This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
File:                     e4jUpKsYpZtmTauv2ziA3DWyK5E.mft (raw, json)
Hash identifier:          ob21pEIpXnLHDljI+5KssJTxYBcy+1HQfzc8LCRdAKo=
Subject key identifier:   8C:D4:4E:92:3D:CC:C6:DC:70:80:E4:6C:94:05:69:D2:BD:A0:37:79
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Certificate issuer:       /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial:       019B3D2355885C717F8F9DBFCAB8F907BF27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
Manifest number:          178E
Signing time:             Sat 20 Dec 2025 19:01:24 +0000
Manifest this update:     Sat 20 Dec 2025 19:01:24 +0000
Manifest next update:     Sun 21 Dec 2025 19:01:24 +0000
Files and hashes:         1: Evhx8vR75Jiq-qrj6flNEtEJHFs.roa (hash: oqLCbjYtE1YxW2jkv9rK/O4Tv5MNkL0h46xLNff1UJQ=)
                          2: RAu8NiHpx-KQdu3vcuo0hAqzcBY.roa (hash: TvBy/Hr3oNAjZZF+wN/4+8BRq8bhVBTAjV9303cZWTU=)
                          3: XWu-Cy3k4bG46jzu68jWDU2BUlE.roa (hash: oYNAZflFkpftatNeWIk412xMRJVARxZKG+FJn7voe4M=)
                          4: e4jUpKsYpZtmTauv2ziA3DWyK5E.crl (hash: cn/QYIF8YsoJNR6FlGZzSJEoBZpkhsVA8g6+vm9tsBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:23:55:88:5c:71:7f:8f:9d:bf:ca:b8:f9:07:bf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
        Validity
            Not Before: Dec 20 19:01:24 2025 GMT
            Not After : Dec 21 19:01:24 2025 GMT
        Subject: CN=8cd44e923dccc6dc7080e46c940569d2bda03779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:d3:b9:44:9b:67:ec:ed:46:43:df:e5:2a:
                    71:b0:73:7a:d6:bd:44:71:c8:eb:48:f6:7e:11:ef:
                    45:6f:08:04:78:9d:6b:a9:93:52:c7:f4:30:90:db:
                    bc:b1:3b:ae:a3:04:ca:5e:ec:25:3f:78:5e:1f:4d:
                    f1:99:e4:b8:2f:3f:29:ad:5c:fd:9c:0a:00:e8:64:
                    94:a7:03:be:1a:d0:6f:cb:4d:fc:71:60:24:3a:ee:
                    fc:79:b7:6e:c5:53:e7:a2:7c:41:4b:05:e4:a0:a9:
                    5c:b7:44:cf:88:9c:44:8d:68:78:9f:ee:3d:c4:2b:
                    0e:8e:14:35:04:03:73:75:ad:c5:e0:57:0d:87:ac:
                    3c:16:ca:0d:dc:33:0a:69:4f:a7:7e:97:c2:3b:b8:
                    89:52:26:e8:c6:2f:89:3f:87:18:f7:fc:6c:58:54:
                    68:f7:1b:02:c0:e5:88:fc:95:7d:ff:9c:b2:a9:87:
                    5d:dd:de:49:99:89:ac:a8:ae:1c:1c:d0:c5:61:88:
                    09:14:f2:0f:ec:4b:f9:aa:03:b7:d2:8a:33:c3:ae:
                    13:8a:7b:f0:ee:8d:ce:a7:e4:3c:38:0a:ee:49:98:
                    fa:ef:3e:3c:dc:2b:1f:f6:a7:7e:46:21:0f:d2:66:
                    19:b2:60:f5:59:54:44:95:28:7e:84:d3:17:22:09:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D4:4E:92:3D:CC:C6:DC:70:80:E4:6C:94:05:69:D2:BD:A0:37:79
            X509v3 Authority Key Identifier:
                keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:82:3e:9c:10:e6:bf:58:30:41:12:dc:d3:62:7c:24:6c:f3:
         2d:ff:93:9c:8d:ef:97:21:76:95:68:89:e4:06:2e:1b:40:02:
         ed:a4:ce:35:07:31:99:47:7f:dd:a2:54:78:1e:7f:63:53:f9:
         7e:47:14:6a:2a:a3:4e:d9:1f:12:5b:bf:0b:62:aa:0b:08:79:
         94:57:9d:78:85:8d:22:66:51:f2:d3:63:37:41:a8:da:d0:3b:
         d5:c4:b0:a7:b3:2b:ac:51:f2:ca:a6:0f:e7:6d:9b:18:c7:49:
         1d:dc:6a:61:64:11:2b:39:3a:66:57:a3:3b:e3:e3:48:9b:30:
         40:74:1b:22:3b:40:df:f0:83:3d:c5:4d:f7:f5:0c:34:9c:92:
         1f:61:3d:75:af:a4:31:b2:72:c5:ce:03:37:c6:9f:22:c9:70:
         1f:fa:c7:75:ed:58:ac:a9:a0:08:8f:96:b2:23:39:82:54:a0:
         cd:16:6c:1f:e1:ec:f9:01:87:ca:ac:83:ea:2f:cb:47:f0:d1:
         17:fc:3d:28:45:80:2d:7d:f0:0a:77:bc:a4:b0:a1:43:8c:0f:
         1a:40:33:07:e4:7b:d6:eb:40:a3:42:3c:aa:e0:b9:80:10:d4:
         b8:77:aa:1a:43:f9:d3:74:4a:58:c9:4b:a6:c0:7b:80:09:8a:
         ea:28:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:20:24 2025 by rpki-client