This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          hUK/qP696eCXYD2C0FuzKUO6qu9y3C0/dYBq51vsotw=
Subject key identifier:   6C:47:33:81:15:2C:93:21:65:4F:79:57:F0:D4:18:E7:FE:59:A0:9A
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019B39B3ECB215DABA0952F62D3B959396DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          0DEA
Signing time:             Sat 20 Dec 2025 03:00:51 +0000
Manifest this update:     Sat 20 Dec 2025 03:00:51 +0000
Manifest next update:     Sun 21 Dec 2025 03:00:51 +0000
Files and hashes:         1: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=)
                          2: F6wdCUdNs0S6x-lvMlPtyMpUfZs.roa (hash: 9jMOcYoLdDpo5EB5/0BEoeSC3reaOBGBRYSNiNLwg9k=)
                          3: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=)
                          4: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=)
                          5: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=)
                          6: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=)
                          7: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: l8BaAWFL+k/gOaW4dim5U5q0X7U9RGcdmuXFa9ft7jw=)
                          8: TdMhRHczxWCfuj6WCF3aHSZcWoE.roa (hash: OExPlz/NvHlKGK16isLHnODAZh99vhb3NAPmGcjd+nw=)
                          9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=)
                          10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=)
                          11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=)
                          12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=)
                          13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=)
                          14: peIOlV3OfBEMu-qBfSwFNIMmyUg.roa (hash: 6anSx7OoDk9TVb+rhIIUnKyoMu5IPmI9Uc6n5lkG9F0=)
                          15: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=)
                          16: rAiRJTmW8XfVmhpte53A3cU5F0E.roa (hash: 4rCJoUat5Hf3Yqw8erIeJ6FU4KlxG5HpAnlRqviFfYc=)
                          17: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=)
                          18: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=)
                          19: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:b3:ec:b2:15:da:ba:09:52:f6:2d:3b:95:93:96:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Dec 20 03:00:51 2025 GMT
            Not After : Dec 21 03:00:51 2025 GMT
        Subject: CN=6c473381152c9321654f7957f0d418e7fe59a09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:3b:9a:8c:df:47:b4:12:0b:b5:61:04:dc:
                    5e:93:d3:da:b2:42:03:fc:8b:3b:04:0f:2a:ef:34:
                    97:4a:4f:00:18:c5:b2:45:e0:da:cb:83:4d:f5:6e:
                    ee:55:31:3e:93:d7:d4:11:07:4e:3d:d4:d7:28:60:
                    11:3d:18:dc:39:7a:0b:27:3b:77:66:b4:e0:a5:54:
                    d6:0a:c0:b1:a7:a8:3c:61:8b:7c:64:96:e1:72:20:
                    61:f8:8d:7a:f2:40:27:bc:7b:a2:c6:11:5d:10:b0:
                    09:2c:e7:30:28:bd:e1:3a:24:87:12:3e:f8:c4:77:
                    f1:2b:e1:d7:db:94:17:07:e8:df:2f:23:9f:3c:45:
                    38:e2:36:46:31:ea:ce:c7:19:bf:3b:78:d0:a7:43:
                    0e:91:55:9f:dd:3b:d3:a9:99:ce:df:42:ff:25:90:
                    d8:96:7c:c3:f3:b0:4f:a2:6a:2c:d5:85:7a:a0:35:
                    d4:11:45:84:36:9c:6f:1f:44:ae:17:21:4e:27:b1:
                    eb:d8:98:fc:f0:19:c3:b3:91:d7:74:cb:d7:cf:c5:
                    cc:b2:0a:97:bb:fd:4e:c2:fe:a6:91:ed:7a:9e:50:
                    dc:6a:3a:da:f7:37:79:06:3f:4e:99:3d:0f:22:32:
                    a9:1d:b0:63:f0:e5:3b:cf:03:51:40:bb:14:4a:93:
                    27:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:47:33:81:15:2C:93:21:65:4F:79:57:F0:D4:18:E7:FE:59:A0:9A
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:28:71:50:f7:28:95:51:c7:a7:7d:39:ce:e1:b5:de:58:64:
         a4:19:4f:3f:6b:03:17:08:8f:2e:97:0f:b3:1c:9b:d1:64:10:
         7f:f3:e3:7c:9a:91:18:1f:04:c3:1d:08:11:9b:d5:33:7d:bc:
         81:b8:50:1a:28:d8:d6:b7:4e:20:a0:68:c4:ae:8a:69:e5:c4:
         12:46:ee:23:cb:f4:44:4e:9b:f5:1b:c4:87:e5:d0:d8:c1:9d:
         a9:26:26:7a:6b:20:e3:73:ea:cc:ea:40:20:6f:9d:4c:aa:09:
         f1:ca:b3:1b:97:c5:e9:70:86:7d:4a:55:56:fe:c2:fb:27:9c:
         19:ff:ed:83:e8:c0:59:86:85:a4:9d:a9:69:f5:3c:01:84:75:
         e8:ef:47:83:b7:d1:a2:ff:bb:ef:61:ea:4a:21:8e:97:4e:cb:
         5b:c2:07:2f:6f:18:0c:94:b8:a1:c3:f9:fc:8b:eb:7d:c1:a5:
         0c:d7:a0:52:63:da:62:66:2a:6d:9f:2b:b1:5a:56:26:03:4a:
         c6:26:ab:4f:99:6d:ec:ef:f2:0b:e9:d6:0c:26:a5:95:d9:e2:
         71:4d:ec:4b:3d:a3:d4:6f:ef:59:ad:14:ae:fb:2f:12:c4:8c:
         c7:8e:fb:2c:eb:19:3b:90:9d:5e:76:60:7a:da:90:86:a3:f7:
         21:65:4c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:48:19 2025 by rpki-client