This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
File:                     scIIojstTYe-k_idUyvG9EkIgZs.mft (raw, json)
Hash identifier:          /iv+66/Gn9bXHTmMLXIShT/B5cMrksNMgH6L8A1rC9c=
Subject key identifier:   93:86:A7:E6:40:16:FB:60:87:9F:A6:92:A4:F7:07:20:12:FB:A0:16
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Certificate issuer:       /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial:       019AF50B13B52232B7AEAB65949A110AFC72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
Manifest number:          0BC8
Signing time:             Sat 06 Dec 2025 19:02:15 +0000
Manifest this update:     Sat 06 Dec 2025 19:02:15 +0000
Manifest next update:     Sun 07 Dec 2025 19:02:15 +0000
Files and hashes:         1: 1-JxvcHzi3fTWIQIbvPanzl3n-d4.roa (hash: fTf9uHn8S4snxNzJSBwP8hjJbSyOEDEo+V6Skd5EbnQ=)
                          2: mzggpIs3sQdC-By4RECl5EHSVoo.roa (hash: HOfUhS8ipu1UXqbPyFHe1CLF65LINHNNkw7+cQ+eI7E=)
                          3: scIIojstTYe-k_idUyvG9EkIgZs.crl (hash: QTFBiZ4scSXy4SVVAfmD3Xa1D9MRnioCRFsOlDe+L9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0b:13:b5:22:32:b7:ae:ab:65:94:9a:11:0a:fc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
        Validity
            Not Before: Dec  6 19:02:15 2025 GMT
            Not After : Dec  7 19:02:15 2025 GMT
        Subject: CN=9386a7e64016fb60879fa692a4f7072012fba016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:da:06:50:15:1d:c2:86:b1:cc:42:33:e7:b4:
                    91:02:e6:f2:84:6a:ba:18:67:58:99:d5:e5:23:d0:
                    e2:dc:76:c8:86:bc:34:11:6c:0a:c0:b8:e7:ab:60:
                    ee:17:e5:ab:74:59:bb:58:61:ff:ea:b3:ab:93:f8:
                    ea:44:d5:2c:76:06:e7:bd:e0:1e:57:ee:d7:75:ad:
                    6a:05:55:d9:bb:93:a8:f8:f9:e0:be:63:6e:d8:6e:
                    80:53:1a:c5:eb:4e:71:3f:e6:39:ed:e6:ae:63:d6:
                    21:5c:ad:1b:97:af:cb:24:81:37:a7:ad:bc:48:80:
                    61:c4:b3:b5:3a:b0:32:e9:3b:11:db:04:c4:7e:73:
                    1c:f5:1e:3e:9c:90:85:f8:55:3c:bc:03:39:ca:8e:
                    bb:8a:9d:42:22:1c:6c:09:15:e3:e5:0a:18:48:a0:
                    ab:41:66:c3:50:b8:e6:a7:d4:b3:68:ee:44:26:fa:
                    dc:89:5e:d8:39:02:cf:3d:00:bb:42:34:7a:53:ae:
                    40:01:c2:1f:55:6b:9e:4a:ea:a6:33:8e:aa:61:24:
                    02:58:83:cb:26:45:41:43:25:fb:c6:fc:16:93:f0:
                    40:61:42:9a:86:a0:ff:de:88:f0:43:4d:67:8a:1e:
                    95:0c:23:8c:c6:59:6e:2a:7b:e4:37:7d:a0:1e:0c:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:86:A7:E6:40:16:FB:60:87:9F:A6:92:A4:F7:07:20:12:FB:A0:16
            X509v3 Authority Key Identifier:
                keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b4:8f:17:5a:81:b2:57:cc:ef:9f:ad:75:ab:cf:87:a0:37:
         8d:91:1c:63:74:9b:57:20:f7:e7:d6:53:09:c0:95:08:65:e9:
         52:7d:ee:4b:7a:e2:3f:e8:64:d1:44:a7:00:6e:8f:f4:76:19:
         8f:36:e4:ef:62:2c:85:bb:fd:82:2a:13:ff:eb:fb:7c:66:9d:
         50:d0:4b:49:d5:42:e8:ca:d0:61:00:22:cd:dd:50:ae:c8:f3:
         ee:9b:ba:b0:d8:10:59:51:ae:e2:22:fb:b9:43:27:e8:c0:d5:
         f7:91:c0:97:69:90:01:4f:be:19:59:88:80:df:ed:35:29:6e:
         e5:87:b3:61:cd:e7:8e:88:0e:fd:d4:35:39:1a:27:06:cc:91:
         42:50:b3:ae:4b:81:6c:78:e9:d6:0c:d4:ff:ce:1e:48:ad:9d:
         2f:94:cb:0d:35:85:7b:81:e1:08:fa:db:df:77:6d:6b:28:21:
         0c:53:82:31:72:33:6c:7b:75:ac:1c:a1:4d:f5:83:42:0a:d6:
         89:78:78:13:be:68:f0:d1:01:d1:71:36:28:34:a8:17:23:44:
         02:aa:39:76:a8:62:62:51:a5:ba:55:59:16:c2:44:55:83:64:
         ab:21:89:70:a6:1a:04:0e:4b:06:08:af:9a:5a:52:9c:38:19:
         de:a9:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:37:14 2025 by rpki-client