This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
File:                     Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json)
Hash identifier:          r7VECSuXsl5WG7r7B28nctADybPgaHPqoM2TofwaZpw=
Subject key identifier:   68:CE:41:87:97:B1:F1:8B:1A:1A:BA:1C:9B:BF:A2:A8:B8:EB:BA:A7
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Certificate issuer:       /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial:       019AF27685976B006F671B6DB81887BF9321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
Manifest number:          12FB
Signing time:             Sat 06 Dec 2025 07:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:44 +0000
Files and hashes:         1: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: fpmf6wCEAiB7/ogLJzKOMwk/LQ2tpngaBeVBvxhMLvI=)
                          2: VulQHWhzzPXQiRPOfzUk9fbQoJg.roa (hash: 1pq8LhNOVu3KfmYwRxokFt42T5gBAiGcBFnCuEB+z6M=)
                          3: mGb7BxKlXQ1k9CHjDWD7BMFZHSQ.roa (hash: tJF8uovUStWmO8f7TDEtjdEZUW2noIjEbpOLcO1y40s=)
                          4: nGPZ_NATggl_6nfv7Xs72s2omBg.roa (hash: Ctlvy2xSgma+HOqaqZwfMsyO5ZwXHLYT1LbAR4ndsm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:85:97:6b:00:6f:67:1b:6d:b8:18:87:bf:93:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
        Validity
            Not Before: Dec  6 07:00:44 2025 GMT
            Not After : Dec  7 07:00:44 2025 GMT
        Subject: CN=68ce418797b1f18b1a1aba1c9bbfa2a8b8ebbaa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0e:56:d7:c1:10:cb:a9:f3:b4:7c:b1:a8:fc:
                    a4:ac:c0:4a:46:25:7a:17:6b:f9:96:f6:60:35:4f:
                    cb:85:01:cb:2c:b6:51:4d:e4:1f:0d:4f:2a:d7:10:
                    2e:75:cd:b0:6f:28:a4:fa:d5:7f:da:89:16:b5:8c:
                    d8:5f:88:04:93:86:26:24:9e:76:62:f6:a5:21:59:
                    e1:8b:22:25:c1:41:19:61:b5:52:78:0f:1c:ba:5c:
                    21:46:e3:4b:ac:90:56:cc:df:e8:17:a5:88:d1:d7:
                    04:10:46:49:f1:6c:c7:50:a4:48:0d:48:92:14:a6:
                    48:e0:17:c8:cf:a0:79:8a:cd:0a:82:be:c6:33:d8:
                    ea:6b:01:eb:a2:5e:92:96:ef:39:d7:2d:c2:55:96:
                    98:07:9b:51:ae:f0:22:9b:de:8f:82:00:a9:04:2e:
                    cd:d6:58:d0:af:95:44:d5:25:1e:1b:39:21:42:45:
                    dd:66:60:73:7d:96:f2:ed:70:e9:c3:96:e6:58:7b:
                    89:23:a2:14:63:d7:e9:2c:1f:3a:77:5f:dd:9f:b7:
                    ad:37:b4:bd:64:6c:de:ce:05:f9:e2:d6:a7:f3:9b:
                    3d:7e:d1:48:e5:d5:a3:76:18:95:bc:21:40:72:e3:
                    59:11:a5:9e:ed:9b:1d:c0:8c:43:ad:a4:2b:e4:ad:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CE:41:87:97:B1:F1:8B:1A:1A:BA:1C:9B:BF:A2:A8:B8:EB:BA:A7
            X509v3 Authority Key Identifier:
                keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:a8:77:76:d4:0e:a8:a2:a7:7d:0e:33:91:66:86:dc:c6:
         19:7c:23:09:06:70:9c:ca:79:02:54:20:c6:c4:2e:2d:ed:3e:
         d6:9f:61:b6:73:3f:d0:e7:46:28:9b:d7:3d:49:6c:27:eb:4f:
         85:09:53:08:a5:4a:f5:07:73:7e:98:55:16:89:63:4d:22:4f:
         97:6b:8b:09:44:86:d2:ac:79:69:54:f0:b8:67:24:d0:2b:69:
         9a:5c:00:17:60:d9:30:43:8c:f7:8c:f9:16:92:a9:ff:ff:d3:
         d1:e4:43:06:d6:29:51:62:44:fc:aa:c5:11:12:1d:af:46:55:
         82:73:a8:c1:d0:5a:d7:82:b1:11:7c:d2:ac:aa:45:e3:1d:aa:
         58:15:fc:1f:3f:cb:b8:00:a0:d9:77:54:b6:00:c8:dc:29:b6:
         c3:d2:e7:63:ec:8c:87:8d:cf:7b:60:43:05:b8:21:b2:c5:b5:
         63:49:c9:a8:da:72:5f:40:af:c6:d5:91:3b:47:e9:f4:93:75:
         30:09:b5:c3:78:af:60:55:ea:d2:37:a5:18:0e:af:4e:39:0d:
         ea:2a:dd:11:68:09:86:48:1a:c0:55:72:1a:9e:06:4e:ad:9f:
         2f:19:39:cc:8e:84:67:b0:dd:87:ce:af:e9:ef:07:e5:2f:6f:
         0b:9d:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:35:05 2025 by rpki-client