This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
File:                     Sq5Con57wsw1B--n48vCnTLuoTM.mft (raw, json)
Hash identifier:          AgCGiE+zCK9Ijg8KyR0rolIMtT2e8j248QlI8cj5pt0=
Subject key identifier:   4A:FF:10:0D:D4:A2:BA:F3:1B:32:AA:D1:44:7F:A0:4E:C3:87:BA:4D
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Certificate issuer:       /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial:       019B1D2A14F93C7F10D19D82F16C69BB0A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
Manifest number:          14CF
Signing time:             Sun 14 Dec 2025 14:00:55 +0000
Manifest this update:     Sun 14 Dec 2025 14:00:55 +0000
Manifest next update:     Mon 15 Dec 2025 14:00:55 +0000
Files and hashes:         1: 6rSD7g_qe8K6KqZqqkL-N5Tz2Po.roa (hash: f+qXxbPCW54Fvdn+IqLViujGUR732uBcWtFNMxPAlWo=)
                          2: Sq5Con57wsw1B--n48vCnTLuoTM.crl (hash: cjDlP38hUSh3x7vweWPcmf9Smr91arlgsigxWtWtIUo=)
                          3: avzn6A_pWBrabxjlAavnKqw_f3A.roa (hash: RsPQBJwMuWYCIBFp0+5KeIMlRNFaAK6tETn8Q5OI1EM=)
                          4: ppQ6By3CT5q_MfQmc3W2cOrYYME.roa (hash: 4gJ96x0hdM1YSAgq0bPa2tEWjzZ2Ifp4c6peJQDYI0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1d:2a:14:f9:3c:7f:10:d1:9d:82:f1:6c:69:bb:0a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
        Validity
            Not Before: Dec 14 14:00:55 2025 GMT
            Not After : Dec 15 14:00:55 2025 GMT
        Subject: CN=4aff100dd4a2baf31b32aad1447fa04ec387ba4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:55:2a:1b:19:fc:ce:4d:fd:4a:2f:6d:0d:
                    a4:99:a1:7b:22:ed:26:76:21:0d:f5:4c:d3:68:d2:
                    8f:9e:f3:d8:cc:7e:72:0f:95:a0:e2:f3:1e:77:84:
                    c0:22:2c:a8:25:5d:d2:c6:93:f6:32:7f:0c:9d:8c:
                    49:d0:03:58:16:30:8e:08:c1:99:75:9c:cd:e8:09:
                    d7:e2:30:74:d9:03:1a:20:7b:04:4a:4c:62:e5:d8:
                    7a:2d:b7:93:71:dc:d5:07:7e:7e:2e:31:d8:1c:b9:
                    23:98:f3:4e:7c:5d:48:51:39:2a:98:ae:bf:37:9d:
                    69:6d:4a:2c:8d:42:35:4e:52:a9:9c:f0:3f:45:83:
                    39:2d:9b:a3:3a:b4:f0:47:03:c5:9b:ef:8a:1f:12:
                    69:17:14:ed:ba:6c:17:10:b3:f0:3a:4d:80:dd:87:
                    64:4a:70:c7:ff:25:b6:e2:c2:71:91:73:e5:3c:36:
                    9d:de:70:67:6c:a3:f3:2f:00:f0:4f:84:87:19:03:
                    82:73:a5:d1:39:1e:51:35:d2:c9:e0:01:6e:75:dc:
                    63:71:cf:f1:ee:ac:49:9a:e2:ce:0a:a1:06:e7:8d:
                    ba:d1:ff:3a:9e:e4:f7:be:91:8c:76:19:10:8f:5e:
                    49:0f:65:1f:d8:d6:93:d5:c4:31:49:47:55:a7:91:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FF:10:0D:D4:A2:BA:F3:1B:32:AA:D1:44:7F:A0:4E:C3:87:BA:4D
            X509v3 Authority Key Identifier:
                keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b6:1b:95:6f:1a:c0:4b:60:fc:6c:bc:90:f5:bc:94:6a:39:
         70:46:de:f5:5d:6f:75:eb:b7:e0:da:2b:08:f6:f9:6c:bc:8f:
         ab:7e:03:14:65:04:f7:d9:66:9c:1d:5d:3c:28:aa:bb:9b:b9:
         b6:6f:57:07:ff:ae:5f:e7:e1:63:52:d5:f2:7c:5e:6b:45:ba:
         21:89:11:ef:cb:81:77:6f:f7:a0:04:8e:4e:32:89:c8:07:50:
         95:64:16:a4:ae:28:24:ad:a2:8b:5b:ae:d0:2c:9f:ad:a9:9c:
         8e:ba:99:ca:99:77:a8:ed:b3:92:db:92:aa:53:b8:e7:c0:93:
         a7:ff:a9:3e:0c:72:9b:02:66:29:bd:a2:09:58:c4:9c:02:4d:
         7a:7b:a8:b7:fc:1c:a2:ef:65:c5:b0:73:13:02:f6:3a:72:b2:
         91:7f:e7:8f:36:55:b0:02:2f:c2:e3:2a:e6:cf:fa:41:8c:5e:
         36:e6:7e:1e:55:62:ef:7e:8e:6b:57:d0:39:a6:e5:ef:f1:90:
         0a:f7:49:21:a0:70:62:69:2f:37:76:8a:0b:0e:0f:b5:bb:b5:
         df:bd:47:f3:55:ac:c6:fd:20:12:e6:d5:0e:ed:5e:e7:f7:24:
         8a:fe:f8:1e:a0:74:99:ab:54:e8:5d:52:a7:f4:04:9a:a1:9b:
         df:18:6a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 23:13:24 2025 by rpki-client