This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File:                     u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier:          ZZ/1G8ETBK4TFh14m9ecaRZaGUx0Iu0fbkS/NVyLwVU=
Subject key identifier:   D3:F7:8A:4A:18:F0:59:85:FB:84:71:16:01:8F:C9:B4:70:E4:15:37
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer:       /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial:       019B0FA550D6CB78DECAE33978CAF857F7D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number:          144D
Signing time:             Thu 11 Dec 2025 23:00:50 +0000
Manifest this update:     Thu 11 Dec 2025 23:00:50 +0000
Manifest next update:     Fri 12 Dec 2025 23:00:50 +0000
Files and hashes:         1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
                          2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
                          3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: d4SEDR2JqWeAkXVrSTRPtlUWJFGt2JmeEVQDlop5etw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:a5:50:d6:cb:78:de:ca:e3:39:78:ca:f8:57:f7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
        Validity
            Not Before: Dec 11 23:00:50 2025 GMT
            Not After : Dec 12 23:00:50 2025 GMT
        Subject: CN=d3f78a4a18f05985fb847116018fc9b470e41537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:28:6f:c3:1f:4d:1e:04:eb:ae:ad:f6:b3:
                    19:cc:bc:ad:39:aa:12:b9:5e:57:0a:92:bd:61:b1:
                    1a:f5:5c:4d:0f:93:9c:82:df:92:d6:e8:cb:d3:d8:
                    d0:2b:a2:93:d4:f4:21:26:a6:db:6b:42:11:cc:cb:
                    2a:51:15:e1:dd:e5:79:00:c6:70:a7:b9:2f:a2:97:
                    b4:52:f8:52:8a:a0:ad:bb:92:4b:93:9f:9b:08:c0:
                    d7:4a:6c:be:52:9d:ff:bb:ca:57:cc:6d:26:c3:f0:
                    8d:93:ec:bf:63:41:06:29:af:98:ef:49:78:ab:67:
                    47:28:58:da:93:ad:20:d5:6e:8a:63:8a:75:81:54:
                    01:46:ed:fb:28:3d:16:09:1c:d1:be:f9:32:3c:ba:
                    b8:18:3c:18:43:e9:2a:d4:46:31:7d:78:35:a2:07:
                    6b:c8:3f:48:fe:0e:15:43:2a:96:ef:6a:5d:af:c7:
                    10:cf:b5:12:bf:38:19:b8:fd:70:1c:2f:48:ca:7e:
                    8a:a8:b7:4e:00:f8:2b:ac:5e:2e:44:76:0e:93:65:
                    a9:11:bb:b6:7f:69:fa:21:da:a5:f4:7d:eb:ad:de:
                    06:05:31:6e:de:b6:88:22:b0:e3:e3:97:c0:c0:6b:
                    89:cf:ac:2f:f3:e2:43:c7:5d:9c:dd:2d:2a:0e:95:
                    e1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F7:8A:4A:18:F0:59:85:FB:84:71:16:01:8F:C9:B4:70:E4:15:37
            X509v3 Authority Key Identifier:
                keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:04:37:f8:44:38:ca:6c:3f:2c:c8:17:e5:ac:f5:06:09:86:
         62:04:ed:03:0e:bc:15:2a:14:8a:7f:cd:40:3b:21:89:32:5e:
         f8:a1:25:df:97:d4:ef:8e:8e:5c:2c:0e:53:f2:95:fd:df:aa:
         9c:d7:1a:e8:93:a6:54:47:d5:89:f6:07:98:8f:9c:10:2a:3f:
         d8:2e:89:39:99:e1:ed:c9:08:c8:f9:95:ce:8b:00:01:24:90:
         16:ed:62:4d:50:ae:86:a9:bf:7e:e2:56:4a:b8:26:92:d6:30:
         ca:2e:67:47:9f:87:75:c4:53:ab:24:3a:4e:90:54:46:ed:1e:
         6e:88:ca:06:58:3c:ba:9e:38:fa:38:cf:31:5c:db:a9:0f:de:
         d7:12:47:9d:33:fb:4d:a5:ec:34:b8:0e:2b:ec:d3:a3:3e:03:
         f8:fb:4b:26:5d:0a:fb:b5:24:5a:a4:87:c0:50:d9:02:6e:11:
         8d:ce:23:81:1f:6b:2b:94:32:78:c4:4d:17:c9:7a:a9:54:cb:
         89:59:ce:e9:37:e6:88:e4:3f:5d:e2:55:60:61:21:9a:3a:c7:
         9c:b9:55:f5:3b:ad:6c:05:cc:a8:85:2b:e2:e8:a1:20:03:74:
         b4:81:7b:80:e4:f2:96:8f:47:c3:cf:41:db:d7:47:9c:9e:ab:
         84:4f:aa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:18:45 2025 by rpki-client