This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File:                     1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier:          Ew9VrcHC8QrtYdrCUoMfNq4u2EiNt62NUa4B0toNN00=
Subject key identifier:   58:48:84:A2:87:67:3D:EF:39:3E:76:35:AF:57:19:AD:AC:AC:4B:09
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer:       /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial:       019B3E6E14531F311BC6F87168DD7BCBC86C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number:          07A4
Signing time:             Sun 21 Dec 2025 01:02:40 +0000
Manifest this update:     Sun 21 Dec 2025 01:02:40 +0000
Manifest next update:     Mon 22 Dec 2025 01:02:40 +0000
Files and hashes:         1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: CuzK5FADCqamFzn1TnCsJI46gb6opuu2fTM+g0hMPEM=)
                          2: 1egEAWTQi1OcNU0W_rjr_CRLdbs.roa (hash: LHe616pBcv+bCNyg1cs6z4IxwstMXXlrnpuBdg2aZbs=)
                          3: 3ojh0vwmWGR8R130UvEk1Ukeno0.roa (hash: /WfyicFmwcjSGtw05lqyqsVoIK9F8QUQc2+NhhBmMwI=)
                          4: dwkbDumHfM-fJPhQnf3bRCy2PjY.roa (hash: aIk07HBkaBzs1F02NTAQLrtiIZZaDl8SPQXuogtqsw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6e:14:53:1f:31:1b:c6:f8:71:68:dd:7b:cb:c8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
        Validity
            Not Before: Dec 21 01:02:40 2025 GMT
            Not After : Dec 22 01:02:40 2025 GMT
        Subject: CN=584884a287673def393e7635af5719adacac4b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:df:84:23:55:07:10:85:eb:70:26:d2:11:
                    4a:82:7b:34:0c:ee:6b:d4:90:5f:0d:2a:62:f0:bf:
                    25:35:0f:56:2e:04:12:a4:6a:0a:f4:cd:9b:e0:05:
                    37:c7:3a:94:33:05:8d:58:3a:a3:3f:1d:3a:ce:bd:
                    ee:84:99:75:9c:59:00:1f:50:6c:f5:75:69:dd:5a:
                    c4:d8:58:93:7f:c2:2d:4f:bd:55:78:77:c4:ea:42:
                    83:9d:5c:25:41:04:45:3f:84:61:39:13:19:0c:ae:
                    fd:ba:2b:44:4d:8d:99:6e:89:cb:d4:e4:ad:89:46:
                    c0:6b:5e:fd:8a:9f:25:a4:e0:e2:de:5f:ae:58:88:
                    f7:a9:13:6c:66:eb:4d:88:1b:31:29:cf:1a:d1:b5:
                    f1:c0:a0:06:43:7c:51:07:45:f9:70:29:fd:40:c0:
                    0e:ca:4d:a4:90:83:dc:bc:e8:98:18:e7:c8:e5:d8:
                    9e:5c:8b:09:56:92:f4:28:cd:1b:36:57:c7:5e:2a:
                    eb:99:3e:98:24:b3:9e:22:63:0d:7c:3e:ae:ce:34:
                    96:35:d8:6b:69:ee:91:43:6e:f2:9d:02:00:20:66:
                    99:b2:fa:29:8e:9e:a8:81:92:15:06:a6:44:2b:f7:
                    b7:6e:1a:b6:0c:bd:24:46:c6:8a:70:b9:21:0c:db:
                    c3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:48:84:A2:87:67:3D:EF:39:3E:76:35:AF:57:19:AD:AC:AC:4B:09
            X509v3 Authority Key Identifier:
                keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:89:0c:de:05:d6:35:4f:c3:99:01:1c:fb:a2:60:99:25:74:
         00:2c:1f:7b:b4:69:dc:7e:d1:76:13:89:8a:9c:8a:bf:a8:0b:
         37:12:ec:a8:9b:bd:50:0c:a4:fa:18:69:ad:a4:07:86:09:23:
         92:6d:ef:8c:0c:89:e3:23:c2:c2:bc:01:27:2b:6f:a8:20:79:
         41:68:63:20:e6:88:1f:20:95:fd:03:48:5a:5b:d5:c7:eb:ee:
         3c:f4:4d:4f:bf:f7:cf:74:4e:95:cf:eb:7c:9c:83:b6:8f:b8:
         ab:ff:e4:0c:05:87:7e:13:c2:c9:af:39:f0:37:98:00:f2:55:
         33:4d:2f:b7:5b:3b:c0:9a:74:a5:88:6e:6c:7d:49:6c:b3:d1:
         fc:32:13:d2:e3:0d:53:c1:d6:58:51:2c:76:12:e8:37:a0:3b:
         f5:93:41:04:08:47:36:ca:f8:91:28:fc:a7:bf:05:97:f8:60:
         53:ac:bd:27:16:55:41:b2:13:dd:2f:13:e4:94:91:37:14:98:
         0c:41:64:af:98:f6:8a:26:fa:e7:e8:06:cc:b8:c7:77:db:44:
         09:19:cf:9f:cd:47:bc:5b:21:f7:95:58:ac:0d:6f:82:24:e5:
         48:30:ff:a6:9f:32:89:31:aa:19:bc:37:0d:c9:bb:e3:8a:70:
         0f:7b:71:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:06:30 2025 by rpki-client