This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File:                     SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier:          GsTbwO+zj5fmkq2h/W0El15YWLX6aSVm9hqWCP6wyBI=
Subject key identifier:   A8:61:3B:27:59:28:E3:96:0B:9B:99:AC:67:57:AE:A6:55:4B:46:D0
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer:       /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial:       019AF0510DA35128C46946C02F5CFD029CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number:          0E47
Signing time:             Fri 05 Dec 2025 21:00:34 +0000
Manifest this update:     Fri 05 Dec 2025 21:00:34 +0000
Manifest next update:     Sat 06 Dec 2025 21:00:34 +0000
Files and hashes:         1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: G96HGjdI5E2E/JyLe4JWO1h1iazSIpHA62NEOp+1zoo=)
                          2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:51:0d:a3:51:28:c4:69:46:c0:2f:5c:fd:02:9c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
        Validity
            Not Before: Dec  5 21:00:34 2025 GMT
            Not After : Dec  6 21:00:34 2025 GMT
        Subject: CN=a8613b275928e3960b9b99ac6757aea6554b46d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:7d:21:e2:65:72:ab:f2:ef:96:fa:c7:e9:
                    15:ed:de:ea:0a:94:1d:bc:04:1b:15:94:f3:5f:c2:
                    9a:9e:68:e3:6c:2b:c4:b9:9c:51:6f:d1:13:00:0d:
                    b4:5d:12:49:e6:01:33:0b:ff:90:5d:52:c5:5e:ab:
                    b8:1e:f8:f9:fa:2d:a0:5c:37:a6:78:c3:68:5d:75:
                    92:bc:06:1a:2c:7d:52:4e:b2:96:5d:e7:90:4d:0e:
                    cd:28:db:46:3c:00:13:c5:14:00:d3:d6:ba:44:6b:
                    05:fd:b6:26:4d:8b:ab:41:37:51:f4:b4:d4:ad:08:
                    a8:2e:46:44:de:cf:a2:bd:25:bb:69:26:06:3c:d8:
                    1f:06:a0:14:a1:0d:93:e7:15:d3:07:e5:42:6f:bc:
                    99:d5:95:40:85:00:83:d5:91:c6:c3:60:b8:74:ab:
                    76:cd:7a:58:77:90:65:de:42:8e:1c:82:b8:56:ad:
                    bb:be:a0:3b:72:22:1b:fc:77:eb:11:0a:b6:65:a0:
                    26:56:9a:51:8b:3a:66:c1:6a:4e:bf:8b:86:6a:5c:
                    48:0f:5f:76:7e:c5:5a:4b:49:d7:31:fb:52:ac:0d:
                    27:8a:d5:e0:5e:af:1d:40:67:de:63:02:6e:6c:f7:
                    e6:23:a4:b4:0a:09:b1:f7:23:ab:03:37:08:02:cf:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:61:3B:27:59:28:E3:96:0B:9B:99:AC:67:57:AE:A6:55:4B:46:D0
            X509v3 Authority Key Identifier:
                keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:62:3f:b2:3c:b8:75:ab:d0:f2:b9:f4:99:eb:c3:28:95:
         6a:bb:d1:cb:59:75:f8:b9:5e:90:0f:33:5c:91:47:c6:fe:41:
         1c:f2:a1:f9:20:80:35:7d:e5:d7:75:73:f2:56:aa:9d:6b:61:
         68:14:21:a1:32:63:44:41:f8:65:6e:33:f5:72:ca:df:47:54:
         e2:09:49:27:a6:6c:e0:88:c2:33:b4:14:87:0b:f3:5b:1b:a5:
         dc:dd:a2:bd:5d:e1:f1:a2:ee:0c:35:c1:2b:75:a4:f3:2a:e3:
         c6:f2:2a:a9:76:ed:10:e0:14:50:13:46:8d:cf:22:13:dc:5c:
         fd:4c:20:b8:b7:3e:23:a1:de:ca:ef:31:8a:9c:f9:12:c9:74:
         de:d1:7d:45:0d:0d:b7:46:87:b2:a6:c9:b9:f2:23:3a:f8:e8:
         a6:fc:0c:8c:25:18:99:a4:5a:4b:70:99:22:11:62:37:36:90:
         1f:06:12:56:9a:e5:61:12:da:21:fe:e3:21:e6:d8:4b:41:97:
         96:87:3b:16:7c:2b:13:83:00:cf:95:d6:2c:03:2e:7b:e1:76:
         e9:1e:30:1e:ef:6f:7a:65:6e:8d:d3:70:2c:ef:ae:10:01:aa:
         77:8a:0f:ac:f6:4e:2f:a6:b2:d6:ee:80:ee:8f:87:51:54:1b:
         ae:37:82:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:00 2025 by rpki-client