This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
File:                     sLakm8wQ3jQOOdID9WZYvX1kjd8.mft (raw, json)
Hash identifier:          WaK2ls+IVcOZMI4yQzFzSKDiXCTSy/dIklmwVzwNlWU=
Subject key identifier:   74:11:E3:CF:D0:01:4D:FC:EF:EF:06:68:40:3A:0D:20:03:96:23:89
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Certificate issuer:       /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial:       019AF577C8BA0738F31B2530445C59F30570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
Manifest number:          14B5
Signing time:             Sat 06 Dec 2025 21:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 21:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 21:00:59 +0000
Files and hashes:         1: FIr_oRpmQFUIT6cxtQe7GHGmoAA.roa (hash: 2GgPUgLEEuhVk0MSxFLT+LbEd2G3F3hNCc8xhLO7cXs=)
                          2: GzsHZiR2L5z34hlU58GjHyHGhHk.roa (hash: zJEB0Ry2I/bKDFBGY5W04hlUw2kDIBYUIrcg6pqexm0=)
                          3: HIF_dDhlW9UGjpCh7e5JQg2Sx1M.roa (hash: POCLCGfYMh6nvgW/t/CwlWH1wc57PzDL2vDMBxMdZBc=)
                          4: Hi1JfNmrlGgkq8LJThdNJ2H_9RU.roa (hash: nAKWDljPkM7VVe7jEP7DxUoFbACMfs6GDVOQi/f8q5s=)
                          5: sLakm8wQ3jQOOdID9WZYvX1kjd8.crl (hash: jqPf2WZMLyGvEZu0Tl/GvGvgIV0z9arIM22EEq0PK0I=)
                          6: yd8rW0UVlTE0K5ESeZvtwc9yZa8.roa (hash: Y41c6KDcYXB4eyzG3GvmC+i3gLAgKFVoW5IRi29yMUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:77:c8:ba:07:38:f3:1b:25:30:44:5c:59:f3:05:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
        Validity
            Not Before: Dec  6 21:00:59 2025 GMT
            Not After : Dec  7 21:00:59 2025 GMT
        Subject: CN=7411e3cfd0014dfcefef0668403a0d2003962389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:aa:7c:c1:38:ca:7e:3d:11:e3:55:d2:4f:
                    a1:c3:7f:7c:e7:81:62:77:19:af:2d:d3:88:f6:dd:
                    7f:94:09:05:15:2f:15:de:91:bd:fc:7e:cb:d5:64:
                    fa:aa:7c:e9:94:da:44:5b:a9:d3:fb:48:ba:15:89:
                    7c:19:d8:aa:cd:01:cc:ff:8c:d9:5a:09:f9:ab:d4:
                    31:0f:8c:0f:80:da:03:56:60:61:af:ea:c9:a7:e0:
                    62:25:f2:81:f9:55:8b:9e:6a:75:9a:ba:cf:6d:a3:
                    3b:7f:e4:06:13:56:10:fd:8a:c4:33:54:e0:1c:ad:
                    1b:ae:2e:05:f1:ba:13:3d:e5:ba:9a:67:cd:2d:c7:
                    e7:f2:32:02:1e:3c:f3:f4:39:f7:f2:c9:0f:4f:b3:
                    a8:59:b5:a7:c2:e5:71:ff:0e:1f:2c:4e:fe:f2:0a:
                    e1:e3:4c:19:c7:83:c5:9a:50:0f:99:a6:79:ab:d8:
                    37:a9:07:65:06:75:2e:8e:78:2d:c4:32:dc:24:3d:
                    4d:d2:21:bc:df:0a:e7:e0:10:86:c6:2b:b6:ba:70:
                    4f:55:da:46:c7:d4:db:62:fc:6e:a9:80:2b:50:68:
                    3e:b2:23:6c:51:55:a6:f1:4f:9d:eb:a5:6e:ac:98:
                    e7:2e:5a:97:1a:b0:cd:bc:b8:0e:15:cc:fd:bc:77:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:11:E3:CF:D0:01:4D:FC:EF:EF:06:68:40:3A:0D:20:03:96:23:89
            X509v3 Authority Key Identifier:
                keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:96:85:c1:34:c8:40:89:c7:84:e1:68:24:9e:b5:b3:40:
         9c:3c:dc:92:30:b4:e5:55:4d:b4:92:f3:40:cf:dc:88:96:da:
         50:0f:e9:3d:08:f1:5d:e1:c5:9e:c6:01:78:bd:53:1f:de:6f:
         31:43:e8:6c:eb:51:57:49:bf:56:e7:94:1c:d6:1e:19:f8:cc:
         60:a7:85:3c:7b:1e:77:9c:c7:22:80:8e:97:f7:be:27:28:45:
         c6:54:f9:66:80:9d:24:97:c4:ce:be:7e:34:8f:32:92:9a:6c:
         44:aa:96:45:50:2a:1b:e0:23:1f:da:eb:8c:6d:6c:4c:d9:c2:
         58:46:15:6b:9a:f0:fe:df:93:6c:e0:0d:46:ab:96:b1:a4:be:
         b7:b8:1a:b7:49:74:91:64:9b:13:6f:ed:a7:41:16:c0:da:ab:
         cc:7a:e7:19:e2:53:57:cf:49:7b:7b:ff:19:76:74:1e:cc:c2:
         93:4d:8d:ee:ea:61:d9:cf:ea:60:17:6c:d1:05:09:ff:10:bb:
         ef:0d:09:4d:e5:cb:7c:48:9d:62:a4:32:5c:75:08:c3:83:67:
         e7:b7:79:ed:b2:32:e9:71:1c:d8:f5:5a:63:fb:ff:77:cd:9b:
         69:58:ab:c3:94:86:b1:e1:91:c6:52:b7:bb:a4:65:b0:51:3a:
         29:ce:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:18:30 2025 by rpki-client