This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File:                     SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier:          kurUSM/BPiHCWO6w9ZczWtfUPNom26FhztESntpdLuo=
Subject key identifier:   9A:F3:55:3F:5B:87:68:15:47:B0:2A:6B:37:7D:BF:95:E1:15:BF:1E
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019B10818081CBE8B5B75FCB30339FB673C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number:          105F
Signing time:             Fri 12 Dec 2025 03:01:21 +0000
Manifest this update:     Fri 12 Dec 2025 03:01:21 +0000
Manifest next update:     Sat 13 Dec 2025 03:01:21 +0000
Files and hashes:         1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: KR5Z9T7TOgA/OEnHrBXtbhBKbiR+ggdB46tqnKdEISo=)
                          2: galtvA878B_gyWy0hQyRkeaZi6U.roa (hash: COa1iZxjQ8Xwq/EGs0wzkzw8um4DhbZoyDMdmoMPbH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:81:80:81:cb:e8:b5:b7:5f:cb:30:33:9f:b6:73:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Dec 12 03:01:21 2025 GMT
            Not After : Dec 13 03:01:21 2025 GMT
        Subject: CN=9af3553f5b87681547b02a6b377dbf95e115bf1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:37:53:fe:58:61:cc:fa:93:fe:35:29:9f:ca:
                    16:5a:78:80:e8:9d:23:fd:5d:60:50:74:5a:f3:75:
                    78:f9:29:d1:9c:67:c1:d5:f5:48:8f:0f:a8:02:f5:
                    47:8b:ad:5c:51:8d:38:0f:fb:15:90:48:f2:57:e3:
                    cf:c9:68:f2:2e:30:88:18:40:97:e3:79:6a:a9:6a:
                    d0:bf:f1:d5:20:cc:ca:ee:66:ab:ef:b8:27:f9:7a:
                    68:51:60:ed:ab:a7:17:a3:9f:2b:25:df:53:e2:d1:
                    53:14:ad:a2:7a:ed:35:7b:78:33:24:5e:9c:61:a0:
                    b5:ed:33:0d:b4:d5:ce:85:40:4b:f6:05:9a:f6:d8:
                    7a:02:09:70:4d:ba:9d:cd:15:af:6a:80:f8:cd:60:
                    ea:e3:2b:b3:c3:b0:43:32:18:fb:29:2b:c8:6a:98:
                    78:91:ea:d1:cb:cb:b0:39:08:58:0f:81:c2:de:e3:
                    8b:43:f9:54:90:53:7b:c8:ef:61:f0:36:56:f3:86:
                    f3:e7:af:62:03:68:47:dd:30:88:79:77:e7:1f:56:
                    66:cd:06:a4:10:ce:45:f3:34:ff:2a:48:1f:bb:36:
                    00:7f:75:48:43:f3:d6:79:2b:2f:90:59:b2:0a:a6:
                    d9:06:3d:69:6a:f9:ee:f5:aa:10:9b:a5:ac:dc:39:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F3:55:3F:5B:87:68:15:47:B0:2A:6B:37:7D:BF:95:E1:15:BF:1E
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2c:0b:07:68:f9:6c:19:bd:56:61:39:9f:68:45:e7:47:99:
         4a:f5:fe:a1:4a:64:ce:2a:31:d1:c2:51:fc:ae:0b:63:4b:a2:
         d5:fa:bf:da:b5:09:f9:a2:ce:e3:34:b0:e4:fb:fa:a6:c7:42:
         2c:28:8a:48:f6:61:f8:d7:80:fb:7f:3e:a5:10:27:71:03:30:
         1d:d5:b6:b1:f2:6a:b7:ee:91:9f:0c:7c:f5:3e:da:c2:bb:8d:
         2d:ee:f9:cd:13:9a:2a:c3:5e:48:ce:3f:b9:b9:0e:9c:fd:c9:
         49:39:76:35:28:f9:34:14:bf:24:77:5e:5b:5a:3e:e2:91:a4:
         65:09:58:ac:2e:fc:28:bf:92:04:3a:f6:dd:9e:a9:c7:1b:29:
         66:4f:b9:21:b5:da:cb:5e:94:8b:fa:a2:64:d6:7e:e8:7e:45:
         99:4f:c7:50:a0:d9:55:ab:35:ef:d8:bb:8b:63:46:53:84:fd:
         94:b7:64:c6:48:5d:7c:2d:fe:2a:34:30:4b:40:af:e7:69:91:
         46:32:a9:74:a7:f3:fb:bf:64:04:c5:29:1f:8d:31:12:0d:39:
         5b:8c:a9:39:c9:00:b3:86:35:23:33:30:51:e8:e3:80:8e:f0:
         40:58:19:a6:b9:e1:37:4f:76:40:20:bf:85:52:79:f1:8b:3b:
         c5:31:ad:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 07:58:59 2025 by rpki-client