This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File:                     Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier:          2swqPZWiuPogqbAPK1aYUDJAufDFl8pYwZXFgQiBJJo=
Subject key identifier:   5C:30:FE:AF:54:CA:9A:99:1B:86:DC:9D:DC:3D:8A:8C:2C:5B:D2:A6
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer:       /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial:       019AF1D23136B2FDDAD1808E5943A9FD15ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number:          16AB
Signing time:             Sat 06 Dec 2025 04:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:15 +0000
Files and hashes:         1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=)
                          2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: xLvA5YHWvScqSphpMGa5TK9AZMMUlMmQhG36Z0dIDlM=)
                          3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:31:36:b2:fd:da:d1:80:8e:59:43:a9:fd:15:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
        Validity
            Not Before: Dec  6 04:01:15 2025 GMT
            Not After : Dec  7 04:01:15 2025 GMT
        Subject: CN=5c30feaf54ca9a991b86dc9ddc3d8a8c2c5bd2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:90:74:af:3f:17:b1:74:2f:26:18:b3:4e:e9:
                    2e:eb:42:c6:60:6a:45:77:85:1d:ba:9e:4a:65:ed:
                    f3:1b:fd:5a:29:57:a5:41:97:7a:ee:f8:be:24:0c:
                    8a:18:73:3f:a3:fc:22:0a:2a:98:59:16:7d:b1:fb:
                    7f:5e:30:84:0f:34:9d:21:3d:8e:ba:dd:a0:52:f0:
                    3c:21:f3:60:59:cf:d9:0b:91:d7:ba:6f:0b:84:1d:
                    96:3b:dd:80:67:81:b3:f1:84:b6:9e:93:13:55:96:
                    4c:98:26:5f:d8:86:ab:5e:ac:0e:b3:d4:5c:60:ac:
                    f9:b5:b3:5b:1f:61:00:2e:6f:5c:10:94:18:e5:6a:
                    ed:90:63:9e:34:1b:4d:ac:5c:ee:86:69:23:a6:13:
                    4b:a0:b8:bb:3b:a1:74:49:b4:05:f7:8a:4e:83:4b:
                    e5:bf:8f:a9:ec:2b:f8:a9:ea:31:d6:3f:0b:d8:35:
                    3d:cb:b8:ee:66:ba:9b:ab:25:7d:7e:31:38:ff:a9:
                    30:3b:53:93:5f:64:d7:16:d5:02:8f:a1:74:fe:81:
                    f7:e1:2b:ac:e7:78:f0:26:87:0c:44:f4:1c:2e:6a:
                    59:dd:31:02:9b:f5:e0:49:9b:ca:89:64:ee:9b:32:
                    14:a2:f1:b1:04:f5:a3:02:ef:42:32:9f:84:df:cd:
                    5e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:FE:AF:54:CA:9A:99:1B:86:DC:9D:DC:3D:8A:8C:2C:5B:D2:A6
            X509v3 Authority Key Identifier:
                keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:38:e0:1a:d9:c8:24:74:c5:9d:84:e6:05:22:63:cb:b1:
         8f:ac:d8:76:7b:72:50:4c:4f:f4:f6:a5:5f:7b:22:2c:d2:2c:
         cd:45:21:b3:20:38:b7:ec:06:4d:1c:e7:25:91:cf:77:b1:b2:
         14:96:34:13:73:38:8c:4e:dd:f0:37:2a:9c:b7:c5:19:74:16:
         d1:e7:bb:3f:52:52:21:c3:46:d6:dc:31:80:7b:6e:b0:45:88:
         25:35:82:4b:8a:d0:c3:af:37:cc:9b:fd:10:e1:b8:7f:fe:b3:
         ce:8f:65:d8:92:48:b1:83:b9:37:1b:2f:ec:68:a2:20:fa:02:
         fd:a7:c1:3c:7e:69:52:59:bf:9d:06:f3:be:76:6e:13:e0:8d:
         d3:8c:ba:1e:27:7a:c5:4d:45:ed:1e:b1:4f:e6:4b:3f:06:74:
         7c:f6:e3:73:08:46:1c:96:41:9e:e0:af:62:7c:01:08:ea:61:
         6c:88:32:0a:3f:e2:0a:33:ae:b5:47:b7:20:0a:20:9c:4f:c8:
         b3:2c:95:37:8d:08:b6:11:8f:49:e2:cb:a3:7a:df:4b:85:e9:
         18:20:ab:3c:6d:bd:8c:02:b1:2c:6c:b7:26:c3:34:22:94:12:
         10:ab:e2:26:da:b3:e6:a1:90:fe:0e:6a:ec:37:1b:26:98:af:
         72:9c:26:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:23:41 2025 by rpki-client