This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
File:                     C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json)
Hash identifier:          isg9mUzHhNLbWanlPK0dsyOnlpymHWk3mkrqtAAI+JE=
Subject key identifier:   41:C4:07:DD:FC:1F:FE:F0:A8:66:89:B3:6A:FA:25:5C:06:53:29:AD
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Certificate issuer:       /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial:       019B6D89FB99E17FDFBF90CFE1BBF54F7B10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
Manifest number:          048C
Signing time:             Tue 30 Dec 2025 04:35:17 +0000
Manifest this update:     Tue 30 Dec 2025 04:35:17 +0000
Manifest next update:     Wed 31 Dec 2025 04:35:17 +0000
Files and hashes:         1: 0ZW1Yp3Jr3YbjISgjyVISpop_bY.roa (hash: y3wJcCNaIFlz7qKFqPLi+oYpGL2vY28QmGF6aCs6tcU=)
                          2: 1-l_gre_pxhYS4_zZwDxZG1Nt_5c.roa (hash: 79+LUQppQGCR1ma6gkDs/MxaDYgg8iUK7GVvWKXvzJ8=)
                          3: 1kvkqadHLwx_6xU4ctgza7if3xc.roa (hash: ReYhYGzhXz5v72MRgTisyHugugFNQBNvh3NM2wvv8Xc=)
                          4: 2b6Eq9cl8ekzMy1PxZJi91z-iqY.roa (hash: Xz6QbDMbodjD7oUbur2DkmlMy4mu0KFHGg13oNwyOk0=)
                          5: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=)
                          6: 5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa (hash: xzEHQ5rCOad65DlaTD/0zOgecwAYSd4+GjZ0k61Ou6I=)
                          7: 6YJjObW1_CPDgXKpHS-TcyIptqo.roa (hash: jjGiP1pdwyr2zLGuJkHaIJCjcU/oN7YWkJKwf34n+BE=)
                          8: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: cDBEfn/TSq7xZRFXXErmKkVzYiTxRQ/6fQPofobZ2+o=)
                          9: DOAEIvCj-u7rs38MBt2OY5TO5ck.roa (hash: L2KlUD/3hwbtTHy39+u/XA4u/e4Wc7hTiaNnBwb1Xl8=)
                          10: E0upJVXmvrb9QB1vHUoxxOXLw38.roa (hash: 4mhxGqIUoY4Bc+dX0kK4RcxfBAsMjNcaP7xXT7MwJUE=)
                          11: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=)
                          12: L8Gc_X7bZAUGdUO0Sr8HyAWVb-g.roa (hash: 8rLSft2oN72eJM5VTpbF4YVueWAKxs3k3SS74tE7lKU=)
                          13: QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa (hash: B0QgrQfgkvXm7vAQLsl/pTmN0f26n576ETmzI38WdjE=)
                          14: Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa (hash: lHAqhVPifaQjD9rLTD+uDdEniFd0R32cYJ3zWnuqKHM=)
                          15: U8Lz-woBuayQCxonI-hxDcK01_Y.roa (hash: 418Oc771TIXqLSF+QH4I7VyOD2EV9+QkDmHN3kvRN94=)
                          16: UoCD-Jw-d36aunkLRuz6ly1x2v0.roa (hash: IL5ej7uIEFxvULFt7FLIix+P1FPdxsPj2Yas43tG1o8=)
                          17: _qGpnfoq0RIQZSg2OZDqTa0dLBk.roa (hash: ybY1jw9QuVARJXQAyD3Up3vr0hHVN1d8hKwrTNH/dDU=)
                          18: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=)
                          19: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=)
                          20: bsbpbOfEUspT2FSFU7Dpjg5QFsw.roa (hash: 1S0gGuFvbVkAU0skMefR3m5Pq9v5mIgplTKpElL9/XI=)
                          21: lO1MSRjPmSLDkgv8jGt5ktPBHoc.roa (hash: og5imLvn3cUBwDvPoHiD1z3A3c1NAGRPK9XyazGlNpE=)
                          22: lOhpbDdZVccBf_9FacfF6DZ_Ti4.roa (hash: Vu/KbWnW1+bPGuoIZQjr3JGIWAIz/C7xBZPkO8t2inI=)
                          23: lzUrfdjvi4X0daNPvReXYlaxfUs.roa (hash: mmPPsLggwrEErlARtsPqmojwc7jNfBJKDlKr0vM/KnA=)
                          24: mFwXB_3EhYgPmb02XlkNrRIYAks.roa (hash: +phEwBPGNbWcGWHb9f7x0gtZyCJo2VWruE9fcfo0yZQ=)
                          25: mrriTsp_r84VvXOZ9vwCDiafNfA.roa (hash: 237ftlrT6P/fqAsRok2Wq3N6bqs/PXVVGhXC7gyjJzY=)
                          26: nzqMbVSBco83b7keIuvW9pYFNSQ.roa (hash: /iv3Al903G+RBBku1KufblAOU1jL3taljDs4rXeCbPE=)
                          27: pPTTLhksK7v4ipvrbQpEGSDbgjk.roa (hash: o2I/GTIezXoCE5dcTj8iZrNN0OoZ4v7wD/kJ0bQOHoc=)
                          28: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=)
                          29: tVTdYwnYYp3b_eUhbVSQRQeadEU.roa (hash: 4Nl3NSw+3Qg0hgNeV3S8TaiNWf3yjru7QAcwwQS9RII=)
                          30: tra90j-TkDoNhw2jYUOuCLQtLHQ.roa (hash: rMHYa+7snR9OTOD/IZ29XHnehX6LzLjK9r4pNKm+rGM=)
                          31: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=)
                          32: xHqvlNpd7IJ2_bWmni8VAvmQhSo.roa (hash: RLG5JtYf55FcGjS6lNHNnXjb7AxYPOv8Xo1vraqegr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6d:89:fb:99:e1:7f:df:bf:90:cf:e1:bb:f5:4f:7b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
        Validity
            Not Before: Dec 30 04:35:17 2025 GMT
            Not After : Dec 31 04:35:17 2025 GMT
        Subject: CN=41c407ddfc1ffef0a86689b36afa255c065329ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:36:2f:97:3e:30:3d:04:e9:22:1a:39:e3:
                    69:76:2e:9d:95:34:e4:0e:ac:31:dd:7d:f2:df:5b:
                    07:67:dd:3e:5f:1f:35:fb:83:85:b6:53:8f:47:93:
                    54:cb:37:40:46:67:cb:e5:4a:76:ad:7b:88:f3:93:
                    cb:f3:e9:e3:2c:98:04:7d:bc:03:21:3d:b9:e2:79:
                    5c:37:db:7f:40:6f:bd:37:61:53:00:6a:16:9e:1e:
                    a3:f4:2b:8e:23:e3:aa:7b:00:81:28:fe:22:13:c0:
                    de:ba:85:92:ac:b1:0e:b1:42:dd:fb:cc:ea:64:0c:
                    df:d2:10:5f:24:80:49:47:ba:f6:e9:54:ca:84:5c:
                    d9:da:4c:01:a8:2f:69:75:88:81:51:37:d2:ea:26:
                    d4:d8:c0:54:06:6b:8f:92:e7:0c:18:9f:0c:57:16:
                    ef:fb:81:2f:01:f6:35:e4:24:cd:ac:53:09:da:1c:
                    25:fd:89:42:fa:3d:00:82:2a:3d:d6:c9:55:7c:25:
                    80:1c:4a:6e:a9:ca:0c:70:23:48:81:a0:74:cb:4f:
                    e5:7d:58:e0:38:3a:61:0f:f4:6d:d7:1f:b0:1f:02:
                    59:e3:83:22:fd:b5:b8:84:6d:90:01:34:7d:1b:7f:
                    b3:d8:24:06:c1:65:bc:ba:b8:9f:55:0a:1c:a7:0b:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C4:07:DD:FC:1F:FE:F0:A8:66:89:B3:6A:FA:25:5C:06:53:29:AD
            X509v3 Authority Key Identifier:
                keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:52:fc:ce:20:50:98:77:8b:71:82:21:d1:7e:57:33:6e:e4:
         93:60:db:06:98:cf:e7:13:ef:92:c2:39:16:4b:83:cc:1d:b9:
         1c:1b:ad:62:c7:d6:96:51:82:c1:c7:c3:55:66:e4:3b:a6:b8:
         3e:1f:de:91:06:f0:1d:0e:f4:21:55:e8:0a:cd:ea:57:1e:67:
         40:54:19:3c:a3:15:b1:a3:1e:5c:e3:a0:cb:db:8d:47:c1:ed:
         94:83:23:42:4b:32:ea:66:98:f8:a4:70:40:7b:1e:53:80:66:
         34:bf:a1:41:49:77:24:49:ff:dd:3f:66:53:bb:1b:e4:12:aa:
         b8:59:a0:5c:61:23:de:64:84:97:2a:2a:7e:9b:91:9f:35:49:
         df:21:60:d0:18:90:c6:5f:75:f4:0d:fb:88:10:28:cc:09:bb:
         68:cb:ea:b8:98:cf:8d:a7:38:e6:5b:7e:aa:55:22:92:e9:9e:
         86:2d:a6:f9:75:63:ad:10:20:fc:f2:3a:23:9c:5d:d0:9f:a1:
         bf:35:85:85:a3:ea:58:7c:f2:69:df:a5:2f:88:0b:1a:de:5c:
         4c:91:3d:65:b6:91:5b:6f:dd:ec:a1:d1:7e:82:7b:12:20:0d:
         90:d1:16:2c:0f:6c:26:ca:3b:af:6a:17:f4:ae:6d:b1:f8:61:
         83:fb:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:09:18 2025 by rpki-client