This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
File:                     sLakm8wQ3jQOOdID9WZYvX1kjd8.mft (raw, json)
Hash identifier:          VKb7IoqL+MSXzXr1j8dukdmtyQYMJisTv+3nyFsnjCs=
Subject key identifier:   D9:79:33:8A:78:04:C8:8C:AF:84:64:8C:A6:54:81:21:05:08:68:61
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Certificate issuer:       /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial:       019AF38935B9C6264DA44332AC430832632C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
Manifest number:          14B4
Signing time:             Sat 06 Dec 2025 12:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:46 +0000
Files and hashes:         1: FIr_oRpmQFUIT6cxtQe7GHGmoAA.roa (hash: 2GgPUgLEEuhVk0MSxFLT+LbEd2G3F3hNCc8xhLO7cXs=)
                          2: GzsHZiR2L5z34hlU58GjHyHGhHk.roa (hash: zJEB0Ry2I/bKDFBGY5W04hlUw2kDIBYUIrcg6pqexm0=)
                          3: HIF_dDhlW9UGjpCh7e5JQg2Sx1M.roa (hash: POCLCGfYMh6nvgW/t/CwlWH1wc57PzDL2vDMBxMdZBc=)
                          4: Hi1JfNmrlGgkq8LJThdNJ2H_9RU.roa (hash: nAKWDljPkM7VVe7jEP7DxUoFbACMfs6GDVOQi/f8q5s=)
                          5: sLakm8wQ3jQOOdID9WZYvX1kjd8.crl (hash: AGT9PLp8WGq0I8MyEXVlraAOozHMLRmKosMuKeULeco=)
                          6: yd8rW0UVlTE0K5ESeZvtwc9yZa8.roa (hash: Y41c6KDcYXB4eyzG3GvmC+i3gLAgKFVoW5IRi29yMUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:35:b9:c6:26:4d:a4:43:32:ac:43:08:32:63:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
        Validity
            Not Before: Dec  6 12:00:46 2025 GMT
            Not After : Dec  7 12:00:46 2025 GMT
        Subject: CN=d979338a7804c88caf84648ca654812105086861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:53:7d:25:e1:38:2f:b0:2f:4f:3c:af:85:
                    47:84:16:0c:a4:c0:16:57:a8:72:31:b7:05:c9:2e:
                    5c:bd:99:c5:0a:35:5c:cb:54:bd:8c:c9:8e:2f:38:
                    c8:86:b4:97:ed:6c:da:c4:20:c7:70:97:75:7d:20:
                    d6:92:51:f1:1d:7e:14:88:88:53:60:92:7c:ce:af:
                    6d:8c:b3:e9:4a:41:cf:de:29:e7:b9:5e:75:c9:7c:
                    af:af:36:3b:f4:87:af:76:01:07:3e:3e:2b:56:28:
                    01:37:79:be:ba:89:2e:4f:42:01:b0:0b:32:a1:f2:
                    fb:2a:ac:04:83:46:28:f2:ca:13:d9:11:ba:17:36:
                    52:57:be:1a:57:00:23:52:24:46:de:0b:0f:26:6f:
                    14:f7:f5:30:d1:34:99:8e:cf:d4:58:e5:08:3d:4c:
                    55:21:4e:75:2f:22:da:41:08:bb:bf:7f:0e:82:0b:
                    7c:ca:60:fd:88:9f:00:b5:f8:c4:89:a9:3d:91:62:
                    c9:2c:7b:27:b8:d6:0a:f2:31:45:30:f6:fe:d3:5f:
                    b8:78:dc:5d:23:98:52:a5:b9:5c:6c:36:24:28:76:
                    fc:78:22:84:32:0d:53:fc:22:f5:dc:88:a4:e6:f4:
                    9d:38:c4:2b:f0:63:44:5a:9a:0b:a5:e6:57:81:ce:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:79:33:8A:78:04:C8:8C:AF:84:64:8C:A6:54:81:21:05:08:68:61
            X509v3 Authority Key Identifier:
                keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f3:1b:cd:41:7f:71:34:90:1b:2f:b5:7d:4b:1f:f8:53:d1:
         a9:3d:49:b7:2d:9f:2b:ed:6a:f7:40:6c:06:98:a1:c2:47:79:
         f5:86:81:f4:1a:0f:83:66:3b:ab:63:de:f4:6e:37:38:a9:37:
         20:5f:b7:fc:b8:1c:48:c5:d4:b4:46:fc:f4:47:e8:4c:cc:2a:
         b5:ad:81:5b:a7:10:12:c6:c5:78:12:cf:4f:4e:4e:7b:5d:cd:
         b9:f5:99:38:33:ff:69:50:56:f1:4a:ae:85:97:10:9a:ad:3d:
         ed:84:09:82:01:95:6b:c7:49:bf:fd:0a:55:2a:3f:a5:8c:6b:
         16:be:07:a1:d8:11:5a:4a:2f:91:ff:97:13:9f:18:40:e9:c6:
         34:f3:bd:34:f1:b0:4d:9d:68:c2:2e:83:ae:44:46:00:44:96:
         25:1d:b6:c7:fd:8b:10:89:29:b7:29:f8:2d:6c:3b:33:0b:0c:
         24:78:e7:7c:be:f8:fe:88:31:66:95:62:71:b2:e4:fb:15:9f:
         55:88:8f:38:22:81:f9:eb:ed:d3:9f:2a:b6:27:fe:bf:19:36:
         c3:0d:5e:d9:d1:10:e8:28:fb:4d:3b:a3:7e:5e:08:ec:bb:30:
         6a:a8:72:52:fa:c0:5c:3c:93:1c:88:5a:39:5f:a8:75:35:4b:
         b1:fd:3e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:21:42 2025 by rpki-client