This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
File:                     sWk_G-ZX-4xxvLucd75UqTctsEU.mft (raw, json)
Hash identifier:          U4sLIb31xJ/klR65Itmfq6Q0oLwsIc/Hsw6MP3eTI48=
Subject key identifier:   55:5E:D4:12:0D:AE:7C:AB:85:E6:DF:EC:5C:81:6B:B0:0B:C0:1E:4D
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Certificate issuer:       /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial:       019B38A2A840E632672DAF8D79E2C5CB9C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
Manifest number:          1719
Signing time:             Fri 19 Dec 2025 22:02:22 +0000
Manifest this update:     Fri 19 Dec 2025 22:02:22 +0000
Manifest next update:     Sat 20 Dec 2025 22:02:22 +0000
Files and hashes:         1: LCLdln04vZQC1VrtG1fTPHEb70Q.roa (hash: oudWmt2A+UBjTTJVpYPeyxclYRpQQ+QQ+KUoZ4KwoZ0=)
                          2: nsMiMZPA9gAx5-3WroCpND5hgHk.roa (hash: LGSjiJkAkGJ/PXxonpdneeIWsA2TPApQ0M2tU2szz2w=)
                          3: sWk_G-ZX-4xxvLucd75UqTctsEU.crl (hash: /6ErxPhdjkpiE5L1r3HNAwXtxplC2lwTaJTU8ikCrek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 22:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a2:a8:40:e6:32:67:2d:af:8d:79:e2:c5:cb:9c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
        Validity
            Not Before: Dec 19 22:02:22 2025 GMT
            Not After : Dec 20 22:02:22 2025 GMT
        Subject: CN=555ed4120dae7cab85e6dfec5c816bb00bc01e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:d8:33:28:8d:29:42:85:05:0e:6f:cc:06:
                    1e:1f:07:be:49:7f:df:d3:df:26:93:0c:4c:a9:19:
                    c9:51:d1:66:82:05:b6:63:a3:1c:58:73:64:10:73:
                    73:b5:c8:b2:ea:31:46:b6:6c:8b:7e:a2:b8:57:1f:
                    7e:17:e2:0d:d1:65:06:eb:a2:b1:2d:60:86:03:e8:
                    e9:c7:88:df:3b:ce:08:88:5c:86:9e:f6:f6:4d:da:
                    81:c1:a0:b5:4d:6a:69:c1:7c:c6:9d:87:82:45:12:
                    3c:85:c4:0c:d7:02:0e:0e:1f:27:11:4c:24:32:3a:
                    9b:7e:15:ac:9e:3f:94:4d:34:cf:84:c9:b9:a4:57:
                    26:33:c6:b1:a8:db:17:10:d3:d6:da:ac:21:67:4b:
                    30:6d:71:46:02:1e:59:ec:c1:e6:5b:27:3d:ee:cb:
                    79:68:8d:cd:5c:46:5f:6b:06:40:f6:4f:35:ac:3e:
                    bc:a8:5a:6b:b3:e6:f4:56:1b:d3:41:cd:13:da:11:
                    32:23:7d:b0:c5:95:d8:b0:f2:70:3d:7d:30:40:0c:
                    6f:ac:71:b3:f7:93:ca:91:81:84:9f:43:47:45:f4:
                    8d:e2:62:87:1c:95:ab:02:c2:4b:69:e5:4f:53:16:
                    a0:db:4f:62:07:c9:67:39:84:88:ce:6b:74:a4:c4:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5E:D4:12:0D:AE:7C:AB:85:E6:DF:EC:5C:81:6B:B0:0B:C0:1E:4D
            X509v3 Authority Key Identifier:
                keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:26:1b:ac:a7:d1:74:d8:76:7f:e9:bc:b9:88:14:8d:aa:a3:
         95:b3:a5:77:d4:bd:d7:a2:20:bc:92:41:0f:99:e5:92:cc:c4:
         9e:d5:59:08:8e:ae:1a:da:58:2e:73:30:b1:ff:71:6c:ba:d8:
         16:2b:b0:64:f7:e3:f2:81:a4:5b:56:7e:ee:16:74:42:9e:9f:
         b7:58:a6:87:aa:c0:de:e9:68:b4:27:da:5a:65:04:3d:9d:6a:
         66:89:29:99:1f:79:03:fe:77:cd:66:42:46:7e:23:db:42:22:
         a9:2a:04:c2:d5:a5:1d:61:16:db:e3:30:59:26:bf:ec:5f:a7:
         68:5b:f3:5f:f1:60:9f:6f:33:13:96:20:b0:e0:3f:25:c3:c2:
         ae:2c:1e:d0:d7:7c:26:8b:2c:cb:4c:7d:a2:24:2e:87:14:a0:
         52:d4:52:fd:e0:fc:8d:8a:5a:ee:0a:cb:99:62:b6:e2:5d:f5:
         87:59:f9:9a:f2:88:69:58:6e:29:39:bd:13:eb:c7:72:42:f7:
         d7:fd:de:9e:79:1c:13:89:98:4d:77:76:45:47:04:30:d4:8d:
         83:89:af:f6:93:94:44:ca:b0:7e:7a:f3:89:18:fc:ae:75:b4:
         c1:02:fe:44:8f:aa:56:92:1e:59:23:08:66:13:ef:ca:89:ef:
         ea:68:51:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs4oqhA5jJnLa+NeeLFy5xQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNjkzZjFiZTY1N2ZiOGM3MWJjYmI5Yzc3YmU1NGE5Mzcy
ZGIwNDUwHhcNMjUxMjE5MjIwMjIyWhcNMjUxMjIwMjIwMjIyWjAzMTEwLwYDVQQD
Eyg1NTVlZDQxMjBkYWU3Y2FiODVlNmRmZWM1YzgxNmJiMDBiYzAxZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iTYMyiNKUKFBQ5vzAYeHwe+SX/f
098mkwxMqRnJUdFmggW2Y6McWHNkEHNztciy6jFGtmyLfqK4Vx9+F+IN0WUG66Kx
LWCGA+jpx4jfO84IiFyGnvb2TdqBwaC1TWppwXzGnYeCRRI8hcQM1wIODh8nEUwk
MjqbfhWsnj+UTTTPhMm5pFcmM8axqNsXENPW2qwhZ0swbXFGAh5Z7MHmWyc97st5
aI3NXEZfawZA9k81rD68qFprs+b0VhvTQc0T2hEyI32wxZXYsPJwPX0wQAxvrHGz
95PKkYGEn0NHRfSN4mKHHJWrAsJLaeVPUxag209iB8lnOYSIzmt0pMRqKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVe1BINrnyrhebf7FyBa7ALwB5NMB8GA1UdIwQY
MBaAFLFpPxvmV/uMcby7nHe+VKk3LbBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MGY5MWYtMWU0Yi00OWU2LThkMTMt
N2NkMTQ2NTAwYjJkLzEvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84MGY5MWYtMWU0Yi00OWU2LThkMTMtN2NkMTQ2NTAwYjJk
LzEvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyYbrKfR
dNh2f+m8uYgUjaqjlbOld9S916IgvJJBD5nlkszEntVZCI6uGtpYLnMwsf9xbLrY
FiuwZPfj8oGkW1Z+7hZ0Qp6ft1imh6rA3ulotCfaWmUEPZ1qZokpmR95A/53zWZC
Rn4j20IiqSoEwtWlHWEW2+MwWSa/7F+naFvzX/Fgn28zE5YgsOA/JcPCriwe0Nd8
Jossy0x9oiQuhxSgUtRS/eD8jYpa7grLmWK24l31h1n5mvKIaVhuKTm9E+vHckL3
1/3ennkcE4mYTXd2RUcEMNSNg4mv9pOURMqwfnrziRj8rnW0wQL+RI+qVpIeWSMI
ZhPvyonv6mhRGg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 05:11:37 2025 by rpki-client