This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File:                     4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier:          QNOgo1r04TL52fgqx3jrpDadZTVLwUAIwNyz7pAUU2c=
Subject key identifier:   FD:30:84:3F:BA:02:04:19:BF:C2:32:26:5C:07:D1:2F:50:C1:6C:DA
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       019B397D514E89AE68AA90B9F9FDCCFE04EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number:          1798
Signing time:             Sat 20 Dec 2025 02:01:12 +0000
Manifest this update:     Sat 20 Dec 2025 02:01:12 +0000
Manifest next update:     Sun 21 Dec 2025 02:01:12 +0000
Files and hashes:         1: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: lYijXAgimSCM0QV7pNx3RxVegQ0r4AJ5cf+sZQhMtPA=)
                          2: C_WwagoxlETCmC3xgCtnJTSTiFU.roa (hash: DG+d+a6FZH6p2em3ravozO37hhn38lEfqxBjBjLqEHk=)
                          3: egQwRHU5AE-klzoLV3_Sw_tkXYo.roa (hash: Nr/ciMVzEFBT/2eRIx3/XPFBkeS8bONzVMg9DvriCrs=)
                          4: p0iloktOu4HrQp8Fbazd0VMW18A.roa (hash: WuG4K1BU3enI1jODi4UBhPWn6TyCLQBuQYRFhQ0mg6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:7d:51:4e:89:ae:68:aa:90:b9:f9:fd:cc:fe:04:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: Dec 20 02:01:12 2025 GMT
            Not After : Dec 21 02:01:12 2025 GMT
        Subject: CN=fd30843fba020419bfc232265c07d12f50c16cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:e6:16:03:34:37:d9:49:3d:93:bd:29:42:
                    c6:25:99:c0:de:d4:2a:58:fb:32:14:02:ed:c2:18:
                    e6:70:47:4a:6b:d9:89:23:02:43:39:56:52:dd:ac:
                    97:32:e8:0e:9b:ee:36:62:cf:4e:50:24:df:79:48:
                    a8:57:07:27:f7:56:27:90:53:e2:53:a0:06:aa:7d:
                    8d:cf:37:96:d3:8b:d3:7c:af:5c:03:21:75:bf:d2:
                    3b:4e:a2:5c:af:59:55:06:5c:5d:d5:ef:29:6b:6d:
                    8e:a8:00:2c:53:78:68:c7:84:6b:14:6b:2a:f8:60:
                    60:b0:05:f2:7d:84:ae:a0:e9:da:c3:a4:61:90:7d:
                    bb:bf:0a:ec:58:de:6f:2b:53:26:21:2a:5e:9c:48:
                    26:1c:31:78:c1:e3:8e:38:3e:44:f6:0a:ac:b8:cb:
                    f8:b0:29:f3:97:0e:e8:6a:a9:f2:4e:a9:7b:53:73:
                    9f:41:84:bd:53:e2:73:28:52:97:77:c2:48:65:96:
                    9e:ac:36:08:4a:f7:06:cb:78:eb:8b:88:64:af:18:
                    fa:d4:c0:3a:74:a6:4f:03:94:48:d5:23:76:96:c8:
                    8d:2a:a8:cf:02:bb:9f:fc:fd:96:35:5c:fc:8c:ca:
                    fb:32:31:0b:dc:75:3c:ce:b5:52:e3:18:e6:04:58:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:30:84:3F:BA:02:04:19:BF:C2:32:26:5C:07:D1:2F:50:C1:6C:DA
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fd:17:8b:9a:fa:18:1a:af:c5:07:b7:c6:8c:6e:d3:c1:ed:
         f8:eb:fb:e8:ab:32:bb:c1:93:09:bf:44:66:ee:56:c5:f0:c5:
         be:9c:44:2a:73:6b:67:ab:c1:48:c5:2b:5f:19:92:3c:37:29:
         56:16:c2:49:8b:6d:f3:e0:b7:b2:41:c1:2d:6f:34:e1:43:b8:
         ec:88:45:f3:fc:3b:c9:1c:54:0f:c7:cd:c0:61:5e:6d:a1:d3:
         f5:1b:7d:02:23:10:03:bc:60:e4:7d:c0:aa:56:98:05:af:0a:
         21:2e:0e:00:89:fa:ec:ea:81:24:94:68:40:b3:cc:fd:97:e5:
         3e:2b:a3:7c:72:1f:95:bc:eb:13:92:5f:79:9c:63:c3:5a:71:
         cd:84:55:b9:32:a8:e1:28:7f:80:6f:e7:ed:8c:75:0b:52:c9:
         49:24:de:5d:03:77:6c:10:4d:20:d7:ee:26:a9:ef:94:ae:b5:
         b5:e1:28:de:8b:9f:0a:a3:5a:89:a2:09:8d:b2:07:45:e8:b5:
         47:95:e4:94:78:38:9d:1d:66:a1:52:df:b1:09:82:e1:9b:93:
         1b:44:a6:38:80:b3:33:a7:53:20:dc:7d:e3:bf:77:64:7d:19:
         6f:a3:11:20:b8:ce:ba:67:d6:0d:37:b3:f4:35:f9:bf:1b:15:
         ce:54:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:09:56 2025 by rpki-client