This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File:                     saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier:          YpTnDzBHJ8TaDKPw+AdwFvxEvKtAIWTJ/bTyfSwsnyM=
Subject key identifier:   66:0A:6A:B6:43:D1:B1:EF:48:5B:02:51:0A:09:25:FB:06:C7:CF:EF
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer:       /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial:       019AF16482751B2D91EF43C31E9B745F3238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number:          176E
Signing time:             Sat 06 Dec 2025 02:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:27 +0000
Files and hashes:         1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
                          2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
                          3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
                          4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: ATII+lm+CnuCbpGwDxyoEq6AGklZgextkbutJLLX9OE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:82:75:1b:2d:91:ef:43:c3:1e:9b:74:5f:32:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
        Validity
            Not Before: Dec  6 02:01:27 2025 GMT
            Not After : Dec  7 02:01:27 2025 GMT
        Subject: CN=660a6ab643d1b1ef485b02510a0925fb06c7cfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:a2:49:2c:67:13:fd:d5:c3:df:55:9a:ef:
                    0a:1e:5b:df:9d:7f:71:1f:9e:81:9d:35:6f:e8:db:
                    52:2b:d8:0f:1f:04:4a:c5:2e:a8:c5:8c:d2:60:b0:
                    fc:af:09:7c:e4:04:dd:75:73:5d:30:83:68:c4:a0:
                    2b:44:a9:f7:e8:e6:7b:1b:66:d6:8f:ad:45:c4:7b:
                    9a:ce:ba:03:15:db:48:60:fd:48:98:c0:2d:20:14:
                    f3:ed:9f:4d:58:bd:2a:c2:a2:1e:0d:69:2d:d6:b7:
                    97:a7:77:42:49:ff:83:49:ac:fd:e4:c7:7f:bd:05:
                    14:8a:86:08:d7:80:f7:6d:71:12:22:63:b9:c8:5c:
                    95:64:4f:6a:22:98:02:cc:8c:62:a5:62:04:29:84:
                    cf:c4:9a:f6:c0:05:f0:48:cb:08:11:16:b3:9e:13:
                    ab:3a:20:19:66:40:06:fe:d6:58:2d:15:32:7e:b4:
                    62:5f:88:4c:84:44:8f:9b:92:5c:8d:67:1e:2a:26:
                    16:86:b9:ef:2c:bf:69:73:54:97:45:ed:9f:8b:e0:
                    f4:07:6b:e1:9e:07:06:90:ac:01:62:69:63:3d:86:
                    9e:ea:0b:73:00:ce:10:a1:d9:dc:10:9a:29:13:b9:
                    6a:11:36:57:e6:aa:0b:96:8b:80:58:c1:f9:64:e0:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:6A:B6:43:D1:B1:EF:48:5B:02:51:0A:09:25:FB:06:C7:CF:EF
            X509v3 Authority Key Identifier:
                keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:23:80:3a:a7:2b:27:b7:ae:ca:59:8e:b4:8a:54:ec:6c:6a:
         4b:e0:46:40:32:ae:cb:a7:9d:56:df:d9:35:05:bd:d5:09:bb:
         81:30:92:09:b1:0e:2c:b1:63:5e:49:41:66:42:86:0d:b5:41:
         4d:1f:a3:90:32:e2:d0:cf:7b:e7:65:a8:2d:7a:e3:34:a2:7f:
         de:85:0a:a4:f5:7b:ab:de:74:83:a7:6a:92:31:73:e8:a8:e1:
         6c:6a:3e:82:93:fd:ce:e0:e8:5c:e2:63:44:a7:a0:0d:ca:91:
         e3:96:05:9a:4f:62:60:eb:fa:2f:cb:57:94:21:56:01:a2:61:
         cb:7f:ad:33:0b:e1:6b:d8:c4:9e:02:fb:76:5e:fb:fc:8a:86:
         d7:d6:30:2d:de:c2:fc:8d:70:ee:90:84:e0:04:02:22:79:73:
         c6:a4:64:6a:4c:cf:c1:a7:cb:a3:15:f9:aa:b3:04:e2:b8:02:
         69:d3:e0:70:51:0e:1d:c8:1f:4d:95:f0:dc:d1:2d:07:8f:b8:
         2c:78:87:ce:c3:1f:ab:ca:dc:5e:34:c7:56:9a:59:78:e9:5d:
         32:47:c2:7f:b1:7b:25:d6:e6:1d:e9:bf:56:04:f8:18:8d:05:
         13:39:b2:55:5d:ff:e8:e4:f7:85:c0:e8:66:eb:cb:08:45:fd:
         46:a3:ec:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:22:15 2025 by rpki-client