This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
File:                     SVls7MId0CZ3pyfvN_BolUbqUJc.mft (raw, json)
Hash identifier:          LsMSXCrq43LshBChXTYX2jKrJHFZM4rXHQptlU+axzY=
Subject key identifier:   87:CC:D6:BA:63:2E:C4:08:EE:A7:01:7A:04:32:B0:CC:61:ED:88:59
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Certificate issuer:       /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial:       019B1FBD79BB7DF2DFF81D635091A0E6EB1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
Manifest number:          1785
Signing time:             Mon 15 Dec 2025 02:01:09 +0000
Manifest this update:     Mon 15 Dec 2025 02:01:09 +0000
Manifest next update:     Tue 16 Dec 2025 02:01:09 +0000
Files and hashes:         1: CgdiB-LvALW6eF8te_abb7XhHzw.roa (hash: FMmsOk3IFJDqEQcmSu8en9nadePYE7fdzLtSrsLGOLw=)
                          2: DheYS6kXlTHMFO59gGUyPsW4eds.roa (hash: n/9tk9beMA1XkkvC1xAFHfiOMzHgwQU8810EuXnnbI8=)
                          3: JyWaH8R7Bb18Hp5FODhCm0Qm4yk.roa (hash: 3YUqJIFeG4oViBaCgEnkhKEkkHy1Sj0m4RpDsg9NjFo=)
                          4: PBiMn82gChQHdPPkS-Oqs-Fnbh8.roa (hash: egCOLbWqDbWYCFc5/6lxhgVs+rP+45wHq+Te93L2gCw=)
                          5: SVls7MId0CZ3pyfvN_BolUbqUJc.crl (hash: LAbIzoWaVhRJ/zTf0USMMMGdVeSWayfIZoY79h1+bSc=)
                          6: heiFtANLkWlLrNLuIvdxl9kb0CQ.roa (hash: TnGpURbkXAESJ2Gk47wlG4sEj84D3SKrlpwSgF/8yys=)
                          7: lH-qHFc7crMLSf4GUnVsxi7d5S0.roa (hash: mgWBS9e4WAOzI2AGy8eUIJvq5GzFNK7+k2P1TPWDi18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 02:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1f:bd:79:bb:7d:f2:df:f8:1d:63:50:91:a0:e6:eb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
        Validity
            Not Before: Dec 15 02:01:09 2025 GMT
            Not After : Dec 16 02:01:09 2025 GMT
        Subject: CN=87ccd6ba632ec408eea7017a0432b0cc61ed8859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:38:96:63:c3:a4:3b:27:e5:b8:1d:6b:25:
                    e8:8a:b0:d4:29:10:86:8b:e3:1b:e5:ed:11:79:e3:
                    8e:2c:92:da:68:e5:1b:a2:22:16:fc:b5:9f:3b:cd:
                    1b:a9:1a:d0:43:ac:f3:75:68:76:0b:d1:36:4f:86:
                    9f:66:ac:43:56:b4:86:92:eb:fa:15:a8:bb:45:0e:
                    d9:d2:75:ad:95:b3:bb:40:79:b8:a4:40:b5:41:f2:
                    b3:ad:1b:e3:2f:13:bc:f0:36:53:f2:8b:22:4b:31:
                    0a:06:84:ce:eb:e9:14:1b:d6:83:43:1e:43:0a:9c:
                    51:a1:9a:fa:40:17:2c:17:c5:75:6a:12:72:0d:b3:
                    47:ac:fd:ad:9e:a9:93:ca:1c:80:78:bc:e0:41:ec:
                    c0:ae:78:b9:da:71:ab:03:0b:e4:67:4f:9c:28:07:
                    d1:2c:cd:25:e5:af:7b:4f:7a:73:5b:ba:d7:cf:c2:
                    50:3d:71:d0:82:bf:e2:b7:57:b7:87:e1:19:45:ed:
                    fe:93:d6:23:99:da:68:49:21:40:be:46:dd:c3:07:
                    46:03:41:03:0f:32:7f:52:fa:2d:63:59:36:ff:34:
                    b3:bf:87:c6:d8:9f:aa:21:37:f7:48:04:2e:52:2b:
                    99:bc:4b:4c:80:87:40:0b:47:32:eb:47:ad:e7:2a:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CC:D6:BA:63:2E:C4:08:EE:A7:01:7A:04:32:B0:CC:61:ED:88:59
            X509v3 Authority Key Identifier:
                keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:76:38:6d:e7:10:49:10:9e:3c:ab:3e:59:05:ef:75:44:
         48:14:30:0e:3b:1e:c6:4f:73:d9:3c:c1:d3:05:ee:92:01:ed:
         da:a6:52:71:a2:77:01:29:1b:28:12:d3:ac:84:fc:7e:07:4f:
         2c:6a:e3:e3:d9:16:39:4d:64:92:f6:60:fe:af:88:3b:84:69:
         09:12:84:b9:3e:6a:52:03:d9:6e:49:5f:c9:a2:87:94:97:6d:
         64:97:76:39:55:6a:b6:30:66:f1:56:5d:2e:15:e8:2c:74:cf:
         d7:ab:04:e7:ab:cc:66:41:ec:16:b1:c9:2f:3a:1b:c3:3e:ae:
         97:03:7a:ee:bf:f2:dc:17:70:e1:82:a5:a9:03:5d:96:d5:b9:
         cf:3a:82:34:05:6d:57:62:13:3f:0c:47:d4:2d:46:9f:76:65:
         44:88:b5:dd:29:f6:04:ea:d4:3e:91:73:68:b6:37:6e:a8:e1:
         fc:1e:a8:8a:b4:ca:d8:48:5a:5c:e3:12:48:5a:10:60:ad:8b:
         4a:1e:9c:cf:9c:70:77:3e:1c:98:e2:5f:7d:91:cd:02:c8:fb:
         5c:2f:dc:f7:74:aa:d6:15:42:2f:33:8d:31:5b:c6:e1:9b:44:
         65:70:c4:fd:31:83:6b:f9:ed:b4:5f:4d:65:bc:6b:fa:5c:d6:
         a8:fa:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:13:46 2025 by rpki-client