1:69:50:93:d9:50:f0:a1:13:0c:72:f6:ac:6d:23:
                    22:9a:4b:6c:4b:f0:9f:04:09:51:7f:ef:fc:8e:03:
                    55:24:f6:b1:3d:d3:49:ae:d6:c0:c7:b7:ce:cb:f6:
                    cd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9F:DC:8B:0F:D2:18:12:DF:8C:69:E3:8E:69:15:C7:7C:E8:8C:8E
            X509v3 Authority Key Identifier:
                keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:34:fb:94:4c:c9:fc:d1:90:39:34:0d:11:de:f7:6c:c5:d2:
         f8:69:82:4c:05:0e:fe:65:60:37:8e:a5:4f:a8:7c:0f:05:3b:
         1d:64:b5:78:87:b4:d0:e8:ce:b5:89:43:13:ba:a2:d0:1c:36:
         f2:9b:c5:a9:d1:7b:bb:0e:f2:be:89:6f:f1:ad:a8:8a:58:bf:
         47:64:de:61:47:3b:49:64:56:77:4c:62:5c:39:00:87:24:ad:
         ff:15:0f:b5:55:87:4d:99:d1:2f:6b:f8:37:c6:6d:58:b3:ba:
         51:d0:c4:8f:4d:2c:cc:d2:bc:27:db:d8:cb:67:76:b0:b7:af:
         6c:8b:c7:2c:51:45:fc:62:be:97:2f:51:a0:de:d3:a0:9c:31:
         80:2a:05:cb:e0:e0:ef:cd:a7:9c:d0:02:58:dc:d5:b6:5f:19:
         63:b4:23:b6:fb:f5:ca:ed:c9:cc:dd:61:f2:37:87:0f:af:fb:
         07:db:50:aa:83:58:9c:83:97:4e:ec:2a:0c:57:ec:bb:1e:97:
         1e:09:bf:07:93:02:22:3d:13:cb:d6:50:b9:c3:82:29:65:bc:
         07:e4:fd:44:90:ef:d6:7b:84:e6:09:af:c6:51:c3:43:d5:c7:
         f7:b1:b6:71:61:ae:62:cf:08:fb:71:9b:83:cd:f7:24:87:84:
         47:8e:6b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:21:31 2025 by rpki-client