This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
File:                     SmyWV_fDBZWx2hfELhdtdSygVLg.mft (raw, json)
Hash identifier:          qnh68Oe9PfIeWmy3u+JXCAf6qM2pQ5sg9GZ2RyaJ84U=
Subject key identifier:   04:3E:74:10:D3:A8:AE:D9:3C:E4:14:C3:90:34:0B:07:AE:B7:C9:46
Authority key identifier: 4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8
Certificate issuer:       /CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
Certificate serial:       019B39EAFEE68AA20F8CC15965BA4C8EDF06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
Manifest number:          0A3F
Signing time:             Sat 20 Dec 2025 04:01:00 +0000
Manifest this update:     Sat 20 Dec 2025 04:01:00 +0000
Manifest next update:     Sun 21 Dec 2025 04:01:00 +0000
Files and hashes:         1: SmyWV_fDBZWx2hfELhdtdSygVLg.crl (hash: jGXX3IbxhCBcnbZw59DsAfVxNjbvmDRhjl2xDysxW2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:ea:fe:e6:8a:a2:0f:8c:c1:59:65:ba:4c:8e:df:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
        Validity
            Not Before: Dec 20 04:01:00 2025 GMT
            Not After : Dec 21 04:01:00 2025 GMT
        Subject: CN=043e7410d3a8aed93ce414c390340b07aeb7c946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:0f:31:6c:9a:8a:88:e4:b9:c2:08:6e:f3:
                    e8:7e:42:c0:cb:1d:05:2a:02:18:da:92:6a:03:42:
                    e4:20:52:3d:44:b4:02:75:b8:1e:04:ee:8e:ba:fc:
                    a5:c7:ef:18:fa:33:2b:84:1d:c3:de:9d:a1:4a:72:
                    aa:ac:92:18:32:d2:89:e8:71:48:72:c1:33:4d:89:
                    1b:b4:e7:40:e7:26:f9:6c:f3:e2:ae:40:fd:c3:24:
                    7e:d5:8a:78:ea:44:5a:a3:e5:a2:9f:62:8f:5c:3d:
                    4e:be:3a:9c:8f:14:c4:fc:e3:c1:82:6e:70:70:35:
                    39:af:40:48:d0:a9:9b:20:39:f8:bd:86:95:e5:9b:
                    52:66:4b:8b:22:7c:35:e6:98:bd:12:f7:eb:21:fa:
                    c1:7f:27:2c:20:bb:b1:77:1e:98:96:4f:2a:51:c1:
                    47:03:10:17:38:2f:24:46:5b:26:ff:76:08:85:d7:
                    04:4a:58:9f:95:4c:19:cb:18:e8:1a:12:16:a0:ce:
                    d6:0b:0e:c2:4b:88:16:df:68:26:0f:fb:0d:a4:22:
                    fe:d4:ed:a3:98:1d:eb:d9:9d:bd:a3:b2:12:ca:ac:
                    70:86:c3:3a:6d:bb:82:de:d9:5f:6f:3b:5b:3d:7a:
                    14:d1:52:85:9f:4f:d8:9b:f0:b6:0c:dd:63:9e:1d:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3E:74:10:D3:A8:AE:D9:3C:E4:14:C3:90:34:0B:07:AE:B7:C9:46
            X509v3 Authority Key Identifier:
                keyid:4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:13:d1:b1:4f:71:f8:df:bf:6b:14:fd:91:8a:90:ca:4f:05:
         87:e8:44:d6:6a:00:67:1c:36:a7:17:8a:b4:8a:09:93:fe:24:
         88:41:52:d9:05:c6:6f:e5:c5:eb:f8:21:e8:78:80:d5:ca:44:
         4e:97:bb:c1:bf:a4:1f:d1:66:14:cc:a7:50:5c:94:12:96:3f:
         13:90:b4:de:30:47:09:94:af:76:fd:e6:0a:95:24:9b:69:ed:
         9d:d9:7f:99:25:67:bd:37:1e:be:ea:11:a2:fe:7b:fc:38:94:
         f2:3d:aa:d5:07:eb:56:63:32:41:3c:ef:06:03:2a:34:0c:4e:
         72:b4:ce:3d:71:6a:f4:0f:90:2b:f5:e7:1a:bb:70:61:75:7b:
         65:40:8b:10:c2:98:03:fa:6f:d4:3e:64:91:67:b3:7f:16:51:
         cb:69:64:3d:58:0c:1f:3c:a3:65:40:35:52:a1:eb:7f:12:d1:
         5b:1e:dd:06:82:cf:76:51:99:28:72:df:a5:da:40:40:9a:e4:
         00:cf:e5:ce:9d:8b:5b:ce:32:ae:e3:a0:6c:e0:cc:62:de:fa:
         b2:6f:d5:bd:2d:d8:94:1f:a8:11:7e:12:02:27:ec:53:19:07:
         91:84:31:56:9a:b4:eb:a0:6f:a2:e6:18:02:94:74:74:30:5e:
         a9:26:72:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs56v7miqIPjMFZZbpMjt8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmM5NjU3ZjdjMzA1OTViMWRhMTdjNDJlMTc2ZDc1MmNh
MDU0YjgwHhcNMjUxMjIwMDQwMTAwWhcNMjUxMjIxMDQwMTAwWjAzMTEwLwYDVQQD
EygwNDNlNzQxMGQzYThhZWQ5M2NlNDE0YzM5MDM0MGIwN2FlYjdjOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJEPMWyaiojkucIIbvPofkLAyx0F
KgIY2pJqA0LkIFI9RLQCdbgeBO6Ouvylx+8Y+jMrhB3D3p2hSnKqrJIYMtKJ6HFI
csEzTYkbtOdA5yb5bPPirkD9wyR+1Yp46kRao+Win2KPXD1OvjqcjxTE/OPBgm5w
cDU5r0BI0KmbIDn4vYaV5ZtSZkuLInw15pi9EvfrIfrBfycsILuxdx6Ylk8qUcFH
AxAXOC8kRlsm/3YIhdcESliflUwZyxjoGhIWoM7WCw7CS4gW32gmD/sNpCL+1O2j
mB3r2Z29o7ISyqxwhsM6bbuC3tlfbztbPXoU0VKFn0/Ym/C2DN1jnh3xWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ+dBDTqK7ZPOQUw5A0Cweut8lGMB8GA1UdIwQY
MBaAFEpsllf3wwWVsdoXxC4XbXUsoFS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hODM5Y2MtMjkyZC00NzJmLThhMzkt
NWY2NzYwODE4NjU1LzEvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hODM5Y2MtMjkyZC00NzJmLThhMzktNWY2NzYwODE4NjU1
LzEvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhPRsU9x
+N+/axT9kYqQyk8Fh+hE1moAZxw2pxeKtIoJk/4kiEFS2QXGb+XF6/gh6HiA1cpE
Tpe7wb+kH9FmFMynUFyUEpY/E5C03jBHCZSvdv3mCpUkm2ntndl/mSVnvTcevuoR
ov57/DiU8j2q1QfrVmMyQTzvBgMqNAxOcrTOPXFq9A+QK/XnGrtwYXV7ZUCLEMKY
A/pv1D5kkWezfxZRy2lkPVgMHzyjZUA1UqHrfxLRWx7dBoLPdlGZKHLfpdpAQJrk
AM/lzp2LW84yruOgbODMYt76sm/VvS3YlB+oEX4SAifsUxkHkYQxVpq066BvouYY
ApR0dDBeqSZysw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 08:46:27 2025 by rpki-client