This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File:                     Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier:          LmP4ea2wMk2v6OgHERBtGiGK37aH0QgRc7ibehVbvY0=
Subject key identifier:   ED:3C:75:E7:98:D1:DB:CE:BA:5F:E1:B6:3C:4F:D1:ED:61:06:35:E8
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer:       /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial:       019B38D8370049065AC51331FEBC17DE082F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number:          144B
Signing time:             Fri 19 Dec 2025 23:00:52 +0000
Manifest this update:     Fri 19 Dec 2025 23:00:52 +0000
Manifest next update:     Sat 20 Dec 2025 23:00:52 +0000
Files and hashes:         1: 5UoFLpQtoNWTRnd2IrHt1zDXCnU.roa (hash: mdK5sii+dlLtOUzntgin3VSmrrSF7YmdacNAlKzg9pg=)
                          2: MZ_QBnViUEyC8ZRFkedX8Rv5Crs.roa (hash: XyD021GY+KiQ98JM0NY1iLl+QMVF+YOoCbUCeu964IY=)
                          3: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: UlQfd+mTEc84al4DcQeWi2nOUUqvRturJwzCK/hlnlk=)
                          4: inYhmF6eIH31cCbSimSwHmklnkM.roa (hash: Z7JVezrkgt/wUelYsw9uGal8TdsJiFhrzbB2ZBBaAzE=)
                          5: oWp27mBOrz7MXkN3QVP_5A9gnvU.roa (hash: /+rul4/RODDQhUqBM7ZwYOoIISVCxzBmGSNg7RYrmUA=)
                          6: og5qYEWen63bomOC6zKV2-iRJG8.roa (hash: PKfcuKBaAgdkTGnezARQJkmyOyp3oz6QpSYP3CmFp+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:d8:37:00:49:06:5a:c5:13:31:fe:bc:17:de:08:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
        Validity
            Not Before: Dec 19 23:00:52 2025 GMT
            Not After : Dec 20 23:00:52 2025 GMT
        Subject: CN=ed3c75e798d1dbceba5fe1b63c4fd1ed610635e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:08:ce:7c:9b:d9:c2:06:fb:42:cb:ea:51:
                    d7:d1:0f:ed:7a:75:2a:3e:01:89:75:51:58:9d:61:
                    ae:05:ba:1e:16:62:ca:32:e3:d5:67:67:fd:d4:1e:
                    f2:e3:8f:f2:25:b9:e1:a5:c3:87:5c:84:63:b9:09:
                    77:e4:19:64:01:fb:07:aa:60:44:e2:63:8d:a9:3b:
                    21:44:4a:2a:a7:67:36:c3:e5:12:c0:88:2e:be:d4:
                    35:76:a1:f4:f3:f8:73:1e:9f:a9:86:2f:58:59:fd:
                    11:1c:15:3b:07:63:e1:02:eb:8b:fe:9d:45:f8:8c:
                    7f:45:f5:d8:12:be:7d:5b:55:8c:e6:85:7e:f4:6c:
                    cf:65:e5:bc:f3:4c:8c:31:3d:e8:60:05:37:16:b1:
                    9a:73:da:e6:8e:47:64:21:30:83:26:be:30:85:b3:
                    e8:13:6c:09:c2:50:15:61:06:6c:48:a8:bc:38:f2:
                    9a:ea:d3:96:c3:9a:73:49:c2:5a:39:ed:e4:45:f5:
                    5c:69:d8:45:cc:c8:b5:25:d5:fb:46:2d:be:f4:cd:
                    c2:c3:d9:98:7f:57:12:e8:f3:fe:95:70:d8:48:50:
                    37:c9:5c:e6:7a:93:0f:dc:e4:4a:b9:7d:90:58:40:
                    d7:75:1a:b4:1b:f6:62:30:fd:e0:c7:b6:d6:6a:02:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3C:75:E7:98:D1:DB:CE:BA:5F:E1:B6:3C:4F:D1:ED:61:06:35:E8
            X509v3 Authority Key Identifier:
                keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7d:45:9f:66:3a:9d:ae:78:41:ed:6a:fa:16:d5:5c:3c:8d:
         3d:cb:b0:e7:c9:c0:df:de:ca:97:2c:f1:0d:6c:44:55:44:47:
         28:81:d1:e4:1d:7f:7d:9e:6d:d6:93:7c:7d:31:17:bc:fc:a3:
         60:30:6e:02:10:7f:e4:f1:2b:92:a4:39:f0:31:d0:f7:54:61:
         87:21:22:c2:e0:ed:d2:76:b8:db:e5:cd:e8:65:69:17:e3:ef:
         8e:00:9e:54:3d:85:8c:64:58:1d:f2:fc:9d:e7:ed:11:5f:47:
         90:bd:32:ab:65:3b:75:dc:86:75:23:b8:18:52:0d:c6:d7:01:
         70:b8:a4:66:a5:ac:c4:ba:4f:49:53:6a:4b:6f:56:6a:55:1f:
         4c:a5:03:dd:94:96:86:4e:e3:48:bd:f9:6f:db:0e:dd:e0:07:
         b6:0e:40:e1:bc:95:6b:37:77:f8:87:35:78:94:71:83:6c:8c:
         98:8f:6d:b3:4e:6a:ab:61:c0:86:42:c9:78:2d:72:a3:74:61:
         ec:13:df:08:67:cd:99:87:75:74:77:bb:4d:51:7e:7b:40:a0:
         19:53:a4:8a:c5:69:b8:f5:d1:2c:7f:b7:4d:84:2b:aa:0b:e1:
         9b:b2:c8:4b:1b:2e:20:79:62:b7:99:8a:2f:ea:e7:b9:7d:05:
         7a:56:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:17:52 2025 by rpki-client