This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File:                     SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier:          o0j8VNvIg6j9EsWIU9V+bBxwBHGqOQEnEcNzEWZX2qA=
Subject key identifier:   92:74:DC:D3:73:C0:5E:28:8C:50:73:DC:BD:5D:BB:26:13:F1:42:F6
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer:       /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial:       019B34C5E3987B233951E141F415DFC9D2E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number:          1701
Signing time:             Fri 19 Dec 2025 04:02:22 +0000
Manifest this update:     Fri 19 Dec 2025 04:02:22 +0000
Manifest next update:     Sat 20 Dec 2025 04:02:22 +0000
Files and hashes:         1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
                          2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: l5r9Xc1OEpt1TFXzEURzlwyzcUyKVVAnQHEdE/CPX5s=)
                          3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 04:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:c5:e3:98:7b:23:39:51:e1:41:f4:15:df:c9:d2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
        Validity
            Not Before: Dec 19 04:02:22 2025 GMT
            Not After : Dec 20 04:02:22 2025 GMT
        Subject: CN=9274dcd373c05e288c5073dcbd5dbb2613f142f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:73:fe:dc:7b:07:4d:1e:09:1c:d2:ae:b0:08:
                    86:dd:21:00:ae:4f:a7:a6:4a:31:14:a2:a0:bd:c6:
                    40:0c:4e:c3:e1:74:96:2a:8e:95:03:9c:ea:83:04:
                    25:a2:df:30:98:07:54:32:ee:d7:78:9e:bf:1c:6a:
                    fd:5a:f2:ab:d6:da:28:35:ad:2f:5c:22:d8:e0:81:
                    60:4a:b7:0f:cb:1d:33:a1:67:89:81:65:82:7f:c4:
                    c7:b7:68:f6:c2:55:55:2f:c8:7d:da:07:a2:72:e1:
                    05:07:82:4a:e0:2b:72:c2:a6:67:f8:92:27:69:8c:
                    9d:17:0e:a1:89:46:a5:e9:d9:58:e6:76:d2:23:b9:
                    7d:97:e9:48:3e:5e:4a:05:4d:fd:57:03:f8:5f:ab:
                    4e:91:44:4c:c6:0f:1c:5d:1c:57:31:9b:ab:b3:33:
                    1a:25:be:37:55:80:9b:09:2e:5f:24:27:ce:aa:10:
                    84:f2:59:08:14:7f:23:98:b8:b9:b2:93:5d:69:c6:
                    bc:43:4f:3f:09:78:8e:e2:74:72:6b:22:ad:1c:a3:
                    81:e6:48:5a:27:6d:45:8b:09:cc:f0:f1:f8:82:23:
                    95:1a:46:36:4c:4c:67:e9:13:b8:c9:53:86:c2:a0:
                    0a:3e:c8:1a:d0:4d:87:c2:6b:e8:55:4d:62:07:1b:
                    4f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:74:DC:D3:73:C0:5E:28:8C:50:73:DC:BD:5D:BB:26:13:F1:42:F6
            X509v3 Authority Key Identifier:
                keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:db:f1:9c:8c:65:61:ac:3d:aa:2a:f7:7c:4f:cd:b5:8b:9f:
         db:eb:b3:05:db:f1:ac:c1:d2:7e:35:b6:5e:53:63:1f:3a:c8:
         51:f2:82:5d:b6:2f:1a:c5:25:bd:ec:1f:f2:b6:78:5b:42:d8:
         88:05:9d:8f:fa:9e:3b:49:4a:51:96:80:c5:6c:a7:09:45:70:
         ec:87:0d:b4:37:2a:3a:68:bc:b0:76:c5:d6:c7:c0:0b:f0:46:
         83:52:a6:a7:59:b8:e8:41:11:e4:2d:bd:59:58:9f:d9:e6:9d:
         d2:c8:1c:ce:27:89:44:9f:9c:54:a6:77:c1:c5:3a:fa:cc:c1:
         70:b8:41:74:ac:61:c1:62:44:c1:49:0a:b3:f2:8b:85:9f:b2:
         c5:1e:2b:6d:3e:3d:aa:d4:47:7e:b5:0c:62:e4:87:06:59:fb:
         18:57:07:b0:9e:50:83:eb:bf:96:86:e6:94:bd:95:d4:36:35:
         5d:c0:6e:5b:5c:40:9e:4f:52:0d:e5:d2:df:f7:c0:e5:ac:22:
         df:68:69:a5:f6:32:e9:a1:17:49:9a:43:33:62:55:c4:7d:57:
         ec:64:9d:32:14:f5:e0:27:20:6f:54:e7:84:02:a3:58:94:4f:
         99:7e:2a:44:46:64:3c:16:c8:25:cb:4d:a1:d5:ed:48:c8:44:
         ec:26:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:25:55 2025 by rpki-client