This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
File:                     SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft (raw, json)
Hash identifier:          uCh9YO6BEa4GRhvUN/Z4rr27RS3Onvr/f5jqq1yQV90=
Subject key identifier:   A1:40:41:45:2C:0D:EA:BD:31:60:C5:B6:73:6E:77:A0:0D:F8:F1:95
Authority key identifier: 4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
Certificate issuer:       /CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Certificate serial:       019AF208F1D11AC7DD52AC693BBC6D43DFC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
Manifest number:          167E
Signing time:             Sat 06 Dec 2025 05:01:03 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:03 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:03 +0000
Files and hashes:         1: SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl (hash: oI8IvyEk4obj73l9BlcY3Hi3uyK+ptHUFAnUpInKylA=)
                          2: tZ9Z4ML8zhMNBVa9E96Yi9Jnntg.roa (hash: XsJXQI0tWIE+GAb6s9yORtZWbA379GfbGqFGrJ0uG8Q=)
                          3: vLGEnXeHKe1JvyRbs81GFKJa9lI.roa (hash: y85TW0QR8RD5vWjjj7XBtsfhuTrNhwWb7DCnCsRHfMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:f1:d1:1a:c7:dd:52:ac:69:3b:bc:6d:43:df:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b20d5c78c107bcf9c715453d21444f696e44b11
        Validity
            Not Before: Dec  6 05:01:03 2025 GMT
            Not After : Dec  7 05:01:03 2025 GMT
        Subject: CN=a14041452c0deabd3160c5b6736e77a00df8f195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:03:cb:f9:a8:42:be:4a:a6:81:81:7c:70:
                    f6:ce:7e:1f:4b:8f:5f:75:5e:6d:98:b9:1d:12:4b:
                    f9:00:e8:b2:d3:fa:24:1f:8a:ad:22:9b:80:e1:06:
                    53:14:24:e5:42:2b:42:d3:34:9d:40:37:21:94:8c:
                    1b:40:95:50:aa:9e:ab:2d:5c:e3:43:49:aa:e4:56:
                    f5:89:80:b0:2c:b1:07:f4:54:7c:39:95:c8:0e:df:
                    2d:2d:c8:0c:19:a9:24:1b:9c:75:2a:6f:f2:2c:0d:
                    53:66:dc:83:00:f0:85:e9:f0:8d:fc:ab:7f:95:7c:
                    21:f0:18:be:5f:67:4a:ed:3f:41:88:47:7f:0e:43:
                    bf:fd:21:80:83:9e:54:b2:10:83:78:4b:55:f0:45:
                    64:97:9d:6b:c2:53:de:c5:fd:ea:ad:35:6f:1b:43:
                    5a:08:04:16:95:76:a5:bf:a1:41:27:e4:cc:85:c4:
                    60:4b:e7:09:6a:b1:29:ad:fb:9a:f6:95:1e:fb:c2:
                    9c:b7:9b:3e:69:b2:c7:b1:bc:cc:f0:9e:a7:75:18:
                    c0:83:49:7f:a6:f5:cc:d5:ee:c5:2b:45:a7:4b:57:
                    8d:12:51:63:fb:f1:03:c8:6c:d8:f4:c8:61:99:04:
                    fb:ca:fd:00:c3:9b:d1:3d:95:39:b5:36:27:00:38:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:40:41:45:2C:0D:EA:BD:31:60:C5:B6:73:6E:77:A0:0D:F8:F1:95
            X509v3 Authority Key Identifier:
                keyid:4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b4:5f:8d:08:47:fc:7f:7f:55:51:53:e9:b7:fa:d8:76:b0:
         03:e4:21:3b:e2:0a:78:88:d0:16:03:cd:ed:e1:fc:89:eb:4e:
         dd:46:ca:87:0a:6b:bb:b4:bc:a2:35:d1:1f:6c:cb:8a:41:dc:
         a4:20:62:50:9c:7d:aa:1d:3c:5d:a8:67:95:95:38:47:6a:37:
         7b:8a:fd:ec:b7:0e:35:3c:91:c8:a9:b0:05:dc:b7:41:79:e8:
         1f:3e:81:f0:bb:e7:63:37:de:68:31:85:6c:63:2f:35:a8:1b:
         dc:40:c9:3a:1f:af:e3:25:37:64:0a:90:4d:b3:59:ff:bb:4e:
         74:93:c0:8e:f9:00:3d:41:38:8c:3f:b8:68:6c:16:81:ca:2f:
         e0:90:ad:01:01:9c:36:b9:c5:be:f0:a6:ed:4a:87:19:43:a7:
         84:68:ab:08:4d:aa:b6:f6:c2:9c:04:1a:55:e3:13:3a:6c:51:
         c1:6f:24:ee:f6:6b:87:4a:a4:e0:a1:91:ea:99:55:b5:3d:1b:
         4e:58:9b:c2:a9:b2:ed:60:63:5d:1d:bd:fd:f1:c4:90:0e:db:
         da:ee:a3:e2:89:72:ce:0a:49:f2:ee:d4:ac:8e:2d:54:67:88:
         9e:bd:9d:83:08:79:44:fa:e6:46:d7:da:dd:45:79:76:62:92:
         cb:88:fd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:38:47 2025 by rpki-client