This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File:                     SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier:          claqFCa3QPxhceC/k9apvYhQkVtGL7z5CLeE4Mh60do=
Subject key identifier:   36:7F:F4:07:C5:D3:9C:B3:75:E2:6C:0E:11:E8:3A:A7:36:F1:90:12
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer:       /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial:       019AF27688CD717B63DC919AB88CE9DA7D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number:          1711
Signing time:             Sat 06 Dec 2025 07:00:45 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:45 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:45 +0000
Files and hashes:         1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=)
                          2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: U40W4rX+Y5PuFE79jdHNKl8YRjk+kqmScktC30in0yc=)
                          3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:88:cd:71:7b:63:dc:91:9a:b8:8c:e9:da:7d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
        Validity
            Not Before: Dec  6 07:00:45 2025 GMT
            Not After : Dec  7 07:00:45 2025 GMT
        Subject: CN=367ff407c5d39cb375e26c0e11e83aa736f19012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:f0:6a:e3:d2:2c:f8:8f:4a:35:20:2a:65:
                    24:6b:56:a5:07:df:bd:f4:b8:fc:a3:c7:56:75:06:
                    aa:02:13:12:fd:79:75:ef:3b:c2:e2:38:22:74:c5:
                    f1:fe:f3:24:7a:38:a2:09:a9:c5:da:50:b9:0e:fb:
                    00:2c:ed:59:21:35:f1:ab:44:64:d7:96:33:c8:01:
                    49:46:99:b4:08:69:b0:24:c5:51:f1:8f:f6:7a:b8:
                    06:af:42:8f:d3:db:e8:79:33:e1:72:06:e8:fb:3a:
                    e3:19:5b:c6:37:37:c5:d0:be:68:6d:b6:70:60:78:
                    eb:45:62:ac:cc:3b:17:b7:f7:a3:0f:98:00:a6:f3:
                    3c:67:d3:25:0b:d0:29:5b:89:6e:16:13:23:21:93:
                    37:23:6b:f7:44:aa:ce:1a:31:50:82:10:cf:7b:52:
                    8b:0b:4c:63:05:a2:50:0d:ec:c1:42:7b:57:31:94:
                    6a:98:d5:ae:3d:1f:5a:d8:0f:1d:72:e4:1b:3d:e8:
                    45:25:60:9e:f8:20:4d:21:15:62:15:37:76:0a:3b:
                    ca:15:6c:eb:bf:61:0f:fe:f3:36:23:05:4a:94:7a:
                    5b:94:16:55:23:77:61:6b:3d:a3:85:3d:0b:9f:87:
                    f6:06:70:46:20:b1:d6:73:6d:87:50:66:16:67:c5:
                    00:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7F:F4:07:C5:D3:9C:B3:75:E2:6C:0E:11:E8:3A:A7:36:F1:90:12
            X509v3 Authority Key Identifier:
                keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d1:c3:a9:98:39:29:e5:90:44:ec:14:30:1d:1c:10:57:97:
         a6:42:ea:53:be:07:2c:03:c4:64:bc:fc:86:71:80:07:ab:f6:
         52:63:f6:8c:16:0f:7c:25:fc:08:37:d9:20:c4:f1:73:53:05:
         c5:f7:07:92:f2:e3:63:f1:1b:4e:ad:42:62:a9:bc:59:44:21:
         c1:e3:f4:09:ec:89:6c:8a:c7:ab:a8:21:4e:38:03:1a:bd:55:
         b8:22:e5:4d:83:9e:c9:f9:19:d7:af:f5:03:db:b3:96:86:83:
         f9:2e:14:3b:67:77:cf:9a:b1:13:87:11:a5:54:63:e3:96:16:
         a3:0e:5a:5d:dd:1f:7a:94:0b:2c:67:ab:1b:c5:e5:98:8e:44:
         a6:d0:4e:03:20:dd:4b:33:bc:cb:92:81:db:90:ab:dc:24:f2:
         78:79:37:03:47:b4:34:5f:64:77:d9:67:ab:ff:1c:c9:2d:d1:
         0f:87:be:24:21:2c:9a:07:8f:c0:1f:f3:4b:4c:19:df:30:36:
         ae:32:fe:fe:98:d1:03:a6:fa:98:95:47:84:46:20:e2:93:0a:
         52:1e:dc:f5:c2:b8:d2:e4:3f:96:39:ca:e6:ed:c9:c2:b1:91:
         c5:b6:0c:0f:33:be:a2:3b:10:f7:04:cf:eb:fd:62:45:c6:1d:
         78:4a:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:38:58 2025 by rpki-client