This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File:                     mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier:          xVvsXyvb3dqAAq0vVl/rvA6VapW8/BDJ07lP2cixy+E=
Subject key identifier:   74:05:CF:F3:80:6F:D5:54:A7:C6:8A:0D:6A:FD:95:89:85:E7:6E:69
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer:       /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial:       019AF1D2323D48255FFC18B71C899F1E0FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number:          1789
Signing time:             Sat 06 Dec 2025 04:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:15 +0000
Files and hashes:         1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
                          2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
                          3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: +E/y6SDGUGrCzmdZcOXuiiFUdc+j1oJrgYC5gymSgd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:32:3d:48:25:5f:fc:18:b7:1c:89:9f:1e:0f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
        Validity
            Not Before: Dec  6 04:01:15 2025 GMT
            Not After : Dec  7 04:01:15 2025 GMT
        Subject: CN=7405cff3806fd554a7c68a0d6afd958985e76e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:78:90:5e:08:c6:d1:5b:a1:fd:41:8f:4f:
                    31:fa:5c:0b:fa:7d:22:36:8f:28:64:92:97:df:c1:
                    3f:ef:6a:64:49:10:f0:c7:26:ac:31:7b:c0:d8:5e:
                    c9:e7:f0:d2:36:d7:8e:07:e1:cb:8a:96:0f:9b:7e:
                    92:27:4c:e6:34:fc:4b:52:96:3b:c4:cb:48:09:9a:
                    1c:fc:d3:85:60:de:df:05:a0:93:d5:ef:26:0c:3e:
                    6b:e3:f0:b4:08:6a:08:78:82:92:50:ea:72:c0:b7:
                    d5:ab:de:fd:26:27:18:0c:fa:91:c6:fe:4d:5e:c1:
                    24:84:4a:0a:98:4c:22:06:2d:81:ee:2a:05:94:09:
                    fa:dd:27:65:86:26:89:80:10:3f:05:5b:86:74:a3:
                    d0:d1:9b:84:d0:a9:c5:8f:1b:43:a0:e3:9a:9e:4f:
                    b4:ff:27:57:59:92:a1:35:aa:46:c1:71:3b:aa:d7:
                    9c:9a:94:f1:13:96:d1:6e:7f:fd:6e:97:0e:93:c6:
                    3d:75:ad:6c:aa:59:77:8c:41:f2:a7:54:8d:02:c8:
                    cb:e7:3d:47:7a:2a:15:03:be:a7:b0:f5:31:a4:51:
                    98:c0:54:73:1e:ca:c7:d4:19:49:25:d1:55:15:2f:
                    e0:02:de:ab:de:ce:08:e5:87:cd:8c:62:c0:f2:7d:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:05:CF:F3:80:6F:D5:54:A7:C6:8A:0D:6A:FD:95:89:85:E7:6E:69
            X509v3 Authority Key Identifier:
                keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:1a:3a:a1:47:c8:46:09:eb:dc:e3:d2:7a:ff:9c:0b:50:1a:
         b3:3b:12:51:46:4a:6f:da:20:a8:c4:72:d3:92:1f:30:0d:3d:
         98:f7:46:5d:6c:dd:00:02:eb:de:59:cc:74:3f:a5:88:e3:4a:
         13:49:ac:33:06:f7:80:8f:39:a4:30:03:47:23:97:97:d8:8e:
         5c:ee:9e:6d:35:df:d6:4e:a8:8e:4a:5d:c3:92:77:b7:b8:73:
         80:c7:e0:bd:2a:f2:1e:67:62:50:93:b5:07:47:18:6e:66:ce:
         2c:b3:78:70:b2:13:4f:9e:04:31:30:23:37:52:ba:44:29:4c:
         10:c1:0b:95:03:cb:03:e3:c7:a2:bf:e3:d6:7f:24:77:9c:7e:
         6f:0f:18:16:59:cf:fe:54:db:1e:19:8b:3b:a1:3a:41:c0:4a:
         6d:13:80:e0:d2:b0:18:05:8c:40:57:9f:07:74:27:65:05:32:
         cf:09:be:90:51:45:91:60:8f:b8:25:4d:b1:1b:65:3b:de:40:
         8c:f1:3e:85:aa:0b:e2:d8:2c:dd:52:97:5f:f6:4f:7c:e6:47:
         6a:8b:4f:fa:52:62:24:f7:2c:69:3c:7f:41:92:ed:72:66:dd:
         5d:69:40:31:1e:e0:5f:1f:40:04:fc:5e:5d:d2:df:d8:7a:74:
         e3:25:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:08:06 2025 by rpki-client