This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
File:                     Sq5Con57wsw1B--n48vCnTLuoTM.mft (raw, json)
Hash identifier:          +eyL7xRHgXaQGjhpqF+HMqWvZJqQzQR7ubn9XHjOg0w=
Subject key identifier:   19:9D:02:F5:00:00:47:CE:F9:0D:B5:44:3B:32:A0:4B:2D:0C:87:19
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Certificate issuer:       /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial:       019AF0BF8DA7BF1DF8DEA8DA69B2B165619A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
Manifest number:          14B8
Signing time:             Fri 05 Dec 2025 23:01:16 +0000
Manifest this update:     Fri 05 Dec 2025 23:01:16 +0000
Manifest next update:     Sat 06 Dec 2025 23:01:16 +0000
Files and hashes:         1: 6rSD7g_qe8K6KqZqqkL-N5Tz2Po.roa (hash: f+qXxbPCW54Fvdn+IqLViujGUR732uBcWtFNMxPAlWo=)
                          2: Sq5Con57wsw1B--n48vCnTLuoTM.crl (hash: vHSpYF5pEmZxsQbg8h8ZOpf8fYmBtRiqRX4k1VMrjfA=)
                          3: avzn6A_pWBrabxjlAavnKqw_f3A.roa (hash: RsPQBJwMuWYCIBFp0+5KeIMlRNFaAK6tETn8Q5OI1EM=)
                          4: ppQ6By3CT5q_MfQmc3W2cOrYYME.roa (hash: 4gJ96x0hdM1YSAgq0bPa2tEWjzZ2Ifp4c6peJQDYI0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:8d:a7:bf:1d:f8:de:a8:da:69:b2:b1:65:61:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
        Validity
            Not Before: Dec  5 23:01:16 2025 GMT
            Not After : Dec  6 23:01:16 2025 GMT
        Subject: CN=199d02f5000047cef90db5443b32a04b2d0c8719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c0:d7:e1:58:59:cc:45:e9:2c:09:e4:2c:e3:
                    02:92:d1:a4:76:d4:92:99:d2:ba:51:b3:27:43:a9:
                    16:a2:28:a0:f3:0d:9a:13:d8:2b:c9:51:5c:fa:59:
                    d2:60:aa:49:f0:c7:56:3a:8c:66:7c:c8:52:c7:a8:
                    04:8a:56:23:64:9e:16:37:6f:8a:f3:9d:44:75:02:
                    68:85:80:56:e4:77:e8:11:82:d0:3a:b8:29:0c:e6:
                    4d:8a:9d:6c:42:11:a2:a5:db:c5:33:e4:77:93:f6:
                    72:b3:57:15:c1:6b:94:58:8d:b2:ad:84:90:d8:24:
                    b0:ad:d1:6a:be:0b:9d:5d:d8:cd:6e:f8:4d:28:e8:
                    7c:62:74:d8:4f:04:e3:98:65:69:f3:56:14:88:7d:
                    1d:d6:1b:f5:8a:79:37:8a:c9:21:76:1c:99:fd:62:
                    39:8b:3e:50:e2:bd:76:3f:1d:5f:e5:6b:3b:39:52:
                    c4:c4:2d:96:56:8d:72:8b:e3:9a:92:c2:f5:83:d0:
                    0e:0e:a0:cb:8b:74:94:85:ad:4c:d8:8a:2c:bd:34:
                    11:fe:42:3f:a2:97:da:54:af:5b:86:00:e8:4a:6d:
                    a4:5b:27:ad:2d:d7:dc:c9:d6:82:ef:33:b8:da:ce:
                    5d:e3:62:4e:49:cf:ee:76:41:8d:b1:63:5d:82:62:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9D:02:F5:00:00:47:CE:F9:0D:B5:44:3B:32:A0:4B:2D:0C:87:19
            X509v3 Authority Key Identifier:
                keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:6d:0e:1c:ba:2d:2d:64:42:d6:8f:1d:ea:62:39:30:f2:47:
         d8:eb:1d:24:7d:9f:be:3f:ec:c4:04:54:4a:d3:91:b4:a1:06:
         71:d7:c0:98:78:dc:3e:b9:3a:7b:5b:6d:04:67:5f:14:56:ad:
         05:89:37:88:89:ba:0a:17:b2:f1:fb:1b:7a:2f:98:84:3b:c8:
         c6:95:62:37:0e:b9:62:b4:51:d0:3d:ec:e4:cf:21:e8:3d:b6:
         7e:ba:a7:d2:8f:fe:86:ff:ba:b8:a2:b6:87:38:df:1b:83:92:
         06:52:34:92:22:18:42:15:2d:c8:00:d7:be:88:18:29:8f:f9:
         f2:d6:cc:91:80:18:8c:c7:da:fe:5c:f9:f0:08:a0:74:fb:40:
         45:81:b1:11:de:41:d8:53:87:ff:bc:5d:64:b5:89:b9:bf:b9:
         53:c9:ab:c8:bb:dd:d6:8e:33:88:65:86:e0:f3:1f:cb:dd:36:
         28:81:6b:4e:88:89:f4:d1:c0:81:a9:19:c5:2a:fd:4a:62:65:
         19:11:9f:63:20:9a:f6:e5:0b:e6:b0:56:76:59:4d:d6:0e:fd:
         b7:4b:f9:1e:34:7e:11:1e:d6:06:36:bd:12:6c:01:ff:85:07:
         b9:87:d1:9b:12:af:3a:0a:46:3e:92:1d:35:4f:87:1d:62:c4:
         7f:6b:d7:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwv42nvx343qjaabKxZWGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYWU0MmEyN2U3YmMyY2MzNTA3ZWZhN2UzY2JjMjlkMzJl
ZWExMzMwHhcNMjUxMjA1MjMwMTE2WhcNMjUxMjA2MjMwMTE2WjAzMTEwLwYDVQQD
EygxOTlkMDJmNTAwMDA0N2NlZjkwZGI1NDQzYjMyYTA0YjJkMGM4NzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48DX4VhZzEXpLAnkLOMCktGkdtSS
mdK6UbMnQ6kWoiig8w2aE9gryVFc+lnSYKpJ8MdWOoxmfMhSx6gEilYjZJ4WN2+K
851EdQJohYBW5HfoEYLQOrgpDOZNip1sQhGipdvFM+R3k/Zys1cVwWuUWI2yrYSQ
2CSwrdFqvgudXdjNbvhNKOh8YnTYTwTjmGVp81YUiH0d1hv1ink3iskhdhyZ/WI5
iz5Q4r12Px1f5Ws7OVLExC2WVo1yi+OaksL1g9AODqDLi3SUha1M2IosvTQR/kI/
opfaVK9bhgDoSm2kWyetLdfcydaC7zO42s5d42JOSc/udkGNsWNdgmI3hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmdAvUAAEfO+Q21RDsyoEstDIcZMB8GA1UdIwQY
MBaAFEquQqJ+e8LMNQfvp+PLwp0y7qEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgt
Y2M5MzVjZDczNjMyLzEvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgtY2M5MzVjZDczNjMy
LzEvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwG0OHLot
LWRC1o8d6mI5MPJH2OsdJH2fvj/sxARUStORtKEGcdfAmHjcPrk6e1ttBGdfFFat
BYk3iIm6Chey8fsbei+YhDvIxpViNw65YrRR0D3s5M8h6D22frqn0o/+hv+6uKK2
hzjfG4OSBlI0kiIYQhUtyADXvogYKY/58tbMkYAYjMfa/lz58AigdPtARYGxEd5B
2FOH/7xdZLWJub+5U8mryLvd1o4ziGWG4PMfy902KIFrToiJ9NHAgakZxSr9SmJl
GRGfYyCa9uUL5rBWdllN1g79t0v5HjR+ER7WBja9EmwB/4UHuYfRmxKvOgpGPpId
NU+HHWLEf2vXGg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:45:39 2025 by rpki-client