This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File:                     R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier:          2Pgj1yQU8RqsJbiOULGMmzPmi3rqCFclAdddDCbV0h4=
Subject key identifier:   55:A6:F2:45:73:98:95:6F:BD:C8:19:70:10:81:BB:EF:F4:E1:C4:AE
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer:       /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial:       019AF12E8991F1426649490602036397AE35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number:          090C
Signing time:             Sat 06 Dec 2025 01:02:30 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:30 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:30 +0000
Files and hashes:         1: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: +HHVTEn7iGRqP3AV2BFIGNiT557DQwG4QsTE4lECd24=)
                          2: bgKhGgsXnxYOt5etHFWwqDnUeNs.roa (hash: uM75kFMM5Lx2SB0GVKIXvYn71xMx4/TssgSDMD0euaE=)
                          3: eJaPcqVrFJ9nAn0ii5m8-wTNE2M.roa (hash: LKpNzbSMRXo8Ez4GuvTIIep3ThOtGE1xLAuyWwSMRJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:89:91:f1:42:66:49:49:06:02:03:63:97:ae:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
        Validity
            Not Before: Dec  6 01:02:30 2025 GMT
            Not After : Dec  7 01:02:30 2025 GMT
        Subject: CN=55a6f2457398956fbdc819701081bbeff4e1c4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a5:a1:57:69:98:c2:be:98:d2:18:35:db:a1:
                    69:d5:e4:c1:af:39:6c:62:55:a9:56:25:27:0d:a7:
                    ab:05:19:fb:7d:b7:68:a7:d1:c7:b0:ba:95:6a:54:
                    ec:eb:33:f8:e5:2d:0d:55:64:62:1a:db:b9:66:36:
                    8d:88:a2:78:97:1a:75:f1:e0:ee:8f:03:cf:8c:79:
                    66:d4:d6:25:f8:16:05:40:64:73:c0:87:07:fd:26:
                    bf:a1:e3:84:4a:bc:14:fb:9f:f2:87:52:e8:3b:a4:
                    bb:b6:82:9d:b5:34:7c:98:ba:69:f5:f1:f0:35:fc:
                    f8:3e:07:ac:ed:78:ed:07:2d:64:69:76:3f:35:bb:
                    ab:bc:2e:89:d2:f7:61:69:fb:e3:2b:ca:ac:9a:a5:
                    c0:42:7c:68:f6:14:98:32:eb:18:68:00:ed:87:ea:
                    22:04:c8:99:a2:78:65:6a:e8:13:ba:a0:ac:91:44:
                    cc:c0:4a:50:ea:6d:3f:35:9f:30:f7:44:20:a9:72:
                    31:56:ae:64:b1:3b:fc:36:7c:d5:3a:36:86:d2:e3:
                    92:b5:7d:3f:64:df:d0:c7:f8:3b:ba:ed:09:36:c2:
                    8d:a3:4e:d2:81:40:3a:0d:a1:10:33:4c:01:04:36:
                    67:4d:a5:e6:50:42:4c:3b:a5:fe:f3:9e:21:01:c4:
                    e1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A6:F2:45:73:98:95:6F:BD:C8:19:70:10:81:BB:EF:F4:E1:C4:AE
            X509v3 Authority Key Identifier:
                keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:24:b5:49:1f:29:8c:e8:f1:93:0c:47:8b:01:2b:4f:9a:12:
         c1:d8:c4:a7:85:d3:58:0b:62:6a:05:1b:ec:10:ff:50:83:cc:
         ca:59:89:05:07:f9:39:29:65:a3:db:a4:bc:65:13:41:6f:b4:
         6e:d3:08:c2:34:c8:4d:42:81:45:47:54:43:64:01:fe:ae:ba:
         95:11:f0:09:95:5f:16:7c:66:0c:b3:a8:c9:49:13:c5:a6:65:
         d9:98:8c:a2:7e:fa:a2:52:93:2f:7c:e4:25:6a:db:2b:dd:25:
         0b:79:d3:60:37:6c:da:f6:e2:eb:10:c3:33:77:92:e8:60:47:
         64:41:2c:4b:f7:d8:7d:82:24:34:82:05:0d:da:18:ad:e4:5e:
         0d:3b:d4:9f:d3:d8:44:ba:89:81:82:ca:14:dd:35:cc:2e:96:
         2c:69:b1:13:af:e1:98:de:6e:b0:f1:fc:d0:53:4d:92:5a:61:
         00:64:91:d4:56:e3:78:b6:b8:1b:de:ad:59:69:8c:dc:91:1f:
         5e:6b:db:75:bf:23:d7:ec:16:df:35:0c:93:bb:5f:48:78:0a:
         35:49:44:06:ef:3e:f1:29:88:af:59:e8:e4:9c:b7:5c:49:80:
         4a:a1:dc:43:4b:69:bf:3e:e3:19:f6:eb:6c:24:bb:eb:26:20:
         60:4a:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:05:41 2025 by rpki-client