This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          H3ee+hAMSp8mSK+Yaq/snDEmQzL+XCacOTOdnyEy20o=
Subject key identifier:   45:1B:C8:B6:00:3C:27:E5:51:E7:EB:02:E4:A5:2C:6F:6D:73:AD:8F
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       019B2E8B86B78DEBA85CA58BDF7FDF0D3447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          1784
Signing time:             Wed 17 Dec 2025 23:00:54 +0000
Manifest this update:     Wed 17 Dec 2025 23:00:54 +0000
Manifest next update:     Thu 18 Dec 2025 23:00:54 +0000
Files and hashes:         1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
                          2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: Mrxuob8driVD4MnoB6wxQ6D4YXna1o6cz2ZxBEeB0Ko=)
                          3: sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa (hash: 8b+A4QTkJNsWBcHqmtMFMLgJOAkXA+/IFEAZETTjwiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:8b:86:b7:8d:eb:a8:5c:a5:8b:df:7f:df:0d:34:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Dec 17 23:00:54 2025 GMT
            Not After : Dec 18 23:00:54 2025 GMT
        Subject: CN=451bc8b6003c27e551e7eb02e4a52c6f6d73ad8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:b1:71:1e:26:ef:b8:d9:53:69:4e:1b:07:
                    7c:34:f2:5d:36:e9:7f:52:0a:5e:06:89:77:5e:e7:
                    6a:15:66:29:95:97:33:65:88:0a:b1:ea:e2:92:32:
                    8e:08:76:2b:07:5f:ae:6a:f6:4b:9a:84:13:33:00:
                    28:52:17:78:b2:06:85:e6:6e:94:b0:1f:4f:05:00:
                    52:26:d4:bc:ae:e5:92:9a:9c:29:1f:98:61:c5:35:
                    85:52:8d:c2:80:2b:cb:a0:c7:45:75:69:14:7a:48:
                    3a:37:7e:9c:e2:ea:ac:b8:56:3e:cd:d0:79:95:31:
                    5b:31:3b:1f:f1:3f:5d:d5:5d:5d:ee:46:66:15:41:
                    57:82:7b:59:53:35:ea:96:ba:6e:0a:9f:bc:9a:18:
                    19:d0:29:d8:7d:cf:fd:b7:52:57:0f:27:83:1f:db:
                    c3:37:ba:bf:5f:2e:46:79:18:93:44:7a:70:ab:1e:
                    2a:39:1e:ad:a2:e3:7a:51:2e:f2:38:2a:51:d5:b9:
                    cf:f4:53:72:75:d6:41:02:8d:08:a5:99:74:a7:da:
                    8b:cb:8b:f0:6c:91:64:5e:84:c5:ab:2f:ad:e5:47:
                    0e:fa:7d:c3:21:33:b0:3e:c0:48:ef:7b:0e:af:87:
                    3f:cc:c6:ac:e8:e5:c7:e9:b0:da:b6:3b:ee:9a:c8:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1B:C8:B6:00:3C:27:E5:51:E7:EB:02:E4:A5:2C:6F:6D:73:AD:8F
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:8c:c7:c3:5b:95:86:b2:f8:42:be:c2:b5:a0:f0:a8:a1:a0:
         71:a0:5b:40:61:15:3e:53:83:8f:8a:5c:89:bf:59:62:ae:1f:
         85:dd:8e:51:64:31:95:fa:6c:08:a6:1d:c8:ef:c1:7d:ac:35:
         a4:02:06:7d:91:91:44:f7:e7:ac:8a:83:ef:56:e8:2b:40:7a:
         29:e2:4b:38:30:b4:bb:5c:97:52:4a:4e:7b:75:9b:a1:5b:e8:
         f0:d2:77:33:0d:9e:36:96:80:e7:42:9b:af:10:71:58:05:57:
         8a:3a:87:a7:72:d4:9f:5c:8d:ab:64:eb:1f:12:85:14:f2:c7:
         1c:8f:e3:1e:f6:be:5d:a5:b6:8f:66:ab:65:e3:c2:02:02:92:
         e0:21:66:87:a0:b0:21:1e:61:90:76:21:92:05:80:91:04:f7:
         bd:77:a2:e9:de:47:94:53:ce:07:88:0d:79:45:ea:b9:4b:bc:
         86:72:96:1a:27:c6:f0:e2:e7:dc:4d:dc:ae:8a:6b:cf:cc:70:
         4d:73:e6:01:e7:2f:98:e4:79:a2:e7:5a:68:4e:b7:71:99:9b:
         8a:4e:d7:f3:5d:f6:a5:14:8e:11:a5:5b:3f:59:bc:e7:39:b4:
         04:89:0a:97:67:e0:47:01:11:f1:ab:d4:ba:18:60:a4:0b:96:
         74:69:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:50:43 2025 by rpki-client