This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File:                     sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier:          aU0Vr+ZYrqkyOQkAmX9S8gXZkPpnGRqxyjmyZNYStmE=
Subject key identifier:   22:E6:E5:D6:FE:22:CB:D7:22:DE:A1:7B:FA:D3:91:93:55:A2:28:6A
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer:       /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial:       019B47A627C27C2A411E6305619CBDCFFD11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number:          178F
Signing time:             Mon 22 Dec 2025 20:00:29 +0000
Manifest this update:     Mon 22 Dec 2025 20:00:29 +0000
Manifest next update:     Tue 23 Dec 2025 20:00:29 +0000
Files and hashes:         1: jYCp1px7d3_I6mefNTn8vuzWBOg.roa (hash: Pv+cwNn5v2uyPM9DJOrn9OfaFC2aCdBmSBHPyx9HtlM=)
                          2: rAkcIeR16JbVpYeePcru3Xd_9Fo.roa (hash: 5QKOAoJ3RyBbcQy0L3k19T9nHrTzNr6BOoQXHbBl8Lc=)
                          3: s25eqAa9Ba2subgM6OQ8ydOvSIs.roa (hash: 2d5Cwu5/K3ZqTMpiVXzf7ig4e2nE3AarjZ+2JLhcJaM=)
                          4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: P+OmOYSX+X/PnEnT+ZsglEq7YEilhbRR4D4fHbA1XCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 15:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:47:a6:27:c2:7c:2a:41:1e:63:05:61:9c:bd:cf:fd:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
        Validity
            Not Before: Dec 22 20:00:29 2025 GMT
            Not After : Dec 23 20:00:29 2025 GMT
        Subject: CN=22e6e5d6fe22cbd722dea17bfad3919355a2286a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:72:4d:35:f9:d3:04:22:0a:36:ed:9d:de:a3:
                    51:6d:fd:36:93:ce:dd:b3:86:00:39:6a:ad:95:35:
                    b0:f6:a3:e4:39:bc:8b:57:05:65:78:14:bf:2e:9a:
                    d2:7d:dc:e9:4d:14:dc:bc:3d:5a:75:c2:cd:d8:86:
                    80:25:f4:9f:4b:ad:8d:6b:79:85:cb:a2:86:ee:a3:
                    ea:96:c7:65:20:a9:7c:36:8b:51:09:db:ac:6a:fd:
                    7a:09:ac:58:df:0d:9a:ca:04:65:8a:15:e2:e5:2f:
                    dd:0d:06:ba:4d:ce:06:15:3c:5a:c6:ff:88:ba:78:
                    5d:5c:80:ad:80:b7:d7:88:29:df:18:e2:d1:13:4b:
                    15:1c:a5:f4:73:74:72:cf:9a:00:72:ab:34:e9:1f:
                    58:40:5d:44:b7:c4:cc:56:8c:83:8d:30:49:18:0b:
                    8b:bd:d0:bf:c0:e0:54:b1:98:d4:8b:29:bc:06:3a:
                    59:d8:b0:c1:7a:62:b0:ac:68:fe:03:f5:76:4f:ff:
                    77:26:ea:41:18:d4:24:c0:5d:01:7e:ef:cd:b7:76:
                    9d:04:59:f4:a9:44:14:11:2b:44:e3:e8:88:ca:4c:
                    17:f7:35:59:28:f1:1a:f9:1d:d0:9c:08:19:e2:3a:
                    63:47:7f:2c:98:7b:83:34:d5:06:3a:ca:0d:18:f0:
                    f6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E6:E5:D6:FE:22:CB:D7:22:DE:A1:7B:FA:D3:91:93:55:A2:28:6A
            X509v3 Authority Key Identifier:
                keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:18:45:82:68:d5:45:60:42:70:bd:73:f5:3b:d5:61:84:01:
         84:f8:9a:ca:e8:3d:9b:d1:cf:7b:eb:6a:2d:73:e6:67:e5:2c:
         61:31:5b:a8:3c:70:04:6a:80:af:4f:59:c2:cc:84:87:9c:ee:
         c3:81:2b:b8:6e:18:0e:22:54:d1:a3:da:09:f0:55:59:39:e2:
         42:9f:a9:37:d5:0a:77:41:dd:66:2d:d5:09:96:28:fb:15:6c:
         fc:9c:13:78:10:ca:8e:56:d7:bb:b0:db:5b:64:ad:33:c3:17:
         0e:fb:1b:73:51:b8:32:6a:a8:26:e5:05:f9:a6:38:ae:ca:65:
         d9:69:e3:7d:f2:b2:d4:69:8a:76:e5:75:f9:b3:3a:7d:df:88:
         4a:c9:83:98:d3:81:a8:ed:62:25:6b:ea:df:5a:ba:96:5e:fb:
         dd:77:f5:1e:d1:1a:dc:c2:3d:e9:6b:11:83:4d:8c:f5:ee:b6:
         12:78:39:93:2e:6b:61:0c:25:5f:44:e6:db:a4:85:94:65:b2:
         0f:f5:ed:18:66:e4:0f:95:61:1f:7f:7b:ba:b7:da:26:2f:3e:
         a2:39:c2:28:20:fa:f7:e9:b7:fa:43:f0:b1:f6:55:0d:b4:5b:
         f6:23:41:e3:00:57:9d:57:ce:81:40:51:1c:4b:d3:d0:3f:63:
         bd:a3:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 22:14:50 2025 by rpki-client