This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
File:                     4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json)
Hash identifier:          CbPLHV+AtF2lBdcC+2dxEF/LRbdj+jOqejIuWirhDRQ=
Subject key identifier:   44:99:D4:37:EA:E2:0B:12:82:6B:3E:7D:88:59:8E:76:12:84:90:63
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       019B3DC7F84758655BC211EE2A22FFF609A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
Manifest number:          17A9
Signing time:             Sat 20 Dec 2025 22:01:13 +0000
Manifest this update:     Sat 20 Dec 2025 22:01:13 +0000
Manifest next update:     Sun 21 Dec 2025 22:01:13 +0000
Files and hashes:         1: 1Zw3dOHQdTR7vigHBw9Gl95CsWA.roa (hash: Xi/Bb5DmK6ae5rm5BeoWF06YJy3In/vvvYvcO432dxg=)
                          2: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: AH4fvjdoB+mtqBHPDXelDijNNEeIt0HKH+GffrZfGt0=)
                          3: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=)
                          4: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=)
                          5: IRIHNrcEmYA9SiekVnQCGeb5qt8.roa (hash: tBfDnKuitVX0twdrJtQnmeN3GmNpiKza4WKEqcGuDCg=)
                          6: KOQt4Fdw-Mbd2H2laDLh-QtpT_A.roa (hash: E+ao0zcz+gKQCFRR+32WIwFe4k6aZm0mJuIHZG8OTjY=)
                          7: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=)
                          8: O2u9sNM2VsxkrEw4_x5dbnD4cmI.roa (hash: z4M4rzCbwDQczsVkru5nQYgRim30go1bSOu9yN0yWpY=)
                          9: QY62O1TbJcgHTlDdMSnc5EOOsWo.roa (hash: WrjFSmIFme7bbVEpsR+eNDIdWK8cfKHxqLCWL8lKVwU=)
                          10: ZEaWX4vp4W7zRNcPf0TP02hgItQ.roa (hash: sJ0gPMef931rqzhVp0zgr8podzklf3D6mI15/1mXqB8=)
                          11: ZhumnastnIToRU4Ujd74rA2H0TI.roa (hash: hGm8nGCE9zZ7LDb9DfN19EP4tZp//5L2NO9ThIsADfs=)
                          12: _yn-31rADEG7zTcXfVb92NptH0Q.roa (hash: Tyq49fvsXK4jK1l1SC866Zxd+HFpg8YBsLVC4Nlc/M8=)
                          13: chhwL-zj1isGKfXerZSwFuCy2Ig.roa (hash: EaAAiNMyzMZfk0/ZwRL/V1h2YZdNe3SPfk1b1YTVfY8=)
                          14: dcdUaVsbK9eNo1r-m0RN5v4IuI0.roa (hash: 16XY+REBNBY9vjc35N7Gk6wmQpGirjvhIjfgeZGXyFo=)
                          15: fE9VXK7a7JlWMNKt9ZXNcyLQUEU.roa (hash: 5ynsvOlyWe4q/k4fXwXs9yOCSr0hniz/Ebg2E2PX/h8=)
                          16: vjKyioN5ZLUQGqbv0hjh-k7ZHnI.roa (hash: rxK/AqCNmTQ7FTdlF/qR+joUKZx1vJKUfba0dd+y2Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:c7:f8:47:58:65:5b:c2:11:ee:2a:22:ff:f6:09:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Dec 20 22:01:13 2025 GMT
            Not After : Dec 21 22:01:13 2025 GMT
        Subject: CN=4499d437eae20b12826b3e7d88598e7612849063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:02:44:0d:93:ac:8d:73:d3:b3:67:31:c4:
                    16:be:28:99:ff:d8:1d:26:49:6f:00:70:dc:7d:86:
                    a0:55:57:97:f1:ce:f6:ca:f9:61:2a:63:30:dc:60:
                    6d:65:27:80:0c:1d:7e:44:d9:e7:96:f5:f4:0c:0a:
                    20:94:60:29:67:88:ea:4a:e0:08:ff:a8:07:2c:86:
                    ff:ee:9a:27:0d:72:e9:67:03:2c:98:3a:8e:80:5c:
                    10:2d:0a:4c:74:72:99:e9:51:59:1c:d4:a7:b9:eb:
                    ff:fd:0c:fa:b0:75:3a:05:1a:d5:61:4e:53:f3:38:
                    4a:cf:c9:ad:b8:16:fc:1a:be:ea:d1:61:7e:be:d5:
                    ae:b2:85:d9:ce:c5:80:bf:c2:40:14:ed:9a:ca:50:
                    08:3e:2b:0d:5d:10:94:5e:2b:f2:47:1a:2e:56:e7:
                    b6:f7:9b:47:97:ed:7d:7c:b7:28:f9:c0:67:1f:cc:
                    51:36:fe:49:62:61:e2:de:82:a4:fa:77:2b:35:df:
                    e7:46:dc:ae:a5:69:00:31:92:e5:57:f3:84:1a:ed:
                    a3:9c:a7:6a:79:c4:bf:1f:08:59:97:55:e6:8a:8f:
                    7e:c2:cc:65:42:30:d1:7f:03:36:f6:cf:14:40:da:
                    69:ba:aa:ee:e8:b4:29:3a:14:08:bc:65:6b:32:95:
                    39:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:99:D4:37:EA:E2:0B:12:82:6B:3E:7D:88:59:8E:76:12:84:90:63
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:af:5c:3b:f4:31:71:06:42:90:21:99:72:6f:4b:2a:af:3f:
         d3:0c:1e:c1:38:4e:09:92:85:cf:07:a9:b1:01:55:c4:f4:57:
         29:fd:37:a7:d1:c0:12:a4:35:e4:d8:2f:5a:10:41:db:62:2d:
         35:2f:c0:8c:22:00:c8:1d:d8:4d:62:dd:8b:3f:1e:14:03:61:
         d4:51:88:63:70:80:27:59:4c:48:ec:62:c0:f4:e9:68:9a:0b:
         8f:e7:53:d7:09:81:a3:70:dc:65:78:4f:86:0c:04:da:d0:db:
         34:b6:e8:bf:da:32:bf:c9:d5:5d:98:fa:62:40:a0:16:aa:76:
         d4:1d:0c:d7:12:71:ee:a0:dd:b7:a8:3e:46:47:0f:3c:98:0e:
         f3:80:a9:f7:a5:d1:40:ba:18:17:fd:56:48:6a:c1:d0:71:7d:
         b1:f1:ae:c1:91:4c:76:df:bd:b5:b9:1f:e7:00:60:b2:46:ab:
         29:1c:d9:92:c6:aa:d7:5c:42:59:28:fd:eb:76:40:43:82:2d:
         42:ed:62:0d:19:8e:05:6b:ed:b1:87:d0:f9:43:9b:93:4c:fe:
         5f:c4:74:48:2a:a2:15:37:ea:28:30:7c:6e:cd:42:45:53:25:
         a3:79:10:1d:6b:8e:dd:2b:76:e7:c8:d8:05:4c:0c:68:30:b4:
         3d:4a:9e:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9x/hHWGVbwhHuKiL/9gmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk
MmRkNTIwHhcNMjUxMjIwMjIwMTEzWhcNMjUxMjIxMjIwMTEzWjAzMTEwLwYDVQQD
Eyg0NDk5ZDQzN2VhZTIwYjEyODI2YjNlN2Q4ODU5OGU3NjEyODQ5MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgACRA2TrI1z07NnMcQWviiZ/9gd
JklvAHDcfYagVVeX8c72yvlhKmMw3GBtZSeADB1+RNnnlvX0DAoglGApZ4jqSuAI
/6gHLIb/7ponDXLpZwMsmDqOgFwQLQpMdHKZ6VFZHNSnuev//Qz6sHU6BRrVYU5T
8zhKz8mtuBb8Gr7q0WF+vtWusoXZzsWAv8JAFO2aylAIPisNXRCUXivyRxouVue2
95tHl+19fLco+cBnH8xRNv5JYmHi3oKk+ncrNd/nRtyupWkAMZLlV/OEGu2jnKdq
ecS/HwhZl1Xmio9+wsxlQjDRfwM29s8UQNppuqru6LQpOhQIvGVrMpU59wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESZ1Dfq4gsSgms+fYhZjnYShJBjMB8GA1UdIwQY
MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt
YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm
LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ69cO/Qx
cQZCkCGZcm9LKq8/0wwewThOCZKFzwepsQFVxPRXKf03p9HAEqQ15NgvWhBB22It
NS/AjCIAyB3YTWLdiz8eFANh1FGIY3CAJ1lMSOxiwPTpaJoLj+dT1wmBo3DcZXhP
hgwE2tDbNLbov9oyv8nVXZj6YkCgFqp21B0M1xJx7qDdt6g+RkcPPJgO84Cp96XR
QLoYF/1WSGrB0HF9sfGuwZFMdt+9tbkf5wBgskarKRzZksaq11xCWSj963ZAQ4It
Qu1iDRmOBWvtsYfQ+UObk0z+X8R0SCqiFTfqKDB8bs1CRVMlo3kQHWuO3St258jY
BUwMaDC0PUqeQA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 02:03:23 2025 by rpki-client