This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File:                     sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier:          4LSWG5Mc7TaNkpXAUA2XUodAGLx5dfuqIMcRK3PcESk=
Subject key identifier:   8D:5A:9F:5C:4A:E1:D5:A6:96:5F:4E:E0:5F:63:30:27:C9:B9:5E:8F
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer:       /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial:       019AF46527D9E33F8D561400C89D818EC3E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number:          16F5
Signing time:             Sat 06 Dec 2025 16:01:01 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:01 +0000
Manifest next update:     Sun 07 Dec 2025 16:01:01 +0000
Files and hashes:         1: IZAxEHA5n8YPukULkPEQv7owY4Y.roa (hash: vkfnMd+CZAW7CnrGWVozJx3AoLaV453dmGIo6rw9ME8=)
                          2: mA3rys3eEYCw0R5GwYAKoJlEh2w.roa (hash: Y+HfCJ1pTuTaQ4aj+4iQZxk3GQcy6uxEiMl5g7TwtZg=)
                          3: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: ozIli9uZQo/Rq+gd2CNUZws79YlDAV9/bN8Q0jy+nxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:27:d9:e3:3f:8d:56:14:00:c8:9d:81:8e:c3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
        Validity
            Not Before: Dec  6 16:01:01 2025 GMT
            Not After : Dec  7 16:01:01 2025 GMT
        Subject: CN=8d5a9f5c4ae1d5a6965f4ee05f633027c9b95e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:28:28:b3:da:7e:91:e5:04:bf:d2:d1:ea:
                    27:8f:7d:ac:37:83:9f:1e:70:65:17:97:7a:2e:1d:
                    d7:b7:f6:be:43:39:58:82:b6:28:c0:59:33:a0:6d:
                    08:da:24:dd:ad:6c:a7:d8:1a:f5:6d:a9:b2:c3:bd:
                    97:17:50:ce:5e:ec:58:89:6e:3c:d4:5a:84:f6:df:
                    3c:77:3c:79:34:95:e7:e6:4b:15:e5:d2:ed:a7:36:
                    27:99:72:37:65:63:b2:e2:5c:bf:ff:5e:bd:97:92:
                    f7:66:a5:53:23:9c:04:16:d0:26:3e:d0:e7:32:d3:
                    a9:21:c8:0c:b2:0a:47:f9:61:b4:b9:86:b6:45:1b:
                    d6:aa:5b:8d:22:e2:36:2e:4b:dd:45:9f:21:16:48:
                    ff:5c:21:8c:22:47:16:36:7c:8f:b4:a7:45:67:7a:
                    52:3f:95:68:f4:e6:ad:92:8f:bf:98:8d:86:70:f8:
                    55:21:27:b0:5c:91:18:e0:cc:5e:c5:e5:cc:38:56:
                    c2:0d:b5:d9:8b:2a:01:c4:dc:0a:00:4f:a3:05:42:
                    00:ec:7a:9b:d0:81:62:b1:7a:2b:f1:ad:e0:76:de:
                    cc:52:82:2d:f3:a3:6d:51:83:26:5f:37:5f:83:cc:
                    f0:21:b2:ea:86:41:e8:ee:1b:1f:c4:ff:56:d8:88:
                    b3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5A:9F:5C:4A:E1:D5:A6:96:5F:4E:E0:5F:63:30:27:C9:B9:5E:8F
            X509v3 Authority Key Identifier:
                keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:fc:a5:02:17:99:2d:9b:4c:3e:45:90:eb:17:03:87:e3:fc:
         a3:48:57:83:52:08:8f:6c:6c:55:88:1c:fc:81:47:58:6f:4a:
         a4:44:20:74:24:bf:36:8c:95:54:a5:4c:68:4c:a9:52:c2:dc:
         00:0a:fe:23:c8:8a:1e:6f:1f:0e:1f:b7:f6:be:f1:f8:fb:f9:
         ff:ac:22:3d:8f:79:19:df:72:e7:5e:08:1d:ea:68:61:f0:47:
         4d:3b:ce:be:55:6a:94:7a:f3:71:83:a9:48:9f:7c:30:66:af:
         8c:f9:a8:aa:06:34:c5:ba:62:66:d5:e2:47:ba:11:4a:9b:d7:
         ce:8c:a1:40:a4:8b:52:c3:41:34:8b:bb:d1:2b:34:f4:12:9d:
         71:f0:6d:92:57:f7:0f:26:fc:e1:60:b6:b6:97:18:1c:27:22:
         8e:fe:55:e4:57:55:5a:c8:d4:94:ae:7f:d5:9e:2f:69:7a:99:
         cc:af:db:fb:b9:b5:db:ca:84:5f:3e:9b:88:95:b7:a8:6c:14:
         08:0e:52:a0:a3:f1:de:3c:3e:64:d0:26:a3:bf:64:30:9b:25:
         e6:f9:54:2c:b6:b4:f7:07:78:69:17:d6:31:b9:90:5d:ed:6b:
         93:cd:8c:69:b0:03:cb:47:05:99:8f:d2:83:b9:83:b1:90:dc:
         bc:a6:fc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:24:30 2025 by rpki-client