This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
File:                     mnuajNgZ9KkgM01-cuwjQIcNd0k.mft (raw, json)
Hash identifier:          ZVCElubZSimnk3btRAMs615xuJtzRwIDra2Kvs9HB3Q=
Subject key identifier:   18:0D:1E:95:F7:63:69:A8:82:99:CD:A8:6E:6C:4D:DF:D9:BA:8C:D5
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Certificate issuer:       /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial:       019AF16429828F57056EBA7093AA1741758B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
Manifest number:          09CC
Signing time:             Sat 06 Dec 2025 02:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:04 +0000
Files and hashes:         1: IKlMOdkuHyBNZAexC-GSK-hjGW0.roa (hash: uA4Q2gsvRlV+sSD0ED9KoTfpAy2mm9Pd7yFqglVpNvQ=)
                          2: ksVbRwAzzCZHci4kH2kQ6u8coqY.roa (hash: QaqWPpVajjOVbtuXKzhecjPRXn+V4yoJpRPVeesXbzw=)
                          3: mnuajNgZ9KkgM01-cuwjQIcNd0k.crl (hash: TfK7Npn5Z6hG8hWrT6gIajRR/lOuntmhouTYrnUlpfI=)
                          4: uOUxSiBIbzpDJ7EaKMdYFnC-HEQ.roa (hash: P7xU7zipmmpWbMdR+tIYpEi0SHoYEWAWhVNCw2vAWTE=)
                          5: xH_26XIR8lPG36a6e_UAuv1nVvs.roa (hash: skoMmZjq1jRGHL/wRavlOMxLKJaRep20S4gGa/juF00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:29:82:8f:57:05:6e:ba:70:93:aa:17:41:75:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
        Validity
            Not Before: Dec  6 02:01:04 2025 GMT
            Not After : Dec  7 02:01:04 2025 GMT
        Subject: CN=180d1e95f76369a88299cda86e6c4ddfd9ba8cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:60:a0:f2:f2:2c:8d:7f:64:28:7c:3a:cf:
                    6e:4b:2b:63:c8:ad:b3:b8:14:03:05:12:cb:6f:be:
                    c4:5e:a4:e6:3d:f3:68:f9:97:bb:e2:75:dd:49:02:
                    ee:42:67:d3:9f:a8:73:4d:6a:54:a5:f2:5b:e0:eb:
                    65:2a:e5:12:1e:2e:40:dc:4b:dc:b5:67:35:4f:62:
                    1f:10:14:75:f8:aa:b1:7e:9b:33:ff:49:0b:24:83:
                    88:a2:4a:b7:fe:59:d3:cb:72:8f:a7:a7:f6:55:ff:
                    28:de:b2:f7:d8:9e:33:20:6d:c6:5e:d1:1d:5c:cb:
                    e1:31:9c:d3:36:d6:c0:6d:ed:a7:02:fa:6a:86:80:
                    14:5e:56:9c:77:9e:9c:f5:59:42:f4:f6:1b:a8:ef:
                    23:08:08:da:e0:3e:a9:78:44:ff:94:91:e4:9b:a3:
                    4c:58:14:b2:7f:e1:26:11:d9:34:1f:75:d5:6f:7b:
                    8e:1f:29:41:14:a7:57:51:1b:ed:ca:ca:c4:49:86:
                    b2:3b:09:12:8a:44:f2:87:2c:db:b5:df:1f:68:05:
                    f5:42:84:ea:2e:2c:03:b1:d4:73:01:0e:14:8b:8e:
                    db:65:04:3c:1c:78:30:b9:48:d4:a9:f2:ce:90:55:
                    f6:a4:d3:24:0f:1b:d4:c2:fa:09:e7:24:84:af:2e:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0D:1E:95:F7:63:69:A8:82:99:CD:A8:6E:6C:4D:DF:D9:BA:8C:D5
            X509v3 Authority Key Identifier:
                keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e1:0e:0c:78:ad:41:95:36:35:15:96:06:20:b9:9d:0d:ef:
         66:fc:26:97:60:36:02:bc:23:c8:5e:5d:0f:47:b6:c9:89:a4:
         2a:a2:6c:3c:3e:c1:2a:e2:64:39:fa:1b:a9:13:39:d7:f1:04:
         f7:60:e6:87:ba:ce:49:4e:7e:56:9c:9a:61:6a:59:ea:f6:e4:
         73:69:57:81:92:40:c5:ab:ae:5e:af:a6:6f:03:8b:4b:26:59:
         de:4a:43:74:b3:da:be:c0:24:ac:1a:5e:fe:7a:4b:c4:d7:a5:
         be:04:9a:84:f9:55:82:51:1f:e0:cd:54:34:72:b9:62:f0:af:
         7b:2a:2e:be:8b:51:48:54:47:9e:a6:da:49:5d:4b:66:96:6c:
         4b:20:a2:75:97:3e:09:f1:0c:25:c8:48:d3:e8:15:5b:92:26:
         03:67:c0:aa:03:ca:49:ae:90:ac:c9:36:33:21:52:8e:c8:98:
         47:3e:51:29:f1:84:14:7d:7b:4a:85:7a:53:39:d9:0c:75:f7:
         6e:e1:47:b5:25:0f:b9:91:92:e0:3b:bb:33:b7:50:c9:35:b7:
         eb:1f:a6:12:f8:27:b0:db:87:76:fc:6f:9e:9a:b2:b6:9b:6e:
         3e:bf:04:0f:c4:bf:65:08:1e:5e:05:18:e4:e1:e3:74:ab:1c:
         fe:1c:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:41:29 2025 by rpki-client