This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File:                     SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier:          Y1vLZOe0j/e+K/YqSRHUVPPOYTAz7xAnr7nbZOLqOnc=
Subject key identifier:   3B:FC:B9:61:AD:4B:0E:46:6E:45:70:85:18:6E:89:FA:FE:9C:B9:F0
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer:       /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial:       019B3CEBFFF9E5334CE6EB840A3FB18246DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number:          178D
Signing time:             Sat 20 Dec 2025 18:00:57 +0000
Manifest this update:     Sat 20 Dec 2025 18:00:57 +0000
Manifest next update:     Sun 21 Dec 2025 18:00:57 +0000
Files and hashes:         1: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: okMhwQR2saD3Z7VKw+WdtjPfLXqODxABwIfPy6z21HA=)
                          2: SNsRs_4WTuL917-zEoDb2DAW4Cs.roa (hash: N22szcBJgG6xZhKtnqlshnG6vFReTJVV2XmRzhmuoSw=)
                          3: lQwR3y5IAJ7kyCCFVo104fC4SsY.roa (hash: MwEmP7Sqq33K1HUPXLtLK+kd2q/HJrM3DtuK+SIM+zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:eb:ff:f9:e5:33:4c:e6:eb:84:0a:3f:b1:82:46:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
        Validity
            Not Before: Dec 20 18:00:57 2025 GMT
            Not After : Dec 21 18:00:57 2025 GMT
        Subject: CN=3bfcb961ad4b0e466e457085186e89fafe9cb9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:13:bf:65:13:00:08:10:a6:bf:9b:50:53:
                    9a:52:39:59:22:f9:8d:fd:24:90:b7:38:3d:65:d0:
                    4d:a0:9e:d0:e6:02:6a:36:b9:5f:a5:ce:8c:5d:d9:
                    67:51:d4:eb:2d:52:49:3f:43:19:67:34:c8:b8:37:
                    62:77:00:eb:7c:62:bb:25:a4:b0:52:c8:af:18:72:
                    2a:5d:e8:d2:65:a3:88:19:78:2b:5a:65:7a:ae:90:
                    41:81:8c:1e:cc:80:47:bc:f9:ad:bd:7a:ee:8b:80:
                    37:de:40:c4:37:a2:62:cb:3e:de:0e:7e:ef:ad:14:
                    20:7a:c8:53:76:84:70:53:2c:2e:6c:3b:2d:34:5a:
                    88:79:28:b6:1e:25:a3:cb:e2:25:5d:a5:af:ba:7e:
                    b9:fb:a1:a1:9e:7e:03:a4:1a:24:d5:8b:98:18:60:
                    df:ab:69:dc:d2:af:2f:3f:93:07:47:e5:a2:20:30:
                    4f:66:9e:de:22:0b:55:18:ba:37:28:51:9c:08:4f:
                    cd:37:c8:4e:43:6d:62:f8:76:93:95:a2:74:0c:aa:
                    1a:3d:f3:f5:57:43:bc:22:3f:d7:a0:3e:d5:df:43:
                    a7:ca:91:e2:e2:f1:65:d8:f9:e0:e9:9e:c5:7f:fa:
                    90:c0:f5:e6:5d:43:63:eb:ea:c3:4e:e6:a8:fc:99:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FC:B9:61:AD:4B:0E:46:6E:45:70:85:18:6E:89:FA:FE:9C:B9:F0
            X509v3 Authority Key Identifier:
                keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c4:d9:8a:14:99:81:82:63:e9:ce:66:86:9f:23:a3:e7:e3:
         60:0b:7c:af:4f:2e:ad:87:29:8f:f5:55:ff:93:bd:75:4a:3f:
         68:a8:bd:ad:8f:e8:99:3b:ce:c5:05:3b:59:2f:22:d3:85:fb:
         2f:8c:e9:52:cd:3d:18:ba:b7:da:a5:f6:34:f5:4d:53:76:6f:
         e8:81:f4:8c:b1:8e:a4:dd:d9:b1:d7:db:70:e3:5e:00:07:2a:
         ff:1c:45:8e:3b:5c:7c:b2:0b:89:0b:0f:65:d8:8a:32:b8:d8:
         70:d0:28:b2:85:18:27:29:2b:a5:73:c0:4d:d1:33:a9:f4:dc:
         e3:15:d1:2a:c1:db:bf:cc:1a:c9:27:88:1a:1b:fe:c9:52:66:
         8b:f8:ce:74:60:f8:36:7b:cd:21:00:cd:95:37:17:7b:1d:a6:
         fa:7d:4b:f5:e9:d0:65:66:47:45:de:e8:f0:2f:cd:fe:06:9f:
         ee:3b:74:8f:59:11:d2:87:00:30:6b:07:97:e9:fe:f2:da:d8:
         74:76:ed:6a:23:42:69:17:ad:d6:74:9a:48:d2:7e:88:07:1c:
         d9:a5:7f:7f:b7:6f:dd:f6:4a:b7:b7:73:87:a8:e7:bb:4e:85:
         cd:ed:4f:52:cb:ac:e9:b2:c3:b3:89:e9:b4:12:58:13:13:ec:
         b8:69:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:44:34 2025 by rpki-client