This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
File:                     Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json)
Hash identifier:          alJSTQ7aB8nK5H53T9IpUyyZB3hgFCWi6EKlA3Sv4q0=
Subject key identifier:   FC:51:A6:99:84:B6:95:87:70:AC:64:A5:FC:04:7F:DE:B0:0F:9E:A5
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Certificate issuer:       /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial:       019AFC1EA219835452D8F040CA8A7EB7EE55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
Manifest number:          1300
Signing time:             Mon 08 Dec 2025 04:00:57 +0000
Manifest this update:     Mon 08 Dec 2025 04:00:57 +0000
Manifest next update:     Tue 09 Dec 2025 04:00:57 +0000
Files and hashes:         1: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: o6kRTrbB7guPfcKEHQ8SOghhre3yrdmv/tociZ6Mn5w=)
                          2: VulQHWhzzPXQiRPOfzUk9fbQoJg.roa (hash: 1pq8LhNOVu3KfmYwRxokFt42T5gBAiGcBFnCuEB+z6M=)
                          3: mGb7BxKlXQ1k9CHjDWD7BMFZHSQ.roa (hash: tJF8uovUStWmO8f7TDEtjdEZUW2noIjEbpOLcO1y40s=)
                          4: nGPZ_NATggl_6nfv7Xs72s2omBg.roa (hash: Ctlvy2xSgma+HOqaqZwfMsyO5ZwXHLYT1LbAR4ndsm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fc:1e:a2:19:83:54:52:d8:f0:40:ca:8a:7e:b7:ee:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
        Validity
            Not Before: Dec  8 04:00:57 2025 GMT
            Not After : Dec  9 04:00:57 2025 GMT
        Subject: CN=fc51a69984b6958770ac64a5fc047fdeb00f9ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:02:e2:e9:7f:0c:b2:da:bb:4b:3c:82:93:11:
                    2d:30:59:1d:33:75:10:98:4a:62:36:b3:26:40:ea:
                    7a:f4:33:7d:6e:c0:29:96:99:06:9b:b5:61:44:ca:
                    27:c0:dc:ff:73:b0:6b:c2:41:97:e6:66:53:ad:c7:
                    80:70:28:3b:d4:9d:19:be:2e:92:52:df:47:8c:10:
                    63:32:5f:b1:73:20:a0:15:b2:3d:31:0c:27:99:4d:
                    93:32:91:39:91:5d:ed:5d:54:df:e2:d0:2f:f5:ae:
                    22:e0:a1:3a:24:ba:0c:a7:a4:4c:3e:25:ff:65:f5:
                    46:a9:0a:70:2e:be:a9:d8:46:2e:9e:de:a6:4e:28:
                    e2:2d:ba:bd:de:a5:8b:05:fc:43:2a:47:0d:1f:0c:
                    12:46:34:f7:dd:ff:97:8b:a9:fc:81:ae:c2:36:15:
                    38:18:e1:2f:88:08:b9:76:cb:db:68:f6:e3:29:df:
                    fa:6e:90:95:7c:2f:b8:7f:4d:3d:0c:17:e1:dc:8b:
                    f5:10:81:fc:0c:bd:41:ce:8f:ca:7d:ad:89:ec:ae:
                    e3:06:47:1d:fa:44:0b:d1:bc:85:d9:3f:99:15:38:
                    a9:96:45:19:26:1d:d2:f1:26:38:83:1b:8d:95:23:
                    90:6b:fe:d2:23:8a:c4:9b:a2:3b:f4:fd:54:bc:97:
                    b3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:51:A6:99:84:B6:95:87:70:AC:64:A5:FC:04:7F:DE:B0:0F:9E:A5
            X509v3 Authority Key Identifier:
                keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:10:50:bc:11:cf:91:f8:fd:ab:c4:70:ee:49:52:d3:8f:a8:
         57:fa:09:4c:e1:f1:2f:89:65:a1:3d:66:35:79:e9:7e:be:c5:
         02:29:6f:00:8c:af:d8:aa:d3:50:86:91:b0:7a:0d:6e:80:a7:
         66:db:27:81:ed:99:ac:2e:c1:3f:67:23:66:ba:02:6d:1a:ed:
         ae:82:cc:e8:44:4f:aa:e4:f4:56:67:76:80:71:5d:18:bf:27:
         e8:75:c1:cd:c6:9b:96:05:e4:5f:e5:9d:85:83:0c:c1:03:d3:
         8a:01:3d:f4:a1:61:8d:1a:03:0b:92:31:d2:2c:44:5c:b6:ae:
         fc:15:f4:0e:24:8d:83:56:5a:3f:be:a5:fa:ce:2e:fa:3c:6a:
         9b:1c:06:de:d5:3b:d4:83:1f:13:ca:da:63:bf:c7:29:5f:fd:
         d2:0b:95:f1:a2:af:5f:1c:a5:ec:72:d0:92:81:2d:ac:a8:bc:
         08:0d:3d:df:4f:54:db:9b:f7:51:cd:7e:72:4c:52:1d:49:00:
         51:25:03:76:79:9b:79:2c:6a:48:db:b8:08:32:b4:4b:dc:dc:
         02:18:74:93:11:0e:de:5a:5d:61:26:41:76:63:2c:88:7b:e5:
         db:1c:b1:08:91:d2:94:fa:9b:7b:5c:97:d9:21:bd:dc:8a:9f:
         9d:e9:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 08:52:19 2025 by rpki-client