This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File:                     MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier:          hHnHXM5oEI4yWas5kgTiI8Ru/QwxrXew/ZZNjB6DyGQ=
Subject key identifier:   13:6C:ED:4C:1E:AD:79:30:3A:9D:C8:2B:EC:79:7B:07:6F:44:35:0E
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer:       /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial:       019AF389D474E6D6FA33C5D6EA2632B43F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 12:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:27 +0000
Files and hashes:         1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
                          2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
                          3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: N44/19esFinjKM2k0rhihzg1/EPNDB2VM+31yrIiGOw=)
                          4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:d4:74:e6:d6:fa:33:c5:d6:ea:26:32:b4:3f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
        Validity
            Not Before: Dec  6 12:01:27 2025 GMT
            Not After : Dec  7 12:01:27 2025 GMT
        Subject: CN=136ced4c1ead79303a9dc82bec797b076f44350e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:78:b4:2f:5e:be:bf:c4:c9:8c:07:27:fe:
                    f4:ce:45:dc:04:43:d6:75:0f:0b:e8:7f:78:0c:b2:
                    3b:6e:ee:75:54:05:22:09:de:5d:d0:48:47:51:cb:
                    27:3f:d0:e8:a0:de:da:ac:f6:6f:48:6b:20:fa:59:
                    1f:53:f1:f3:63:15:1b:65:b7:42:7b:2e:2a:50:d3:
                    b2:5a:3e:af:19:32:a0:0b:82:00:97:d5:34:af:ca:
                    f1:a4:6a:65:51:b4:0f:13:d2:c7:d4:6b:18:ba:79:
                    23:4f:83:41:0f:8c:03:b1:87:7d:8d:f8:08:c9:c5:
                    69:40:74:69:e0:92:56:8b:5b:a1:6d:9a:a7:b8:62:
                    99:15:7b:30:a3:8d:a4:c4:09:46:db:91:95:55:ae:
                    e4:0a:fb:e2:1a:53:9b:f7:e4:df:1b:15:f3:30:f4:
                    18:86:06:2c:80:5e:6d:95:06:78:f5:fe:cf:59:41:
                    ea:d4:09:10:b0:1e:81:d0:79:9f:2e:c3:67:18:6a:
                    21:66:8d:a7:f6:ee:14:bf:02:45:28:df:2a:96:63:
                    2b:61:89:b5:03:1a:7b:e5:9f:bd:e7:84:29:9b:90:
                    6b:82:ef:86:bd:57:4e:a7:74:50:b8:69:85:af:23:
                    67:32:1b:db:9c:1a:a9:2a:6b:9e:a4:ed:98:18:32:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6C:ED:4C:1E:AD:79:30:3A:9D:C8:2B:EC:79:7B:07:6F:44:35:0E
            X509v3 Authority Key Identifier:
                keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:21:f7:4d:25:a8:ad:1b:45:2c:01:07:ff:c0:72:c3:a7:48:
         8e:e5:5e:01:20:ba:09:f5:b5:fe:e8:e0:2a:35:25:dd:a9:45:
         81:f6:55:10:df:60:2b:d4:ed:c9:06:4f:04:2e:af:fa:9c:90:
         fd:3a:9b:59:eb:fc:a0:ce:fb:c6:08:a4:f1:e6:7e:df:85:cb:
         38:bb:f9:63:09:21:ac:ce:9d:8b:01:b4:09:2e:1a:3b:21:15:
         8b:b1:b0:62:90:f6:9c:06:01:fc:27:23:cf:2b:fe:ce:5d:45:
         db:b2:b5:15:2f:56:1a:65:66:3d:07:26:6d:9d:97:f0:94:57:
         d5:8e:c0:82:c6:1e:8a:70:52:d7:cf:6b:30:da:43:0f:a5:7f:
         6d:16:98:32:9d:b1:29:8a:ec:59:8c:1e:db:aa:0b:53:9c:86:
         0b:0b:09:8d:6f:29:6b:f7:1a:26:12:ef:a0:ec:58:97:e4:79:
         97:1b:c8:14:50:d8:75:60:bf:00:62:54:e4:06:35:4d:48:45:
         1c:8f:c3:a7:f4:0f:c3:04:bd:5a:d0:6b:10:61:79:1c:35:8f:
         af:92:2d:78:3f:3d:55:5b:00:55:25:cd:8e:8a:3b:8b:c7:25:
         39:b8:9f:6a:bd:73:22:0f:85:02:69:14:04:46:63:00:2a:99:
         57:c7:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:43:41 2025 by rpki-client