This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          Q2AupqRUzsX27CU3qRta6FP94XM71595pUtPgdqOp9o=
Subject key identifier:   94:CC:3E:4A:44:49:C8:F7:58:D4:64:BD:91:9B:A2:75:77:04:73:26
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       019B35A017F8A43727560A78E429C9B745D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          052F
Signing time:             Fri 19 Dec 2025 08:00:42 +0000
Manifest this update:     Fri 19 Dec 2025 08:00:42 +0000
Manifest next update:     Sat 20 Dec 2025 08:00:42 +0000
Files and hashes:         1: CDhfXiWmp-7DWGHRLkI1RXpNMUw.roa (hash: BdyrC92HV6fMOkqwdnwWMjP4WPGwGQmddKXw8S//IY4=)
                          2: GZLylFIePve8mzqKp098f5zxTUw.roa (hash: r5z9AFc8wnJRnVScCietCsc10ck15u9ra9fsksqINjA=)
                          3: QSxkF4rOw8CaQhbY1bgweRS2k84.roa (hash: /gVGhfkCO75vlxeNpsZvkhIuMR2YzpuGJXm7VvwUGkk=)
                          4: SmAcFee67aQLcPrKmiXZ94F0DAo.roa (hash: 0ymC9JbQOKLWpT417ofA+sK82ehW8sAqv3tq2DxYn+c=)
                          5: YK_aUPQtgAjjUBJq7WhDbslbCWM.roa (hash: +IG0CxEpiZEOb47k2itsdETT9izTBhlEAMyJ/fS5uh4=)
                          6: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: 7DKSnFIug2b5yi1krwo0KGLoxDh3//78KfRmAj04aUo=)
                          7: vbkqK2A-5so6LdZx4ga1s9863ZI.roa (hash: 533TjtomKdjh/jTDvd0XbmB2CfJKlZIVlQUKaugW/Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:a0:17:f8:a4:37:27:56:0a:78:e4:29:c9:b7:45:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Dec 19 08:00:42 2025 GMT
            Not After : Dec 20 08:00:42 2025 GMT
        Subject: CN=94cc3e4a4449c8f758d464bd919ba27577047326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:44:ae:1e:9b:de:fd:c8:2f:c2:08:ff:1b:
                    0f:27:c3:fb:52:a8:9d:f7:ab:0a:96:f4:81:73:72:
                    86:c6:6f:b1:65:c6:b2:d7:af:b9:14:6c:2d:7e:91:
                    3f:be:c3:93:21:8c:8b:aa:55:ee:7d:52:17:3e:64:
                    e4:98:70:e1:81:59:1a:18:04:98:43:35:f3:12:4f:
                    c7:a3:50:8e:fa:bf:32:f0:c5:8f:77:c6:35:f0:46:
                    06:ee:0c:0b:6e:12:60:e0:69:53:d0:30:89:89:b5:
                    32:93:b3:4c:c3:18:f6:ec:26:03:b3:7d:df:02:46:
                    fb:74:4d:d8:11:26:2e:6c:75:98:1a:fe:ce:44:b8:
                    63:66:14:e4:2f:af:bd:61:a7:14:b0:16:88:25:25:
                    8d:25:5e:5e:95:57:82:6c:e6:7a:6e:08:79:d9:d2:
                    eb:2b:66:77:16:1f:11:79:b5:7f:8b:b2:92:65:c9:
                    4a:55:7f:de:f9:25:47:cf:26:92:dd:bf:3a:58:a8:
                    ac:05:63:9c:2a:8c:25:9a:af:75:99:29:8e:50:4a:
                    3f:67:ae:2e:ac:f5:06:af:cf:95:4c:53:b8:b5:81:
                    63:d6:2e:ea:a4:0d:8d:80:f6:34:0c:fe:3a:76:dc:
                    14:f8:e2:0d:4f:22:0b:b3:ca:ef:44:41:e3:43:e8:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CC:3E:4A:44:49:C8:F7:58:D4:64:BD:91:9B:A2:75:77:04:73:26
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:bb:83:10:11:10:4d:db:b3:df:31:d0:6f:c0:e3:25:ce:c2:
         59:3b:85:da:5b:e9:4a:27:27:13:2a:ec:cc:bd:a2:54:88:a5:
         3e:9a:af:56:9d:92:5c:9c:d5:01:a9:d5:b3:b1:0d:bc:1c:90:
         1a:7c:eb:76:e3:35:09:fb:24:11:b4:b4:bf:41:d0:0b:01:7a:
         e8:cf:26:51:e2:b9:6e:95:df:50:2d:b7:66:30:4b:9a:b3:a6:
         d5:71:2d:41:02:66:bd:49:3f:2d:67:7d:e3:73:d0:86:e9:df:
         3e:fa:c3:f9:57:be:99:a8:42:b9:23:8f:8a:73:eb:92:77:15:
         29:ed:e6:ba:05:a4:f8:f0:97:5c:2d:5c:33:5e:8f:7b:72:bb:
         a3:2a:4a:64:98:3b:ad:13:d6:09:f9:f3:ff:aa:ca:68:ff:17:
         e1:d3:a8:df:1d:26:fc:44:5f:5a:44:9a:7a:7d:db:bd:66:a7:
         bb:9b:a5:2a:2a:f9:43:fb:72:b0:02:e5:8e:bf:c1:9e:d4:0b:
         af:36:e4:cd:68:5c:8b:dd:ff:31:11:2f:49:fc:29:f5:94:32:
         4c:16:8d:f4:53:ca:0e:08:88:c4:fb:66:3e:a5:ae:42:3f:cc:
         9a:87:92:79:e4:f0:d7:92:39:f9:b5:3e:5a:88:a7:74:02:35:
         83:31:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:19:57 2025 by rpki-client