This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File:                     AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier:          FyMQssv4BH6lwPbsY4jPWw1HMB3k6ZBx0gkCaphZLfE=
Subject key identifier:   47:7D:2F:29:95:54:D3:0C:68:C8:4F:2F:2D:A6:79:55:6E:EA:86:83
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer:       /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial:       019B3C7FC7E240A27D8EAE9193A5D96780A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number:          1484
Signing time:             Sat 20 Dec 2025 16:02:45 +0000
Manifest this update:     Sat 20 Dec 2025 16:02:45 +0000
Manifest next update:     Sun 21 Dec 2025 16:02:45 +0000
Files and hashes:         1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: XBKWl1vcYpPEYeYtWfavmqThW7w1yGqubBUuPvEusCw=)
                          2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=)
                          3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7f:c7:e2:40:a2:7d:8e:ae:91:93:a5:d9:67:80:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
        Validity
            Not Before: Dec 20 16:02:45 2025 GMT
            Not After : Dec 21 16:02:45 2025 GMT
        Subject: CN=477d2f299554d30c68c84f2f2da679556eea8683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:26:23:23:ed:62:56:0b:16:42:4a:ee:c9:
                    da:7f:b2:9c:27:8b:8c:40:fa:b4:ff:83:85:fe:5e:
                    cf:e6:de:b4:0e:04:b3:ec:ca:03:7e:3f:d6:82:c1:
                    52:a9:57:46:b6:70:29:e1:57:70:2a:68:c2:c5:36:
                    a8:92:cd:c9:80:33:cb:d6:43:c0:dd:e9:37:ca:8b:
                    a0:a2:6e:89:32:2a:c0:da:e8:9d:3a:b9:27:4a:e2:
                    e7:28:eb:8d:4b:10:70:6a:d9:d9:90:ef:9f:53:77:
                    f4:81:91:8e:25:11:45:bc:fd:0e:74:6e:56:5b:02:
                    41:9b:60:29:ec:40:92:8e:df:d8:77:33:84:07:ec:
                    b5:c8:2a:e4:64:11:59:de:cb:e7:d2:6a:dc:d8:c6:
                    6d:2b:19:52:5e:c6:8e:89:36:a7:01:cc:85:1e:ee:
                    14:36:7a:cc:5a:d1:30:80:63:3f:56:ac:82:42:57:
                    0b:6f:2a:8e:90:1e:47:e4:5d:18:f6:a7:8b:13:e1:
                    62:a6:ff:a7:b6:66:f0:1c:01:c3:a0:8d:da:eb:f6:
                    e1:3e:20:29:e6:1d:b3:f8:d7:ca:79:87:7e:3d:d7:
                    2a:a6:0d:4f:b1:30:9b:fe:1c:5a:37:39:82:2e:7f:
                    a7:68:59:2a:a0:19:01:b0:69:90:b6:ba:96:56:88:
                    27:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7D:2F:29:95:54:D3:0C:68:C8:4F:2F:2D:A6:79:55:6E:EA:86:83
            X509v3 Authority Key Identifier:
                keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ef:49:96:07:73:d5:83:96:34:ea:57:d2:27:f8:56:8d:15:
         35:63:80:f7:de:40:2b:6b:b0:39:27:84:dc:0c:fc:69:16:23:
         85:c4:6e:79:c6:71:b4:69:7c:93:a9:83:2c:5c:12:65:33:91:
         b4:ed:45:2d:3a:88:05:a5:2d:f5:fd:f4:8a:c0:30:43:8e:f0:
         ba:5e:e6:31:79:00:27:92:9a:26:4f:3b:77:63:09:fa:3b:8e:
         d6:d9:eb:12:bc:52:51:c2:a0:19:3d:b5:af:7e:41:c2:17:18:
         d5:4d:97:ec:00:ec:95:38:f9:c3:b6:36:d7:22:ed:67:85:e4:
         30:3f:1d:24:5c:02:b3:69:d9:35:8c:57:92:41:7b:f8:c8:63:
         3d:22:ae:8c:3b:a4:b1:14:ad:2a:5d:aa:f7:fc:9a:31:d1:b7:
         0f:2f:22:f0:8e:e3:76:fa:35:a3:84:82:b5:6f:18:41:bf:77:
         28:b7:c6:10:5c:89:58:ac:e5:76:1f:d1:b7:59:47:bc:7e:d0:
         b1:c9:5e:55:41:5a:fe:59:fe:20:53:8e:8d:bd:8a:15:d4:81:
         4b:cf:f9:de:2d:bf:26:15:cd:16:08:d4:73:9c:9d:b9:60:f5:
         c2:7c:ab:9a:96:ea:93:00:f4:b3:1d:0d:04:0c:2f:07:64:4b:
         52:1c:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:16:33 2025 by rpki-client