This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          JNcT4LZc/L9zY0SXNEBkvXAmNLic/F1k+Nzfzym9eKM=
Subject key identifier:   03:16:C6:84:9D:60:E7:1B:72:D9:8D:87:08:2E:2C:96:C8:3D:A0:0F
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       019B348D63342DCD31960218E92E937C784F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0B30
Signing time:             Fri 19 Dec 2025 03:00:39 +0000
Manifest this update:     Fri 19 Dec 2025 03:00:39 +0000
Manifest next update:     Sat 20 Dec 2025 03:00:39 +0000
Files and hashes:         1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
                          2: H1EL1U-GIPFFr0f1Q-aFy7Wb8e4.roa (hash: iqzV8mEdZbkZ5VJezg/UaqQeyUszupnBM56S/6XnGcM=)
                          3: J8a8mMzsBimsq6oHwHx5bIHWD4Y.roa (hash: 1VJlid4hfVo+Bv+c5fIKw8LhPKdHBzjl0S3JZl+3O5c=)
                          4: ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa (hash: /jcVyr8eQJZjytkrqctvHq37ILkIvanUDZTLnrClopA=)
                          5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: DeTAUDuFSKBLrCathPtMZ2pTx8qBur3rIMwB5tM83gM=)
                          6: m5c36cD4HEnvnKSFkdVs5FAdwfY.roa (hash: zDDIqdWDgnB3uWdjXBi6MQIDiaHOTeoGWkwt3yBBNJ4=)
                          7: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)
                          8: xpgO3ZCBY-qjN8oFsOWEPvUCvtE.roa (hash: +qRt4PQpWMMvJjygxcf9dSJhb+lYPMjbz4U/lEmLHfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:8d:63:34:2d:cd:31:96:02:18:e9:2e:93:7c:78:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Dec 19 03:00:39 2025 GMT
            Not After : Dec 20 03:00:39 2025 GMT
        Subject: CN=0316c6849d60e71b72d98d87082e2c96c83da00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:be:e9:d8:82:aa:27:3a:9a:72:a1:04:85:
                    47:80:16:42:29:07:8a:60:0a:93:11:31:f3:aa:b6:
                    8d:5c:28:e4:fc:1b:11:3f:67:a0:50:0b:5c:c9:0d:
                    ad:a0:bc:6f:71:f8:ea:50:65:e4:96:5d:5b:6e:84:
                    f1:7a:16:19:21:9e:3c:63:93:44:d5:63:d5:d5:5f:
                    44:f1:c2:2e:0e:22:3e:4f:5b:ac:2b:e6:68:5b:f7:
                    45:a6:7a:e9:5a:28:55:ca:91:42:b8:0f:01:52:c4:
                    b3:33:6a:62:21:98:80:9f:0c:a3:ad:00:24:d9:21:
                    e9:5d:fe:6a:e0:29:cc:8a:18:72:8b:3e:e3:05:50:
                    38:59:8a:88:62:90:e4:2b:c7:18:42:be:5a:70:3c:
                    14:2a:2c:0a:b8:fa:55:21:65:c7:f9:2a:e1:4d:f3:
                    e0:d0:60:60:9c:cf:f4:e7:f4:33:b8:4f:8b:61:10:
                    cc:76:2f:85:a6:83:ca:8f:26:cc:c8:94:a2:0c:4d:
                    21:fe:93:a0:de:33:13:ed:34:66:8c:41:9d:0e:14:
                    cf:04:2a:0e:53:19:cb:40:0d:b4:c1:e8:d9:34:ff:
                    f6:15:0e:d7:49:0b:be:92:67:15:0e:ee:c2:66:65:
                    07:b1:70:53:3b:74:39:e9:ca:82:e3:e0:96:18:b8:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:16:C6:84:9D:60:E7:1B:72:D9:8D:87:08:2E:2C:96:C8:3D:A0:0F
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:18:8c:e1:1a:b2:67:9d:34:6c:f1:08:6c:7e:d2:50:ab:3f:
         c7:35:f6:14:03:c9:a3:bf:e7:77:6a:85:dc:44:cd:3c:bf:69:
         e2:53:ff:b5:fe:be:3a:db:15:bb:80:18:43:bf:fb:fe:a7:1b:
         1d:89:76:3b:b6:f7:a9:24:a4:14:ea:cb:54:ec:1e:5a:d0:f1:
         d7:00:eb:fc:f7:d8:cd:1c:ab:7b:3e:89:b1:78:4c:50:f6:8e:
         d2:24:40:76:54:ef:19:5e:b7:5a:47:54:31:44:6c:01:51:03:
         ce:ad:d0:29:07:5a:ce:05:7d:fe:be:ed:43:a9:9c:9f:c7:c9:
         d3:73:d6:2e:ae:d3:f1:eb:1d:f9:55:3a:22:14:1d:34:2a:40:
         2c:0c:b6:c8:cf:37:57:e1:bf:4e:bd:ef:46:42:78:08:db:97:
         91:50:5d:14:dc:96:d4:a5:29:0e:9e:20:41:29:9e:93:19:03:
         58:ff:8f:34:19:ec:30:b4:a7:54:ce:ea:37:94:98:98:0b:3b:
         6c:ba:3a:a2:6f:7d:c3:5d:2a:d4:e8:63:73:bf:76:9f:13:fd:
         59:8c:e0:06:15:d4:74:f4:05:ec:13:fb:a3:d7:36:a3:0c:f8:
         0f:12:6f:08:7c:56:8b:cd:04:aa:ec:b6:bb:91:6a:5f:85:72:
         13:cc:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:54:49 2025 by rpki-client