This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
File:                     4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json)
Hash identifier:          NnxkYeEEDzwpC+DWuZb6B7EkDzElyRzkuPzO49fdKZ8=
Subject key identifier:   A8:E4:A5:A0:E8:48:1C:E8:EB:61:1A:10:14:E9:91:1A:33:0C:A8:27
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Certificate issuer:       /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial:       019B2BF916DA97C775106700967A76F5C9F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
Manifest number:          17B0
Signing time:             Wed 17 Dec 2025 11:01:43 +0000
Manifest this update:     Wed 17 Dec 2025 11:01:43 +0000
Manifest next update:     Thu 18 Dec 2025 11:01:43 +0000
Files and hashes:         1: 1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa (hash: gNrv97avvDkank7EdDvcD5kAcTLpL7MBGtGaNujTfjw=)
                          2: 1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa (hash: YFDJetm10wMx3y43nkOzbjWKZjU+niDmUY27/YG6EhM=)
                          3: 34IsY0jO75pV7BAMdtZC6Y7R63Q.roa (hash: iHXM2CyDHwFZsOpk2M0YYfJaVLusv8i1hjOCk9r9pn0=)
                          4: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: Rw8+Mjd+j/db6Hwmzl472MtXKTSEQFXPJuzCKDB2zxU=)
                          5: 7nkssnprFjXAOld7WKHfkEWzNzM.roa (hash: Skwqi1fOlMCKRKFWmUaMkFVWVXCxT4HsubhdV1vB7J0=)
                          6: P54Qz9AI09JDOlqysqt799AeQRI.roa (hash: nIDEtW0TBUZxo5dIDtHdP7iLVF2Wse6E2BuTqfPasv8=)
                          7: Y4y_3m4POfZlVUhwqm0uVd4P9vQ.roa (hash: dZrOM2p3noTvf6KyFY1PrTf2FDGKF1aorRCqRis2DzA=)
                          8: _dP89dJHE-YZKAUIAMAKH5hCybo.roa (hash: RwLTyGyMw54nCLsLFUIuCCv0sJSfUYZ8s2qq98bQOs0=)
                          9: eAV-d8BbWJ1sJQuFdRvhLNIzJUA.roa (hash: T3JT9dws49hGRBqX3Lqw/F5GMKuYnFZbEjUfdpuIhGs=)
                          10: erLKl2-7SPNGcOtJ86A0RSv3cdw.roa (hash: 1hNGg1BiH4BJWJitgxTwu0nBQpz2c5fg0q3Qy8a1iuo=)
                          11: r2_uEzNLhBHjD8nrsm_28O-I61I.roa (hash: MQGSyx9ipk0r/WYHwP9ZlzljWRWQN1rdWtX2fCTKqeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:f9:16:da:97:c7:75:10:67:00:96:7a:76:f5:c9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
        Validity
            Not Before: Dec 17 11:01:43 2025 GMT
            Not After : Dec 18 11:01:43 2025 GMT
        Subject: CN=a8e4a5a0e8481ce8eb611a1014e9911a330ca827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f0:9a:b5:79:75:2a:ce:b1:0c:fe:92:0d:52:
                    5d:ad:25:7c:60:f4:a0:ce:27:fe:a6:d3:17:e0:07:
                    1d:3d:49:db:23:1a:7a:36:cf:78:f2:11:ca:2a:4d:
                    78:12:97:80:13:04:e9:a3:81:46:6c:10:f9:cf:aa:
                    2c:e2:b8:88:45:f8:26:e2:fe:7f:1c:ed:75:5b:de:
                    81:c6:95:e8:e3:eb:64:09:6c:7c:0d:27:9f:56:ae:
                    1c:aa:6d:25:f3:28:5a:88:a2:bc:40:b1:e4:52:36:
                    91:af:a9:92:6c:6c:7d:79:d5:89:b0:eb:4b:2f:f7:
                    6f:9f:71:d3:aa:16:89:92:e7:75:e7:f2:93:9d:2f:
                    22:8a:25:66:37:c7:8d:6b:3c:cf:1b:34:4c:eb:8f:
                    10:98:a2:79:18:0f:5d:39:a2:fb:ca:8b:70:eb:df:
                    41:47:5c:51:29:5a:13:4b:35:77:a7:8d:26:02:14:
                    99:e3:30:e1:70:56:32:08:82:61:7b:0d:78:9a:23:
                    4a:aa:3a:b8:6c:a7:17:4b:4b:34:26:71:cc:2e:8e:
                    52:09:76:e3:9e:f9:5f:f5:97:0b:2d:45:a4:01:47:
                    c9:c5:b9:b7:39:4d:31:e6:51:ec:dc:10:8c:6a:ad:
                    89:e9:ed:55:0b:6e:9d:11:54:a6:28:bb:28:c0:71:
                    ce:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E4:A5:A0:E8:48:1C:E8:EB:61:1A:10:14:E9:91:1A:33:0C:A8:27
            X509v3 Authority Key Identifier:
                keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b0:26:95:af:2f:9e:97:4d:fc:83:7b:a5:2c:c4:36:a7:1f:
         76:a3:0d:e0:61:44:cd:57:c7:a4:b7:51:d3:ba:42:d7:4e:5f:
         3d:10:cf:15:38:a1:06:b0:4e:f0:ee:ba:77:4d:f2:c2:2b:9b:
         36:34:7a:11:60:cc:38:7b:11:e3:8a:9f:51:3e:75:f1:4f:bf:
         76:d6:0f:fd:ec:06:82:72:e7:89:7e:d6:16:d9:63:25:10:47:
         01:b1:da:de:e5:41:e0:7b:d2:f4:e6:cd:f9:63:a0:7d:e7:91:
         94:1d:dd:29:41:ae:5b:fa:d4:fa:d6:9b:52:09:42:b0:c8:10:
         7f:a3:c0:90:36:d3:38:1f:4e:dd:4c:0c:af:bc:e9:32:76:f8:
         ef:bb:f2:d0:e9:b1:31:4e:86:4c:42:fa:bd:b0:94:33:3d:eb:
         cd:e6:e9:0b:da:3a:c5:cf:5f:5d:99:df:1e:a1:2c:80:cf:49:
         13:c9:3f:af:f3:b3:b5:4e:c4:59:15:54:57:e2:bc:3b:7a:c0:
         8f:e4:4a:ad:8f:c1:8f:0f:ea:2d:87:d4:18:1f:b9:9d:2b:2f:
         68:20:4c:f5:ad:fa:65:90:f8:b4:8a:c8:ef:b1:ae:3a:e9:ee:
         db:36:84:2a:81:c6:9e:b8:77:7c:b7:2d:44:d7:f6:8a:6b:78:
         a1:40:c8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 15:15:12 2025 by rpki-client