This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
File:                     4OU7sw0HUg-FeuZW962BPyLv0VI.mft (raw, json)
Hash identifier:          kJC5Pv5zEovXG2rXZT9I/l8c9aEtl3k/fOWFVS9GGHM=
Subject key identifier:   A1:15:B0:DC:95:A3:B0:E2:1B:90:E9:7C:B6:54:0E:7E:35:D4:DF:80
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Certificate issuer:       /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial:       019B3EDA75B3A5F27D618E3E0DA5C43E338A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
Manifest number:          1D
Signing time:             Sun 21 Dec 2025 03:01:02 +0000
Manifest this update:     Sun 21 Dec 2025 03:01:02 +0000
Manifest next update:     Mon 22 Dec 2025 03:01:02 +0000
Files and hashes:         1: 4OU7sw0HUg-FeuZW962BPyLv0VI.crl (hash: YUW1U2s35KvPAafPo6jWIG7yxfXaJU11v5q5Ex6LG4U=)
                          2: BerANeusZYuUv5h1O8bjEQcko68.roa (hash: YSh58W/wodSbxUdvNx3hzcm1gIq/y+oIFpaq31oMDOs=)
                          3: GL2R-NX-tYXfhYJecPAjRfy9SKI.roa (hash: di46Pl6txDYQQqsodXRrlvvC8o0YOIKRW//RQA3x5So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:da:75:b3:a5:f2:7d:61:8e:3e:0d:a5:c4:3e:33:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
        Validity
            Not Before: Dec 21 03:01:02 2025 GMT
            Not After : Dec 22 03:01:02 2025 GMT
        Subject: CN=a115b0dc95a3b0e21b90e97cb6540e7e35d4df80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:05:82:65:bf:61:61:41:14:17:d2:43:5b:
                    12:61:5a:49:37:10:f6:64:20:fb:ae:e1:f5:a4:54:
                    e0:ea:09:52:2d:45:4a:af:90:48:8a:f1:e5:cf:a1:
                    e3:03:bf:f6:82:45:8d:19:89:44:a9:6e:4c:23:8c:
                    c9:be:88:88:c2:5e:20:63:ae:5d:60:f4:8a:1d:85:
                    2d:20:3a:e9:3d:c6:87:be:7c:1e:6f:83:67:03:1f:
                    7c:6e:a3:7f:7e:39:b8:48:bb:64:da:c1:60:6b:76:
                    46:27:9f:d6:59:e2:9e:22:43:be:c5:f3:5e:4e:34:
                    0b:5f:26:21:14:a1:61:dd:22:a4:d1:ba:ea:14:02:
                    5b:71:a1:8a:d0:5f:eb:32:e1:86:45:81:56:7f:b5:
                    de:68:da:ae:0d:98:1e:95:85:00:d5:54:d6:9b:c9:
                    94:d4:39:3b:4c:82:b7:57:00:7c:92:2a:ae:8a:0d:
                    28:c4:00:1a:36:b0:07:35:b8:17:b8:5f:61:ea:28:
                    0e:7d:d8:d5:3e:92:70:b6:30:24:e6:00:2e:df:66:
                    cf:ff:b3:27:8b:66:4e:7e:b3:06:d6:7d:53:ed:a2:
                    27:bb:55:bf:89:f1:99:40:77:70:f8:98:33:65:7e:
                    86:52:f9:0a:52:d5:8c:e3:3a:87:8f:26:33:a6:7d:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:15:B0:DC:95:A3:B0:E2:1B:90:E9:7C:B6:54:0E:7E:35:D4:DF:80
            X509v3 Authority Key Identifier:
                keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c2:97:d8:60:33:bc:d7:ff:ee:56:c2:fd:2d:53:98:82:f5:
         c7:d1:f7:d3:bb:35:d1:d2:3d:03:f9:4c:40:c8:58:06:58:c3:
         aa:42:16:e1:9e:7b:1e:d5:90:62:da:3b:43:5e:c6:64:ab:d8:
         48:8c:21:71:14:62:6f:72:70:f4:50:f7:eb:07:54:9c:f9:d3:
         a2:77:07:22:92:bb:cf:ac:57:56:ac:ab:bf:b5:dd:cd:3b:3e:
         c9:27:10:d6:46:bb:28:44:4d:7f:2c:37:6a:c3:cc:c5:cd:af:
         89:83:be:a2:f8:b0:10:9a:c1:39:5e:b5:c9:2b:71:47:25:aa:
         28:8a:7a:dd:1f:a9:d1:71:56:b3:a0:c9:89:ca:e6:3e:7e:13:
         ed:ed:3f:c8:02:42:9f:64:1c:b2:b0:fe:ba:c4:79:b6:73:0b:
         1e:7c:7e:46:86:6a:60:e1:a5:db:bb:8b:ab:f6:1e:5e:44:1d:
         2f:d2:21:1d:ee:c4:0e:f3:d2:44:9c:c4:76:49:32:e5:67:cf:
         bc:0a:26:d4:33:7a:2c:7e:63:af:6a:1f:6c:3c:4d:19:7c:fd:
         79:ad:47:29:2c:85:ef:56:30:46:ce:eb:cd:31:d7:38:79:11:
         a9:31:21:92:42:08:df:ae:47:90:2a:55:29:bb:d0:85:0c:5b:
         b9:02:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:02:00 2025 by rpki-client