This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File:                     mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier:          bgXQeCQchoE1+u/7Azd0k8Rg78HWT3FJGIxrvWXIajw=
Subject key identifier:   A2:FC:56:E3:8F:F9:F9:F3:81:09:C0:88:75:2D:B4:05:21:A9:66:41
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer:       /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial:       019AF31BE2D73EE2C219879BB57B69129E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 10:01:22 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:22 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:22 +0000
Files and hashes:         1: TAIaujQ4VKKsXuUakY0dKEcAcGs.roa (hash: d9TADe0Qn4Oy08MasSNafdYWP3qjs55v/m6HHzPTGmc=)
                          2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: tQiGZEpc2WrbqIMhdw6KBLqtZo1xHPk98YG9A2NKO6o=)
                          3: osc7ldM1EyAIq-Pc65jfOVsDsEo.roa (hash: jLW59X/F/Mi9You64kz4gdG8TC0tIrDCV1yujScQLmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:e2:d7:3e:e2:c2:19:87:9b:b5:7b:69:12:9e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
        Validity
            Not Before: Dec  6 10:01:22 2025 GMT
            Not After : Dec  7 10:01:22 2025 GMT
        Subject: CN=a2fc56e38ff9f9f38109c088752db40521a96641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a9:d6:ec:cf:6d:05:d0:57:65:53:fb:3f:ab:
                    83:eb:f0:b2:40:f5:7c:04:a9:bf:01:27:c4:70:9d:
                    35:b5:b5:55:6b:9d:83:39:3f:b5:20:b3:d9:1f:2b:
                    d2:38:23:49:45:ad:71:c1:91:ba:6a:19:fa:be:b5:
                    43:33:7a:ee:b7:77:1e:ee:3d:d3:90:5b:ab:35:f0:
                    72:42:29:bd:60:3e:d2:61:8c:66:44:d2:4e:c8:8d:
                    b6:d9:a3:fa:1a:10:8a:20:a1:2f:2d:4a:49:cc:24:
                    d2:48:f0:13:e6:d9:6c:44:54:75:18:f6:2e:d3:57:
                    8b:3f:e0:97:ac:14:78:4d:f8:cf:e3:e9:ea:a6:bd:
                    38:d6:8a:0b:b4:0b:47:00:fc:33:cb:da:bc:26:88:
                    5d:a4:16:84:e0:37:d4:2f:62:65:a4:af:e6:85:f6:
                    0f:8d:dd:fe:fe:15:64:3e:0c:2d:61:96:e7:d6:23:
                    34:eb:6b:03:58:d1:fd:07:fa:ee:14:bf:a8:b2:b8:
                    c1:fc:c2:86:28:fd:64:33:a2:0f:92:8f:db:e4:fe:
                    00:31:81:e5:e2:dc:0b:55:68:1f:60:5c:49:2c:77:
                    33:16:f5:0a:ba:f6:b6:3f:ed:26:f9:58:60:f6:a9:
                    0f:50:14:67:d2:07:46:54:e2:47:4d:78:32:9d:50:
                    c4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FC:56:E3:8F:F9:F9:F3:81:09:C0:88:75:2D:B4:05:21:A9:66:41
            X509v3 Authority Key Identifier:
                keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e5:b8:2d:a5:6f:bf:ac:6a:80:96:2a:d1:8d:5c:e0:19:72:
         80:7f:d1:9d:af:33:84:f1:85:7c:5c:51:cc:89:f2:51:d6:3b:
         e6:02:1e:81:5b:35:65:44:16:58:75:98:ad:e6:ba:e9:36:42:
         46:db:b5:10:e8:8d:9d:71:5c:55:c1:57:4a:3c:d0:3c:85:b8:
         0e:3a:ee:c2:d4:47:3a:11:c0:34:db:b6:0a:19:d5:49:36:a2:
         3e:fa:0c:28:9e:75:6d:e5:a0:4a:da:c0:19:a4:8b:72:5d:e8:
         bc:b7:6a:54:67:39:b0:f6:a7:2d:89:65:6a:be:ba:7e:34:43:
         75:71:b4:e3:b7:fc:5d:c3:4a:31:b1:f6:b7:ff:78:a5:f1:de:
         1a:b1:29:6a:15:00:0f:64:cc:f8:3f:a6:9d:1c:77:3b:5f:57:
         2e:b4:d4:9f:44:74:4b:82:07:1b:12:c9:d1:59:44:f7:31:6b:
         0a:7c:e3:90:24:45:41:ec:1f:78:fe:4b:a1:06:88:b6:80:f6:
         64:9f:10:96:df:e5:8a:c2:8b:59:e2:f5:9a:30:f2:0f:69:7a:
         59:c5:20:dc:77:c4:4a:9b:64:83:7f:37:7d:50:51:4e:1d:ae:
         b2:46:70:fd:96:a2:18:fc:21:e1:f5:c6:2d:99:e9:08:a3:fa:
         22:b0:c7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:13:49 2025 by rpki-client