This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File:                     C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier:          XruuBSmDWl9/q9KJZguCOMLx8xs2G2t36dJ8xUFrVrw=
Subject key identifier:   CE:F3:C8:26:82:6A:41:27:79:ED:9F:2D:C3:A8:D4:DD:02:D4:A6:A7
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer:       /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial:       019B59E456253D9F544D57DAF8F89763B41F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number:          1797
Signing time:             Fri 26 Dec 2025 09:01:34 +0000
Manifest this update:     Fri 26 Dec 2025 09:01:34 +0000
Manifest next update:     Sat 27 Dec 2025 09:01:34 +0000
Files and hashes:         1: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (hash: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=)
                          2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: sRsuvZomq+XIkEHQ0WdWffegqGa1RektcqYgnPlTlZQ=)
                          3: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (hash: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:e4:56:25:3d:9f:54:4d:57:da:f8:f8:97:63:b4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
        Validity
            Not Before: Dec 26 09:01:34 2025 GMT
            Not After : Dec 27 09:01:34 2025 GMT
        Subject: CN=cef3c826826a412779ed9f2dc3a8d4dd02d4a6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:a6:0a:55:72:39:48:2d:5b:62:70:48:2f:
                    8c:9e:2b:be:dd:40:d1:b7:e8:3e:78:5d:99:59:82:
                    a8:6e:d3:d6:cd:e0:18:72:36:08:52:f2:17:21:31:
                    71:38:3a:9c:2f:74:51:59:f9:32:ed:1b:c1:60:9e:
                    91:f4:e8:cc:8a:90:7e:16:87:ed:76:c7:21:16:59:
                    63:5b:40:8e:81:84:bf:fc:ef:3b:77:ad:a7:ab:b0:
                    db:82:71:b8:33:1b:e3:34:fd:ec:e2:f3:3f:1f:3e:
                    43:4e:2b:1e:f6:d9:bb:07:86:d9:9c:a0:c5:34:2d:
                    79:e3:6a:90:27:11:67:3e:77:98:72:fe:33:55:a5:
                    a5:63:f0:f2:c9:96:36:2e:04:8e:a4:5f:5a:9c:df:
                    8b:d9:53:07:0f:73:28:21:38:a5:6d:b0:ec:37:3e:
                    85:4d:45:84:83:56:ab:02:c1:2a:d2:dd:1b:7b:8e:
                    5f:b7:c4:81:68:0e:8c:46:a0:65:c2:8b:86:f4:d1:
                    94:8e:ed:ed:4f:82:c1:00:44:86:32:d6:9b:f3:63:
                    c0:39:f0:cb:0a:b8:01:79:4e:50:5a:70:eb:72:ba:
                    85:0a:e3:54:fa:68:f9:63:a8:e9:ac:97:9c:fd:8b:
                    90:73:64:e3:86:1b:5c:af:0a:a7:27:4d:21:63:bf:
                    81:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F3:C8:26:82:6A:41:27:79:ED:9F:2D:C3:A8:D4:DD:02:D4:A6:A7
            X509v3 Authority Key Identifier:
                keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:52:55:31:b2:2e:12:04:fe:2a:3c:77:9e:f0:1f:6d:9f:c2:
         75:95:53:26:3f:18:da:b7:2d:5d:5e:bf:03:58:96:13:aa:a5:
         d9:11:3c:96:e5:6c:b4:c8:e7:9e:9f:09:06:65:29:80:13:38:
         44:4b:85:27:18:0a:52:ce:8e:d1:a1:9b:38:f9:92:a8:a9:07:
         58:bd:8a:cf:c2:46:9b:4c:0a:b1:dc:00:44:95:28:0b:fd:a6:
         94:46:21:22:71:c8:94:0a:29:74:79:47:54:a7:2b:49:2d:02:
         15:f9:d4:8b:8e:8a:ce:90:3c:66:8d:24:08:29:52:d6:73:45:
         0c:56:25:92:cd:27:f6:d1:d7:be:69:db:64:d8:9d:13:6e:a5:
         87:96:31:05:82:0c:ba:a0:be:7d:c9:0d:8c:c6:64:6a:3b:16:
         5c:e1:58:a3:95:15:c0:ad:52:eb:84:a7:6e:33:ff:d6:c2:69:
         df:ab:94:d8:1f:e2:59:4d:da:18:25:04:5c:63:e1:19:45:3b:
         ab:76:f9:98:a4:f3:5e:81:41:e2:29:86:72:b6:f9:de:ef:36:
         d4:e2:fe:a1:6e:a9:da:6d:c9:bf:eb:54:14:1f:c0:31:69:74:
         cc:64:ba:d8:7e:2e:58:4b:7d:9b:7f:8b:85:2f:b3:be:dc:ff:
         24:84:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 11:00:32 2025 by rpki-client