This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
File:                     sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json)
Hash identifier:          bJVhOvZeIdYlWFp6IZNRB3+uuNt9GCJ/4KVRVGbTOZw=
Subject key identifier:   5E:AB:69:D3:F9:FE:7C:D9:3D:BD:68:2B:84:13:46:26:42:1B:4E:A8
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Certificate issuer:       /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial:       019B533CDC7C9ED1658074C0A3CAA9992B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
Manifest number:          13E0
Signing time:             Thu 25 Dec 2025 02:00:56 +0000
Manifest this update:     Thu 25 Dec 2025 02:00:56 +0000
Manifest next update:     Fri 26 Dec 2025 02:00:56 +0000
Files and hashes:         1: 0kGm7IS6foM84ApNB5wMBZmcs70.roa (hash: fsNAu7RVtrbBsKEN64Ou91zqn3ieSIW0lwlDv3luCl0=)
                          2: QHGLz4vDf8HU0PXuv58AHJKDNwE.roa (hash: zsAsJqx3Xlx/j+LLE8QbsIeKt4A9wuocERvf2nTmf7A=)
                          3: Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa (hash: CgZe2V9k88f5ug37ai2G7ohUxSeYSwTeyOJXFySNdfc=)
                          4: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: gS+ExDQxRHi5viuHLIK7MYUwcN1/3CxUn/7VzeFiw0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 01:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:53:3c:dc:7c:9e:d1:65:80:74:c0:a3:ca:a9:99:2b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
        Validity
            Not Before: Dec 25 02:00:56 2025 GMT
            Not After : Dec 26 02:00:56 2025 GMT
        Subject: CN=5eab69d3f9fe7cd93dbd682b84134626421b4ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:cc:02:72:ab:4c:a0:41:59:5a:37:20:39:
                    9d:68:e2:93:73:ed:b4:b1:2b:3a:3f:4c:33:4e:06:
                    50:13:f2:96:71:81:85:fd:51:e6:36:a0:d4:aa:96:
                    f8:dd:1c:32:ec:9d:86:43:36:69:39:8a:f9:b4:85:
                    e8:01:1b:22:d3:90:44:98:83:1c:b2:60:6f:cd:0e:
                    82:99:a5:7e:2c:b4:c5:9c:03:1c:2e:e4:d5:81:6e:
                    23:b8:d2:c0:f3:c0:90:1f:6b:a7:ba:ed:5c:8a:a7:
                    98:5c:1a:25:d9:1e:ab:f7:c0:ba:b8:0a:cd:b7:ca:
                    a1:52:78:3c:e3:6a:30:8e:4f:e3:e4:10:a8:1e:79:
                    1c:19:68:ec:11:03:5c:fc:23:9c:88:50:6b:be:b5:
                    50:59:14:d1:7d:79:19:69:ee:e8:c1:83:c2:ed:01:
                    c9:c6:08:a0:a0:a7:f4:0b:cf:04:4f:d0:be:10:a9:
                    fc:84:6d:4d:a4:a1:86:ab:af:6a:0f:c6:15:c6:0c:
                    f2:52:a9:ec:bd:86:91:d2:1f:eb:d6:4a:69:19:41:
                    f0:2b:71:e7:41:02:eb:13:90:42:20:78:91:86:4a:
                    6c:6a:6b:61:d4:4e:86:25:08:92:7d:66:b8:03:bd:
                    90:a1:eb:ca:09:24:e2:f9:b1:a0:8d:81:40:7f:aa:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AB:69:D3:F9:FE:7C:D9:3D:BD:68:2B:84:13:46:26:42:1B:4E:A8
            X509v3 Authority Key Identifier:
                keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a3:29:26:d2:1c:38:1d:b7:7e:66:01:e0:21:75:42:e2:69:
         f0:1b:4e:e7:ce:6a:9b:7f:3a:82:56:66:d5:5d:84:37:3e:40:
         ee:d8:8f:e6:76:fe:55:98:1f:23:4b:65:4f:17:1f:14:7d:45:
         26:2f:e7:a6:13:f6:ef:08:55:ab:7f:40:87:e5:b2:24:bf:fd:
         48:a9:1c:d1:31:51:9f:6f:0b:4c:1c:a6:29:b4:c7:21:22:f7:
         16:9a:34:86:1c:07:db:5f:8b:ce:3f:00:ea:06:e7:1d:eb:e5:
         69:a3:fa:73:91:c1:0a:ea:10:67:52:6d:6f:c3:24:34:2e:31:
         8c:6f:27:e9:13:2c:ab:d3:e2:41:6e:22:81:84:86:4c:ae:7d:
         91:14:f3:ec:7b:6b:26:ba:31:23:06:7b:b8:b1:a3:85:10:51:
         0f:bb:91:98:c3:97:cf:c9:e5:d1:1c:13:c6:c3:b5:a3:be:76:
         75:3f:82:58:f2:9d:ea:ff:69:31:91:ec:9d:8f:28:87:2d:55:
         12:f2:1a:34:dc:fe:41:30:bd:3f:5c:10:c5:dc:d4:99:bd:85:
         0d:47:e0:c5:5c:6d:ab:a8:36:33:30:a7:83:36:2a:7f:62:79:
         3c:4d:32:7b:1f:0f:56:07:4c:14:d6:a4:c8:cc:f3:cd:7f:fc:
         17:9f:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 07:06:29 2025 by rpki-client