This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File:                     sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier:          UpCOEI5QBCZs4ZnQvP90Q02AI5831vQGxNEOaxBcrJA=
Subject key identifier:   F6:38:E6:BF:F4:94:6D:D9:04:BE:86:95:3B:A7:39:D6:80:AA:C3:D2
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer:       /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial:       019AF0BF384428756978148063E0CB1578B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number:          1762
Signing time:             Fri 05 Dec 2025 23:00:54 +0000
Manifest this update:     Fri 05 Dec 2025 23:00:54 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:54 +0000
Files and hashes:         1: jYCp1px7d3_I6mefNTn8vuzWBOg.roa (hash: Pv+cwNn5v2uyPM9DJOrn9OfaFC2aCdBmSBHPyx9HtlM=)
                          2: rAkcIeR16JbVpYeePcru3Xd_9Fo.roa (hash: 5QKOAoJ3RyBbcQy0L3k19T9nHrTzNr6BOoQXHbBl8Lc=)
                          3: s25eqAa9Ba2subgM6OQ8ydOvSIs.roa (hash: 2d5Cwu5/K3ZqTMpiVXzf7ig4e2nE3AarjZ+2JLhcJaM=)
                          4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: cy3f9fUrlb/kK63oW2dvYS/CoANHQbA4HwKQypKuhEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:38:44:28:75:69:78:14:80:63:e0:cb:15:78:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
        Validity
            Not Before: Dec  5 23:00:54 2025 GMT
            Not After : Dec  6 23:00:54 2025 GMT
        Subject: CN=f638e6bff4946dd904be86953ba739d680aac3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a0:dc:7f:27:62:e7:1d:95:7c:81:d4:94:41:
                    42:d8:20:8f:f3:71:00:ca:26:23:d4:7f:c5:97:6a:
                    33:7c:09:62:02:ae:7d:37:54:40:09:27:0b:d6:36:
                    a7:fc:81:f1:b8:ad:d8:ac:74:90:39:4f:64:9f:59:
                    66:ee:cf:18:65:fc:65:90:ab:d3:98:13:9b:66:47:
                    ee:14:3b:ab:79:57:ed:4f:d9:7f:ee:54:7c:83:30:
                    16:aa:3e:65:8c:ea:19:74:b6:24:2d:82:95:b8:cd:
                    f7:f6:5b:e5:2f:1c:b9:f1:2a:6f:88:ac:e9:cc:ed:
                    43:ef:32:a5:be:67:a0:c8:da:93:8c:87:f1:17:18:
                    03:7a:b1:9f:83:0a:47:8a:4c:76:e3:19:bf:b4:8a:
                    e1:97:68:78:22:42:05:3b:16:73:c9:df:de:48:7e:
                    80:b6:ca:4d:53:26:cb:c1:79:95:24:8c:81:71:81:
                    19:a9:d4:86:e4:67:7b:4d:de:f3:c9:0a:3c:58:61:
                    8e:28:a3:a8:9d:8e:c9:4d:71:00:eb:54:41:89:10:
                    05:1f:bc:84:55:0e:c0:2e:bc:20:29:ec:7a:81:58:
                    9b:73:60:a4:4f:be:6d:51:d7:8f:62:9f:c1:68:e9:
                    7f:29:ae:8e:a2:c8:78:8a:8a:a5:0d:9c:05:4f:72:
                    01:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:38:E6:BF:F4:94:6D:D9:04:BE:86:95:3B:A7:39:D6:80:AA:C3:D2
            X509v3 Authority Key Identifier:
                keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:99:b4:94:08:70:e1:ff:7f:92:bb:1d:6c:3a:f9:59:3e:50:
         d1:81:01:80:09:cd:95:53:04:07:1b:be:55:a5:61:43:e8:58:
         f5:e6:74:99:48:b5:c0:60:99:48:0b:d1:c2:5b:bc:dd:11:fa:
         d5:24:99:4a:b2:0c:91:17:87:33:23:f8:47:6d:a7:a2:6f:b8:
         3c:88:3b:33:2f:ab:51:d6:d9:31:28:78:ff:e5:15:40:21:11:
         1a:15:4c:e2:ec:7d:44:6c:a3:43:9b:fc:de:64:66:07:45:d7:
         c9:61:81:fe:5e:de:dc:33:b8:18:2f:c1:25:df:04:0b:88:88:
         d6:04:4b:d6:20:d5:b2:30:b6:8f:a7:0c:f3:f9:f1:cf:30:aa:
         95:7b:dd:27:75:da:1d:83:8f:70:61:14:2c:e6:e1:f5:c7:bd:
         ef:0f:28:01:05:46:8a:3b:f7:0b:3a:d0:78:a5:24:e5:95:d5:
         de:cb:45:b8:07:3a:dd:61:68:ea:1f:d5:31:2d:f9:79:9f:02:
         97:0c:53:b3:0c:2f:8d:a4:74:6c:54:01:73:cf:54:e3:4b:b1:
         7a:f5:e1:33:43:72:92:8f:31:ff:d2:e7:e1:8b:9c:a5:da:fa:
         a7:e4:7f:c7:08:46:b0:92:80:f4:9e:60:3a:4f:c8:29:23:49:
         ff:cc:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:10 2025 by rpki-client