This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
File:                     4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft (raw, json)
Hash identifier:          rXzWEEqAQRSQP+3v9/rq6lNaWr2M3BGvzrpXRzmqRWg=
Subject key identifier:   FE:F8:83:F3:F4:F3:2C:96:B6:C2:22:74:65:A7:28:5F:3F:16:F7:CE
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Certificate issuer:       /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial:       019B3EA325926669C2626BCAD8C63D83F0C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
Manifest number:          179A
Signing time:             Sun 21 Dec 2025 02:00:37 +0000
Manifest this update:     Sun 21 Dec 2025 02:00:37 +0000
Manifest next update:     Mon 22 Dec 2025 02:00:37 +0000
Files and hashes:         1: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl (hash: VTW9N1g8NHBAPaBIX+ukSHmUIsXkZpJA030wJXBhzUg=)
                          2: 69Gg052Fvx4I2Fe4cFxkAgmaw8U.roa (hash: 4OJvsk33eSq4Pcms3ZWUp5ICc5rvGRU0gr/rstfeV/0=)
                          3: M0_KB7YWngkVytRrWSYysj7YJLA.roa (hash: Wx2mA+u5jzHoEfTRzsY0nX3Oe/9sdMOBfbPWiWl5Xlc=)
                          4: V0Sp0TtSbp08bch-dMvX-f8oa2o.roa (hash: JjHFR/Br8lLNxd0wBIShn4KBf2iV68ca7V3XI/Bh6Lc=)
                          5: w2HliW1FxAoWboCzBC57HQK_5M4.roa (hash: 1o/6TghmsgYeou6D438p0wdWpOeCHDeKRbg9VK0Bxfs=)
                          6: z5K__5uwKXFTzaD79qKBdTd2bJI.roa (hash: Cp/izXCB0pUAYpj87c/lOI2duT2TX+EDfDIWds1Fqng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:a3:25:92:66:69:c2:62:6b:ca:d8:c6:3d:83:f0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
        Validity
            Not Before: Dec 21 02:00:37 2025 GMT
            Not After : Dec 22 02:00:37 2025 GMT
        Subject: CN=fef883f3f4f32c96b6c2227465a7285f3f16f7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:30:66:98:33:1f:b2:78:6e:d6:94:e6:c9:db:
                    ad:e1:e1:77:79:de:2d:11:16:a4:c2:b7:69:3a:4f:
                    9a:8d:69:91:10:9d:c0:2f:9c:c4:55:cf:0f:bd:d4:
                    6c:29:73:9d:44:12:91:54:9e:0d:5b:3e:4a:95:23:
                    90:09:7f:b2:7e:c2:03:37:0a:74:e9:fe:69:e1:1a:
                    90:36:49:79:77:e1:4b:58:64:98:7c:d3:e2:8b:10:
                    1b:ce:0e:e3:87:cc:25:2e:9b:d3:61:68:8a:f1:a5:
                    d2:15:99:a3:e6:96:3c:38:18:f1:16:9e:aa:17:d0:
                    16:c7:0a:ae:03:e1:9b:de:b5:40:ec:2f:26:40:b9:
                    f5:e7:39:c7:c5:46:f2:a0:69:a2:83:2c:16:67:34:
                    d3:74:97:9f:26:a5:a6:da:88:92:5d:f7:a4:ac:ae:
                    97:49:0d:c7:c4:0a:73:48:ec:4a:10:89:bf:c8:f7:
                    c5:2b:e2:4e:82:ef:ba:41:db:10:bc:a9:e0:b1:c8:
                    f8:0b:71:0d:1c:9b:09:6c:06:9b:40:bd:61:82:fc:
                    f9:4c:77:71:88:ac:e1:d2:1f:9b:03:58:f4:94:32:
                    d4:29:07:e7:a5:d9:08:f3:81:8e:cb:a0:b1:97:ec:
                    2e:a8:f1:a9:2d:c4:42:b7:48:03:75:7a:43:cc:5e:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F8:83:F3:F4:F3:2C:96:B6:C2:22:74:65:A7:28:5F:3F:16:F7:CE
            X509v3 Authority Key Identifier:
                keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:47:21:af:1b:ce:44:47:83:2e:82:df:88:cb:69:e8:bf:
         6a:bd:f3:d6:f0:c5:c1:31:82:9a:78:fa:71:83:0a:c6:bb:0f:
         ea:06:58:c5:68:d8:6e:61:c2:f1:07:bc:04:fe:18:8f:1b:3d:
         e6:56:70:24:c9:83:3a:48:e7:c6:16:de:45:3c:13:d3:1a:cf:
         7f:83:43:04:51:97:c4:ac:8c:8b:54:7f:d4:82:68:d0:c0:b6:
         02:76:49:b0:0b:a6:25:04:de:9f:89:f3:09:ff:4c:b8:f4:e6:
         a4:6c:d6:67:7b:5b:bd:b6:dd:fd:d3:61:28:dc:83:bc:80:67:
         93:19:07:c0:98:ce:6e:42:22:fd:d2:a0:6e:0e:da:32:eb:ab:
         96:50:7f:ec:5b:af:8a:27:84:9f:f4:3e:b8:1e:ee:6f:5e:32:
         71:3c:2c:ba:ea:9a:32:c7:1c:21:7d:d9:4a:f9:e1:2e:f4:6b:
         fd:9b:fb:28:20:73:f8:2e:8a:1e:36:6a:e2:21:ca:22:b0:0a:
         c3:85:ac:b0:3c:7e:a6:49:28:f1:e4:37:6f:2c:3e:79:68:93:
         ce:20:4f:d6:2e:e5:0d:48:8b:d7:7d:19:61:2d:3a:e9:a4:bd:
         43:02:c6:6e:29:51:3e:e6:90:87:fb:db:21:84:75:83:41:c7:
         04:d0:b5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:09:03 2025 by rpki-client