This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File:                     4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier:          pkw5SiQFZPBJhjrhMl1g+hxi+DjhjrFJFXtiRwlwk6g=
Subject key identifier:   8F:81:2B:1C:12:D2:DD:74:FB:90:85:42:A0:1F:F6:A7:09:56:73:C2
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       019AF2AD40A31B0F0E36D9DA933A37861EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number:          1786
Signing time:             Sat 06 Dec 2025 08:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:31 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:31 +0000
Files and hashes:         1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: UEWae5xNmZT/PtaO+zr8cZGXQUuBb00tEaANswZTH3M=)
                          2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=)
                          3: 7x5HPsZJJU7oLctSDX_VaOPYLzI.roa (hash: uhuBwDP+Oa9qCbvp8OKGgxlY2ye1DhBRDdxJD61Z03g=)
                          4: BqWFQfCpNOawJLR_2bQgKiWus78.roa (hash: dwDCQUgPm6/+eGPO1V7wb2aMqwp5qzv/WSd8fL7sTv4=)
                          5: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=)
                          6: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=)
                          7: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=)
                          8: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=)
                          9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=)
                          10: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=)
                          11: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=)
                          12: ttSCm0GX77Lv7F9AG7Ej_PDwc8E.roa (hash: CXBZohUwM39VG497MDaDZEXDgP7mhwxpOgtdpsLOGh4=)
                          13: xyWS8GMXAK5cHVz0I4kSnXYHwUs.roa (hash: U2goV1mLS2kaWO5TW5yX21b9KWWpNNSkN88rAFVfNXQ=)
                          14: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:40:a3:1b:0f:0e:36:d9:da:93:3a:37:86:1e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Dec  6 08:00:31 2025 GMT
            Not After : Dec  7 08:00:31 2025 GMT
        Subject: CN=8f812b1c12d2dd74fb908542a01ff6a7095673c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:1d:c4:38:03:84:9b:03:e0:ab:37:0d:d5:
                    c0:e2:c0:00:ef:60:3a:56:e6:a4:21:1a:c3:e9:c3:
                    05:53:42:4c:3d:82:68:9e:91:0c:db:f8:73:b6:7b:
                    70:51:61:30:07:54:ba:a4:79:76:1b:ff:01:76:75:
                    ee:10:51:86:0f:8d:8a:10:d9:e1:d8:ad:92:3b:dc:
                    fc:72:2d:0e:38:99:29:21:88:1f:9e:1f:8d:e9:f3:
                    7d:37:b1:91:e4:54:87:61:43:eb:bc:c3:1f:cc:14:
                    84:a5:b3:54:82:c3:83:2e:0d:23:93:72:01:b7:04:
                    7a:70:94:99:32:d8:3e:35:d3:8e:1a:0f:ac:73:c5:
                    d6:fb:b3:91:af:e2:ab:56:dd:81:66:0a:31:30:d3:
                    0e:a5:ba:44:15:04:a0:8c:e9:4f:e8:a6:43:98:71:
                    f5:19:14:b6:61:98:36:bc:79:ce:13:58:a6:78:fd:
                    e9:c0:d0:32:54:4e:58:6c:83:1d:d4:46:61:1b:3b:
                    cf:7b:ab:f2:df:40:60:87:ac:6d:75:e4:dd:6b:97:
                    df:2d:73:35:64:08:00:25:e5:cb:c1:41:63:f5:df:
                    c0:a6:8a:90:32:49:10:a2:48:e5:0c:a1:62:ac:b0:
                    a1:7f:f0:75:c6:a7:19:22:8b:f2:dc:a7:34:de:45:
                    4c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:81:2B:1C:12:D2:DD:74:FB:90:85:42:A0:1F:F6:A7:09:56:73:C2
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f8:c4:ff:d3:7e:5a:6d:9b:fd:32:24:33:3b:fe:0b:7f:44:
         34:9f:cd:a5:4f:0a:37:c5:96:1f:22:b3:09:30:34:90:9e:25:
         b2:f2:3c:d9:bd:6c:55:41:e1:56:10:7a:0b:cd:f3:bb:01:d0:
         a8:36:59:32:03:7d:81:34:b0:24:3e:b0:12:0a:11:ca:43:09:
         f3:20:5d:4a:7e:09:44:6b:7e:e2:ea:d7:ee:66:aa:7d:fe:e7:
         ed:38:7f:41:71:20:64:fa:36:29:8b:4e:d7:84:f9:3b:10:a2:
         d6:da:3b:1c:d2:3a:80:cd:c4:08:d1:34:ac:a9:06:96:aa:ff:
         38:19:ed:de:83:a7:15:c5:e2:d5:19:cc:63:7e:c9:02:3f:8e:
         de:7a:c5:6a:22:24:03:ee:af:19:e0:d6:f6:c6:c0:55:11:6b:
         17:04:df:42:30:81:3d:27:de:02:04:d3:68:a5:91:b8:fd:73:
         fc:59:8f:61:6e:3f:c6:be:23:8c:08:c2:8a:ba:99:d9:4d:f9:
         e9:c6:57:eb:57:b1:c3:70:5c:85:df:3b:45:c4:91:7b:85:ec:
         4a:5b:09:6e:04:2b:c4:16:c5:9f:99:a7:12:79:51:cd:20:7b:
         fc:12:15:ae:dd:e9:18:4f:b9:08:7e:8c:d8:9c:f1:f0:f9:fb:
         08:8c:59:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:07:11 2025 by rpki-client