This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File:                     SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier:          2Nz++HuL73JYWkW88hZ7R9EFI6FbePkyrra7dHGco+s=
Subject key identifier:   9A:95:C1:8D:00:6F:02:E1:8D:FA:92:1F:C9:9B:6C:40:A5:79:00:5A
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer:       /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial:       019AF12DEC7DEC86229E8872BEAEAB1BBCDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 01:01:49 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:49 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:49 +0000
Files and hashes:         1: J8OgK6YIDY4_wow6LOJWl2UwPMw.roa (hash: ehaTtO6bdlhf0UUT+6tJJXKQ0CyD4JoJHUd/4QXn6/c=)
                          2: OJmLUcdGyKqyreRJA04sZVowZg0.roa (hash: ZPcGNQNPGXt7sqvYIqkF3ZoSuhuiF050QsXqHbGtgGo=)
                          3: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: 8FtBENPNSYEBCArLKGMzfZEkYU6V44gpocXp9DAFUHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:ec:7d:ec:86:22:9e:88:72:be:ae:ab:1b:bc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
        Validity
            Not Before: Dec  6 01:01:49 2025 GMT
            Not After : Dec  7 01:01:49 2025 GMT
        Subject: CN=9a95c18d006f02e18dfa921fc99b6c40a579005a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:c4:5e:c8:6b:d1:13:c4:37:53:4f:9e:0f:
                    ed:27:da:29:8c:d1:ed:e4:f0:7e:ad:99:89:aa:7d:
                    2e:1f:9d:df:c7:27:c8:84:96:b9:84:4d:77:cc:7a:
                    1f:c0:66:b8:3c:f1:11:e8:98:68:1f:eb:7e:4f:ac:
                    9c:9a:2f:13:ed:8d:b0:2a:b4:f9:ae:97:81:95:83:
                    47:8d:ef:de:d9:c6:e2:ce:a6:25:d2:55:34:ba:62:
                    9d:ff:f6:da:4c:b1:4d:74:a4:cf:a0:5d:60:19:12:
                    4c:ff:47:ec:7e:c4:fc:0b:51:a6:5e:9d:e1:11:26:
                    ac:b9:76:29:7d:4e:8d:1a:08:be:7b:d1:ab:b4:24:
                    aa:57:4b:c7:cf:76:e1:b0:3e:af:65:b7:de:57:53:
                    d7:c2:20:38:33:95:e8:d7:31:ce:a1:c6:e1:9a:01:
                    a6:b8:99:10:9a:5a:8b:ad:f2:a8:a3:13:a8:b2:b7:
                    51:e6:0c:a2:88:ef:90:f7:09:f8:9c:af:e9:56:59:
                    5d:54:5e:c1:8f:e6:6f:3e:71:e0:ce:85:50:37:cb:
                    26:ae:5d:87:de:89:ed:b9:05:86:99:48:26:cd:9a:
                    7a:ad:1f:b7:5d:3d:b0:ff:78:d0:64:37:3e:93:f7:
                    73:ee:b0:c1:c8:1c:99:f3:2b:83:b8:ce:33:28:0b:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:95:C1:8D:00:6F:02:E1:8D:FA:92:1F:C9:9B:6C:40:A5:79:00:5A
            X509v3 Authority Key Identifier:
                keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:31:44:91:c9:01:fb:38:32:6c:8f:b1:ec:fa:e5:9e:ec:9a:
         1c:a1:a2:c6:f5:f2:b8:6e:de:64:ae:ae:0f:ef:69:18:e5:b3:
         c4:19:6d:aa:d7:13:ac:c5:fb:8d:8c:49:7d:ff:af:d1:0c:cb:
         bb:af:76:24:ff:37:64:a2:09:7c:14:67:0a:61:7b:27:1b:a8:
         3d:67:54:25:36:c0:e2:22:50:20:42:a2:44:bb:11:d0:39:b4:
         21:5f:a7:8c:97:b6:1f:cf:1a:b5:70:f8:f3:a4:b7:60:13:3a:
         41:82:eb:c4:fa:5c:bc:30:ee:ce:d6:0d:aa:e6:43:e2:e6:95:
         42:eb:54:61:ba:6d:f7:28:b8:be:54:82:49:51:db:97:c5:ca:
         69:30:24:2d:32:7d:a0:e2:9c:e5:dc:65:b6:10:96:97:fe:5f:
         f4:c9:dc:a7:14:b9:d0:e9:c2:3b:82:4b:a1:d9:7f:b2:9f:91:
         94:5f:59:c1:13:d0:c9:fa:67:ec:2e:8b:dd:73:ec:0c:73:c0:
         52:73:41:af:2e:05:da:7e:4a:88:bc:fb:dd:4f:a9:e8:30:d7:
         79:08:3c:b6:f3:7c:b5:87:c3:0e:ef:ba:b8:e2:90:ed:25:af:
         08:de:3b:84:57:96:cc:4d:0b:ca:ae:d6:e5:bd:15:cf:36:1c:
         b0:ad:40:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:19:15 2025 by rpki-client