This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File:                     mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier:          mk/pDm5PiFaElChTHPBYo5JAcrunmig1PQ2xUror/kQ=
Subject key identifier:   E8:AC:95:72:14:F4:8E:32:8D:95:4D:E9:D4:4D:66:9C:45:BC:D6:4C
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer:       /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial:       019AF2091B9281E970BCDD81733626A69A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number:          13A6
Signing time:             Sat 06 Dec 2025 05:01:14 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:14 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:14 +0000
Files and hashes:         1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
                          2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: lEe3FXBGJYe+mh//TYWKPwNLS+oovxuwaageZVoGRvE=)
                          3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:1b:92:81:e9:70:bc:dd:81:73:36:26:a6:9a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
        Validity
            Not Before: Dec  6 05:01:14 2025 GMT
            Not After : Dec  7 05:01:14 2025 GMT
        Subject: CN=e8ac957214f48e328d954de9d44d669c45bcd64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:0b:c9:37:45:e6:91:74:24:b1:39:0e:7c:
                    99:6c:11:62:dc:4c:e6:76:29:2f:fd:eb:de:57:e4:
                    cc:8f:36:ec:42:9a:86:df:eb:0a:8f:0b:23:d3:5e:
                    93:17:27:f7:8d:3d:1a:42:56:30:c4:65:d9:c7:db:
                    4f:b3:f5:f1:4e:4b:7b:4d:d5:bf:ed:ce:32:5f:6b:
                    53:b5:12:42:e9:bc:7a:fc:1a:14:9e:fb:2f:a8:ce:
                    b4:4b:4d:a0:dd:ce:f7:32:d1:c6:9c:08:72:1f:93:
                    d4:29:99:05:d4:a6:e1:1a:01:09:30:77:5f:a3:92:
                    72:ff:e5:56:37:1b:fa:e7:4a:6e:79:3d:9b:45:f2:
                    8b:76:89:9a:c0:a9:51:ae:5a:5a:c0:bd:a6:37:04:
                    b8:aa:8e:4f:4d:aa:9b:7a:b7:13:79:83:06:05:9e:
                    f6:8f:a5:5a:5f:9b:dd:41:42:c1:a2:48:40:8a:30:
                    82:54:0b:fb:08:71:9b:9c:0a:28:8e:a2:8e:af:66:
                    42:6a:7e:fe:d8:cb:44:c2:d6:bc:a6:e9:3e:05:18:
                    70:cc:6b:d6:47:f0:71:09:0c:1b:a8:e0:d8:ef:24:
                    65:76:e9:0f:20:e3:95:8a:a3:5d:7b:b4:0c:c6:d6:
                    35:3b:dd:0f:55:3b:d6:db:79:c9:11:c2:71:dd:d8:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AC:95:72:14:F4:8E:32:8D:95:4D:E9:D4:4D:66:9C:45:BC:D6:4C
            X509v3 Authority Key Identifier:
                keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:64:1d:64:07:3b:7a:f3:11:1b:6e:a4:43:0b:ae:a8:b7:
         5c:59:6c:a8:13:66:12:4f:35:b2:44:22:86:94:4a:b7:06:ce:
         ff:6c:d3:96:5c:77:db:19:20:e2:7e:77:e3:f2:39:7c:f0:b5:
         18:28:8f:f6:2f:2a:c1:08:d8:2f:89:ec:98:43:74:22:33:48:
         9e:a2:83:f8:0a:d9:0c:57:17:38:53:f2:20:27:7e:10:69:e8:
         06:1d:e9:c7:55:64:64:95:37:b6:56:6b:2e:a8:6d:63:7f:3c:
         7c:6e:2f:88:ff:d4:8a:0c:bd:18:f5:ce:39:25:c6:1b:66:63:
         46:d8:ce:49:d3:86:c0:d8:ab:52:c3:0b:9b:91:52:0b:0b:d8:
         64:e7:7c:47:12:4a:26:0e:2a:50:c5:e8:27:49:6b:e0:44:85:
         6b:9a:a3:9a:66:4e:33:42:c0:e3:69:d3:f8:c4:15:91:74:f9:
         f0:22:e8:0b:9b:b4:59:4c:00:d1:38:84:22:4c:9a:b3:cc:99:
         d1:4b:5e:d7:4e:56:15:13:dd:a8:e2:ae:05:3f:a0:70:41:30:
         b0:13:25:c4:63:bb:80:0d:8f:fe:f1:af:ee:2d:33:d8:90:30:
         be:53:a3:03:6a:93:6c:da:a5:4f:58:79:1e:20:7f:c1:e0:20:
         b2:38:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:38:45 2025 by rpki-client