This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File:                     4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier:          URzcrXFQ3cEXX8TQ+t5yHAcZrEhumEoG4Coq0BpGNdE=
Subject key identifier:   4F:4E:2A:8E:A4:B4:4A:39:B4:99:F1:F2:30:81:DC:CB:E8:F7:DC:08
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer:       /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial:       019B54F4C44F6204A926982B22D73F087B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number:          1795
Signing time:             Thu 25 Dec 2025 10:01:25 +0000
Manifest this update:     Thu 25 Dec 2025 10:01:25 +0000
Manifest next update:     Fri 26 Dec 2025 10:01:25 +0000
Files and hashes:         1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: QOgKpzNHY6+yIkiKeDye+aGQ5jsImbRd2RVl+MK5zHU=)
                          2: E3bOWVadiTMoov1haUFyRTwduJA.roa (hash: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=)
                          3: Z9n5DV0w7GnExRRm5adMC5c1O74.roa (hash: 61N91t8/tHrGPHbqd/Q8TWwC/7eUsMLcp5Fv9vIC6tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:54:f4:c4:4f:62:04:a9:26:98:2b:22:d7:3f:08:7b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
        Validity
            Not Before: Dec 25 10:01:25 2025 GMT
            Not After : Dec 26 10:01:25 2025 GMT
        Subject: CN=4f4e2a8ea4b44a39b499f1f23081dccbe8f7dc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:4c:6a:21:e3:8c:46:42:df:63:22:af:79:
                    78:80:c7:5c:1f:2f:09:70:e3:62:cc:05:0b:ae:7f:
                    db:38:72:74:14:ff:7e:bf:85:02:1d:6c:f9:b6:8d:
                    6a:ef:8c:ee:5b:53:31:c6:44:08:74:7e:cb:f0:71:
                    15:52:6c:5d:90:7f:98:dd:8d:36:12:94:2e:05:79:
                    07:a3:ed:54:2e:62:a0:f7:53:ee:37:08:02:86:da:
                    95:86:77:f1:a9:3f:ad:e6:94:bd:6b:73:12:2b:1d:
                    1c:e9:db:4a:cd:98:7c:06:e0:b4:38:6d:0f:f1:a1:
                    ac:5e:1f:ba:67:3d:84:8c:49:ff:67:9f:a6:6c:bc:
                    da:27:34:c3:f4:3a:66:31:64:9c:77:f8:27:7d:8b:
                    d9:29:24:8a:d6:9f:56:92:c3:f9:84:57:36:c1:35:
                    6e:37:2b:cb:88:d5:81:68:b5:51:e2:40:35:6d:96:
                    65:37:10:8c:da:e4:b1:7c:d2:4d:4a:63:dd:e9:78:
                    a3:9e:65:4b:38:19:14:93:e6:59:3f:88:96:11:2c:
                    1a:1e:bf:16:ac:c2:9c:39:e2:d4:4d:47:d9:b8:b8:
                    0c:4a:e3:24:6e:1e:df:1a:0a:1d:b3:d0:63:3c:64:
                    91:ab:40:74:e3:6f:f0:34:cd:cb:a5:ff:32:e2:cb:
                    6a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4E:2A:8E:A4:B4:4A:39:B4:99:F1:F2:30:81:DC:CB:E8:F7:DC:08
            X509v3 Authority Key Identifier:
                keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5d:37:74:05:85:b3:a5:9c:c1:cc:41:12:df:f9:83:d0:0c:
         ea:c4:76:f5:f8:d6:53:56:34:0b:47:85:4a:73:7e:ea:19:55:
         4e:1d:02:59:87:cf:65:48:d9:42:1a:98:15:f4:6f:82:56:f3:
         4f:07:90:8f:e0:47:4b:fa:4a:69:ec:c3:02:06:62:a3:22:04:
         40:78:cf:66:89:80:eb:63:f8:ce:00:5d:d5:55:98:c9:e2:92:
         9c:44:0e:8b:13:7d:81:5f:1e:ba:0d:90:96:8e:44:fe:48:e3:
         32:fe:8b:f4:88:71:41:63:53:53:ea:a2:85:6b:ed:00:95:71:
         8b:af:3f:60:1e:41:24:dc:e5:c8:93:2b:18:d3:6c:32:4c:01:
         86:89:f8:9d:69:24:8d:7b:75:0d:6d:8d:90:26:a1:c0:7a:10:
         1f:84:d4:f7:02:42:9f:a5:39:1c:12:60:15:75:44:b4:a4:5f:
         57:62:af:1c:e1:a8:31:59:54:38:ad:ed:16:00:5a:b5:26:62:
         19:90:b1:f8:04:06:33:83:f3:0c:49:7b:4a:8b:b1:49:8a:90:
         63:e5:30:7f:74:b3:3c:51:59:df:cc:dc:18:de:ff:69:fd:07:
         1b:b5:ed:20:f9:bd:d8:98:a6:d5:dc:13:98:27:9a:85:73:e1:
         2d:d0:e9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 11:16:00 2025 by rpki-client