This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File:                     MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier:          91mmzOAUEkx0j2DYdmvoi6Nyli2CrI1OgVeQbad/658=
Subject key identifier:   2D:0C:D1:AF:1D:5A:E6:09:57:40:11:D2:AE:B0:BF:5E:32:92:73:22
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer:       /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial:       019AF12E2A4A2A30F57565209A3DDBFE50D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 01:02:05 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:05 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:05 +0000
Files and hashes:         1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: 6gBYS11kKRnUn1N/e9qLP4G6Ngormc1+7T+ikIK9CLY=)
                          2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
                          3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:2a:4a:2a:30:f5:75:65:20:9a:3d:db:fe:50:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
        Validity
            Not Before: Dec  6 01:02:05 2025 GMT
            Not After : Dec  7 01:02:05 2025 GMT
        Subject: CN=2d0cd1af1d5ae609574011d2aeb0bf5e32927322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:3c:8c:93:71:6f:c9:d4:56:75:24:e7:b2:
                    b8:ab:a6:53:d5:eb:65:2d:62:aa:86:a4:ee:49:89:
                    96:a3:45:5c:55:e8:6b:e1:73:66:90:8a:3e:20:e5:
                    d7:1a:7b:6b:f9:57:0a:8c:5b:41:f7:7f:cd:05:05:
                    88:8c:4b:77:c5:69:c4:ed:0b:93:29:76:d2:d1:2a:
                    19:99:b0:06:2e:94:28:41:fa:10:99:3b:9c:38:80:
                    3d:e7:2f:06:5f:1c:f5:53:e1:91:2f:49:c5:20:ca:
                    b0:44:a4:97:00:89:42:ef:d1:81:21:bd:b6:df:72:
                    39:bf:a0:ef:0b:4e:f2:6f:2a:46:ce:e3:ed:b3:e1:
                    5c:8b:61:7e:92:d0:aa:73:e3:a2:24:16:24:dd:10:
                    fc:33:22:4f:ed:a5:e5:84:71:b8:0d:f3:29:45:f6:
                    54:e5:c5:e4:06:c8:36:44:12:59:a9:47:c3:4a:9a:
                    25:98:98:d2:fa:98:36:b8:7a:ce:d7:56:67:84:4a:
                    ff:e7:0a:88:22:88:fe:d0:95:9a:d1:7a:e4:87:96:
                    35:ff:40:19:20:b2:5d:0d:ef:59:59:02:af:31:1d:
                    4e:80:af:a2:2d:f6:c6:f3:4d:7f:ac:78:7c:f1:58:
                    53:d3:79:68:2f:8c:7a:4b:c8:07:c2:9c:2e:80:c2:
                    92:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0C:D1:AF:1D:5A:E6:09:57:40:11:D2:AE:B0:BF:5E:32:92:73:22
            X509v3 Authority Key Identifier:
                keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c1:61:5c:10:ac:a3:23:4c:03:85:51:50:0d:5c:a1:6e:73:
         bb:e0:ab:56:a0:cf:71:bc:52:26:48:f3:d2:dd:82:d3:2b:39:
         b3:56:dd:ac:3d:51:e7:a6:92:79:91:b1:59:ac:21:27:e6:7e:
         df:af:bc:5b:cc:dc:42:58:23:0b:65:fc:72:e9:a5:66:1e:88:
         f6:75:94:c6:0a:9c:3a:00:a7:b2:a6:a6:0e:a0:4d:30:bf:dd:
         87:bd:c1:ae:23:03:9f:e3:88:77:60:cf:4e:1c:ef:c9:38:99:
         cc:52:ea:cc:bd:aa:30:08:5b:71:2a:a2:94:d8:b7:55:2b:fc:
         d9:79:3d:dc:b7:b9:bc:b9:c1:ff:ca:e2:05:a6:cd:65:63:1d:
         da:4d:a4:90:e0:2a:af:d1:19:78:97:54:03:1f:b8:36:52:3e:
         56:40:79:37:18:f0:72:53:c8:c1:3c:6d:c5:0c:6d:f2:41:b8:
         9f:c2:e6:3e:27:49:49:7b:d7:35:a8:74:5e:8d:03:ad:b7:7e:
         4f:62:bc:b4:a1:95:e2:92:8d:73:7f:75:ea:ec:38:39:9e:d2:
         aa:88:2d:95:b0:ab:cb:c8:27:99:93:c3:30:7f:0f:cd:86:68:
         ea:a4:d6:de:5d:1c:0d:06:9a:73:f3:83:a9:6e:d8:9d:46:6a:
         d2:04:53:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:03 2025 by rpki-client