This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
File:                     BsvHYUtJh4vzf94MGNfIUcLQfm8.mft (raw, json)
Hash identifier:          xXadYeHmv2z/y1NQwZN89I5Ucf0kU7yrDynPtAjWvmg=
Subject key identifier:   9E:7A:68:35:74:CE:A7:00:CF:34:2F:2E:88:61:B0:49:1A:47:CF:5D
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Certificate issuer:       /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial:       019B0F011B2EBA7BA84303956DF77E8F61BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
Manifest number:          1770
Signing time:             Thu 11 Dec 2025 20:01:29 +0000
Manifest this update:     Thu 11 Dec 2025 20:01:29 +0000
Manifest next update:     Fri 12 Dec 2025 20:01:29 +0000
Files and hashes:         1: 8AWj4g0mxpAeQ6fJYXYND52Gfz8.roa (hash: 2r0E8x2l8OQ6i+ALf5Xdf7skVCZem0LAwWfFUiiW7hQ=)
                          2: BsvHYUtJh4vzf94MGNfIUcLQfm8.crl (hash: Gj/as8xS/muJh7D+aBGNm4WyE7mulpZMQG1/A0QNd8E=)
                          3: z9CRwAoKZD-WKyzEgGIY-4pomCM.roa (hash: GIFVDo3J/VItfarKhSpqOK3aHLE2Bigm2lGriNtj4SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:01:1b:2e:ba:7b:a8:43:03:95:6d:f7:7e:8f:61:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
        Validity
            Not Before: Dec 11 20:01:29 2025 GMT
            Not After : Dec 12 20:01:29 2025 GMT
        Subject: CN=9e7a683574cea700cf342f2e8861b0491a47cf5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ec:a9:1c:9e:51:19:a8:2c:09:ad:1e:0c:08:
                    e3:d4:f4:24:dc:89:af:47:72:23:14:79:95:ab:2a:
                    10:06:5a:9c:c8:f7:1a:ee:90:d3:ca:d6:4e:85:48:
                    f5:53:33:97:dd:de:5e:3e:ad:74:e0:2b:c8:78:af:
                    ba:3f:c6:9a:2c:32:d0:bb:69:de:ed:0d:7b:b6:cb:
                    85:40:46:fa:22:b6:23:a1:24:4d:b4:e9:65:0f:eb:
                    e1:34:7c:ca:85:0d:c0:65:3c:6f:8e:c4:84:10:61:
                    bd:79:c0:e2:a5:31:3d:b1:50:c6:ba:6a:7f:22:3d:
                    9d:ac:5c:9a:b2:59:6a:43:45:f4:6d:5a:74:7f:b5:
                    b5:36:4f:f0:d3:0a:76:f0:f1:76:68:94:eb:a3:6f:
                    32:fe:9c:93:5b:02:ee:22:c4:83:2e:0e:85:9b:23:
                    e2:17:3b:2f:75:61:3c:53:7a:6f:fb:12:bd:e8:8c:
                    f6:64:3e:7f:37:a8:10:02:90:8d:a2:d7:3a:65:1e:
                    e5:56:d4:f8:a1:30:da:0c:2c:92:b0:2f:eb:05:38:
                    56:6d:92:9f:92:4c:e7:b8:a1:78:5d:91:ee:5b:a9:
                    dd:ca:84:f3:f1:3b:9a:4e:3e:b3:38:34:8d:81:ba:
                    14:c9:2f:48:34:9b:1b:12:04:82:0b:85:72:e1:95:
                    f1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7A:68:35:74:CE:A7:00:CF:34:2F:2E:88:61:B0:49:1A:47:CF:5D
            X509v3 Authority Key Identifier:
                keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:af:c5:b6:53:11:d3:be:a5:ab:1d:8d:5d:c9:cf:52:e7:df:
         82:6b:ef:94:4a:24:8e:f5:14:57:da:3f:80:f2:80:59:54:6f:
         49:54:ec:46:71:dd:19:14:94:2e:6f:2a:fa:3f:62:99:4b:6f:
         ae:18:5f:17:13:36:e6:c7:df:1b:d1:63:1c:b0:dc:f9:97:df:
         e5:8e:1b:8c:0c:91:ec:30:0f:e8:e4:b0:dd:32:66:de:1b:cb:
         38:0a:4f:f8:5d:9e:6c:7a:a9:1e:1d:15:58:2a:d9:34:c6:b1:
         74:db:e6:5a:ee:06:9f:0d:e2:ca:22:ac:0b:3f:b3:c7:dc:7d:
         72:8e:89:9d:c7:57:b6:c5:e4:e1:fb:d9:b7:02:11:df:1e:45:
         ea:bc:f5:d3:32:7f:55:9f:40:f8:63:3d:46:9d:66:dd:5a:2d:
         0c:eb:fa:6b:28:be:c8:b5:bc:cc:3d:e3:b8:f6:16:30:dc:f8:
         4c:cf:e7:b9:e0:a0:91:3b:6d:fc:de:eb:b0:e6:4a:d2:08:7b:
         13:ab:5b:d6:65:77:dd:ef:fd:3c:be:e3:c1:14:1d:2c:e5:91:
         39:3b:fe:6d:ca:cd:34:57:67:5a:0f:bc:1c:73:76:c9:50:92:
         82:d0:e6:f9:30:93:55:6c:72:e2:b7:42:d5:19:ce:3b:74:76:
         79:e8:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:11:01 2025 by rpki-client