This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
File:                     SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft (raw, json)
Hash identifier:          KinV/PUvYWqazL2tjWknlomneWv3rm2ByPq2e2aaApA=
Subject key identifier:   C5:BB:FE:D1:17:B3:36:11:02:9E:DA:B4:8E:9D:7E:C5:7B:A2:3A:41
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Certificate issuer:       /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial:       019AF2091608E4E6B9BCA221A1BA806740CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 05:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:12 +0000
Files and hashes:         1: 18JawMIQ4IIjxCBNljP_sugctIs.roa (hash: EGBShqy4nnzMqWs1NYZxzIjsKkDa8M7h19J8gjpdtvA=)
                          2: 9b23r5dTMPyh48lf-ARDs_h89Qw.roa (hash: WWbvC+50HLDLUoSb1icbjf3J+3CktO1G6aw8ss6OERc=)
                          3: C6gHQdBURBlm35x0GDwcWWNARyk.roa (hash: GaokyZWXRvMib4ncq4hEcNLu2IPcx/q3bdp2NSF7Jyk=)
                          4: QVs3JRJ54mdavYMKzmA8EI3DNl4.roa (hash: LgJPv3PoY+gQldztQf/0Gwj+6GMbnE4l+sQElujcqSY=)
                          5: SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl (hash: OztF6u/Gu2IfOVjwWfUb71lZwwy9GP1P2SsLxBxMWGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:16:08:e4:e6:b9:bc:a2:21:a1:ba:80:67:40:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
        Validity
            Not Before: Dec  6 05:01:12 2025 GMT
            Not After : Dec  7 05:01:12 2025 GMT
        Subject: CN=c5bbfed117b33611029edab48e9d7ec57ba23a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:81:47:be:04:e2:cf:68:e7:4b:4d:af:4d:
                    23:f3:12:6e:1c:2f:8d:a6:12:f1:5a:3a:08:1f:3e:
                    74:94:72:a9:2c:a8:16:58:35:cf:ba:85:06:40:ed:
                    c2:10:91:91:de:d5:3e:7a:a2:3e:17:87:47:82:96:
                    38:e3:4b:98:19:41:11:64:bc:0c:df:47:77:c1:a3:
                    1a:e4:74:b7:7b:f6:1f:14:ac:2a:fe:85:18:fb:bc:
                    e0:5c:b7:22:da:db:9d:3c:e1:c6:9e:2d:3d:33:f9:
                    fc:f8:8e:30:10:5f:04:75:71:05:60:ec:6f:76:89:
                    a5:3b:17:8e:1e:80:aa:77:10:85:e7:65:56:2b:61:
                    a1:4f:12:95:4a:81:9f:cf:74:02:06:eb:65:25:fb:
                    7c:3b:e4:da:58:61:fb:51:6d:32:a9:9f:11:2f:ec:
                    74:40:e6:44:51:82:4b:d7:57:5c:22:28:06:80:de:
                    2d:80:e8:4e:d3:31:9f:ea:9e:e2:60:c6:73:ec:84:
                    9f:c5:b9:2e:2c:48:35:0c:b1:48:ec:30:af:ce:4c:
                    a5:2b:24:7f:14:1b:76:07:2b:c9:77:a3:13:07:3b:
                    a6:d2:5b:bf:38:8b:39:ff:c6:a7:c2:fc:de:c7:bf:
                    52:15:31:37:a8:33:b8:16:1f:e9:ad:9e:6d:fc:ea:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BB:FE:D1:17:B3:36:11:02:9E:DA:B4:8E:9D:7E:C5:7B:A2:3A:41
            X509v3 Authority Key Identifier:
                keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:66:ef:89:7c:56:89:7b:a6:73:6d:c1:44:b1:a6:cb:81:
         5f:b1:a2:73:d8:ec:37:02:3d:e7:21:22:eb:42:f8:a8:34:22:
         b0:b1:83:04:6f:6e:e0:83:f9:7f:50:7f:46:a7:fa:3d:b4:7f:
         6a:d6:fe:9a:b2:a4:f1:cc:1c:0d:dc:07:83:e2:6f:fd:98:35:
         39:1f:ed:26:aa:a5:14:fc:57:cd:7c:16:6a:70:4d:9d:66:b8:
         d0:81:af:a0:7e:00:43:eb:c2:b7:28:49:d7:0d:9d:11:2f:9b:
         4e:87:70:fa:5d:fd:ca:7b:1c:e8:48:cd:c5:71:69:f8:ba:27:
         ba:3c:35:79:38:d3:82:91:93:3a:a4:b2:a9:2d:b4:81:00:c5:
         8c:86:89:6c:5b:0f:31:23:f8:6b:92:71:45:4f:1b:f4:ee:18:
         10:3a:2e:a5:1d:e7:1f:a5:71:2d:94:6b:e8:05:31:93:b9:da:
         77:ff:f1:d2:4b:6c:a8:a8:36:76:e9:3a:03:bd:e5:ba:83:e3:
         98:bb:ce:c9:fd:6e:01:c7:55:c6:57:28:6b:2c:26:1e:5f:1f:
         bd:9c:52:ed:01:4a:38:7c:f9:25:83:c2:5f:d0:19:39:86:cb:
         08:85:1f:01:26:8f:67:a5:00:a6:2c:12:df:56:c1:6e:d4:de:
         e6:08:cf:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCRYI5Oa5vKIhobqAZ0DLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjZkN2M0NjhkMDkyYzkyMTMxNGQ2NjQ3M2NmYTUzODUx
Y2Q2ODYwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD
EyhjNWJiZmVkMTE3YjMzNjExMDI5ZWRhYjQ4ZTlkN2VjNTdiYTIzYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9mBR74E4s9o50tNr00j8xJuHC+N
phLxWjoIHz50lHKpLKgWWDXPuoUGQO3CEJGR3tU+eqI+F4dHgpY440uYGUERZLwM
30d3waMa5HS3e/YfFKwq/oUY+7zgXLci2tudPOHGni09M/n8+I4wEF8EdXEFYOxv
domlOxeOHoCqdxCF52VWK2GhTxKVSoGfz3QCButlJft8O+TaWGH7UW0yqZ8RL+x0
QOZEUYJL11dcIigGgN4tgOhO0zGf6p7iYMZz7ISfxbkuLEg1DLFI7DCvzkylKyR/
FBt2ByvJd6MTBzum0lu/OIs5/8anwvzex79SFTE3qDO4Fh/prZ5t/OowxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMW7/tEXszYRAp7atI6dfsV7ojpBMB8GA1UdIwQY
MBaAFEq218Ro0JLJITFNZkc8+lOFHNaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQt
MDU3NjRjN2VkYWE3LzEvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQtMDU3NjRjN2VkYWE3
LzEvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcpm74l8
Vol7pnNtwUSxpsuBX7Gic9jsNwI95yEi60L4qDQisLGDBG9u4IP5f1B/Rqf6PbR/
atb+mrKk8cwcDdwHg+Jv/Zg1OR/tJqqlFPxXzXwWanBNnWa40IGvoH4AQ+vCtyhJ
1w2dES+bTodw+l39ynsc6EjNxXFp+Lonujw1eTjTgpGTOqSyqS20gQDFjIaJbFsP
MSP4a5JxRU8b9O4YEDoupR3nH6VxLZRr6AUxk7nad//x0ktsqKg2duk6A73luoPj
mLvOyf1uAcdVxlcoaywmHl8fvZxS7QFKOHz5JYPCX9AZOYbLCIUfASaPZ6UApiwS
31bBbtTe5gjP5Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:03:52 2025 by rpki-client