This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File:                     MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier:          f7a8crUsnNyrrehDLUUgsjH5adpvZgKjWlakbxI+eHo=
Subject key identifier:   BE:C7:C6:D2:C1:BD:5F:C4:80:FA:82:F5:DA:CA:3F:E2:49:E3:3A:B0
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer:       /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial:       019AF12D1F6CBC9486B39F3A80B0DBEC7BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number:          0260
Signing time:             Sat 06 Dec 2025 01:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:57 +0000
Files and hashes:         1: 7IBTUseRk7zv94Dnpevsji-MPak.roa (hash: OI9qfsQPi4f7OJOO0DKYF4KRnwctmOowvulRpTfATm8=)
                          2: HJdicrhK0X58hHeVpTRveQPzgSA.asa (hash: GnsE5zVVUGgOlqc4oqkgxYqYyAJUdLN6bxMsAfebi24=)
                          3: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: GVTza1CmlvFtk4igJ41qMYt7wgmO4YG0HjR/g0TR+wM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:1f:6c:bc:94:86:b3:9f:3a:80:b0:db:ec:7b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
        Validity
            Not Before: Dec  6 01:00:57 2025 GMT
            Not After : Dec  7 01:00:57 2025 GMT
        Subject: CN=bec7c6d2c1bd5fc480fa82f5daca3fe249e33ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:ea:93:2f:18:60:43:c0:95:53:2b:2d:73:
                    0e:c4:72:be:bf:63:94:b9:bb:b2:f5:1f:b6:9d:94:
                    bc:5a:cd:a2:19:c8:e8:f8:0f:0b:3f:80:96:fd:ad:
                    f2:b5:48:80:0d:80:29:5e:b6:df:36:b3:a4:aa:5d:
                    e6:c1:62:ba:66:6c:97:36:8b:6d:3b:f3:a5:d9:87:
                    74:8d:f7:b9:55:5a:c1:c4:83:5a:19:99:9b:94:50:
                    33:2a:d6:19:59:81:60:61:66:17:d8:58:26:95:54:
                    b1:0b:9f:71:c1:75:bb:b1:a4:cd:08:7f:2a:db:fb:
                    80:d5:9c:6f:f8:96:08:e1:88:56:cd:4c:7f:96:61:
                    69:1a:ad:58:5c:ac:25:e4:63:79:03:46:45:6d:00:
                    a5:f3:58:5f:43:3d:ab:fd:97:70:aa:95:dc:ac:58:
                    7f:5b:8d:2a:cf:88:ee:73:d9:f4:b4:63:d6:58:e3:
                    16:31:db:7e:04:73:bc:6d:14:a0:9e:35:50:13:bf:
                    fb:15:21:12:1f:88:4f:f0:b1:69:24:7f:d6:2a:f3:
                    4d:fd:76:53:9e:31:99:03:94:c2:d9:39:7f:06:b3:
                    70:17:9f:66:7a:7b:9b:37:ae:be:6b:4d:a1:3e:52:
                    61:17:2d:99:0c:79:2f:29:85:e0:b4:41:93:99:27:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C7:C6:D2:C1:BD:5F:C4:80:FA:82:F5:DA:CA:3F:E2:49:E3:3A:B0
            X509v3 Authority Key Identifier:
                keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:c2:11:01:4a:5d:77:16:1e:ca:6e:63:ba:43:ab:db:54:
         49:90:60:3f:47:b7:78:3d:5a:d1:79:a7:fb:3e:f9:75:a7:43:
         2b:bc:2c:eb:d9:ed:d3:a7:11:b7:01:3b:e4:91:b5:f9:54:15:
         9a:6b:92:3f:98:b6:45:6e:a1:6e:1e:90:dd:78:a2:72:68:a4:
         ab:2e:ad:22:56:3f:11:ed:b6:1d:47:d5:86:cf:58:39:a8:25:
         74:90:f0:fc:50:5e:c8:cb:64:fa:9a:12:d8:a4:7b:12:aa:35:
         63:3c:85:67:8c:3c:1c:1a:ff:f0:b9:57:18:7b:b6:da:2a:9c:
         c4:a7:4c:47:81:11:21:da:02:fa:43:5b:10:39:72:43:34:ef:
         61:75:f1:3b:86:7c:70:e8:d2:19:fa:3b:cc:c3:50:dc:48:e8:
         b0:cc:98:ff:df:34:74:b9:42:47:9c:fb:a9:42:c4:fd:c6:f8:
         71:12:70:2c:e8:fa:87:26:b0:20:e0:bc:96:94:e0:9b:99:59:
         10:94:ef:6a:48:ba:73:43:19:13:68:9f:33:ee:38:61:53:d5:
         63:ae:92:3f:3a:f4:0d:c9:b4:c3:22:7b:07:00:8f:73:47:6e:
         fe:37:ba:1c:6f:a6:18:e1:ac:55:0e:b5:1c:df:ff:f0:d7:f9:
         4c:f1:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:49:19 2025 by rpki-client