This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File:                     MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier:          8qx9t139Dv+uAWQtEBbCttXk1BaOtJIOPLwznMSUwO8=
Subject key identifier:   56:47:6A:71:81:01:A1:35:5A:BD:6D:A1:F3:D3:B4:9B:D7:97:4A:90
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer:       /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial:       019B2EF9107E5E0336873EAC5FA7FD102593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number:          1781
Signing time:             Thu 18 Dec 2025 01:00:33 +0000
Manifest this update:     Thu 18 Dec 2025 01:00:33 +0000
Manifest next update:     Fri 19 Dec 2025 01:00:33 +0000
Files and hashes:         1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: AQGxC1XMSlw0INBuHrCo6wTFLblTcoLRNobw/If4Knk=)
                          2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
                          3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:f9:10:7e:5e:03:36:87:3e:ac:5f:a7:fd:10:25:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
        Validity
            Not Before: Dec 18 01:00:33 2025 GMT
            Not After : Dec 19 01:00:33 2025 GMT
        Subject: CN=56476a718101a1355abd6da1f3d3b49bd7974a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:78:b5:25:99:75:49:3a:5c:b2:7b:62:fd:
                    55:11:18:a5:19:40:89:60:6d:cf:cf:95:94:4e:d6:
                    c7:48:61:f2:8e:e9:df:02:54:a3:15:ef:ce:74:b4:
                    76:64:ee:c3:18:e3:90:88:7f:3c:ac:79:d4:9d:9b:
                    2f:d9:95:ef:c2:a5:c4:04:20:69:d1:c6:69:9c:72:
                    83:c2:09:7e:7a:53:56:7f:95:48:2b:0b:d7:93:5f:
                    c1:4f:f9:52:a2:7b:89:5e:25:14:76:62:23:9f:26:
                    32:a8:7b:35:78:82:47:ce:e0:90:2e:81:8e:a9:a0:
                    4f:f2:ef:c9:35:6f:99:a4:b5:67:b3:54:fa:76:83:
                    23:ca:48:0b:7e:d5:86:f9:46:cc:7e:ca:67:48:81:
                    6b:3e:95:b9:3d:18:38:6f:cd:fe:f7:22:07:c3:ac:
                    93:ca:1d:a3:31:a2:9d:96:25:82:c8:0a:16:16:d0:
                    02:f6:ff:d7:8a:75:99:ce:21:bd:ca:62:e1:5b:d8:
                    99:b5:ba:ef:b7:87:73:8e:fd:dc:b8:dd:b5:8e:db:
                    0b:83:97:59:23:e3:e1:b1:c7:3a:d3:73:88:9c:8a:
                    33:0e:66:5e:74:b9:61:87:22:c2:d4:01:fa:89:57:
                    f1:a3:c0:f4:83:8b:86:83:d8:56:28:5f:f1:72:73:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:47:6A:71:81:01:A1:35:5A:BD:6D:A1:F3:D3:B4:9B:D7:97:4A:90
            X509v3 Authority Key Identifier:
                keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:45:63:b9:36:9b:a9:7f:80:ee:c9:7a:2b:ec:59:92:42:46:
         64:fd:15:a8:ac:00:84:ab:ea:3c:b3:7e:1a:09:91:a0:15:1e:
         d3:fc:3c:cc:ee:bf:ee:4c:87:c6:34:9d:dc:5e:ca:7c:2a:d5:
         2f:49:ac:6d:d5:25:f4:c1:dc:53:dd:c7:5a:44:c0:f5:3e:49:
         f7:f1:52:04:65:cd:97:da:29:3a:6f:09:b1:2a:57:c9:0c:0d:
         fd:7f:00:9a:8a:b8:85:1d:04:90:15:9b:5e:8d:b7:a9:fb:99:
         24:09:d6:78:9a:03:b8:c2:fd:74:fe:6d:a7:3d:aa:6a:6c:06:
         2d:81:be:ce:25:2f:9b:6b:0e:2c:ff:5a:df:95:79:cb:72:29:
         72:d1:12:16:3b:e3:ff:c9:a4:78:46:42:89:e6:97:74:0f:ae:
         11:c6:57:12:f6:00:63:55:57:12:f6:ff:d4:b2:be:dd:fd:2b:
         87:cd:54:dd:d8:8c:d5:51:09:3b:68:2c:fb:3e:18:ba:40:c1:
         7c:84:74:ee:a3:c0:e3:6b:b3:a8:bb:c6:2c:a9:d8:cb:54:93:
         0e:0c:8c:6f:fb:0f:f0:34:53:6c:eb:98:09:de:fb:d9:0b:d8:
         c0:fe:5c:2a:1e:46:95:e4:b4:2a:b4:0f:c8:81:d8:54:43:78:
         1a:32:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:45:59 2025 by rpki-client