This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
File:                     SCc0v_AaPOqzULy4SyX3O-gp328.mft (raw, json)
Hash identifier:          c2fLUqiyKP7Wnu/2wzmTu/sjeiJfILNFO36LH8gai38=
Subject key identifier:   52:A3:80:17:1C:E5:18:8D:E8:8B:65:BB:B8:D4:1C:A4:9C:14:2D:5D
Authority key identifier: 48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F
Certificate issuer:       /CN=482734bff01a3ceab350bcb84b25f73be829df6f
Certificate serial:       019B1ACDA4CA57EE1CE04C98724827634558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
Manifest number:          01BE
Signing time:             Sun 14 Dec 2025 03:00:43 +0000
Manifest this update:     Sun 14 Dec 2025 03:00:43 +0000
Manifest next update:     Mon 15 Dec 2025 03:00:43 +0000
Files and hashes:         1: FsbQ_xqqVCKA7JO_7TNtMcs5uDc.roa (hash: 8oLtr32VZblrtItn64+IZffUBFTx5wRyhUTx6ephSaw=)
                          2: SCc0v_AaPOqzULy4SyX3O-gp328.crl (hash: A1bvd1ceBMGaFvKwxWIdqF3YPq3as5z4UcDZoO9dsgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1a:cd:a4:ca:57:ee:1c:e0:4c:98:72:48:27:63:45:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482734bff01a3ceab350bcb84b25f73be829df6f
        Validity
            Not Before: Dec 14 03:00:43 2025 GMT
            Not After : Dec 15 03:00:43 2025 GMT
        Subject: CN=52a380171ce5188de88b65bbb8d41ca49c142d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:49:84:77:a2:dc:54:0f:d0:a7:e8:69:39:3c:
                    fc:f3:05:f8:8d:ca:60:ad:ae:75:fe:1b:12:fd:bd:
                    9c:88:92:e9:6b:e0:29:8e:0a:a5:37:72:12:d6:f8:
                    e0:32:94:68:38:87:de:d4:37:d1:e6:83:1e:bf:50:
                    9e:d2:ff:54:d8:f9:bc:15:55:56:d7:f3:7a:31:d5:
                    ca:17:6b:1c:18:24:61:6c:fd:ea:36:38:4e:a6:1f:
                    89:65:fb:6e:23:24:1b:f9:66:b3:57:e9:45:77:f4:
                    ae:0c:e1:82:41:02:33:35:9e:70:7e:2b:8e:db:fc:
                    a7:ec:91:9d:d4:ab:6d:f2:dd:10:38:ce:f9:fa:ed:
                    7b:31:b3:1c:3a:1c:7d:c3:c8:d9:e1:03:d7:00:24:
                    dd:f2:fe:b5:2a:48:27:94:b0:d2:5c:28:1d:64:38:
                    00:04:d7:c8:ae:c3:dc:67:92:cd:32:15:83:dd:8b:
                    ae:18:c4:d7:da:b0:a4:ea:35:55:f4:41:76:5c:b9:
                    47:5e:57:36:df:e6:d5:de:3c:c7:89:87:82:5e:85:
                    af:f8:35:0a:45:96:71:e5:14:d6:3f:4b:6f:68:dd:
                    d6:60:9c:f7:50:c9:8c:ab:31:23:dd:85:01:ca:3d:
                    a3:b6:7e:cc:59:ad:50:03:0f:fc:e5:74:ed:ec:8d:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A3:80:17:1C:E5:18:8D:E8:8B:65:BB:B8:D4:1C:A4:9C:14:2D:5D
            X509v3 Authority Key Identifier:
                keyid:48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6f:12:39:16:18:c0:db:e6:0f:38:3d:00:55:5a:01:22:44:
         f9:7b:b5:73:62:8c:3e:3a:32:97:9f:1a:40:f0:e8:02:fa:a6:
         3a:ed:36:2c:80:9b:5e:69:39:a9:2a:c0:b9:72:21:2c:a1:91:
         a5:30:eb:ee:7f:29:a6:48:75:6e:8b:b1:c0:2d:af:e6:cf:88:
         ea:c3:73:6d:6a:dd:94:00:8c:e8:12:0b:86:fe:e6:3b:df:c1:
         01:cb:4a:e8:59:31:2e:83:12:7c:9d:69:98:57:a8:38:0e:88:
         bc:91:d9:64:4e:e0:58:04:71:4e:96:a5:c2:b8:5a:ae:5d:53:
         ef:e1:25:26:e8:58:ab:83:5a:69:1d:9c:38:8c:a1:c8:a9:31:
         69:4c:71:09:a5:3a:ff:57:a0:c2:5a:d4:9f:ca:10:60:b7:4a:
         3e:52:98:13:28:37:06:f9:d6:6d:5d:36:7c:77:1f:d6:db:19:
         7d:01:2a:42:b3:af:db:3a:1f:ab:b2:67:92:df:23:4a:68:66:
         02:52:01:d0:21:8d:80:8a:32:a1:66:0f:a2:d2:24:6e:24:4a:
         1e:01:6c:be:6c:d9:87:51:f6:5c:2f:c3:93:50:a6:0a:ab:a2:
         15:07:44:80:02:34:78:c8:3b:77:95:c2:e9:69:ae:c5:01:7c:
         f6:90:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 10:11:59 2025 by rpki-client