This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
File:                     Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft (raw, json)
Hash identifier:          PwiBqoyOivoyXlHkCMtR7yZL7GNO7eFqp2169j22tlU=
Subject key identifier:   3C:E1:82:38:6B:E0:C9:9A:1D:B0:61:C7:55:7A:97:5A:AB:40:70:51
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Certificate issuer:       /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial:       019AF1D1ECF9BD3C846DB983EFAFBF68DAF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
Manifest number:          1130
Signing time:             Sat 06 Dec 2025 04:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:57 +0000
Files and hashes:         1: 1-GIE1ZNs_a58uffTHyRFm6JVqgA.roa (hash: gy76Xlf9casHiqbf8OmkekUAgQNXTcj0O5qhx7aDk8A=)
                          2: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl (hash: ezR6ggDhiigBFjp1MijDLqfl6lmEu0npBFcR9t7HUcQ=)
                          3: U11EgxJj3vWydMXXj47fu6c9oJU.roa (hash: O6q4O52x0/hSWdM6G8XHS8BF1GrAPa5PsVo4kAs071U=)
                          4: eZeH1iCaJCqVSM-iEx9uMe6pR7s.roa (hash: rqwN44hH8sdKM+nwnj0SNae9MB6yS4MWbE4dyJjYG2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:ec:f9:bd:3c:84:6d:b9:83:ef:af:bf:68:da:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
        Validity
            Not Before: Dec  6 04:00:57 2025 GMT
            Not After : Dec  7 04:00:57 2025 GMT
        Subject: CN=3ce182386be0c99a1db061c7557a975aab407051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:4e:2e:4d:2f:4c:e1:91:e6:e3:cb:74:62:
                    60:14:6b:d1:ac:5f:96:15:d1:b4:8a:d7:f2:67:d7:
                    3f:28:c3:77:3e:6c:bf:39:5f:23:de:27:5a:73:a0:
                    5e:69:dd:e3:be:b2:c2:5f:44:e4:c1:c9:02:d1:29:
                    be:92:73:3b:33:12:34:9a:de:0e:27:65:ee:3d:03:
                    a7:26:be:a9:95:4b:22:f0:8e:ed:3a:92:08:9e:d0:
                    1b:02:ea:63:98:21:85:be:b4:20:ab:8b:49:a8:ab:
                    75:1e:9a:b2:07:66:e8:be:60:f7:fb:95:ea:68:40:
                    c4:a6:f9:fe:1c:85:bc:8a:db:e1:7b:70:ee:78:3e:
                    14:20:8c:72:09:0b:b5:72:2d:ba:49:17:e8:29:d9:
                    08:ec:c9:4d:62:6e:91:f7:76:39:97:06:51:05:61:
                    e1:e5:a9:58:5c:25:8b:e6:e5:3a:19:db:54:eb:03:
                    a9:a7:56:1a:23:55:11:2a:57:bf:92:bb:59:89:19:
                    b6:23:b4:6c:73:87:51:54:8f:73:df:0b:fb:40:dd:
                    fb:68:24:9a:b6:fc:8c:3a:a1:be:db:31:8c:9c:21:
                    0d:77:cc:cc:8e:4d:2f:fe:9c:60:fd:92:93:68:a3:
                    70:17:7c:58:25:42:cd:e5:45:26:ad:31:f0:c7:93:
                    b6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E1:82:38:6B:E0:C9:9A:1D:B0:61:C7:55:7A:97:5A:AB:40:70:51
            X509v3 Authority Key Identifier:
                keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:28:c6:b8:3c:00:b1:9c:be:88:57:ca:6e:72:b4:77:e6:da:
         eb:be:9c:75:c9:5a:d2:0f:16:c3:b6:5a:0a:df:88:f8:04:9a:
         db:64:d4:4c:1f:15:68:7f:bf:36:1b:42:87:ae:38:47:82:17:
         cd:ce:80:bf:e9:ea:ef:e5:f7:de:fa:1c:3c:b2:a8:52:e8:b8:
         ce:f5:e2:bc:08:3c:af:9a:67:10:70:77:d3:99:01:f8:40:dc:
         3a:01:4d:28:47:44:b9:37:b2:6d:40:af:25:ad:08:e0:73:4a:
         b7:19:ea:a5:2b:85:f6:d1:89:cf:22:3a:83:cc:9d:89:c7:1d:
         d0:57:e6:05:6b:21:2e:b9:0b:ef:66:fe:c8:38:6c:14:e9:75:
         42:11:43:df:d3:40:53:12:14:b4:81:e5:5f:26:b6:20:d7:70:
         9c:ff:16:1d:19:19:43:a4:46:5e:43:3e:50:d6:53:d2:48:5a:
         0c:90:8a:f5:2d:23:eb:d4:27:9b:c5:80:47:d2:91:0d:1f:e2:
         12:6c:75:fb:31:06:cf:9f:bc:75:71:43:ee:cd:2b:98:dd:ca:
         1b:28:5f:e2:31:57:9c:97:51:20:38:65:de:16:e4:45:c7:d4:
         b7:db:2f:c3:7f:8e:11:02:e8:df:ed:09:28:5b:cf:c8:91:95:
         ec:d3:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:57:27 2025 by rpki-client