This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
File:                     Bb_btqSxZjNp2kB9uXsCH3MoSig.mft (raw, json)
Hash identifier:          9MPCS9EnVqHipMhwj9S3n2xHMwS5Gv92dEsjHcOt5NI=
Subject key identifier:   4B:58:1D:0D:51:B3:D4:DD:C0:9A:16:59:B0:B3:05:89:8C:7F:87:2F
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Certificate issuer:       /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial:       019B2D425879FE2C8A6AD0D1BF22ABA057F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
Manifest number:          13D4
Signing time:             Wed 17 Dec 2025 17:01:21 +0000
Manifest this update:     Wed 17 Dec 2025 17:01:21 +0000
Manifest next update:     Thu 18 Dec 2025 17:01:21 +0000
Files and hashes:         1: 8FA7Lr1UFF21tJ7bN9B79K5CsTE.roa (hash: KI5VwKHEhwpayJ9GtFKeZk7WbRjdECwPDfzDbHJARBk=)
                          2: Bb_btqSxZjNp2kB9uXsCH3MoSig.crl (hash: kxBKUcW7iMm4QKSRGLn6t+vxSJQ3sap6wQQ73OBOKNE=)
                          3: MxjgQVEyLUBzSi2i-cH1sG1IdKo.roa (hash: 8LNKG3dpw7agrIcT1/uNRMjFLgdNdlZRqC/P4DL6cXY=)
                          4: blptCtJln9odT-Zd9-yg_1kpfAM.roa (hash: jTOEd7Yoo5SD4hM2M0pRKqn/WaRYdVO39YkKNQ4ET5I=)
                          5: s_shm9YkkFkzK1BPZaTzoEk1UFM.roa (hash: s6ACGYqES9X/3Ar888X3YakUPHplYVZabmf5m4V68uA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 17:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:42:58:79:fe:2c:8a:6a:d0:d1:bf:22:ab:a0:57:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
        Validity
            Not Before: Dec 17 17:01:21 2025 GMT
            Not After : Dec 18 17:01:21 2025 GMT
        Subject: CN=4b581d0d51b3d4ddc09a1659b0b305898c7f872f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:84:5e:f6:85:75:b2:08:80:ea:2f:21:fa:a6:
                    18:b4:37:28:4f:f9:92:41:f2:1b:98:79:51:67:5c:
                    23:b1:10:16:e4:7d:3b:97:68:ba:3e:31:53:2e:97:
                    b6:c9:ba:cf:e3:2b:7b:cb:e8:3e:54:57:50:b1:f4:
                    ac:57:49:d8:87:48:0c:04:48:7a:40:d5:6c:9e:90:
                    f2:ae:c1:99:7c:31:55:73:59:d5:c0:3d:9d:ea:94:
                    2d:4f:86:be:71:de:51:d2:f6:50:d6:81:7c:3a:8c:
                    df:4c:89:9e:f3:ef:4d:06:69:04:f8:a8:7c:fd:26:
                    97:e4:dd:eb:ff:58:ac:53:0b:62:ea:8b:de:b1:bd:
                    b4:b4:6d:5c:1f:77:53:3e:7f:b5:7b:74:7d:62:51:
                    eb:04:07:fe:c5:27:6a:87:79:60:ba:29:29:d8:5a:
                    05:8d:41:8b:96:90:d1:ee:e7:65:be:19:57:14:73:
                    8c:cb:42:0e:cb:0f:48:39:9e:f7:75:53:b9:0a:46:
                    22:9f:e1:7f:b8:75:d9:21:36:b6:74:3a:67:14:9d:
                    d3:7c:7c:7a:cb:ec:4b:6b:71:33:d9:aa:d3:44:a4:
                    ed:0f:e4:30:7f:fe:23:fd:7c:ae:20:ab:b4:21:0b:
                    2b:26:94:c3:27:9d:1b:2a:91:7f:af:cd:ce:8f:34:
                    9b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:58:1D:0D:51:B3:D4:DD:C0:9A:16:59:B0:B3:05:89:8C:7F:87:2F
            X509v3 Authority Key Identifier:
                keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:28:c4:c9:8b:02:a1:b1:0d:7a:29:8e:e2:ce:c7:ca:db:dd:
         44:9a:44:f6:a6:0f:ff:3f:be:88:14:26:d3:ea:5e:73:17:da:
         01:4b:72:09:99:8c:75:8a:b6:95:50:d5:12:8f:c3:dc:e0:87:
         cd:b1:01:cf:31:5b:af:94:2e:5a:55:d3:63:fd:65:1a:81:1d:
         28:72:1c:0c:ba:05:69:d7:42:f6:63:ae:a2:02:46:29:a1:47:
         b1:30:ef:74:43:8a:b4:21:20:a5:ef:1a:96:1e:fb:6a:25:b5:
         6d:4f:5a:56:43:9b:18:07:8c:90:96:7b:9b:a6:c8:79:c1:d7:
         cd:87:d0:b0:66:53:1b:f3:43:16:b0:9c:2c:84:a6:85:8c:62:
         6e:fe:9e:6c:e7:c7:38:aa:b6:48:c3:aa:0d:6e:c6:11:8a:ec:
         0e:43:f6:5d:bc:eb:53:d4:e2:79:70:85:32:d0:90:10:5d:f2:
         8c:37:89:da:94:60:4f:18:19:86:21:eb:2d:08:b7:61:47:d0:
         13:b5:c0:f6:1d:15:6e:9a:61:7a:dc:fe:1e:89:dd:d8:79:55:
         e7:95:c9:b6:bf:18:a4:da:29:95:66:d4:b3:32:4e:40:0f:06:
         e6:c2:39:c6:9c:06:8e:43:a0:c8:c0:30:a3:8a:45:d1:e6:8d:
         c6:68:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 22:27:03 2025 by rpki-client