This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File:                     u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier:          kzuNGfLtMtlXo3LKYcrAc7Y8VOtozC9vjWTSByO/bFQ=
Subject key identifier:   7F:27:EC:6A:4F:88:15:6B:1C:FE:A7:C5:79:68:AF:61:0B:77:AA:9D
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer:       /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial:       019AF2ADFAA731E79750038BD079FAACC3C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number:          143E
Signing time:             Sat 06 Dec 2025 08:01:19 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:19 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:19 +0000
Files and hashes:         1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
                          2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
                          3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: viP4s/oKlh5DXe8cSpX0tmvT9Iu+TORdlDoKFoWSiaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:fa:a7:31:e7:97:50:03:8b:d0:79:fa:ac:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
        Validity
            Not Before: Dec  6 08:01:19 2025 GMT
            Not After : Dec  7 08:01:19 2025 GMT
        Subject: CN=7f27ec6a4f88156b1cfea7c57968af610b77aa9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:32:02:41:67:64:46:fc:25:58:d7:67:8b:
                    6b:61:91:72:a0:12:f5:66:ae:a7:8f:83:e3:da:7c:
                    92:b5:38:18:50:21:25:31:95:f3:0b:8e:71:78:da:
                    fa:cc:46:08:42:4e:d5:cd:f5:ee:13:74:5d:8d:12:
                    48:27:3e:7e:b0:10:27:a7:19:6a:e5:12:fb:bf:17:
                    88:1a:79:49:f5:4f:38:f3:52:5d:ec:1c:59:d1:95:
                    1d:54:45:27:4b:ef:a4:9f:36:d7:c1:b1:a7:22:93:
                    71:a2:28:87:de:9c:95:b4:4d:cd:c5:47:22:67:2b:
                    87:e6:2e:2e:7a:6f:ed:93:83:63:2f:e8:70:80:a1:
                    11:f0:f7:34:5d:0e:c4:86:e1:36:07:e5:ea:29:23:
                    99:cf:25:49:57:31:21:6d:30:9d:e9:49:70:9b:b8:
                    cc:5e:9b:c7:a7:99:b2:5d:1a:2f:eb:3d:ca:68:0d:
                    ff:c1:dd:51:ce:8a:98:19:4c:3c:54:32:9e:9a:5e:
                    32:2d:a9:72:4b:94:b5:ee:68:cf:ef:31:4c:12:70:
                    a3:97:60:26:9e:c1:af:69:bd:05:b2:79:ee:30:df:
                    88:28:f9:1e:43:f3:76:e2:ca:c9:a9:a3:ef:4d:76:
                    d8:de:01:a1:31:e6:d5:5b:1a:48:61:67:a4:21:9b:
                    92:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:27:EC:6A:4F:88:15:6B:1C:FE:A7:C5:79:68:AF:61:0B:77:AA:9D
            X509v3 Authority Key Identifier:
                keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:a1:87:c9:74:29:ee:01:ca:e3:5d:b1:7f:e0:57:cb:e3:
         65:4e:f2:9d:cb:2e:e1:4e:c9:c8:5d:07:82:9d:b1:c2:8b:ef:
         e1:cf:a3:a4:d4:ad:f9:50:ab:8c:27:63:cb:c4:46:50:76:80:
         bc:91:5d:6c:e4:df:46:80:e8:f9:5f:c6:96:a6:7e:6b:c7:99:
         27:c3:d6:05:54:50:a2:40:11:aa:f4:67:d9:86:8d:ac:0b:84:
         18:62:c3:41:09:8a:8d:98:ca:77:32:cc:11:28:be:ea:f6:42:
         dd:23:92:e4:fe:79:d8:bd:67:c2:62:89:39:df:e0:ab:d3:44:
         87:2b:a3:b7:b4:c4:d0:ef:db:ca:76:94:13:cf:87:a6:a9:d0:
         21:48:14:f7:bd:99:52:08:e4:79:0d:c1:2b:9f:7a:61:e3:f4:
         05:6b:3e:98:38:a6:fc:c2:c5:bf:d4:9a:3a:f6:07:3f:a4:0e:
         c8:7c:3b:bf:a5:84:e5:2a:98:db:79:03:ae:39:75:69:78:ff:
         75:b9:a4:eb:1e:1e:32:05:23:75:f2:ec:68:73:57:3c:f8:ae:
         06:2a:7f:02:64:b2:e5:20:c6:e9:28:19:ad:5b:f3:bf:2c:9b:
         21:e6:36:b2:33:9e:cc:2b:8f:4e:55:d1:2b:0f:78:8b:ee:ff:
         10:f4:8b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:21:11 2025 by rpki-client