This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File:                     SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier:          a4H6igdej2vlW32sJz1SffpHi7umTS8VK5vyJZcJXqg=
Subject key identifier:   73:3B:B0:4B:EA:78:BB:CB:60:1F:5D:D5:89:70:BB:3E:79:D0:6A:5B
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer:       /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial:       019AF088AD114B82C5217507EB1C27FE16F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number:          1013
Signing time:             Fri 05 Dec 2025 22:01:20 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:20 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:20 +0000
Files and hashes:         1: RZvG8tfD1IhES3sTSq4PUTIau5M.roa (hash: 156XMiSx9vA1oBj0STlN0OZ/clFU7kVwEnhKeXGoaaM=)
                          2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: DqYJBEM8LsW3PUkEvf3xXX/QLINQvapAUfNkae5Phg4=)
                          3: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (hash: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:ad:11:4b:82:c5:21:75:07:eb:1c:27:fe:16:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a409555105040578cb296070074f45107252eeb
        Validity
            Not Before: Dec  5 22:01:20 2025 GMT
            Not After : Dec  6 22:01:20 2025 GMT
        Subject: CN=733bb04bea78bbcb601f5dd58970bb3e79d06a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:b8:84:31:f3:4c:d0:23:9d:9d:fb:40:aa:
                    2e:6c:03:6d:80:08:44:45:17:7f:57:78:26:20:2b:
                    34:29:6d:d8:05:5c:89:8b:31:93:2d:e8:c6:d4:e6:
                    37:50:09:7c:62:9b:36:fc:a7:98:11:4a:01:fc:13:
                    bb:7c:fc:a4:45:e3:1b:ed:5d:51:da:d9:f7:ad:24:
                    1a:18:83:7b:dd:30:49:96:a6:77:f8:ce:27:c3:b3:
                    7e:c9:b7:41:56:45:54:2f:d6:7c:25:72:81:38:18:
                    f3:aa:6e:da:03:37:6a:93:92:8b:3d:64:a4:a6:0f:
                    6f:39:91:4d:2e:53:3a:ba:8e:e2:4c:2f:40:10:e0:
                    a0:27:36:a9:70:e2:17:04:de:9e:e2:8b:95:78:3a:
                    34:d2:b4:c7:e4:bf:b1:6f:47:ca:a6:6f:9e:1f:48:
                    75:b4:6c:41:c1:fe:90:76:b3:26:ad:23:06:dd:fd:
                    f6:da:5f:b1:a9:48:92:92:3d:c4:2e:bc:98:c8:4c:
                    04:fa:f6:b8:d0:53:5b:27:23:1a:37:2b:00:63:e2:
                    07:39:cb:4c:4c:65:b9:27:8d:33:65:a8:02:d1:b0:
                    47:89:e2:21:16:e9:87:33:7c:f7:ea:79:17:a7:96:
                    d0:cb:b5:c8:a2:cb:2a:50:33:3c:d4:55:32:1a:ad:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3B:B0:4B:EA:78:BB:CB:60:1F:5D:D5:89:70:BB:3E:79:D0:6A:5B
            X509v3 Authority Key Identifier:
                keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c0:81:58:8d:c1:24:8f:53:ee:63:17:6d:cf:2f:d8:e3:b2:
         54:5a:6d:be:1c:00:36:f3:66:38:91:4f:23:39:83:23:53:08:
         ce:8c:32:bd:7c:b7:7d:14:84:5a:e4:26:0b:17:31:e2:98:55:
         5f:43:68:29:89:23:da:7c:4c:05:9d:81:90:31:df:3c:5a:16:
         7a:ef:bf:97:8d:5d:5a:32:35:f2:50:17:77:02:f1:4f:f3:34:
         a2:5d:76:c9:bf:89:f6:09:2f:fc:5e:cf:f7:ec:41:c9:19:d7:
         e4:34:a9:c8:7b:1e:22:74:5e:ea:8b:8a:cd:c4:29:e2:94:ae:
         10:51:14:7f:72:45:f4:4e:c4:c2:c8:3a:17:42:ae:a4:cd:d1:
         f3:85:f5:ad:c9:e9:df:0a:c9:dd:98:75:1a:50:7b:de:32:27:
         7f:90:fc:3e:8d:5b:74:82:9d:f8:7e:8e:c8:b2:bf:8b:ab:f6:
         7d:fb:9b:90:e7:01:ed:f8:81:8f:95:63:d3:c3:f0:91:d0:8b:
         b6:28:b5:0b:9b:02:da:33:51:3a:8d:e4:1a:3c:9a:af:83:6c:
         05:d1:33:86:6d:99:cc:4e:77:20:4e:62:1d:d7:c0:9b:45:ac:
         ad:06:77:ba:52:7d:c3:29:91:35:1f:c9:03:15:92:25:14:1f:
         ee:4d:b7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:59:27 2025 by rpki-client