This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          XZLyHQ7kNwmznfJZYN5vjRY3JKckKtf1+tuywl+zKh8=
Subject key identifier:   CD:58:65:7C:4E:A7:EA:3B:0B:AC:7A:46:12:28:D4:74:71:31:C7:0C
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019AF24021D41C57AFAEBEE26303C8465F92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          0DC5
Signing time:             Sat 06 Dec 2025 06:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:20 +0000
Files and hashes:         1: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=)
                          2: F6wdCUdNs0S6x-lvMlPtyMpUfZs.roa (hash: 9jMOcYoLdDpo5EB5/0BEoeSC3reaOBGBRYSNiNLwg9k=)
                          3: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=)
                          4: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=)
                          5: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=)
                          6: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=)
                          7: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: XnCDIBwRycMjnGAt7LPLnPOehzHRrx3Qk+zfkO8D1HQ=)
                          8: TdMhRHczxWCfuj6WCF3aHSZcWoE.roa (hash: OExPlz/NvHlKGK16isLHnODAZh99vhb3NAPmGcjd+nw=)
                          9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=)
                          10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=)
                          11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=)
                          12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=)
                          13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=)
                          14: peIOlV3OfBEMu-qBfSwFNIMmyUg.roa (hash: 6anSx7OoDk9TVb+rhIIUnKyoMu5IPmI9Uc6n5lkG9F0=)
                          15: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=)
                          16: rAiRJTmW8XfVmhpte53A3cU5F0E.roa (hash: 4rCJoUat5Hf3Yqw8erIeJ6FU4KlxG5HpAnlRqviFfYc=)
                          17: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=)
                          18: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=)
                          19: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:21:d4:1c:57:af:ae:be:e2:63:03:c8:46:5f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Dec  6 06:01:20 2025 GMT
            Not After : Dec  7 06:01:20 2025 GMT
        Subject: CN=cd58657c4ea7ea3b0bac7a461228d4747131c70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:21:fa:2a:86:dc:da:03:d9:5a:6b:b4:1e:7e:
                    a0:67:6c:06:90:07:bd:94:38:dc:29:8b:90:4d:58:
                    4a:c2:88:2d:c6:ef:de:be:37:67:8c:1c:28:eb:ea:
                    80:0b:fe:08:68:cf:fd:22:ca:2a:e9:6c:8c:a9:9e:
                    15:b3:05:11:fb:54:17:e5:fe:26:94:cf:9e:10:1c:
                    9c:26:59:68:02:b9:99:07:47:09:72:a5:56:9c:b1:
                    0e:70:6c:20:0d:cc:97:c8:76:41:e9:63:15:d7:41:
                    ff:b7:ab:a7:cf:75:f7:71:5a:77:7c:e2:a4:da:ad:
                    8f:b2:0d:2e:2c:3a:63:44:4b:cd:8f:9e:3d:b3:d5:
                    6d:38:7a:67:0f:90:cd:22:c9:d8:20:f4:35:f6:bc:
                    40:86:28:fe:20:9d:5c:41:a9:2b:b8:da:35:6a:11:
                    34:60:45:4c:03:88:72:76:a5:76:f7:b8:d6:d8:43:
                    73:10:ca:bc:ed:72:d1:7d:ff:21:a4:87:b9:91:74:
                    4b:2b:8d:d9:9a:bd:84:60:2f:58:73:84:61:db:0c:
                    09:2c:75:0f:9b:c6:e0:30:f9:86:22:5c:91:17:00:
                    14:79:71:7f:a9:be:fd:c8:62:a5:30:ce:97:c7:7a:
                    9d:96:5b:0f:5d:86:13:87:4c:26:bd:37:c3:88:31:
                    cb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:58:65:7C:4E:A7:EA:3B:0B:AC:7A:46:12:28:D4:74:71:31:C7:0C
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:83:c6:82:2b:7f:d0:3f:d7:64:7c:44:37:5e:c9:8a:fd:
         b4:cf:30:bd:b3:ab:7f:f5:3a:a8:2c:83:12:b9:40:1c:c5:f6:
         60:3a:e7:9c:5b:7c:05:d9:14:30:1b:0f:ed:34:59:90:d9:9a:
         c2:5b:91:bd:91:3b:80:e4:3a:46:c1:52:2b:54:76:54:01:c8:
         50:5a:e7:46:dc:06:c1:25:54:d0:16:17:66:b5:af:1c:a6:b9:
         3f:98:20:17:95:34:95:5c:5f:ba:e0:fc:e0:55:a9:12:e5:aa:
         dd:51:8c:20:89:d4:10:6f:9a:21:dd:35:24:38:a8:25:90:85:
         6d:cd:29:47:8c:5a:2e:67:7f:66:86:dd:d8:cf:68:45:f5:f3:
         c3:b3:64:ca:b5:b2:37:5e:d1:99:71:33:f7:4b:ca:37:15:d3:
         6e:3f:8a:00:01:aa:71:c8:d2:c5:04:f4:7a:72:8c:4e:30:cc:
         65:09:39:96:5b:43:a4:47:74:2f:d2:ba:c4:45:34:b9:a9:72:
         11:bd:64:d2:64:17:b1:02:99:e5:86:89:b9:76:9a:e9:4c:a5:
         ff:80:95:65:aa:53:16:d8:cb:eb:90:e3:8d:a0:01:b2:09:6c:
         71:5f:86:42:11:88:e5:04:40:76:14:a9:04:bc:06:85:46:bb:
         67:c3:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:32:35 2025 by rpki-client