This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File:                     4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier:          BWTorrOFJF7s850xc8jax7P99fh5VwxAqqNh1UOe7b8=
Subject key identifier:   5A:54:B0:BC:E9:DF:D6:EB:2A:A9:BE:17:43:58:DD:03:DA:F9:1A:BA
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       019B2C9D795999ED3757B22B7E992C6D963A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number:          17A4
Signing time:             Wed 17 Dec 2025 14:01:16 +0000
Manifest this update:     Wed 17 Dec 2025 14:01:16 +0000
Manifest next update:     Thu 18 Dec 2025 14:01:16 +0000
Files and hashes:         1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: sO51dZ9cFqh+aIpsKP1jc/Kg2gUt1BaQEzRIKSu6OqY=)
                          2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=)
                          3: 7x5HPsZJJU7oLctSDX_VaOPYLzI.roa (hash: uhuBwDP+Oa9qCbvp8OKGgxlY2ye1DhBRDdxJD61Z03g=)
                          4: BqWFQfCpNOawJLR_2bQgKiWus78.roa (hash: dwDCQUgPm6/+eGPO1V7wb2aMqwp5qzv/WSd8fL7sTv4=)
                          5: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=)
                          6: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=)
                          7: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=)
                          8: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=)
                          9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=)
                          10: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=)
                          11: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=)
                          12: ttSCm0GX77Lv7F9AG7Ej_PDwc8E.roa (hash: CXBZohUwM39VG497MDaDZEXDgP7mhwxpOgtdpsLOGh4=)
                          13: xyWS8GMXAK5cHVz0I4kSnXYHwUs.roa (hash: U2goV1mLS2kaWO5TW5yX21b9KWWpNNSkN88rAFVfNXQ=)
                          14: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:9d:79:59:99:ed:37:57:b2:2b:7e:99:2c:6d:96:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Dec 17 14:01:16 2025 GMT
            Not After : Dec 18 14:01:16 2025 GMT
        Subject: CN=5a54b0bce9dfd6eb2aa9be174358dd03daf91aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:ab:10:ad:18:01:9e:ee:bb:3d:2b:f6:da:
                    14:38:3a:0e:23:ce:c2:d3:93:d0:51:a8:c7:b6:c4:
                    28:22:db:74:ac:ed:fe:43:c6:43:ef:c6:90:d8:d7:
                    76:42:96:02:5b:d1:f3:43:65:92:a1:5c:fa:11:8a:
                    08:e9:fc:cd:b3:1c:40:1a:83:85:8d:e8:b3:10:08:
                    31:5a:1a:7e:83:09:36:b0:e7:49:de:ff:d6:29:aa:
                    ac:8e:2f:b3:f1:81:56:9a:48:3a:e8:db:1f:99:ce:
                    e0:54:b9:2d:ec:96:fd:6e:28:6e:fe:fd:38:17:14:
                    10:49:25:41:3c:85:ba:d7:a8:b5:14:c9:6b:b9:3f:
                    49:0a:9d:fa:62:f8:1d:95:d2:84:f2:49:d0:5a:74:
                    24:d7:65:5a:f1:56:9d:d3:5f:89:fc:e0:f5:e1:de:
                    6d:d7:e4:58:0b:72:fc:c1:e0:e5:b4:29:da:16:75:
                    1b:c9:f3:b9:0c:d9:7e:7c:5a:c3:17:d7:c3:9d:f8:
                    d2:b6:0c:b5:e7:88:89:ad:c4:38:f6:f9:03:ec:57:
                    19:0e:28:ad:72:19:a3:12:46:a5:29:41:ec:2c:b0:
                    93:7a:62:e6:64:e6:e8:9a:a7:04:84:8b:2e:ea:f8:
                    37:4f:4f:49:11:9d:1c:a4:0d:35:94:21:93:aa:44:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:54:B0:BC:E9:DF:D6:EB:2A:A9:BE:17:43:58:DD:03:DA:F9:1A:BA
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ed:f7:1e:7d:23:2f:f0:2d:cc:09:62:12:98:95:e2:60:a9:
         b3:a0:ab:ea:a8:fb:5d:d8:06:e1:b3:0e:7c:6f:f4:24:9d:04:
         07:01:7b:ab:d8:5a:c3:f6:6d:8e:1c:ff:dd:86:66:d3:9b:3b:
         f9:d7:cd:30:5e:01:24:f2:c9:ab:26:cd:14:e1:79:a1:c2:5c:
         af:7e:96:5d:6b:bf:43:53:4f:e0:59:79:d4:6c:5e:64:80:e0:
         0a:8b:ee:33:94:c2:f2:d4:eb:10:89:72:3d:a3:c9:b1:27:95:
         99:94:8b:24:f3:91:2f:e5:df:ab:17:25:14:7c:76:4a:d8:78:
         57:8f:6e:af:1a:f5:09:63:80:7a:2e:2c:81:4e:1f:42:7c:19:
         0c:9b:4f:84:81:a3:33:60:d6:0b:61:a1:53:3f:95:7d:6c:5e:
         95:bd:e9:b7:19:21:e1:04:e7:33:5a:4a:61:8d:bf:b3:df:38:
         c9:ed:3c:b9:63:6c:13:fc:04:42:d1:43:ec:38:36:9f:33:83:
         53:e9:93:4b:c6:84:46:d5:de:b4:66:bc:06:03:01:2e:0c:15:
         0a:54:c5:20:7a:9b:a6:f1:55:0c:c1:f7:b3:43:c1:a9:db:8f:
         c8:d7:23:46:a1:d0:9d:18:5a:6d:f5:53:6e:3b:63:65:4e:e1:
         ae:53:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:30:28 2025 by rpki-client