This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File:                     sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier:          FpPkmKUiN5t/IaOU7YgkBvD9c0odjZWK3ZgZu3wVZRc=
Subject key identifier:   EE:65:29:C7:E9:48:F2:7D:02:F4:B7:90:0D:A5:61:02:E8:0F:67:C2
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer:       /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial:       019AF2775BEFC9BD798F4BD8765A152F80A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number:          175F
Signing time:             Sat 06 Dec 2025 07:01:39 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:39 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:39 +0000
Files and hashes:         1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
                          2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
                          3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: XoVJLjavoblyvnBXCR/flwT6IHh8bqjJ3yWcPF8uizY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:5b:ef:c9:bd:79:8f:4b:d8:76:5a:15:2f:80:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
        Validity
            Not Before: Dec  6 07:01:39 2025 GMT
            Not After : Dec  7 07:01:39 2025 GMT
        Subject: CN=ee6529c7e948f27d02f4b7900da56102e80f67c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:27:f1:d2:1f:f0:74:63:f5:c0:f3:73:80:
                    6b:78:36:22:af:94:a9:47:8d:82:3c:82:5c:92:12:
                    ff:86:40:91:03:d1:fb:84:e4:b2:ed:e8:d5:ed:a0:
                    67:07:7b:8a:2c:a7:5b:b5:1c:0a:91:a5:4e:ea:51:
                    9c:cd:fd:12:a6:2e:fe:1d:d3:1c:f6:d8:2a:6e:17:
                    80:5f:5f:71:08:d1:4e:c0:ad:6a:1e:07:bd:1d:dc:
                    5c:ba:ca:00:ac:69:de:e7:8b:ea:f0:fb:cc:9d:a6:
                    75:e0:97:f2:fe:ad:44:82:75:02:fe:46:a5:6f:88:
                    7b:9c:f3:22:fa:fe:b1:2a:a4:dc:b2:bb:f4:33:3c:
                    ab:83:7a:e5:67:3e:a1:29:cb:07:71:36:96:c6:a5:
                    e1:92:f2:da:cb:50:47:40:3a:15:38:78:08:73:6c:
                    34:06:59:8c:ec:d6:15:fd:03:28:42:04:cd:d3:f4:
                    a9:f6:ae:b4:15:20:11:a7:a4:a4:f8:3c:4e:fc:dd:
                    cf:bb:98:a7:b7:f6:70:bb:01:07:46:66:a7:38:06:
                    61:9b:a6:9e:9e:d6:c5:7e:08:d3:16:b6:c2:e2:55:
                    b1:e1:89:15:a7:98:0e:4a:6a:09:14:b4:82:21:0c:
                    a0:08:5f:92:1d:9e:0b:ea:bd:38:b9:13:78:2e:4d:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:65:29:C7:E9:48:F2:7D:02:F4:B7:90:0D:A5:61:02:E8:0F:67:C2
            X509v3 Authority Key Identifier:
                keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:14:1f:8e:92:a4:83:47:ad:97:89:7d:81:ed:d7:7e:a4:04:
         95:b7:e2:0e:16:10:f5:40:3d:51:1a:36:43:55:e1:79:13:40:
         27:5d:6f:b2:c9:bf:c6:40:08:f0:2a:87:25:47:c6:ca:96:f6:
         af:28:56:12:00:8c:79:73:97:eb:6a:c6:68:62:31:82:34:fe:
         e8:2c:44:65:e7:f6:78:33:12:56:4c:cb:98:27:6d:39:b0:ba:
         de:05:52:8e:23:9a:ae:a4:62:09:f1:f8:93:44:d8:d6:e1:9d:
         4f:ce:fa:a7:eb:3e:5f:9c:6e:9b:79:ea:a2:59:4b:71:b2:99:
         59:d5:fa:09:1e:91:22:61:70:ac:ac:bc:82:f0:64:f3:53:0f:
         e5:a2:17:5a:a0:df:c4:9c:d0:d3:3e:69:00:e0:bc:99:30:9e:
         ae:bb:d0:bb:8a:f3:60:51:0a:8a:28:e1:d0:3b:55:de:ce:36:
         65:fe:f5:0f:54:89:e4:13:76:2c:1d:6a:a5:88:8f:67:c5:12:
         df:be:18:16:df:02:b4:3d:8b:7c:8f:43:7c:84:e2:03:50:68:
         25:00:52:17:2a:58:7f:84:b6:0f:90:6e:c6:20:27:67:fa:06:
         39:9e:3c:5a:71:b1:fa:aa:5c:12:ff:ee:5f:aa:f7:ad:18:e3:
         b6:32:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:18:49 2025 by rpki-client