This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File:                     sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier:          SOKWvUG7mNUpyGUZv26yb/+2ss4Zg1y4mjjfUZZqqUk=
Subject key identifier:   64:96:14:55:A1:91:0A:AC:C6:07:12:68:AA:DB:F1:16:B4:A3:D8:F7
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer:       /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial:       019B07EBD5D89F84A1F4D9260A1A0C7C50F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number:          176E
Signing time:             Wed 10 Dec 2025 11:00:54 +0000
Manifest this update:     Wed 10 Dec 2025 11:00:54 +0000
Manifest next update:     Thu 11 Dec 2025 11:00:54 +0000
Files and hashes:         1: jYCp1px7d3_I6mefNTn8vuzWBOg.roa (hash: Pv+cwNn5v2uyPM9DJOrn9OfaFC2aCdBmSBHPyx9HtlM=)
                          2: rAkcIeR16JbVpYeePcru3Xd_9Fo.roa (hash: 5QKOAoJ3RyBbcQy0L3k19T9nHrTzNr6BOoQXHbBl8Lc=)
                          3: s25eqAa9Ba2subgM6OQ8ydOvSIs.roa (hash: 2d5Cwu5/K3ZqTMpiVXzf7ig4e2nE3AarjZ+2JLhcJaM=)
                          4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: C6dEcavDO8XbBRfJImjXiXrLYspaIGxK91GhxcP/zu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:07:eb:d5:d8:9f:84:a1:f4:d9:26:0a:1a:0c:7c:50:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
        Validity
            Not Before: Dec 10 11:00:54 2025 GMT
            Not After : Dec 11 11:00:54 2025 GMT
        Subject: CN=64961455a1910aacc6071268aadbf116b4a3d8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d1:e9:7c:01:4a:6b:e9:a1:a2:8e:3f:2b:21:
                    35:26:f5:c0:14:d5:7c:0c:ba:9d:a9:a5:1d:8a:f6:
                    08:f0:5b:5e:b8:ea:b5:65:39:87:d8:fd:fb:8b:2c:
                    6d:cd:5b:fb:02:da:b1:0f:82:f7:ce:7f:9f:0a:3e:
                    a4:6e:bd:1f:f6:57:34:38:f9:6a:d9:f4:a0:58:1d:
                    29:4a:ef:c0:88:5b:49:63:23:21:77:93:31:de:06:
                    fc:f9:4b:14:0e:7b:1f:0d:ff:20:e0:f2:90:4c:61:
                    d4:37:d9:45:e6:78:27:52:a3:af:c1:bd:05:4f:30:
                    f0:37:d5:c0:15:5a:b3:1a:b4:f5:f4:70:b7:a8:a6:
                    3d:be:e1:7e:4b:cc:e9:1e:40:92:10:97:bf:73:e1:
                    b5:d9:4e:85:52:db:25:01:19:c1:a9:0f:ff:18:cc:
                    b7:54:15:ef:5f:42:53:ca:14:a5:71:68:ea:e8:a4:
                    7a:5e:f4:68:48:ea:ab:bc:08:40:08:a4:6d:b3:0d:
                    dd:65:2d:db:e2:8d:87:4b:d6:de:c2:a0:b8:f2:1b:
                    81:1d:4f:3a:0f:2c:c6:2e:11:32:53:a3:e6:c5:ed:
                    16:15:a2:7e:c8:d5:f9:eb:b5:fc:c1:1a:e6:49:8a:
                    82:16:72:f7:95:5a:3d:9b:16:fc:a7:c2:cd:80:d4:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:96:14:55:A1:91:0A:AC:C6:07:12:68:AA:DB:F1:16:B4:A3:D8:F7
            X509v3 Authority Key Identifier:
                keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:17:af:69:1f:30:47:95:44:28:2d:6d:ca:91:aa:a5:6e:19:
         6e:3f:3a:85:c7:a3:5c:ea:20:de:68:cc:cd:8a:f2:fb:75:19:
         78:79:f1:4d:9c:2f:15:05:29:cf:0b:25:fb:a8:59:ac:76:c0:
         ba:20:18:0d:bb:4a:35:3e:03:31:77:5e:32:2a:73:b5:ba:c6:
         94:0f:ad:3d:16:4d:57:4e:32:84:a2:50:00:ab:3d:b8:e6:be:
         8a:23:62:50:e7:90:e2:04:58:43:df:5b:bb:fa:17:3f:5f:fd:
         1b:c5:2b:b2:7c:50:c0:db:ed:43:cc:b7:f2:2d:41:5a:12:4b:
         35:81:2d:11:60:8d:3b:5f:fb:fb:ac:83:c0:a2:bd:21:fe:b9:
         7d:d9:ca:48:3f:ab:d5:93:11:6c:4f:89:32:a9:02:8f:20:60:
         d5:d7:60:df:17:60:e0:d7:f7:74:ab:24:c3:a3:cb:f7:63:76:
         c0:46:2a:e4:de:3a:ca:1b:94:76:53:f0:1b:b4:fe:e4:9e:84:
         5d:cc:6b:0e:98:18:4d:8c:e0:d8:b3:dc:7a:9a:65:54:b3:d9:
         a8:99:95:35:50:d8:73:b3:01:9c:7a:ef:f6:36:0b:68:46:e1:
         33:23:3e:ad:8d:73:ef:81:5a:d8:64:36:66:fb:cb:0c:f2:ef:
         0f:a9:22:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 18:27:16 2025 by rpki-client