This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File:                     SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier:          ZPAJ+YlhXgvLbT02KCUYNbuHhAzSLvYLVEh3UeQKwZo=
Subject key identifier:   70:3B:DD:E3:A5:5A:24:A0:39:F9:ED:BF:AF:2A:06:9B:CE:3A:1B:5D
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer:       /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial:       019AF19ACDA0847A656F01167DDBF458A866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 03:00:45 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:45 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:45 +0000
Files and hashes:         1: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: kAxcpihLex5G6DeVgbH483yHZ5m6TnkouiLRCShzDh0=)
                          2: SNsRs_4WTuL917-zEoDb2DAW4Cs.roa (hash: N22szcBJgG6xZhKtnqlshnG6vFReTJVV2XmRzhmuoSw=)
                          3: lQwR3y5IAJ7kyCCFVo104fC4SsY.roa (hash: MwEmP7Sqq33K1HUPXLtLK+kd2q/HJrM3DtuK+SIM+zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:cd:a0:84:7a:65:6f:01:16:7d:db:f4:58:a8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
        Validity
            Not Before: Dec  6 03:00:45 2025 GMT
            Not After : Dec  7 03:00:45 2025 GMT
        Subject: CN=703bdde3a55a24a039f9edbfaf2a069bce3a1b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f8:02:9c:33:90:cb:23:bd:3b:fa:2b:28:09:
                    57:a2:92:d7:91:61:0c:1e:68:24:80:dc:91:8e:37:
                    b7:1d:b2:00:09:18:d3:86:3d:44:ac:e4:98:c2:4f:
                    21:50:f9:b4:65:32:1d:77:e2:dc:98:1c:5a:84:08:
                    c8:c5:42:1b:2c:6c:6a:81:2f:21:6f:1b:d7:10:0e:
                    d3:d8:e7:e9:b3:b6:87:09:28:f8:93:e0:a4:e2:ed:
                    3e:52:75:2a:af:61:2d:25:c7:d6:63:7b:11:17:2a:
                    83:0f:4c:18:2e:37:09:43:f1:ca:0c:5c:bf:07:75:
                    0f:db:c4:c9:ae:cf:e6:63:41:40:50:1f:58:bb:e1:
                    56:dd:59:c1:46:ca:26:e9:be:c3:4e:d1:e2:60:6d:
                    75:1a:7a:26:d4:22:70:75:7a:e9:aa:58:ea:eb:20:
                    4b:99:5a:11:f1:6b:dc:99:75:7d:6b:97:2d:de:5d:
                    3e:18:1d:2c:75:82:cd:41:78:19:4c:5e:12:93:d3:
                    78:9b:b8:54:58:20:9a:04:e9:e4:13:2d:32:a3:70:
                    0a:c8:7d:01:dd:ff:0a:79:1f:ac:8a:2d:54:48:2d:
                    8e:ef:c9:f8:e0:72:f9:e2:9f:27:dd:67:ff:3b:e3:
                    1c:c1:a5:9a:89:ae:14:e8:f3:19:7b:08:0b:1f:1e:
                    7b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3B:DD:E3:A5:5A:24:A0:39:F9:ED:BF:AF:2A:06:9B:CE:3A:1B:5D
            X509v3 Authority Key Identifier:
                keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:42:a9:4b:6c:83:f7:10:e1:f6:a8:ce:84:88:e0:3d:ee:
         7e:1c:1e:a7:23:c8:48:fb:f5:0e:d0:95:8d:4b:7a:28:b4:b9:
         40:9f:fe:14:3b:d1:c7:fb:e0:c9:d4:98:8f:d4:38:bb:25:aa:
         83:d1:00:ba:e4:f5:e0:b4:92:3f:0f:c1:b6:cb:e0:f2:01:df:
         f7:dd:ff:9e:85:fd:5b:f7:64:4f:45:be:45:17:2c:4a:27:7b:
         21:69:b3:42:71:5b:4b:1e:40:03:f6:3f:9f:c2:cd:47:ee:e2:
         fe:a2:22:10:bd:13:89:ed:f2:13:34:96:6b:13:da:bb:82:ca:
         9e:08:a7:2e:eb:25:c5:cd:b8:d9:e5:20:20:40:41:4f:41:be:
         a9:24:d0:28:fc:52:8d:9a:8d:e8:58:47:1a:85:5c:b4:35:c6:
         af:45:aa:c1:05:6c:7f:45:62:dc:bd:6d:e7:f1:e8:e6:17:26:
         c9:f5:7d:11:e5:88:78:43:31:56:73:e0:9c:29:3a:c3:b3:82:
         d3:20:19:37:13:58:80:6e:3c:a1:a4:da:1e:ff:f8:91:fe:09:
         94:76:b2:c6:91:64:bd:4b:e2:e6:94:a3:23:de:e4:d0:c2:eb:
         98:a3:e4:30:94:02:63:6d:de:2b:02:30:b6:7f:5b:ca:13:8e:
         13:01:70:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxms2ghHplbwEWfdv0WKhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjUxMGEzMTE2OTcyZmNlZDk1ZThhOGJkYWZkNmU0NTVk
ZWQwYmEwHhcNMjUxMjA2MDMwMDQ1WhcNMjUxMjA3MDMwMDQ1WjAzMTEwLwYDVQQD
Eyg3MDNiZGRlM2E1NWEyNGEwMzlmOWVkYmZhZjJhMDY5YmNlM2ExYjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/gCnDOQyyO9O/orKAlXopLXkWEM
HmgkgNyRjje3HbIACRjThj1ErOSYwk8hUPm0ZTIdd+LcmBxahAjIxUIbLGxqgS8h
bxvXEA7T2Ofps7aHCSj4k+Ck4u0+UnUqr2EtJcfWY3sRFyqDD0wYLjcJQ/HKDFy/
B3UP28TJrs/mY0FAUB9Yu+FW3VnBRsom6b7DTtHiYG11Gnom1CJwdXrpqljq6yBL
mVoR8WvcmXV9a5ct3l0+GB0sdYLNQXgZTF4Sk9N4m7hUWCCaBOnkEy0yo3AKyH0B
3f8KeR+sii1USC2O78n44HL54p8n3Wf/O+McwaWaia4U6PMZewgLHx57TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA73eOlWiSgOfntv68qBpvOOhtdMB8GA1UdIwQY
MBaAFEhlEKMRaXL87ZXoqL2v1uRV3tC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQt
YTVmNmMwYWExMWRlLzEvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQtYTVmNmMwYWExMWRl
LzEvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJxCqUts
g/cQ4faozoSI4D3ufhwepyPISPv1DtCVjUt6KLS5QJ/+FDvRx/vgydSYj9Q4uyWq
g9EAuuT14LSSPw/Btsvg8gHf993/noX9W/dkT0W+RRcsSid7IWmzQnFbSx5AA/Y/
n8LNR+7i/qIiEL0Tie3yEzSWaxPau4LKnginLuslxc242eUgIEBBT0G+qSTQKPxS
jZqN6FhHGoVctDXGr0WqwQVsf0Vi3L1t5/Ho5hcmyfV9EeWIeEMxVnPgnCk6w7OC
0yAZNxNYgG48oaTaHv/4kf4JlHayxpFkvUvi5pSjI97k0MLrmKPkMJQCY23eKwIw
tn9byhOOEwFwww==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:00:03 2025 by rpki-client