This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
File:                     PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json)
Hash identifier:          8+gRLTRJPp7fc9crEh7P9W8GOode6HYcNjFX45bYW9A=
Subject key identifier:   4D:9B:EA:DB:05:F5:D5:0C:AE:A7:F5:44:70:70:FB:16:72:E0:69:69
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Certificate issuer:       /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial:       019B4438FA5B4F45BCCD400665A276C73F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
Manifest number:          1790
Signing time:             Mon 22 Dec 2025 04:02:23 +0000
Manifest this update:     Mon 22 Dec 2025 04:02:23 +0000
Manifest next update:     Tue 23 Dec 2025 04:02:23 +0000
Files and hashes:         1: OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa (hash: H6KoMJLLwg7EnqHTPVQLrBI8uOBDhlfqI6yQtfWr3zo=)
                          2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: I/JjIxp/6hHG1hbBOuL3Yyg4qFoBrc2G7r7AtjaQaWg=)
                          3: lFNEbA4WXa1kqpPRAFp7E-A0l2E.roa (hash: RLdKaSl14tW7ZrRmULGs2dhO8FMuiohKtUpmaqgzRYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:38:fa:5b:4f:45:bc:cd:40:06:65:a2:76:c7:3f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
        Validity
            Not Before: Dec 22 04:02:23 2025 GMT
            Not After : Dec 23 04:02:23 2025 GMT
        Subject: CN=4d9beadb05f5d50caea7f5447070fb1672e06969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:78:b2:92:f9:6f:72:a8:1a:4f:74:7d:f6:
                    a0:29:3a:c6:a7:12:29:7f:2f:69:9a:65:23:c5:9a:
                    46:bc:50:32:cd:7e:f7:f9:53:9e:af:60:d9:a4:3a:
                    99:fd:f9:14:21:4b:72:6e:0c:42:e2:14:0a:66:ab:
                    22:5c:9c:8a:c5:ef:fa:c1:73:4e:ba:49:8c:56:7d:
                    54:92:13:33:0e:59:99:94:50:10:a5:f1:cb:8b:a7:
                    6e:b9:74:ea:8b:54:b6:8f:81:f7:70:e1:aa:42:af:
                    af:ca:59:a7:df:c2:b4:5b:16:3b:f7:44:44:38:14:
                    e1:e8:36:ca:5f:23:55:c1:0c:b3:e0:7c:ca:38:97:
                    45:aa:e4:91:52:c7:cc:6a:53:1f:6e:75:a1:cc:f4:
                    9f:20:fb:8b:4c:97:44:8a:d0:e4:2d:73:1f:ce:86:
                    9f:d1:3b:d7:83:83:f7:66:e3:87:ea:b3:4e:53:3a:
                    82:7b:5b:19:55:fd:c4:2b:12:54:07:6e:ed:fa:17:
                    57:f3:88:aa:c4:31:a4:b1:5c:36:81:e7:e5:26:f9:
                    7a:14:4e:72:33:11:14:36:9b:eb:b6:10:e8:90:df:
                    81:1c:e1:00:67:26:75:77:28:de:e4:69:ad:7a:81:
                    57:05:e0:0e:6d:d5:9a:92:30:7d:d2:ec:6e:90:bc:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9B:EA:DB:05:F5:D5:0C:AE:A7:F5:44:70:70:FB:16:72:E0:69:69
            X509v3 Authority Key Identifier:
                keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:55:8a:17:14:fe:0b:3f:e0:3f:84:70:13:19:ed:75:02:cf:
         0a:c3:96:4e:1d:13:18:0f:77:aa:8d:22:e7:7c:0b:0f:6e:8b:
         0d:eb:b8:97:49:0e:99:ff:0e:bc:32:bc:bb:46:58:2e:f1:d2:
         6f:cd:9e:a7:09:a2:3d:62:55:d7:b5:db:8d:83:b9:d1:8e:99:
         52:6c:df:54:0d:96:00:5d:5a:89:de:85:e5:25:a9:01:62:08:
         0d:d1:a9:e4:d8:68:fc:14:5c:ce:d3:6c:f3:43:b1:76:6e:18:
         b3:39:bb:b1:52:57:ec:28:63:83:46:fd:48:dd:5e:4a:55:cd:
         c1:7c:b8:3b:4b:f5:ce:bc:ce:5d:2f:b8:34:45:05:8d:2f:32:
         39:61:21:80:2a:f1:63:b2:7c:41:8d:48:5f:71:2c:e9:79:e0:
         64:b2:11:fe:1d:a3:45:bf:13:b3:2a:db:eb:ea:a3:69:6b:d2:
         d6:5b:45:3b:ee:ea:ad:8a:8e:59:73:9b:53:df:f3:cb:b0:7e:
         d9:76:a2:0a:a1:be:20:97:3f:3d:b1:61:77:f5:62:e2:05:41:
         10:86:ac:48:6b:1c:f0:1c:90:18:79:2e:42:fc:92:43:aa:58:
         f5:5d:a6:b2:72:1c:30:c1:b5:3a:2a:d1:ce:a5:9b:0c:ec:8b:
         6e:4e:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:46:17 2025 by rpki-client