This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File:                     54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier:          F3DaLxJlceNlMdDvfoSmOIJi67igioBXKnYQ173GahE=
Subject key identifier:   4B:37:B4:A5:E2:0D:25:68:8C:A3:60:58:54:6D:91:C7:E7:07:09:0F
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer:       /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial:       019B2F9EA7A73E35311DA248ED0B6A18A4B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number:          1714
Signing time:             Thu 18 Dec 2025 04:01:25 +0000
Manifest this update:     Thu 18 Dec 2025 04:01:25 +0000
Manifest next update:     Fri 19 Dec 2025 04:01:25 +0000
Files and hashes:         1: 4KuSjXjGdyF1nScN1LwMlleHlmA.roa (hash: HlUuzXxOiMUBV49vY7GcCdve69QZxWM3RwORJ/36zYI=)
                          2: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: QyOXMLHoQ8qhVf0EX701CDNE3TrHje4G4q0dE9b0jdg=)
                          3: 7lacSGraqTGoKqaT-zAuzKx29Fk.roa (hash: FcCPAhyHMElJytjQ2WhAIPJGkfaFqPbC3K17eZo24Pw=)
                          4: 8yDd52yiQnWrlCx6kxIE7m9PFW0.roa (hash: B6yZTku2TmuXp6OETqEJRAmXjacawP+SH3G431U19zA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:9e:a7:a7:3e:35:31:1d:a2:48:ed:0b:6a:18:a4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
        Validity
            Not Before: Dec 18 04:01:25 2025 GMT
            Not After : Dec 19 04:01:25 2025 GMT
        Subject: CN=4b37b4a5e20d25688ca36058546d91c7e707090f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:55:3a:de:86:b1:38:db:27:1a:d9:e2:5f:3a:
                    dd:d7:4b:91:1b:6a:59:ca:c4:80:88:8a:1a:6b:25:
                    7f:db:05:a3:54:8e:69:f3:58:35:78:b1:ef:d4:90:
                    23:4e:39:06:fc:73:31:08:47:f6:db:5c:2e:4e:43:
                    91:6d:1c:d8:51:c9:22:e1:06:7c:8a:27:2f:41:e9:
                    d3:49:e8:c0:59:1b:1e:ae:55:ef:3c:e4:14:b2:25:
                    a3:85:0d:b7:b3:a9:bf:3c:4b:80:84:03:88:44:c0:
                    22:5c:82:75:51:bb:91:82:a8:6f:9b:32:3d:bd:6b:
                    7c:83:c9:42:c0:e6:67:49:50:cb:da:29:8f:5c:08:
                    59:d4:89:e6:35:c1:32:ff:3a:fa:6e:d3:db:89:02:
                    97:33:7f:d4:8e:06:ef:a0:e4:77:49:95:cf:b6:9e:
                    aa:e5:fc:7d:81:42:13:9d:b7:a8:98:f4:60:06:04:
                    5a:05:2a:e4:49:76:0e:6e:0b:32:4b:5b:c2:e4:0c:
                    5c:13:bb:7f:f6:5b:92:90:70:b8:7b:68:ac:5a:f2:
                    ad:92:0c:c8:fe:3c:7d:55:89:80:e5:91:f0:96:65:
                    de:b9:a9:8d:bf:2a:2b:1d:36:97:f8:00:ec:0a:2d:
                    88:01:dd:aa:3e:21:b8:c6:34:e0:77:d9:0f:be:91:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:37:B4:A5:E2:0D:25:68:8C:A3:60:58:54:6D:91:C7:E7:07:09:0F
            X509v3 Authority Key Identifier:
                keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d5:50:25:07:51:10:6a:71:11:84:e1:82:ec:81:23:db:38:
         3f:20:83:f7:f8:a2:7a:09:9f:d8:ed:34:c9:24:c1:2e:92:ab:
         b7:d1:79:c0:49:06:76:b7:44:e9:0e:1f:b7:92:60:3d:52:4b:
         c2:9a:5e:18:61:5b:ea:bd:ca:5f:c9:05:15:0d:c1:d5:e4:7c:
         a0:90:ec:ce:36:90:75:29:21:76:63:c2:b8:6c:95:d4:62:77:
         a9:d2:f1:6e:ab:85:23:ef:c0:23:75:59:d2:4f:d0:17:f2:3c:
         d6:f5:25:7e:b4:0f:6e:dc:6e:46:b1:85:2f:c8:b6:cd:ae:f2:
         88:b4:d4:76:bb:24:b2:27:46:b7:21:3d:9d:6f:25:1f:70:46:
         d8:cf:d8:d5:9b:ed:04:e2:f7:d7:79:82:a2:95:29:d4:81:c8:
         ec:a9:b2:81:4f:20:2e:cc:41:6e:a1:d3:92:11:fb:14:5e:9b:
         0e:94:d6:80:83:18:9e:b4:75:37:0a:f6:95:00:bd:78:e4:5a:
         a0:84:b3:8c:9e:8e:cb:eb:c7:91:ff:e2:64:9f:49:27:94:c8:
         b8:9c:12:e0:57:89:60:f6:27:ee:98:ac:a5:78:99:28:cf:08:
         0f:08:79:12:0b:1d:9f:2c:95:4b:68:f9:0f:16:fc:97:2c:67:
         3c:3e:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:11:53 2025 by rpki-client