This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File:                     TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier:          TcsC05IsgA5eBXRhY08uXpdSVqbuNZOnCnnlDzSuumw=
Subject key identifier:   1F:AD:5B:CE:44:33:72:37:D3:A8:D9:63:9F:13:24:29:33:B8:5D:46
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer:       /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial:       019B4437FD9E70E207C42A4A90F813EC9F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number:          178F
Signing time:             Mon 22 Dec 2025 04:01:18 +0000
Manifest this update:     Mon 22 Dec 2025 04:01:18 +0000
Manifest next update:     Tue 23 Dec 2025 04:01:18 +0000
Files and hashes:         1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
                          2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: ojwfiLHyEX2CNaFmLfPCjzRm6HmTpKclz622DAu8xx8=)
                          3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:37:fd:9e:70:e2:07:c4:2a:4a:90:f8:13:ec:9f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
        Validity
            Not Before: Dec 22 04:01:18 2025 GMT
            Not After : Dec 23 04:01:18 2025 GMT
        Subject: CN=1fad5bce44337237d3a8d9639f13242933b85d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:bd:4a:92:8d:f1:11:d3:88:d3:8b:d8:e4:
                    30:a7:d4:cf:64:fc:95:aa:a0:0d:1e:77:5b:97:29:
                    f2:c3:cb:05:07:40:dd:b5:0b:42:2c:4b:8c:2c:ba:
                    b0:e0:3e:8c:5c:a1:78:e8:21:4a:38:e1:f5:14:cc:
                    0f:80:cc:36:e5:1c:7c:d7:fb:67:0f:6d:af:ed:62:
                    1c:5e:95:47:97:73:1b:a4:a0:8b:85:b7:e1:03:e3:
                    4d:ec:93:5c:91:39:6f:03:81:54:51:5c:14:68:2b:
                    08:bb:a6:e1:d9:c1:e0:79:1b:79:01:cf:4a:89:d9:
                    e7:f5:ff:dc:a2:25:66:29:ca:bb:31:c0:39:19:85:
                    79:c8:2e:cd:70:80:b2:19:36:19:42:3a:c0:b3:58:
                    bd:67:9b:73:90:ef:ee:9f:04:61:67:de:ad:45:b3:
                    7d:2b:cc:66:45:f8:86:86:54:35:01:72:f0:59:a4:
                    37:f1:e8:24:2e:ef:96:39:ba:6a:df:92:a4:a4:2e:
                    69:d2:3d:ec:10:ed:a1:45:dd:fa:7b:66:40:d6:6a:
                    e6:d7:ce:d1:4d:f5:2d:e7:67:42:1a:4f:7e:c6:ec:
                    b1:14:55:68:85:c4:1b:3d:5e:57:64:4e:6a:36:dc:
                    f9:0c:0f:10:a6:f1:9e:b4:85:d5:78:82:da:ab:85:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AD:5B:CE:44:33:72:37:D3:A8:D9:63:9F:13:24:29:33:B8:5D:46
            X509v3 Authority Key Identifier:
                keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:dd:26:dc:7f:f7:2a:8f:5e:66:62:cd:ae:df:d1:60:d3:
         8b:ba:ff:ba:24:30:de:8e:35:4e:c4:38:8b:c3:5c:eb:91:81:
         e4:88:24:39:66:ab:e2:66:49:70:0d:13:64:18:48:32:37:8f:
         e9:bb:ed:c9:cf:4c:16:88:85:94:d5:21:67:5a:47:4f:9b:29:
         79:6e:2c:c8:e2:ae:ca:69:38:7f:aa:7d:ea:36:88:a0:00:9b:
         f5:16:11:3e:2f:00:32:4f:d6:45:4e:a7:fb:d3:7d:5d:f6:2e:
         25:c0:46:d7:2b:2e:d0:95:57:69:89:52:a0:86:22:2b:d0:b6:
         74:8b:65:49:75:c0:ea:68:6a:a0:40:d4:df:cd:1e:8d:ac:8b:
         a0:e7:b6:09:df:12:ca:c5:88:ee:4f:92:24:65:30:15:3e:64:
         08:3a:32:95:cf:de:54:1a:97:80:e7:df:06:d5:86:1f:ad:47:
         67:81:5a:22:bc:3c:42:52:c2:39:09:32:ed:b7:6b:58:44:5c:
         d3:ff:8b:e8:fa:ac:fa:10:26:8b:81:0e:46:66:10:c5:72:fa:
         0f:4c:65:5a:25:8b:35:27:1e:db:be:72:50:b2:25:0b:63:21:
         31:27:13:64:03:8b:d8:77:e0:06:18:c6:c3:72:50:12:5b:d1:
         73:46:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:29:56 2025 by rpki-client