This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File:                     sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier:          7J1/tT2gtlNWoCT0IlORRmAWhhGpwBhydF+SVDpc+b4=
Subject key identifier:   11:7B:E7:FE:04:AC:DA:2C:B4:AC:CB:34:D8:72:4B:52:4E:70:E7:C1
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer:       /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial:       019B1CF2FE9797C8DCCEE867F0AFA8359B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number:          049C
Signing time:             Sun 14 Dec 2025 13:00:45 +0000
Manifest this update:     Sun 14 Dec 2025 13:00:45 +0000
Manifest next update:     Mon 15 Dec 2025 13:00:45 +0000
Files and hashes:         1: WuP_ar5p0VQaYjgm5CdF94AIxBs.roa (hash: ydupRdA76pUpd82bhv9cS8ujQ+gdAK4Xhs2n/s0tNgc=)
                          2: m74VvsI6EdMo76uevvan59QpkqE.roa (hash: 1fe03vMMsl3oUUL4Se2ddc8JmIOlm8Qdn5iC5j3XfoY=)
                          3: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: f1fwVi2+C9ScM4mNz0gdAoBgAxv0HHSlpLLFxEmDjLc=)
                          4: yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa (hash: kF1ch8ftfefkwMb34eMIq7SQs/1Z3Ao5ZWwxrMyDhdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:f2:fe:97:97:c8:dc:ce:e8:67:f0:af:a8:35:9b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
        Validity
            Not Before: Dec 14 13:00:45 2025 GMT
            Not After : Dec 15 13:00:45 2025 GMT
        Subject: CN=117be7fe04acda2cb4accb34d8724b524e70e7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:9b:95:17:4a:6e:a5:d4:6d:57:3e:02:ad:
                    7b:02:eb:83:59:6f:b6:ad:18:43:cc:75:76:68:88:
                    58:c3:9d:1b:58:1c:b4:4a:16:e2:84:b5:05:24:c5:
                    b5:de:de:0a:28:74:52:a1:f4:20:33:d6:c0:8b:95:
                    c0:b1:77:98:2e:65:4d:0c:6f:96:9e:7a:04:95:26:
                    b9:84:04:06:e1:e1:69:25:ee:86:14:9d:3f:77:89:
                    58:1f:06:53:6a:50:a9:1d:00:6d:bc:40:4c:7b:25:
                    d6:8f:f3:9c:6a:3c:26:45:2e:75:49:27:31:34:a6:
                    c5:56:8d:f3:98:25:02:37:bc:56:b1:ab:36:3f:bd:
                    cc:bf:32:88:87:67:d9:63:5f:c2:94:fd:bf:3a:c7:
                    d8:fd:6e:20:d0:a3:d3:4b:fb:34:92:81:20:a7:fe:
                    e7:ba:c9:c5:9d:01:40:e7:6f:79:0c:c2:2c:45:9a:
                    09:a1:4a:d1:ab:f0:38:4b:33:00:57:89:50:3b:f7:
                    9b:2c:cb:2e:70:3f:6a:89:b2:7c:6a:9d:7b:d5:53:
                    7b:a3:2c:a8:f9:02:bd:8e:96:92:8e:8e:85:96:63:
                    02:56:27:a8:d7:9c:5c:f6:66:b7:c0:ba:5d:88:3b:
                    5b:ad:5d:35:45:fa:ea:cf:c2:ad:a7:e5:49:74:e6:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7B:E7:FE:04:AC:DA:2C:B4:AC:CB:34:D8:72:4B:52:4E:70:E7:C1
            X509v3 Authority Key Identifier:
                keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:f3:c0:36:83:d9:84:86:ae:f6:4d:5a:d0:3d:27:1d:27:
         93:0c:de:08:4f:74:ac:e6:ca:be:e0:b7:18:c3:ec:f4:fc:22:
         c5:ae:0d:70:a8:7e:de:41:4e:e5:5b:2e:c6:ac:47:c1:71:9c:
         a3:e8:00:ec:6b:a4:e3:13:c2:53:88:58:05:d4:5a:f6:5c:4d:
         0c:bf:dd:8a:fa:3c:78:fd:b0:43:8a:7d:08:18:0d:89:7d:49:
         fc:30:00:2e:46:2a:ca:91:5c:98:0e:79:20:f1:ad:ff:8e:8b:
         f0:77:ce:22:31:c4:4d:02:4a:aa:5a:e8:77:23:ab:c2:44:f3:
         8a:0c:d2:50:39:f5:7d:4a:76:3e:da:de:46:ef:04:44:9e:d4:
         ca:17:da:77:5c:cd:97:04:86:26:2f:1a:2a:3a:53:e7:db:ec:
         2a:01:f2:bd:2d:5e:55:91:24:35:86:15:fe:f5:3d:0d:93:af:
         14:36:2c:21:1f:ee:07:76:3d:7c:ff:73:94:b2:54:07:c6:07:
         6a:d4:2d:20:a3:7c:a6:75:da:c7:af:a1:fd:2b:e7:e9:5c:c8:
         37:93:aa:42:c8:57:06:a9:bc:18:6b:5c:fb:4b:62:dd:99:83:
         32:35:53:e7:ad:a4:32:c2:a3:4c:e9:42:8f:25:5e:87:3f:25:
         13:b2:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 14:41:08 2025 by rpki-client