This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File:                     SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier:          7KzSf0OvMH7ss6VsIkpo7APWCMIVuspHwy/PwuPkWLw=
Subject key identifier:   79:AB:BD:C5:1D:E3:7A:22:0D:E4:49:EE:05:A4:E3:A8:2B:23:DF:AF
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer:       /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial:       019AF19AAFFED33930F88E19189E54D71C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number:          175E
Signing time:             Sat 06 Dec 2025 03:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:37 +0000
Files and hashes:         1: C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa (hash: ZM7c9sV798W9KVJ3kQt3+KcxqmeF+wXg6yCfeTfvBKg=)
                          2: CXC2XsvDIqaanTmqd2a1qzMnjWs.roa (hash: QAIN6LBn+W+vlGLr5cVirBbL9u+a95dTjOFvgbUMGX4=)
                          3: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: mDMn0c6gGf5WwrU8zlchrOHjUtAZYW+q6kTtXqeYHFY=)
                          4: hWRqGYVmCWMq0Y1sle0EKmWSB94.roa (hash: obdTuMexMzDiPJAN90w8Hcb2NiK0kbzvsWZeLWPpsqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:af:fe:d3:39:30:f8:8e:19:18:9e:54:d7:1c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
        Validity
            Not Before: Dec  6 03:00:37 2025 GMT
            Not After : Dec  7 03:00:37 2025 GMT
        Subject: CN=79abbdc51de37a220de449ee05a4e3a82b23dfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:fa:e2:15:3a:73:76:5b:35:d0:f7:01:48:
                    ff:9f:bd:b1:ac:1e:1e:c3:05:c9:89:13:2d:c9:08:
                    cb:87:a0:d8:ca:91:2d:b0:5a:35:1e:d6:54:de:6b:
                    b5:1a:c3:25:ca:b2:21:ef:5b:28:a6:52:6c:d3:0a:
                    3c:89:f3:47:f5:f7:2d:2b:81:23:f0:a9:7b:c9:ac:
                    e1:36:8d:ac:cc:59:fb:b7:51:c1:c2:35:0a:70:d0:
                    76:0a:dd:e5:4f:70:b4:b3:46:35:c3:20:8b:75:81:
                    a6:92:5e:54:38:df:ee:7f:88:60:9e:a1:f6:36:0b:
                    87:c6:fb:21:8f:e1:73:df:8a:51:48:e5:68:ee:a4:
                    98:45:cc:ca:10:14:5b:84:31:bc:78:00:4e:07:66:
                    73:d6:0b:a3:e6:ec:79:be:1b:ae:5b:53:05:8a:86:
                    e0:f5:c8:31:be:1c:ad:19:23:11:43:10:b4:f2:a2:
                    d2:0f:2b:b4:74:ad:fa:df:0d:55:16:29:3e:e9:a4:
                    7b:05:51:cd:33:4e:c9:00:ec:17:30:f4:af:fc:04:
                    98:f8:76:a6:37:a2:5a:30:eb:12:1d:92:a1:f4:33:
                    a3:bb:6c:2f:5f:50:8b:8c:42:e7:37:87:7a:12:48:
                    1c:79:36:bf:30:5b:ae:52:a0:09:f9:b3:c8:20:59:
                    3b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AB:BD:C5:1D:E3:7A:22:0D:E4:49:EE:05:A4:E3:A8:2B:23:DF:AF
            X509v3 Authority Key Identifier:
                keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:01:13:d4:8c:1e:15:09:74:c8:af:11:19:81:71:e6:7a:3c:
         b0:e2:ae:b5:8e:d9:fd:5d:be:21:8c:82:d9:a5:06:00:25:9d:
         af:7d:aa:c2:34:33:20:2e:78:89:20:fa:d8:36:f4:2d:da:fc:
         86:e2:3e:af:b6:8f:80:75:e2:db:b5:e1:19:6e:1b:39:c5:df:
         1e:96:9e:70:38:70:f1:99:a0:29:9b:51:ec:e9:00:be:d3:cf:
         d5:8b:6e:eb:74:9f:d8:68:ce:d2:5b:ec:d2:05:f6:13:c4:85:
         ed:88:b9:83:ea:e5:8a:8f:ee:16:8e:0f:9c:3a:31:70:e5:09:
         01:db:a9:1f:8a:75:f3:17:33:24:53:cc:d2:bf:b0:ac:e5:bd:
         ed:47:74:dc:4c:4a:5d:4a:ce:7a:dd:3c:96:6c:fc:50:ae:d1:
         bb:c4:83:6b:31:69:1e:97:bc:02:f9:e5:a2:f4:94:98:58:49:
         d8:b2:5a:eb:b2:78:c4:27:67:41:c4:2e:23:da:c0:bc:df:1c:
         e6:7b:68:ee:70:8f:95:e3:29:ba:45:f2:61:75:41:fd:5c:9f:
         05:67:98:62:f4:e8:0c:c5:3d:ce:20:7a:af:25:c5:81:8f:9a:
         0e:40:0e:80:cf:4d:26:56:a7:26:8e:db:0f:e2:f0:b5:c6:af:
         ad:f1:35:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:49:42 2025 by rpki-client