This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File:                     IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier:          bgs/Yx1RMH71ynYYadKRJdPCPfIlc3nUDQbMoJfMD4c=
Subject key identifier:   4E:AA:99:19:A2:B8:46:0A:F7:04:B1:A8:BF:2F:84:15:B5:4A:EE:46
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer:       /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial:       019B44DC6FA23E49EC9E54FC1789BB7226D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number:          1062
Signing time:             Mon 22 Dec 2025 07:00:55 +0000
Manifest this update:     Mon 22 Dec 2025 07:00:55 +0000
Manifest next update:     Tue 23 Dec 2025 07:00:55 +0000
Files and hashes:         1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=)
                          2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: huDko56C1Y7x6bieFTDjSKt3MChg1tp7vYK0wLDFAiY=)
                          3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=)
                          4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:dc:6f:a2:3e:49:ec:9e:54:fc:17:89:bb:72:26:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
        Validity
            Not Before: Dec 22 07:00:55 2025 GMT
            Not After : Dec 23 07:00:55 2025 GMT
        Subject: CN=4eaa9919a2b8460af704b1a8bf2f8415b54aee46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:5a:20:15:d9:09:33:39:72:9f:ed:ab:ce:
                    6a:7d:4a:1b:35:df:19:4f:17:d4:f9:ca:0e:9b:61:
                    84:f8:9a:36:e1:c1:15:1a:51:14:22:e6:96:89:71:
                    b2:90:85:83:ee:08:d3:82:81:66:08:83:24:72:06:
                    12:76:fd:a8:bc:84:0e:d0:94:b9:56:5c:7e:ec:ff:
                    3e:73:50:01:26:5a:0a:a6:55:5b:45:f7:d6:2d:48:
                    64:e6:e9:69:6d:4b:a8:0f:e1:65:69:05:6e:69:fb:
                    48:b4:db:99:dc:6b:58:de:b2:83:19:e8:6c:f8:f3:
                    b1:df:eb:0d:89:57:66:7a:45:8d:34:fa:60:c6:1d:
                    1f:36:f2:79:6f:e5:85:d0:87:f2:aa:00:73:46:b3:
                    65:72:84:14:d4:82:3a:7b:d5:26:5e:cb:25:10:b9:
                    bb:0b:92:ff:2b:aa:ee:67:86:a8:16:83:5b:c4:f2:
                    3c:3b:fd:b0:e7:11:1e:82:a3:2a:93:89:03:c9:1f:
                    32:a8:9c:ba:21:67:f1:30:e4:a9:20:b1:ff:0e:25:
                    87:81:4f:29:e7:c9:d2:be:1e:63:52:45:bd:ff:39:
                    4d:ae:06:7d:b4:a5:30:46:71:45:e9:a0:08:11:68:
                    36:6c:8d:32:d8:b7:ae:9c:11:38:21:90:d1:05:58:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AA:99:19:A2:B8:46:0A:F7:04:B1:A8:BF:2F:84:15:B5:4A:EE:46
            X509v3 Authority Key Identifier:
                keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:47:c8:f9:64:b5:fc:e2:30:22:18:23:37:ab:d1:d5:8a:
         64:f3:93:97:7f:aa:9a:03:fd:8f:20:da:03:16:99:f7:4f:6e:
         ff:a9:36:e4:26:88:8c:bc:a1:81:44:69:c6:16:2b:f7:56:bb:
         92:ce:84:e5:7b:77:7f:00:2c:a1:30:24:2c:10:b2:38:be:9d:
         b4:c4:08:5b:ff:a4:21:a3:40:af:f5:82:c2:c2:c0:c1:51:45:
         25:83:de:cf:32:04:e4:57:86:84:bf:52:60:93:30:48:37:4c:
         2d:a2:dd:23:32:d8:65:22:1b:79:4a:d6:6f:e0:19:7d:fd:a0:
         a0:37:e2:d0:87:1e:d4:f8:9d:ef:8b:1e:15:16:b6:bd:e0:68:
         98:b3:03:19:e2:ad:58:aa:41:a7:f5:6e:49:16:43:0a:5a:7a:
         91:c9:17:84:7a:37:d4:c0:68:2a:ea:55:28:17:5b:68:8a:84:
         15:73:e9:15:86:a8:c0:88:bd:54:fb:df:f1:36:d3:23:0f:49:
         7a:80:a0:8a:0b:2e:32:5e:07:57:53:c2:03:16:4e:3f:d3:44:
         33:cf:61:dd:97:e2:16:49:c9:06:d1:51:9e:fa:d2:14:e3:49:
         ef:2c:78:8f:da:0d:9a:57:03:06:c2:08:d1:ad:a6:b9:97:d7:
         53:b2:8b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:14:26 2025 by rpki-client