This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File:                     4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier:          eT84Py15TitUU/9ZNtuipT8STyKUU+OZMxW/+dURQ0s=
Subject key identifier:   63:97:4C:95:16:92:0F:D4:D1:03:05:20:BE:4A:27:76:8D:51:17:35
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer:       /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial:       019B3AFD63141DE540CAA9EDEC08798D98A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number:          178A
Signing time:             Sat 20 Dec 2025 09:00:42 +0000
Manifest this update:     Sat 20 Dec 2025 09:00:42 +0000
Manifest next update:     Sun 21 Dec 2025 09:00:42 +0000
Files and hashes:         1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: Jnri9IMqg27MhZl/OLHqtDFE/ucIxTYiNAxBNnD7TgI=)
                          2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
                          3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:fd:63:14:1d:e5:40:ca:a9:ed:ec:08:79:8d:98:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
        Validity
            Not Before: Dec 20 09:00:42 2025 GMT
            Not After : Dec 21 09:00:42 2025 GMT
        Subject: CN=63974c9516920fd4d1030520be4a27768d511735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:30:2c:48:d2:79:d1:84:f3:15:db:33:39:04:
                    19:00:f0:0e:ed:a5:c9:d3:26:7b:52:c5:94:c7:4b:
                    c1:42:9b:eb:d3:9a:67:e4:0d:cd:bf:72:5e:4e:24:
                    a0:72:3e:c0:dc:61:fd:6d:c6:ee:e1:ed:cf:50:66:
                    9c:1e:3e:ee:44:65:2b:17:46:1d:8c:72:94:48:72:
                    3a:87:04:28:13:d1:00:04:2e:00:27:0e:67:47:63:
                    9f:4b:c1:b9:f7:4c:88:f4:16:67:3d:7e:e8:3d:04:
                    65:93:0e:34:76:44:99:06:28:f5:20:3b:c5:1c:e6:
                    94:8d:3d:33:b9:e8:f6:4b:9f:60:e0:24:3b:2e:70:
                    86:ef:e2:21:70:51:be:b2:d7:b0:a0:ac:2e:8c:93:
                    a7:39:62:5e:0a:2d:a3:f9:9a:1d:17:25:79:c2:e8:
                    4a:25:36:8f:16:af:cb:34:e9:74:d7:42:6c:f3:bb:
                    aa:4d:ea:20:d7:2a:ce:6f:36:ee:96:cb:27:51:d4:
                    8a:21:51:90:c2:a2:46:b0:f2:f4:5d:ea:74:9b:6a:
                    69:9e:e2:75:b1:88:f6:b1:46:08:d6:9a:c6:d9:d8:
                    4e:83:5f:91:52:32:99:76:04:57:96:65:37:07:04:
                    54:94:93:30:6f:cb:26:f6:90:9d:fa:4b:6d:6b:3e:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:97:4C:95:16:92:0F:D4:D1:03:05:20:BE:4A:27:76:8D:51:17:35
            X509v3 Authority Key Identifier:
                keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5e:f8:1c:6e:97:96:65:ff:14:f0:d5:f0:b6:5c:54:86:aa:
         91:d2:48:42:ad:61:4c:a0:82:f7:99:86:6f:ae:1d:86:b1:62:
         1c:fb:6f:c3:b1:da:68:56:d4:15:e5:b6:d6:36:8a:a6:7d:3e:
         9e:cb:a4:b4:e8:2d:f0:03:59:31:50:ab:ff:26:50:a8:42:ed:
         d2:2f:39:0d:85:65:91:01:fd:fe:db:b7:0d:a8:ec:c7:15:c3:
         09:3f:a2:df:35:58:1b:99:e1:89:1e:ea:7d:db:75:66:ae:db:
         db:d9:41:2e:93:4f:12:d3:98:4d:cc:0b:41:5e:09:4a:df:71:
         75:e8:3c:1c:a6:5d:40:c8:3b:94:7d:fa:f5:8d:27:68:21:52:
         5b:81:70:8c:4f:1f:58:49:4c:e2:de:a1:97:cb:cd:a3:db:4e:
         b3:36:a4:1d:ee:4f:ac:1f:7a:a2:9b:78:3c:31:ab:30:18:65:
         fe:21:c6:36:eb:2a:29:da:ab:51:c6:87:ce:b5:89:08:3f:18:
         e6:3c:2f:27:5f:26:a7:ab:b8:4d:33:d8:d2:cd:ec:23:8a:ef:
         e3:46:87:83:16:2e:7d:d5:6a:2f:13:d8:26:6e:9f:38:1a:33:
         26:1c:20:c1:43:c7:bb:27:bb:88:5b:db:31:5e:60:0d:89:82:
         1c:3b:65:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:51:41 2025 by rpki-client