This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File:                     58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier:          cX3mj0E1Ez2uP+UaLJdceU3yNZuPtWb+YmG/ibj6QRk=
Subject key identifier:   D4:BB:BD:D0:6A:86:82:C7:32:A0:FA:22:AD:BC:9C:CF:E5:50:54:41
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       019AF23FD9165C109FC656F249705D9AC137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number:          0C1B
Signing time:             Sat 06 Dec 2025 06:01:01 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:01 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:01 +0000
Files and hashes:         1: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
                          2: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: s0265pFueDXA4aUdlHjvm1n4BXwxObJx/4bOod41GAc=)
                          3: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
                          4: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
                          5: DeUytZfI95MWDsuLJPAteUD07Uc.roa (hash: wyHnlO7zWJ+apYnZ3m2Zd+YBK+GTVFGojfzCgOcEpWA=)
                          6: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
                          7: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
                          8: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
                          9: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:d9:16:5c:10:9f:c6:56:f2:49:70:5d:9a:c1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Dec  6 06:01:01 2025 GMT
            Not After : Dec  7 06:01:01 2025 GMT
        Subject: CN=d4bbbdd06a8682c732a0fa22adbc9ccfe5505441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:be:d2:ad:13:89:15:5c:8a:55:58:d9:ad:
                    b8:59:3c:17:0d:09:aa:b9:8f:16:c0:f6:a0:56:f5:
                    47:8d:2f:1b:d8:5d:2e:bc:ce:3a:93:eb:97:02:b6:
                    5e:a9:f4:66:74:5a:e1:13:12:f0:2f:ce:11:fe:fc:
                    3d:a6:7b:5b:70:42:51:cc:24:8c:17:12:51:38:68:
                    37:b6:dd:bb:26:1d:05:c5:7c:c5:e9:f6:e8:21:72:
                    a7:b0:47:7d:28:6d:2a:00:b3:46:9f:69:6f:ad:71:
                    e0:e6:94:1c:d3:e8:aa:8d:98:90:47:0f:b9:cf:c3:
                    3f:bf:61:3e:43:08:e0:9d:0d:52:8f:a5:0e:39:d2:
                    69:85:27:aa:95:78:c5:55:de:41:ca:99:59:a0:a9:
                    6d:a2:6d:d2:d2:7d:63:7b:2a:b3:ca:08:56:52:ee:
                    c6:3b:29:fb:79:03:36:15:d7:6d:f3:ee:26:bb:c9:
                    3c:5e:74:27:0b:cd:d9:ad:19:f8:0d:23:a4:0c:4f:
                    1c:a1:06:9f:c7:3c:10:e9:83:78:b2:52:c6:c1:22:
                    11:59:7b:d2:59:fe:ae:d4:20:bd:11:46:d9:08:d1:
                    8d:63:28:19:00:14:0d:f9:79:5f:87:3f:91:4a:22:
                    77:b4:15:e4:5a:d5:49:e8:1f:4b:23:15:f9:90:70:
                    eb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BB:BD:D0:6A:86:82:C7:32:A0:FA:22:AD:BC:9C:CF:E5:50:54:41
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:71:1f:05:37:b7:88:35:6d:9a:bc:35:66:ee:3e:fd:2f:92:
         c1:bb:14:44:7e:9b:1e:ab:f8:9c:07:9d:48:86:fe:05:2a:d0:
         7a:10:5d:62:36:bf:32:52:f6:35:8d:a9:74:94:be:8b:ee:cd:
         3c:9c:5b:81:53:b1:88:46:9e:5f:b8:a3:a4:e0:07:5f:b0:b8:
         26:df:90:73:76:f2:a3:da:4c:79:f1:f7:3c:0f:3e:08:56:7a:
         84:e5:ca:40:cd:47:18:77:18:d6:9b:ee:c2:1a:65:c0:62:ba:
         f5:48:5a:3f:fe:6e:6c:e1:d0:4c:f3:b6:c2:6c:95:53:f5:d5:
         5d:fa:46:86:b2:ce:7c:a1:3e:1b:4c:47:fd:4b:ca:00:ca:b1:
         d8:08:7f:c8:92:98:0c:27:3f:ec:9a:12:d6:42:e7:71:82:68:
         45:05:57:00:3a:5e:b1:e1:06:24:95:84:b7:cb:56:72:d8:9c:
         52:85:17:be:10:37:e2:a6:84:66:96:0e:ee:0a:df:fb:85:d0:
         10:de:f2:83:62:12:2f:db:b0:bf:ad:0b:20:04:68:72:46:ae:
         db:aa:8b:ea:4a:f0:c0:41:ab:b6:49:a7:84:8e:ff:16:5a:19:
         90:15:da:c1:c0:be:d2:1f:66:33:a4:1b:9e:c7:ca:f1:b7:d6:
         98:c9:e5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:18:45 2025 by rpki-client