This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
File:                     SInGeZ92tFIvCZH2uTNP1ttUHVs.mft (raw, json)
Hash identifier:          akkjT/2VXM2Zo9pBwyJZFscThKaH4s7jJHyEc5UbnxI=
Subject key identifier:   74:80:2F:F0:17:0C:9F:3B:1C:34:4C:A8:C5:50:C6:E7:00:F2:56:22
Authority key identifier: 48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
Certificate issuer:       /CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Certificate serial:       019AF1640BFBD7228C5DC7FC7ED71F50E46A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
Manifest number:          125C
Signing time:             Sat 06 Dec 2025 02:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:56 +0000
Files and hashes:         1: SInGeZ92tFIvCZH2uTNP1ttUHVs.crl (hash: y2NWYr82bttjq9wJI7owGYO8Yj0E+4EI/n5t4aZo5qQ=)
                          2: W9LIimzmvADZP7RqK5-CS9hx7F8.roa (hash: 0bKnzD+/f66zg904NSAl0qUDPLAd/0RlfEWM3sOW+wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:0b:fb:d7:22:8c:5d:c7:fc:7e:d7:1f:50:e4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
        Validity
            Not Before: Dec  6 02:00:56 2025 GMT
            Not After : Dec  7 02:00:56 2025 GMT
        Subject: CN=74802ff0170c9f3b1c344ca8c550c6e700f25622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:b4:a5:52:09:67:50:c4:7a:57:a7:f1:7a:
                    1e:84:b7:69:fe:e9:72:57:c8:8d:c3:e0:d4:7c:8a:
                    f7:c3:86:81:03:cf:05:2d:36:a3:d5:d4:1e:e9:a2:
                    c7:d8:7b:23:79:d3:f9:94:25:8b:f5:e4:b4:85:c5:
                    1f:14:50:c3:58:fa:a3:b1:ec:fd:d4:31:1f:7f:48:
                    5b:26:f9:6e:0b:f9:44:ec:f7:49:62:da:d6:f2:f8:
                    df:c1:06:1a:b6:e4:b3:3f:3f:04:f9:8d:68:aa:96:
                    b3:71:f4:69:aa:a2:93:7e:91:f5:4a:76:5b:fb:27:
                    df:46:ec:70:56:22:86:fb:06:ee:ca:90:71:62:aa:
                    6c:df:19:a5:ca:08:64:b9:bb:a2:b6:db:7c:2f:44:
                    22:3d:30:ac:09:bf:6b:3f:c4:94:72:e1:01:f3:43:
                    fc:8c:b7:58:94:f0:dc:3f:4d:38:70:08:52:4f:d1:
                    4f:77:ed:90:e1:28:8f:a1:91:27:da:2a:99:71:2e:
                    9c:73:36:51:66:f2:01:fa:78:7e:a2:b6:0a:51:3c:
                    83:c3:7c:1c:79:b8:15:a3:2d:0e:cc:31:9a:d7:a9:
                    89:fd:47:17:db:a2:48:32:7e:0b:d2:21:24:80:2d:
                    45:e5:53:2e:d4:02:0c:8e:75:bb:ec:8d:af:42:4c:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:80:2F:F0:17:0C:9F:3B:1C:34:4C:A8:C5:50:C6:E7:00:F2:56:22
            X509v3 Authority Key Identifier:
                keyid:48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:0c:eb:11:aa:35:aa:72:2e:1c:14:68:b5:c6:55:8b:89:8d:
         5e:b3:fa:d0:73:61:0f:76:f8:58:3f:02:ce:50:62:04:b1:f3:
         74:28:f2:70:ba:a7:05:b4:93:e1:b4:50:fd:12:d1:cf:ad:10:
         4a:60:33:c6:78:a0:6e:37:81:b5:a9:9c:bd:e9:27:71:30:0f:
         89:e4:05:79:68:00:16:22:b9:4a:0b:98:89:8a:63:f1:78:bb:
         b8:3e:43:d8:b8:70:d5:34:78:92:2f:b5:dc:eb:89:a5:5e:ad:
         2a:46:37:0c:76:20:c0:0d:63:f8:ce:47:87:94:66:cb:be:d4:
         d3:1e:cf:6e:2c:7b:2f:75:be:55:b0:4d:29:1e:f6:bf:2e:31:
         ac:20:49:dd:fc:b3:68:b9:66:23:7e:f9:80:4c:bb:83:17:5f:
         aa:88:77:2e:25:04:1f:ba:1f:a1:ff:3f:5c:08:11:19:20:92:
         e7:34:03:4d:98:7f:29:f7:b0:e8:2b:bc:23:95:7d:bf:38:ba:
         17:36:9b:05:8f:57:89:5d:3f:41:23:88:50:a0:6a:b5:d1:ef:
         ab:f7:b4:18:c3:0f:15:8d:41:d1:fd:f8:e7:e6:4f:f8:73:e7:
         db:ff:fc:1d:6b:18:dc:3a:53:a1:09:e5:20:2a:75:df:b5:3f:
         53:b7:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:03:24 2025 by rpki-client