This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          DOs7/huHtvgTHnrmaKePA/8+FJWM6iNGrRumappybbQ=
Subject key identifier:   77:2B:28:FC:74:5C:C2:DC:87:4C:C9:FC:76:69:8C:21:83:DF:DD:3E
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       019AF20985E4499E14F26D0E0D0F169C9DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          050C
Signing time:             Sat 06 Dec 2025 05:01:41 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:41 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:41 +0000
Files and hashes:         1: CDhfXiWmp-7DWGHRLkI1RXpNMUw.roa (hash: BdyrC92HV6fMOkqwdnwWMjP4WPGwGQmddKXw8S//IY4=)
                          2: GZLylFIePve8mzqKp098f5zxTUw.roa (hash: r5z9AFc8wnJRnVScCietCsc10ck15u9ra9fsksqINjA=)
                          3: QSxkF4rOw8CaQhbY1bgweRS2k84.roa (hash: /gVGhfkCO75vlxeNpsZvkhIuMR2YzpuGJXm7VvwUGkk=)
                          4: SmAcFee67aQLcPrKmiXZ94F0DAo.roa (hash: 0ymC9JbQOKLWpT417ofA+sK82ehW8sAqv3tq2DxYn+c=)
                          5: YK_aUPQtgAjjUBJq7WhDbslbCWM.roa (hash: +IG0CxEpiZEOb47k2itsdETT9izTBhlEAMyJ/fS5uh4=)
                          6: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: /RLHGP1lgtZIdIE/DlGgJJTg3ZGbpoFEUkXRLp7lPt8=)
                          7: vbkqK2A-5so6LdZx4ga1s9863ZI.roa (hash: 533TjtomKdjh/jTDvd0XbmB2CfJKlZIVlQUKaugW/Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:85:e4:49:9e:14:f2:6d:0e:0d:0f:16:9c:9d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Dec  6 05:01:41 2025 GMT
            Not After : Dec  7 05:01:41 2025 GMT
        Subject: CN=772b28fc745cc2dc874cc9fc76698c2183dfdd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d1:9f:13:71:0f:fd:c9:73:43:80:43:a8:ca:
                    76:eb:66:47:79:21:ed:5d:ec:0e:26:e7:54:83:45:
                    6e:ab:7a:5d:fd:99:ee:f2:6a:79:f3:41:44:a7:00:
                    b8:51:8c:69:c3:70:cb:59:58:8f:dc:ff:d2:1f:2e:
                    43:6f:41:9c:77:94:f2:16:24:d4:61:0d:54:6a:be:
                    d5:e8:e2:2c:be:9b:d1:e6:98:ee:be:5b:74:cc:d8:
                    ac:e8:08:79:60:2c:72:f2:64:40:9e:eb:43:f1:40:
                    05:dd:ff:c6:dc:ca:3e:77:c1:0a:a9:b0:3b:83:e8:
                    92:31:95:33:84:0e:5b:9b:af:46:9d:46:c8:dc:3a:
                    82:84:07:bb:ee:40:4c:67:98:8f:53:ee:91:67:44:
                    68:b8:54:8b:2f:fe:58:e3:34:ae:3b:bf:5c:7a:83:
                    42:1c:72:14:1d:84:6b:a4:7c:81:f2:5f:38:37:e1:
                    28:3c:0d:aa:11:c3:58:4f:66:1f:8f:50:87:c4:0a:
                    23:da:99:21:32:e8:00:3c:9e:78:31:f7:fc:ec:e4:
                    00:eb:c4:19:34:a5:13:8a:26:12:45:fa:1f:d2:37:
                    45:2c:64:9f:f2:bd:8c:cc:80:58:fd:29:92:a8:69:
                    d7:58:57:db:4d:61:ef:36:5c:58:5e:52:5d:29:f5:
                    b4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2B:28:FC:74:5C:C2:DC:87:4C:C9:FC:76:69:8C:21:83:DF:DD:3E
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:27:73:d4:d9:eb:64:30:8e:a0:6f:c6:e5:c0:7b:53:ca:51:
         71:a7:fc:a0:e6:01:b7:3d:16:bf:1d:9b:40:d4:ce:f7:c1:68:
         fd:e8:0b:3b:f3:65:8a:b0:1e:69:60:6e:13:c1:29:95:e4:bb:
         d4:db:34:dd:9a:5c:3a:56:5b:c5:64:31:00:77:98:32:76:c9:
         f5:84:db:b9:af:a2:fb:73:02:19:85:fc:a8:68:70:db:44:f9:
         88:ea:5d:c8:c2:be:bc:b2:3d:b9:f5:69:79:be:05:5d:61:4d:
         24:81:dd:e5:46:cd:57:1f:c6:1f:08:49:99:92:25:cc:74:d4:
         a6:a2:c6:92:9f:9e:44:6b:68:40:58:9b:18:f1:d7:e8:aa:8b:
         96:48:34:db:a1:23:a5:2c:92:a6:b5:c5:6f:af:9c:4e:ee:ad:
         e5:6e:bb:6c:86:cc:c1:03:fd:44:e0:d1:1f:36:bf:a9:c7:b4:
         98:2e:37:4a:36:32:c8:fe:51:07:6d:53:05:ec:cc:c0:f1:4f:
         67:0a:ff:02:5b:5c:73:16:1b:26:8c:3e:f5:97:a4:59:9e:32:
         d5:a5:99:c2:e2:19:da:99:54:25:fc:01:1f:f5:0c:fd:17:40:
         f8:ab:a7:a5:f8:f5:50:a1:2b:7a:57:d8:3f:c8:ed:ea:34:32:
         53:b7:26:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:19:03 2025 by rpki-client