This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
File:                     miro1LAWhwIbd7h08RDBttv-xlE.mft (raw, json)
Hash identifier:          SV78qK/jXjYG5/OHtmlsRcscM6bXi8Xn9zI9gM6KINw=
Subject key identifier:   99:1A:02:9C:3C:98:A2:86:4F:56:BE:AB:0F:78:61:05:3B:3F:4F:1D
Authority key identifier: 9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
Certificate issuer:       /CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Certificate serial:       019AF653C281E4A5CAE73839C2FCFD167E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
Manifest number:          0E72
Signing time:             Sun 07 Dec 2025 01:01:15 +0000
Manifest this update:     Sun 07 Dec 2025 01:01:15 +0000
Manifest next update:     Mon 08 Dec 2025 01:01:15 +0000
Files and hashes:         1: FEmq_LSCw3qARbc_REHnTueFXv0.roa (hash: w7kLO8zmlwjsil7oxAuK8gh9w7qBy+9fIQiuZhkIXQw=)
                          2: miro1LAWhwIbd7h08RDBttv-xlE.crl (hash: v2wa0DlOOkERJzd6s5xWjz4mv+wKJH6kPbOGI3kKQJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:53:c2:81:e4:a5:ca:e7:38:39:c2:fc:fd:16:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
        Validity
            Not Before: Dec  7 01:01:15 2025 GMT
            Not After : Dec  8 01:01:15 2025 GMT
        Subject: CN=991a029c3c98a2864f56beab0f7861053b3f4f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:fe:47:2b:08:c0:26:98:7f:a3:7a:ae:ec:
                    d8:39:06:3f:6d:aa:45:1c:24:fe:46:5c:f4:8f:74:
                    d5:f7:42:44:83:03:97:57:4e:f7:0d:d5:d0:ad:5b:
                    bd:07:eb:6b:5f:aa:e6:63:1b:f1:db:c9:a6:02:0a:
                    c0:53:e4:ff:89:1e:59:0f:d6:45:c9:11:9f:08:37:
                    c9:ef:e4:07:7a:10:75:19:74:77:85:67:12:17:c2:
                    f2:4b:e8:cb:34:6e:12:e3:aa:e2:9d:c6:63:60:ae:
                    87:af:1e:34:47:11:8c:60:11:43:08:6d:68:f8:05:
                    30:a6:d6:2c:3d:dc:e5:48:9b:34:5c:f6:4a:05:70:
                    ef:3d:f5:b4:f6:49:02:43:82:bf:96:09:a3:e8:e1:
                    4b:25:0e:2c:55:79:6b:b6:ff:8f:95:12:91:aa:e6:
                    33:3f:44:40:f2:60:9b:1a:c4:d0:77:52:76:cc:b9:
                    84:92:52:48:93:bc:37:1d:7c:50:67:7e:a0:21:cb:
                    ef:3f:7e:cf:db:d8:fa:e9:36:b0:29:34:22:c6:2f:
                    6c:fb:bb:28:2a:1b:a9:6f:9d:5f:bc:48:1f:e6:b5:
                    7e:ea:86:85:79:63:51:8e:e3:53:78:fa:93:d2:dc:
                    c5:ef:52:c6:70:e6:95:27:0c:d7:30:75:5c:bd:de:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1A:02:9C:3C:98:A2:86:4F:56:BE:AB:0F:78:61:05:3B:3F:4F:1D
            X509v3 Authority Key Identifier:
                keyid:9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:03:cd:a1:df:9b:05:de:f2:28:f5:b4:3c:e5:1b:59:9d:83:
         a1:65:69:b6:79:45:56:03:70:ab:75:b4:a3:6f:55:65:0e:2c:
         69:88:d9:7e:7d:8d:8a:bd:e7:e1:07:cb:e9:69:51:72:6e:8f:
         f4:7f:f0:d5:3f:a7:a9:78:3c:ed:e1:f1:33:94:c2:58:19:72:
         f3:c7:71:de:08:20:f2:df:5a:27:a7:af:9f:6f:27:f0:92:15:
         40:e1:d4:bb:04:3d:a4:ba:ba:5c:6d:2b:6e:45:e1:df:b5:ca:
         4e:32:11:c6:3e:4e:01:27:4f:f1:97:53:49:1d:3d:bd:bf:ea:
         b6:e8:e1:a6:d7:3d:33:be:0b:cf:6f:be:62:aa:08:7d:a4:17:
         f3:ce:52:57:af:12:12:6c:83:f8:8d:0a:24:02:c4:97:dd:71:
         60:b6:ed:cb:44:f5:1d:fe:ea:26:82:fa:f2:e7:43:61:0c:17:
         90:89:76:2f:b9:25:fa:41:02:b7:95:d1:a0:c0:9c:38:a6:28:
         f0:83:8f:90:69:b7:39:b7:1b:1b:a7:a3:19:96:8e:b7:b2:64:
         36:2b:f8:6c:10:cc:fb:ee:05:c2:ce:53:cf:91:a2:97:d6:7a:
         ef:63:8f:9b:bc:ae:17:b9:11:93:5b:28:87:4d:25:29:df:98:
         69:c6:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:23:32 2025 by rpki-client