This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
File:                     bss_s76ozI4249p9nEcEm_xv-xQ.mft (raw, json)
Hash identifier:          XdjKuVavcCaTZeFzfpd5XyWlcqOmZzwmmq7etY8Eq2Y=
Subject key identifier:   E7:32:1A:03:1C:72:FB:14:EE:DB:FA:9D:61:0C:12:48:30:13:E7:EF
Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
Certificate issuer:       /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Certificate serial:       019B342015FF7B53B6BB3F85F1AD5D406ACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
Manifest number:          1786
Signing time:             Fri 19 Dec 2025 01:01:16 +0000
Manifest this update:     Fri 19 Dec 2025 01:01:16 +0000
Manifest next update:     Sat 20 Dec 2025 01:01:16 +0000
Files and hashes:         1: HpcoPHWXelsEc83A5lrjHQcz4ck.roa (hash: z5HkkcDJsILTMlUiHF/hxZcjE8u956W+aTccBwWVcDI=)
                          2: KaQ1cbhsU-_BkoECZGtKOYFMwp4.roa (hash: l5AAqJ6KrxG8q9wOC3vocpvn5IVvSVAwWKvgrRqMXhc=)
                          3: SA-FzbdtGCCG9QKC4S4YHJSWsmI.roa (hash: PGidG7Ka16kE9y3JRE1oncEZXH6tKTIKybnjJfvB2js=)
                          4: bss_s76ozI4249p9nEcEm_xv-xQ.crl (hash: c18aQYATyQw77Te/Hov7h2ejiUa7cPx4yoP3xA9VxIQ=)
                          5: uipqeN76722FPmspleIyOjfn3Zk.roa (hash: gwJEBBmEVVFOjb4Xj28XR2GIE/hpooHskPB8J+P99Gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:20:15:ff:7b:53:b6:bb:3f:85:f1:ad:5d:40:6a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
        Validity
            Not Before: Dec 19 01:01:16 2025 GMT
            Not After : Dec 20 01:01:16 2025 GMT
        Subject: CN=e7321a031c72fb14eedbfa9d610c12483013e7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:17:00:74:e0:2b:c5:16:41:c5:eb:d9:0a:
                    4b:75:b9:94:4a:9e:0b:a6:67:75:bc:f9:b0:f4:f6:
                    f7:c5:38:bd:52:c6:78:ce:77:bd:40:10:47:79:b6:
                    e1:e7:ce:b3:21:b5:9b:b0:e6:e1:43:8c:1b:f5:9b:
                    eb:c5:6c:05:db:de:0f:bc:ee:1b:d1:67:42:50:c6:
                    f9:f8:49:fa:ed:00:ee:a7:a5:9a:f8:e6:e6:8f:e2:
                    2a:f1:82:d0:38:5f:3c:70:bb:2d:a2:73:ab:62:bb:
                    7d:f7:ef:3d:41:a8:15:34:6a:ae:56:99:f5:61:b3:
                    e3:0e:14:cd:a2:9e:28:81:12:04:40:dd:63:42:8a:
                    82:9a:a0:db:6e:e7:02:20:75:b0:8f:99:f2:36:97:
                    f5:b9:2c:cc:50:25:6c:68:ab:f1:80:b5:98:13:81:
                    9b:a8:a3:aa:a6:76:9f:9d:61:49:0f:1e:56:43:8e:
                    dd:f7:bc:73:e8:48:8c:b7:35:a0:e1:c6:55:a0:b8:
                    40:ee:7d:0e:76:45:8f:19:95:d2:d6:6f:d9:0b:c3:
                    17:75:df:20:74:0b:de:e2:a3:08:09:8a:a0:ab:69:
                    2c:a7:36:08:00:80:ba:5a:d4:d6:9f:00:7e:09:80:
                    34:ab:1c:f4:f8:1a:43:74:29:77:4d:ae:f1:16:6d:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:32:1A:03:1C:72:FB:14:EE:DB:FA:9D:61:0C:12:48:30:13:E7:EF
            X509v3 Authority Key Identifier:
                keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:48:69:6d:f5:9f:64:65:9b:04:ee:d0:e9:00:e5:22:50:75:
         e1:50:7b:c5:e0:7f:37:50:59:96:07:9f:b9:f8:c7:e9:a3:d7:
         3b:0d:8f:c0:3f:9f:6b:90:0f:73:3c:03:7a:98:79:37:9a:a9:
         1f:d8:aa:65:99:80:c9:93:1f:4e:31:bf:7f:54:3f:e0:7f:f1:
         96:2c:6b:60:33:0a:a2:5b:44:21:3b:ce:c1:46:70:d8:66:80:
         49:59:49:4e:b9:c8:bd:23:ec:0a:77:63:cc:d5:cd:a7:4a:b7:
         6a:4d:b6:68:8a:a3:34:47:b5:c7:e1:14:4c:57:05:7d:a8:28:
         9b:3b:43:45:d0:01:87:5c:b6:e5:b0:a3:11:a8:c9:75:37:80:
         6d:ca:5f:d2:73:71:3e:1e:03:30:77:65:96:11:55:c5:78:a1:
         00:6b:59:9f:32:12:d6:2f:0d:34:83:fe:24:6a:7d:06:34:18:
         07:1c:bf:3b:78:87:0f:94:b9:c6:d7:3c:fe:de:b4:de:c0:96:
         e6:4e:21:9b:43:1b:32:e8:21:9d:28:f7:8f:8e:75:90:be:09:
         b6:75:c8:c8:6c:bb:27:0b:86:fb:a9:00:69:4b:32:30:b3:5a:
         99:ca:87:94:0b:59:97:95:90:ca:77:b3:4e:40:d5:7d:9c:8b:
         05:16:8d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:40:44 2025 by rpki-client