This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
File:                     SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft (raw, json)
Hash identifier:          CveTJ7dEhG4pRd0WCiOw343w4bMi4idtQ+47CW5rEkc=
Subject key identifier:   48:4B:25:2F:89:E7:40:BB:F1:5A:C0:E7:B5:8B:48:9E:07:9C:82:FC
Authority key identifier: 48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34
Certificate issuer:       /CN=482e4160d9808f92ffef093e9b1b9a0421bada34
Certificate serial:       019B51BD14BD306D43F83F178C13050753D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
Manifest number:          06BA
Signing time:             Wed 24 Dec 2025 19:01:44 +0000
Manifest this update:     Wed 24 Dec 2025 19:01:44 +0000
Manifest next update:     Thu 25 Dec 2025 19:01:44 +0000
Files and hashes:         1: SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl (hash: qZxv/S/glCGMZJ/IKldLF5V2fLLBODQc80GFe1JwGhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 14:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:51:bd:14:bd:30:6d:43:f8:3f:17:8c:13:05:07:53:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482e4160d9808f92ffef093e9b1b9a0421bada34
        Validity
            Not Before: Dec 24 19:01:44 2025 GMT
            Not After : Dec 25 19:01:44 2025 GMT
        Subject: CN=484b252f89e740bbf15ac0e7b58b489e079c82fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:35:92:75:61:f0:6f:79:db:54:ec:b9:67:
                    ed:31:a0:39:97:c4:6e:4f:c9:6e:15:7b:7d:aa:f3:
                    fc:cf:2e:6b:e3:01:4f:a5:db:8c:63:43:30:60:c0:
                    89:5a:ea:73:d2:33:9e:6f:06:66:13:54:09:cc:a7:
                    a1:34:61:e2:07:57:f7:12:bb:37:2b:b1:f9:b6:fe:
                    b6:e9:2f:c4:95:ff:be:bc:38:c6:6d:0e:92:7b:a5:
                    df:f4:5b:ea:5c:14:87:f5:4c:7d:97:af:f7:6b:bf:
                    96:cd:34:a1:98:34:61:85:9c:09:b8:cd:85:2d:5b:
                    c1:b0:5a:f6:74:29:e0:56:51:45:a3:fb:92:05:e4:
                    36:da:bb:64:b4:dd:e2:4f:31:3f:c0:c5:f8:89:7a:
                    89:43:55:9a:db:71:de:16:c9:e5:78:0a:62:73:07:
                    94:37:4d:a1:26:5c:1e:84:b6:c1:33:f1:80:62:a1:
                    2d:3a:5c:02:79:93:d3:7b:c7:2d:e3:19:0e:d3:fb:
                    e8:7d:66:55:bb:41:f2:9c:c9:3d:ee:91:47:9a:d0:
                    76:7d:de:67:06:91:5c:29:0b:dd:d6:a1:c7:fd:28:
                    91:21:04:4e:74:c4:a7:d5:31:74:28:cb:53:06:31:
                    90:bd:32:7a:e1:76:5f:90:3b:84:74:64:63:e3:48:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4B:25:2F:89:E7:40:BB:F1:5A:C0:E7:B5:8B:48:9E:07:9C:82:FC
            X509v3 Authority Key Identifier:
                keyid:48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b9:3e:48:4d:56:bc:4a:d9:ef:cc:32:1a:e7:e4:53:b7:41:
         1d:40:09:80:a4:5e:f9:ca:61:ed:bd:59:54:51:8c:21:eb:90:
         bf:4d:ef:5c:8c:5e:1f:b3:d9:d3:86:70:42:b5:85:5c:55:11:
         71:fe:38:f6:19:e6:56:dd:05:78:74:9a:15:20:d9:2f:76:b0:
         a7:9c:1c:62:a1:12:95:af:28:fc:41:85:96:85:48:b6:e4:40:
         78:3b:6c:9c:84:0f:a8:c1:25:cd:c2:11:0b:49:cd:50:66:61:
         f5:1c:c7:47:1f:2f:9f:24:0e:1c:d7:c2:c7:7f:4a:93:1a:d8:
         9e:17:9c:74:1a:a1:dc:dd:17:3a:08:46:91:9e:fc:04:b6:ef:
         46:49:93:58:a0:d1:2b:5f:ef:35:66:9f:4a:fb:76:32:0f:ee:
         c2:4f:b4:de:a7:da:0f:d8:1f:e9:b1:78:1b:60:51:61:b9:f5:
         42:5f:aa:75:de:e8:9a:d9:d5:6a:41:d0:1a:4f:a2:79:46:f2:
         e8:01:e9:30:e2:a6:84:eb:ad:63:c6:a3:70:05:81:08:71:f5:
         bb:72:e6:1c:cd:6e:9b:a5:98:84:57:2d:4f:be:1b:31:8e:44:
         14:40:36:58:5e:c5:ee:6b:ae:ed:b9:10:5b:6f:24:0e:26:5a:
         6d:91:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:47:36 2025 by rpki-client