This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File:                     SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier:          BZ+SanEl9wufoK6e+h64Z/2GoJmOuWkU2pfKbdnfQYc=
Subject key identifier:   22:A7:BB:66:59:6B:59:5D:69:1D:62:1B:5D:AA:20:59:8D:80:FB:E0
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer:       /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial:       019B20D0550A75C20E3D59785852991148CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number:          102C
Signing time:             Mon 15 Dec 2025 07:01:22 +0000
Manifest this update:     Mon 15 Dec 2025 07:01:22 +0000
Manifest next update:     Tue 16 Dec 2025 07:01:22 +0000
Files and hashes:         1: RZvG8tfD1IhES3sTSq4PUTIau5M.roa (hash: 156XMiSx9vA1oBj0STlN0OZ/clFU7kVwEnhKeXGoaaM=)
                          2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: c6mlhpoa5EbboWA+VBYjrEdBWwgjqtrCyrIi/Pv5188=)
                          3: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (hash: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:d0:55:0a:75:c2:0e:3d:59:78:58:52:99:11:48:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a409555105040578cb296070074f45107252eeb
        Validity
            Not Before: Dec 15 07:01:22 2025 GMT
            Not After : Dec 16 07:01:22 2025 GMT
        Subject: CN=22a7bb66596b595d691d621b5daa20598d80fbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:11:5d:e5:77:a7:02:d9:b9:e2:eb:c8:36:
                    1a:c3:d8:81:6e:01:d5:c1:aa:5d:61:44:ec:fd:3f:
                    d6:a2:b6:1a:e5:a4:17:a7:77:72:e0:d2:4d:35:6d:
                    e3:9b:ff:97:8a:ec:e4:d3:83:f8:7f:47:e5:29:a8:
                    b8:2c:06:23:dd:02:69:4d:9b:4f:7f:99:f7:cb:26:
                    01:c7:52:64:1b:aa:d0:88:a2:7d:cb:93:29:06:18:
                    ce:8c:73:a3:4c:e8:33:65:4a:4c:7d:4d:c8:ff:38:
                    43:8f:f0:09:e0:72:89:e2:f5:f7:77:af:7b:7b:aa:
                    47:83:aa:41:2f:7f:42:a8:ec:0e:3c:82:07:48:26:
                    1b:17:9a:51:f7:a8:f5:e3:f5:a8:e7:04:01:00:f2:
                    e0:98:9c:ab:9c:88:e2:8c:1b:cb:b9:0b:32:e8:aa:
                    9d:98:01:a9:8e:a7:69:1d:fe:c9:73:3a:a3:9b:59:
                    19:d6:61:2b:0b:4c:91:57:9f:76:76:46:72:7e:1b:
                    50:83:f7:1e:ac:9d:a3:d5:de:73:e2:16:65:ce:09:
                    33:51:cf:5b:53:fe:97:0c:14:09:fb:f3:23:78:2c:
                    4f:48:c9:c2:b9:86:22:dc:43:1f:1b:bf:ad:4c:30:
                    66:9f:28:34:70:33:7f:8e:9d:10:39:c6:92:40:13:
                    cd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A7:BB:66:59:6B:59:5D:69:1D:62:1B:5D:AA:20:59:8D:80:FB:E0
            X509v3 Authority Key Identifier:
                keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:48:19:0d:c1:3f:37:51:ee:1e:b2:79:14:60:2e:d6:2e:24:
         3c:3f:f6:70:13:be:56:df:0b:a8:c3:0d:08:06:e1:dc:1c:96:
         ff:c8:2c:eb:25:6f:a2:dc:d7:a1:12:d7:eb:46:35:ef:c6:06:
         22:f0:10:e7:87:ba:37:52:f2:7f:70:d7:fc:17:05:17:ad:17:
         4c:f1:72:a7:97:0c:3a:c5:30:5b:3b:19:61:d9:54:d1:40:ec:
         e2:1a:57:0f:ea:a9:3e:7b:38:f9:b3:ab:90:ff:7e:19:4c:a7:
         39:15:10:bd:51:fd:96:01:69:c5:a0:43:e2:97:6f:82:d3:64:
         d6:ca:75:ca:ad:1b:ec:10:ee:8b:55:69:26:19:7c:34:99:18:
         37:7e:71:49:c3:5f:1d:1b:92:d1:a9:94:46:eb:b5:99:22:14:
         d1:30:08:59:ec:02:bb:c8:31:e0:d9:8e:c6:fb:82:96:f3:61:
         5b:08:39:a5:6d:78:62:72:53:c6:0c:d4:6a:34:28:94:eb:a9:
         16:2c:b6:09:cf:96:82:52:f6:d7:d9:a8:82:c4:73:d9:c6:0b:
         6a:fb:50:bf:cb:4d:55:65:cd:b6:22:41:42:21:0f:69:08:22:
         ae:98:cd:4d:0c:25:be:ef:93:90:68:51:fa:48:78:5f:44:51:
         b2:b4:4a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:19:19 2025 by rpki-client