This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
File:                     Sq5Con57wsw1B--n48vCnTLuoTM.mft (raw, json)
Hash identifier:          N5XXd6cJ6wyQbh1W/evae6O7PPn7/IeWw9uZo3tAWU8=
Subject key identifier:   45:B1:FA:93:81:9F:66:7E:5A:E5:37:97:FF:A8:EE:93:B3:24:DA:FD
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Certificate issuer:       /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial:       019B43CA0A70A69381629CDCF4C5594F0656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
Manifest number:          14E3
Signing time:             Mon 22 Dec 2025 02:01:12 +0000
Manifest this update:     Mon 22 Dec 2025 02:01:12 +0000
Manifest next update:     Tue 23 Dec 2025 02:01:12 +0000
Files and hashes:         1: 6rSD7g_qe8K6KqZqqkL-N5Tz2Po.roa (hash: f+qXxbPCW54Fvdn+IqLViujGUR732uBcWtFNMxPAlWo=)
                          2: Sq5Con57wsw1B--n48vCnTLuoTM.crl (hash: 2oEgoCJsT1sdqhgO01tSg41i6o/FGw6wzg7UVs6AaJs=)
                          3: avzn6A_pWBrabxjlAavnKqw_f3A.roa (hash: RsPQBJwMuWYCIBFp0+5KeIMlRNFaAK6tETn8Q5OI1EM=)
                          4: ppQ6By3CT5q_MfQmc3W2cOrYYME.roa (hash: 4gJ96x0hdM1YSAgq0bPa2tEWjzZ2Ifp4c6peJQDYI0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:ca:0a:70:a6:93:81:62:9c:dc:f4:c5:59:4f:06:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
        Validity
            Not Before: Dec 22 02:01:12 2025 GMT
            Not After : Dec 23 02:01:12 2025 GMT
        Subject: CN=45b1fa93819f667e5ae53797ffa8ee93b324dafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:79:cc:c3:9e:34:83:bd:3f:ce:e3:fd:ec:c4:
                    34:e3:56:bf:84:14:be:fe:39:85:20:41:d3:7a:2f:
                    82:07:97:cf:11:3a:ba:91:8c:d2:ba:f9:76:4e:0d:
                    c5:ec:85:e8:0d:ac:a3:82:8d:6e:04:9a:5a:29:5e:
                    51:f1:0d:33:98:16:80:34:f2:d4:85:22:e6:49:e8:
                    1f:7c:f6:8f:55:c0:f7:55:25:92:de:2b:ee:a9:22:
                    62:74:de:e0:28:96:8c:ee:86:a5:7c:9a:b9:b5:55:
                    c4:d9:d3:a7:09:26:b1:92:6b:52:9b:fc:cf:51:ef:
                    da:24:a6:d9:8b:9c:4b:fe:43:33:8b:c7:11:7b:95:
                    f9:36:11:2e:c2:1a:1d:25:7e:a8:9b:2a:1d:6c:a3:
                    a2:ff:26:46:02:12:18:f4:5e:d7:57:a1:16:97:34:
                    81:aa:7d:78:c7:24:58:f8:8b:c5:63:8b:99:76:cc:
                    99:53:ef:98:7c:6e:a1:ba:41:60:59:9f:12:ad:8f:
                    d0:12:6f:24:ad:a6:ff:7f:61:28:fc:bf:b7:ac:44:
                    e1:30:ad:fb:c3:d7:ad:1c:63:71:92:a2:86:31:23:
                    be:03:c7:ca:9c:46:e7:92:e9:b9:3a:71:6b:d8:9a:
                    d9:76:cb:08:a7:c0:0e:f0:a2:b0:d6:19:cd:23:bd:
                    6b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B1:FA:93:81:9F:66:7E:5A:E5:37:97:FF:A8:EE:93:B3:24:DA:FD
            X509v3 Authority Key Identifier:
                keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:33:f3:8c:c3:15:c4:e3:a1:fe:d4:fa:ba:9c:04:ce:eb:65:
         15:f3:34:fd:22:9e:f0:c6:ae:f8:e8:a5:9d:7d:4a:ce:4c:f3:
         ba:e2:d2:74:b0:8d:3f:ed:11:dc:e1:95:a8:8d:bd:47:5a:8d:
         c6:7a:61:10:40:6b:e5:9b:f5:9e:59:de:1a:29:4c:77:06:0c:
         0a:62:c9:bb:7d:53:51:61:01:63:b0:a0:3f:e7:95:7a:de:4e:
         c9:a0:b8:15:b1:e5:65:9f:4b:8a:a5:bb:b2:4e:36:77:a7:34:
         2e:38:c0:0f:cc:90:95:4a:ef:36:8c:f2:c0:42:fa:9c:de:5f:
         95:a1:a7:f2:26:85:ce:fe:37:25:7f:12:d2:35:78:9b:59:49:
         1a:9b:0f:eb:e9:ba:5c:e1:c9:e1:86:af:4c:d4:a7:83:78:53:
         6e:b6:c2:a5:3c:d0:3e:9f:27:4e:0c:df:67:cf:4c:c3:98:d4:
         bc:dc:12:37:78:3a:6e:4a:a4:2e:a0:16:63:7e:b2:53:33:67:
         90:9c:0f:51:a7:ad:fd:02:18:dd:3a:8b:00:e4:ba:dc:41:1a:
         42:3e:39:10:e5:73:c2:bc:9c:09:8d:21:54:b8:f7:bc:53:9a:
         33:8d:03:ed:da:7a:d9:f4:b6:79:5d:bf:40:02:3b:b2:ce:c2:
         b7:9c:d0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:44:23 2025 by rpki-client