This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File:                     mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier:          fHc8RhdvL/oSXkrbrF3J38C71QhaU7fKlQbXua1Gptw=
Subject key identifier:   B4:4D:F2:21:CA:23:75:84:6C:63:7E:FA:94:71:0F:16:39:CF:0B:23
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer:       /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial:       019AF1D18B5093DDDED09617C015575B9797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 04:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:32 +0000
Files and hashes:         1: Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa (hash: B+UnfNeyWy4qc0L9iLcwdqvfvolglpTpBLhXa2BgbS8=)
                          2: _b-w9LvxuQUdQBFQTPOqft2tDNE.roa (hash: ZeBYUCPyEsrx7JXuItWCAACWIJTP5Z1eTXibb6gzJH8=)
                          3: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: c+dumYLDS2qsC7uxo+9FMnM2GWFE7sxdhCgFlWj1+S0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:8b:50:93:dd:de:d0:96:17:c0:15:57:5b:97:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
        Validity
            Not Before: Dec  6 04:00:32 2025 GMT
            Not After : Dec  7 04:00:32 2025 GMT
        Subject: CN=b44df221ca2375846c637efa94710f1639cf0b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:bf:e2:9a:b9:b3:d7:3a:7f:df:35:93:00:
                    e5:03:16:ab:3f:be:e3:e4:ae:ab:eb:4a:23:43:1a:
                    18:e7:62:3c:c0:3a:55:6c:31:d7:23:3e:21:e3:ac:
                    2e:0a:76:8d:d3:9e:24:91:eb:4c:e8:95:cb:c2:06:
                    dc:b8:c8:10:6d:84:ca:99:b7:77:5d:fb:e5:b0:19:
                    a5:b0:71:a0:05:93:2d:ae:25:1d:f8:2d:39:07:7d:
                    cd:b6:96:34:b0:85:55:e2:43:8e:1f:a6:f7:da:78:
                    2b:be:ae:10:53:3c:e3:a3:e5:d6:ed:ba:3d:58:db:
                    dc:a1:21:ae:e1:c9:06:87:5d:c0:d4:1b:da:22:3a:
                    eb:93:2f:fe:81:c0:36:42:b6:2a:43:55:d0:22:95:
                    e0:3e:1b:b8:eb:a3:8e:d8:78:c3:c8:57:18:8b:cb:
                    ab:09:43:69:0e:b4:b0:1d:ed:41:24:2e:d6:25:93:
                    6f:fb:a5:91:55:d6:0e:4d:22:53:0e:e1:fa:f6:8b:
                    82:50:fa:38:cc:4a:4a:d7:15:7f:f8:5b:78:46:79:
                    d1:93:34:80:a6:65:08:b3:a4:aa:cd:f3:64:00:be:
                    8b:ff:2a:ae:88:10:f0:ff:a6:64:f7:81:c2:02:83:
                    0d:58:de:76:ae:a8:b9:ab:23:9a:10:1e:0e:a1:87:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4D:F2:21:CA:23:75:84:6C:63:7E:FA:94:71:0F:16:39:CF:0B:23
            X509v3 Authority Key Identifier:
                keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:aa:9c:f3:ff:11:49:6f:0f:cd:2f:8c:2e:d8:90:f7:7c:
         f2:0d:de:f1:04:1c:ee:19:16:e4:d0:73:73:51:0b:4e:bb:c8:
         06:66:cb:34:da:4a:9b:af:48:19:d2:a0:6d:94:cc:e6:02:ee:
         29:0f:e3:50:ca:ea:d6:0b:74:82:de:59:fa:28:84:ac:72:c0:
         09:8c:e9:fe:9f:f0:a2:ea:21:37:de:8f:39:19:4f:68:be:da:
         86:d8:c9:c4:91:a7:4a:55:3f:dc:5d:36:b7:17:bc:aa:cd:91:
         b3:5f:6d:ad:34:c7:c7:3f:50:9a:90:01:d1:45:f1:84:94:87:
         2a:6e:7a:2b:4f:e0:9b:57:77:13:5a:f1:c5:8a:34:f4:b9:fc:
         bf:5d:88:49:bf:48:e8:72:21:34:30:34:35:36:73:e0:cf:be:
         10:92:c6:63:ce:f2:f9:63:40:e8:0a:13:af:99:52:77:28:e6:
         cd:f7:f5:d8:a2:86:7d:65:a6:2a:b9:b5:e9:90:ec:f6:bf:fe:
         7a:d4:1d:1b:bb:df:ba:a1:7d:79:cb:1e:85:f5:05:65:51:7d:
         a9:a7:5d:7f:9a:25:f7:61:d7:e5:c6:c1:60:97:06:83:79:8d:
         b3:58:d6:85:63:62:d4:39:7a:9a:95:61:36:ec:e6:49:f4:0a:
         cd:db:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:07:21 2025 by rpki-client