This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File:                     MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier:          Go8ms2py+WMXPF0S/efUFJSviLunhKZ5UTnJbL5Ov+A=
Subject key identifier:   02:AF:D4:A4:40:92:D7:4E:15:49:7E:F5:CC:C3:10:4A:BE:BE:13:1B
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer:       /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial:       019AF50B1874BE1CA0142E40324E5EA2FF8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number:          0B36
Signing time:             Sat 06 Dec 2025 19:02:16 +0000
Manifest this update:     Sat 06 Dec 2025 19:02:16 +0000
Manifest next update:     Sun 07 Dec 2025 19:02:16 +0000
Files and hashes:         1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: 1awugrzu6QkR6fQ5OAsu2ouW6D07MtOAOboysqNI/Oo=)
                          2: mjst7aUax91GFptXcthnYyUXm5M.roa (hash: yt+uoK2SV82Kw1H7pGPHZ6f9URufEVmNUwV6zXvjHTc=)
                          3: yVy6K3-_uaSKa1-_oqUp0tf_Xgk.roa (hash: 7YTmf2c9OYfpZTmIIrXdtXUx4tpHodV4viOENQQMD4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0b:18:74:be:1c:a0:14:2e:40:32:4e:5e:a2:ff:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
        Validity
            Not Before: Dec  6 19:02:16 2025 GMT
            Not After : Dec  7 19:02:16 2025 GMT
        Subject: CN=02afd4a44092d74e15497ef5ccc3104abebe131b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:52:98:0a:f7:7d:8a:db:7e:80:e4:29:44:
                    9e:72:19:35:c1:94:d3:32:61:6a:90:41:f0:7f:20:
                    cb:34:b2:1c:c6:e8:a7:2e:28:31:de:23:4a:f9:f5:
                    9b:43:35:c4:2e:f6:92:36:be:41:60:b1:67:7b:e9:
                    9f:dd:d0:20:04:d5:2a:51:43:f5:fa:6d:ca:bd:36:
                    d9:0b:de:c0:4d:ab:f9:1a:cc:fc:67:46:ca:a0:4c:
                    33:a8:bc:9a:fa:27:78:6c:59:ff:13:17:79:ea:98:
                    90:46:d2:af:e1:22:6b:ee:bb:2c:3b:d3:fd:34:24:
                    da:e6:cb:0a:c1:45:dd:10:f7:31:9c:af:cc:94:0a:
                    c3:89:b2:f8:0a:5a:65:11:3d:49:86:4b:ad:9f:3d:
                    9e:60:68:fd:58:1b:ae:a4:65:8c:a8:95:58:3f:c7:
                    ac:51:82:0e:4c:9b:f0:74:63:60:0f:2c:c2:ec:7c:
                    cd:37:2f:26:cd:8a:f7:93:43:19:32:3b:62:68:b9:
                    93:56:d0:80:94:9b:93:97:57:49:37:36:ef:91:ae:
                    0f:b2:07:76:b3:df:62:ff:d7:36:c6:64:6b:a9:17:
                    30:f3:ed:b6:ba:5b:ab:0e:77:7a:15:82:66:cb:2d:
                    c7:da:14:05:94:ef:a1:55:b4:8a:d4:ae:d9:c9:28:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AF:D4:A4:40:92:D7:4E:15:49:7E:F5:CC:C3:10:4A:BE:BE:13:1B
            X509v3 Authority Key Identifier:
                keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2c:81:d6:d3:a0:d0:49:ff:8c:f6:08:37:65:fe:fd:45:85:
         1a:fd:8e:32:a6:0b:2c:c5:f5:da:b9:a9:34:e1:f1:51:fa:d9:
         f9:24:fc:61:96:d9:87:eb:46:90:b1:91:95:90:28:ce:8d:08:
         64:31:6f:cd:cc:d3:41:0a:95:20:ee:92:9a:e2:64:da:27:67:
         9b:45:4f:8d:b3:74:15:19:00:ba:37:76:95:d6:ba:2b:af:f8:
         0e:14:c5:61:c0:51:4f:c0:63:67:62:a8:2b:91:eb:62:9a:fd:
         67:41:e5:67:03:52:14:da:c3:f5:1f:5e:aa:4b:23:59:81:7d:
         d4:69:1e:75:1f:5d:5c:94:e4:8c:dd:ab:e9:c3:50:86:9d:12:
         04:6b:48:d4:63:a9:03:4a:14:68:34:57:38:db:44:b9:0e:89:
         29:db:2b:87:4c:96:5e:1c:c6:79:45:db:fd:65:bf:0b:64:45:
         fd:b6:a1:61:0c:88:65:24:ce:60:0f:b0:96:37:df:97:9a:72:
         7a:4f:ac:25:01:9e:45:2e:d2:91:56:62:13:a9:19:33:30:00:
         74:33:ec:29:76:10:1a:7e:69:0b:ff:c1:dd:51:7e:91:74:a8:
         7c:06:1f:15:42:9a:75:ca:2b:40:7a:b5:a2:be:f3:d9:46:0e:
         6a:f7:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:34:42 2025 by rpki-client