This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File:                     sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier:          L/wTs8dQug+eqJolCBG153mkWk1MkYT/c/h14HYwo7Y=
Subject key identifier:   FA:D8:C0:24:74:AF:2E:A4:FB:3D:AC:8B:0F:B4:E3:20:B5:85:02:A0
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer:       /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial:       019AF163DB84E73633F6E9C569D5BDDC6CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number:          1038
Signing time:             Sat 06 Dec 2025 02:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:44 +0000
Files and hashes:         1: eFmnxR7CyMxvye5-XXcMbfaAVOw.roa (hash: pZJwNCYo3S0mBXNLEIKEUXn/lY7t5TEifbuRPldd2yI=)
                          2: oJDEzXr7gr-7eZ1rexTjd4c8Ul8.roa (hash: xZTw5KYNf4Du9zIJjL5q6os9uQVggXiruo8qaJQJCvQ=)
                          3: pGZsGJVmFoYhAv5VAkXf67JcN-w.roa (hash: /j9DfbiG7O3qG1GtbIDXzJ4rJWqS+jSuNHHJIbaeKpc=)
                          4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: sAIsgv+Y2aCesjr18Oe0u3RMHBgWjrfOxB4MJd9AbO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:63:db:84:e7:36:33:f6:e9:c5:69:d5:bd:dc:6c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
        Validity
            Not Before: Dec  6 02:00:44 2025 GMT
            Not After : Dec  7 02:00:44 2025 GMT
        Subject: CN=fad8c02474af2ea4fb3dac8b0fb4e320b58502a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:c5:72:9e:90:ca:c2:2e:25:76:9d:c7:02:
                    0f:a0:10:0b:e7:13:77:26:61:b0:fe:6c:1b:60:95:
                    6c:aa:c1:76:df:fc:8d:e1:42:47:be:eb:6f:a4:65:
                    4b:2c:82:c8:ec:6d:a2:52:7c:ae:e9:7a:3c:a7:60:
                    00:68:5e:dd:f4:b6:ba:db:a7:c0:15:76:40:a5:bd:
                    29:ef:e1:04:4d:e1:98:66:d9:f4:45:b8:c5:23:e9:
                    d7:1d:64:5f:c3:60:9a:4a:07:d6:6e:91:be:f3:53:
                    66:33:c5:53:7b:96:46:26:6e:70:8c:98:55:e1:4b:
                    5b:9f:47:c1:c9:4b:24:01:96:04:58:aa:c1:e2:e2:
                    a5:a1:14:c0:81:6b:0a:19:e0:e8:c3:d7:97:90:4b:
                    1f:31:de:d3:51:48:d4:ac:04:9b:db:54:be:e8:7b:
                    39:d1:4d:9d:96:34:bd:14:f6:b7:b6:a3:b3:9d:9a:
                    cc:63:f0:9e:5e:57:54:8c:c5:51:e3:03:f8:63:5e:
                    d5:10:65:db:6a:11:1a:03:9c:95:fc:13:c5:b6:27:
                    bc:5f:b2:54:e4:0e:24:49:4d:9e:6b:d2:65:7e:37:
                    4e:b2:47:cc:da:87:bc:b8:60:d4:d7:fb:ff:aa:f7:
                    aa:e8:fe:a6:60:07:ae:19:74:d3:bb:7d:76:ef:c9:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D8:C0:24:74:AF:2E:A4:FB:3D:AC:8B:0F:B4:E3:20:B5:85:02:A0
            X509v3 Authority Key Identifier:
                keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2f:e0:b6:a3:01:be:c1:3e:ae:f5:25:54:3e:3b:d6:e6:a8:
         ee:95:23:a1:22:23:66:e1:e2:4b:78:5a:ce:8b:80:31:85:4d:
         46:c1:86:53:8d:bf:c5:aa:a8:b8:c1:38:ce:97:d6:c8:07:a6:
         b6:53:24:96:0d:3f:b4:2c:23:87:b8:8e:63:1b:8d:69:1d:ee:
         7f:b4:e0:2b:5e:08:85:af:5c:0f:08:58:01:be:fe:74:66:19:
         0a:bd:03:7b:10:ab:4c:cc:0d:f6:b6:23:b6:d9:4f:81:ba:d9:
         79:06:3d:a7:e3:4d:c6:87:6c:87:bb:fb:46:73:44:4e:95:2d:
         6b:44:cc:85:70:c9:f6:02:2d:81:73:4f:af:58:40:50:cc:13:
         34:39:34:5c:19:be:c7:d4:64:ed:ab:84:f5:0c:11:0e:56:95:
         44:f1:44:a4:7f:a4:30:a8:31:17:30:b3:bc:39:10:d6:a1:94:
         4a:b4:4d:0c:3f:f3:2d:b1:10:71:e5:47:74:62:7c:65:55:4d:
         d7:a0:d0:0c:d9:ae:e9:3d:18:71:22:26:a9:04:fb:74:d0:72:
         60:a4:67:44:af:55:27:03:15:ff:5c:02:25:f5:53:ce:0f:e4:
         62:8f:51:40:17:e3:d2:53:24:b5:14:e5:b6:76:3a:f7:f3:04:
         47:27:88:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:41:49 2025 by rpki-client