This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File:                     4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier:          dhRI5l9rHMS84JdA7hATC2M+1vTE+FwsrdHTzeA9jyI=
Subject key identifier:   3F:C5:3A:DF:9F:5E:AF:DF:5D:7D:39:11:A1:26:C7:76:5A:09:D4:79
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer:       /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial:       019B58D129F290C92615735C393E664F9C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number:          1668
Signing time:             Fri 26 Dec 2025 04:01:01 +0000
Manifest this update:     Fri 26 Dec 2025 04:01:01 +0000
Manifest next update:     Sat 27 Dec 2025 04:01:01 +0000
Files and hashes:         1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: bXSh741cPVf0EfL8EYfYEuwbdFIAyKPNmqWJKahDego=)
                          2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
                          3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:58:d1:29:f2:90:c9:26:15:73:5c:39:3e:66:4f:9c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
        Validity
            Not Before: Dec 26 04:01:01 2025 GMT
            Not After : Dec 27 04:01:01 2025 GMT
        Subject: CN=3fc53adf9f5eafdf5d7d3911a126c7765a09d479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:f5:74:10:a2:47:98:ec:6b:7d:f0:0b:89:
                    86:12:1a:d8:48:ae:56:17:fc:94:c6:2c:14:10:c0:
                    a3:04:da:46:8d:04:b8:3c:70:20:96:d9:ed:13:02:
                    6a:b2:9e:3b:d5:8b:ca:57:96:25:5b:fa:e9:a4:59:
                    56:16:92:4c:b2:15:6a:d5:ae:04:cf:d2:1a:dd:fc:
                    b6:fe:14:54:23:82:72:e8:f2:28:39:98:77:9d:8b:
                    31:97:f8:88:fe:f6:7d:20:e1:f5:4d:db:1f:20:ce:
                    8b:a8:91:ab:f0:77:3e:f3:aa:76:4f:c1:7c:26:2e:
                    26:09:74:34:b3:b9:84:57:b0:17:ae:48:8b:2c:89:
                    47:dd:db:85:d6:79:26:04:73:c3:f2:5b:4e:9f:ec:
                    44:fa:c4:f0:21:24:13:72:ee:4a:de:c0:ee:42:36:
                    87:9b:90:e6:f5:9c:9c:6b:85:d8:5f:7e:59:7d:cb:
                    b7:e8:da:80:7d:0a:f3:7f:3c:a4:96:01:42:47:5f:
                    cc:a3:ac:8c:07:a6:29:9c:b7:0a:62:89:b6:e0:74:
                    8b:fb:b0:23:82:3a:f4:fe:60:41:b1:3a:cc:28:a6:
                    d5:2d:5e:81:97:d3:ff:50:37:e8:c9:7f:49:ae:ff:
                    df:03:cd:38:f5:4e:60:e7:16:e4:c8:08:3a:9d:14:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C5:3A:DF:9F:5E:AF:DF:5D:7D:39:11:A1:26:C7:76:5A:09:D4:79
            X509v3 Authority Key Identifier:
                keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c2:58:e5:6e:49:a9:80:32:b4:68:0a:63:91:32:a1:af:70:
         70:02:c1:b1:a9:64:ce:9f:8c:ce:9b:16:51:97:bc:ed:66:3a:
         ee:ba:c4:78:98:dd:b0:43:f9:0a:5a:de:f0:d0:14:16:f4:e4:
         3e:43:ad:44:eb:08:a8:b3:73:ac:8c:0f:d1:94:bb:b1:d8:90:
         5d:02:3c:e2:79:f0:6a:4b:ba:0f:2a:3f:68:b7:af:ba:b6:08:
         ab:49:d7:b2:30:ac:df:5f:9e:28:16:4a:0a:af:36:81:e3:21:
         7a:2b:55:2e:17:c8:dc:ff:83:75:4c:2f:74:86:32:43:e1:4e:
         40:da:82:70:5a:4f:62:50:d6:87:c6:c2:8c:60:9b:51:51:98:
         a5:a5:d0:93:a1:a7:6d:fd:3e:a6:43:31:e4:a8:81:44:4c:a8:
         7e:36:57:a0:04:11:dd:aa:89:5c:dc:93:7a:a1:fa:61:7d:d8:
         6e:35:e9:09:83:38:df:6d:b9:ec:36:f6:8c:ff:a8:41:fc:3a:
         c7:25:87:81:69:3b:c4:67:b9:be:68:9f:e8:06:dc:ab:c1:c3:
         f8:e5:d3:4d:63:26:23:78:2f:5e:97:ee:f4:f5:a7:ee:89:35:
         5b:01:b6:f5:fe:5f:8d:02:80:8e:1d:14:41:c6:75:39:b9:6d:
         49:f1:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 09:39:04 2025 by rpki-client