This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File:                     _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier:          HpdCIy9VdWSIwz414lEVXlCeSUQHp8hYwf818Rt0i/U=
Subject key identifier:   A0:0E:C1:22:AD:46:D9:D3:23:AA:A3:DC:B9:2F:06:82:3F:D3:89:43
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer:       /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial:       019B62427B91E5899890852354FA5F7D4FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number:          1555
Signing time:             Sun 28 Dec 2025 00:01:22 +0000
Manifest this update:     Sun 28 Dec 2025 00:01:22 +0000
Manifest next update:     Mon 29 Dec 2025 00:01:22 +0000
Files and hashes:         1: A65TnUmtXA-j8i8DxUwRZ8_asWk.roa (hash: p/RP3ssqQNnSyJpKYgAURBKI/osjrx7YvE9haXVstps=)
                          2: IEW1KRb6lmdmt9uvjKbJ7Vx4KOU.roa (hash: EE9BbonsKAKQ/4dVT210oiZKAUY97maNXHc53hj/8uw=)
                          3: _c0pJJZ7zU5EHB0txGdfoaZUuHE.roa (hash: JBEJnTbk0DUkFdoYHdzISJaKoNBjc9m3vJ4DFADUl0E=)
                          4: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: dATLla7M3XPb8oCVvmMB1sV7V+9cqCOCbDRg+BDZUdU=)
                          5: xHmxHeGysZQx87yc0H9cuc2SvMo.roa (hash: j+Tf8Fn3tMX9hr31g+uEJglcEihEnhqHnvGsVUVKf9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:62:42:7b:91:e5:89:98:90:85:23:54:fa:5f:7d:4f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
        Validity
            Not Before: Dec 28 00:01:22 2025 GMT
            Not After : Dec 29 00:01:22 2025 GMT
        Subject: CN=a00ec122ad46d9d323aaa3dcb92f06823fd38943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:62:2c:6f:5e:0a:c8:99:7c:20:d0:82:ba:
                    38:76:5a:03:b4:72:d8:8c:d5:16:06:b4:c8:2a:0c:
                    70:4e:21:b0:8e:b8:e0:fa:6d:37:ad:8e:a5:31:4f:
                    fa:a1:fe:21:d2:81:2d:85:5e:e2:be:72:f4:70:19:
                    37:f2:fd:29:a8:c7:92:41:79:c3:2c:04:af:ea:e3:
                    fd:3b:49:60:5f:a1:28:e8:6f:0e:19:85:37:ad:de:
                    d8:55:55:a2:60:62:e7:b5:66:0c:9c:5d:93:38:86:
                    b0:44:df:1b:15:40:02:0e:bc:a1:d0:cb:b1:a4:7e:
                    1c:de:6f:c8:eb:ca:a2:a9:ec:8f:3a:a2:0c:d7:f1:
                    b3:8e:ca:c6:fd:08:b4:d8:7c:f6:ef:17:4c:1f:cf:
                    e9:8c:bd:52:09:e5:65:e5:96:0c:e0:e7:42:85:c6:
                    9f:b7:62:63:bf:f9:16:c5:71:7d:4a:f5:db:21:f9:
                    7d:a3:66:ed:71:f7:ba:d4:c1:a6:45:03:75:f9:c9:
                    cf:df:22:22:a6:3f:6b:aa:f0:56:f9:20:33:8b:e3:
                    21:b1:22:18:be:b4:1c:6f:43:a4:76:1f:8a:08:30:
                    db:84:46:c6:a5:9f:84:d3:9d:54:3b:bc:95:12:4e:
                    b3:56:f3:ef:21:74:f0:00:87:69:8f:29:da:69:df:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:C1:22:AD:46:D9:D3:23:AA:A3:DC:B9:2F:06:82:3F:D3:89:43
            X509v3 Authority Key Identifier:
                keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:81:44:6d:4a:9b:1c:27:23:b3:35:8f:e3:79:11:bf:80:f4:
         ac:75:64:ef:7c:4d:e6:7d:91:ec:54:a6:05:c9:b3:14:a3:a5:
         8a:03:c3:27:11:01:a3:28:6d:8c:c1:48:a2:48:b0:75:e5:e2:
         8d:5d:2f:26:cb:0e:fd:8b:0d:50:32:f8:67:da:f1:2d:2c:76:
         ed:3e:4d:c1:26:63:63:29:1a:be:03:be:28:72:98:7b:af:78:
         76:ca:17:d6:38:8d:66:18:ea:7a:a0:1a:fc:2a:bc:f4:9b:a1:
         97:31:db:84:32:37:cd:5b:7e:77:10:c3:63:ca:01:1f:b4:6c:
         78:f1:ab:35:56:c3:4f:e0:73:43:4c:01:39:11:88:8c:37:be:
         7c:74:ac:e2:e3:cd:22:f3:df:3f:2e:68:5b:0f:10:4f:84:88:
         56:52:54:81:2b:d0:45:79:93:3a:61:57:72:1c:e5:1c:8d:45:
         56:09:c4:65:6d:2e:9f:c8:d0:f3:45:a4:fd:b4:2a:eb:55:1e:
         9c:68:13:dd:eb:50:6a:45:a6:b3:84:f8:33:f1:94:20:7c:7c:
         01:97:ac:3b:b5:77:e8:fe:35:30:f0:15:28:7b:c0:5c:15:70:
         b9:dd:9f:4a:26:26:5c:f6:62:33:68:85:a8:02:2b:46:76:90:
         86:88:fe:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 03:17:22 2025 by rpki-client