This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File:                     KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier:          L+7Ftf9ViG7S1CKv7s18XELMAyykULBOmu3GwFWi9ZM=
Subject key identifier:   40:4D:AD:E2:EB:7A:8D:38:39:44:4F:67:89:1A:2B:A0:DA:2E:94:74
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer:       /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial:       019AF12CD1C1D02FA19B47CFCF8F25C1F15B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 01:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:37 +0000
Files and hashes:         1: 9H_Kait-j-Qscd6pOWC4j8dpNJg.roa (hash: X52do8h3PQmiEbN5LZNuqcyFDYy1wul4mKE1Lrt4Z+M=)
                          2: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: EKgP41S9f0nRhwT+Q/KD4uU2aDBo6CcxfTDXKfBQxz4=)
                          3: z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa (hash: HMFp3zS5F5zXQPk83xR6QIUNoMCPUQejJzCTAnl5q10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:d1:c1:d0:2f:a1:9b:47:cf:cf:8f:25:c1:f1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
        Validity
            Not Before: Dec  6 01:00:37 2025 GMT
            Not After : Dec  7 01:00:37 2025 GMT
        Subject: CN=404dade2eb7a8d3839444f67891a2ba0da2e9474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:14:10:f6:a8:7d:30:f4:d0:09:9c:9a:df:
                    8b:0a:db:ee:66:dd:e6:29:d8:77:74:d5:82:1e:31:
                    af:b2:66:2d:65:e6:86:5b:45:db:50:45:68:de:ae:
                    b4:7e:d9:5e:76:7b:d7:fa:15:25:46:72:08:ae:32:
                    63:ae:02:d2:22:5f:83:9f:77:f6:54:33:fa:0f:44:
                    94:0b:b1:9f:a8:d8:9b:b2:64:4f:03:64:29:ab:9f:
                    31:0a:18:95:6e:63:02:78:b6:26:bf:32:dd:c4:0d:
                    22:19:d0:96:1d:2a:cc:1e:1d:e5:1b:26:8b:fa:36:
                    61:f0:7c:c8:a8:6b:ed:86:c0:3b:b9:ea:1e:17:14:
                    97:73:d1:0d:03:36:92:bf:b6:65:fb:3d:d1:b5:3e:
                    69:ab:86:42:13:bf:09:9d:4c:f7:98:cd:8b:b3:16:
                    5e:f7:3d:4f:cf:94:8b:51:29:ce:da:bb:26:5f:4e:
                    6d:67:42:2a:89:43:b2:86:7b:39:d9:5f:40:77:b1:
                    1f:70:e6:68:de:bc:9e:ac:cb:15:bf:88:07:59:1b:
                    a8:2a:94:6b:a9:94:54:2c:ef:12:f5:f9:70:f0:8e:
                    ac:96:a8:56:30:10:23:ed:b4:d0:6d:3b:ac:e8:1e:
                    ea:6c:7c:a9:9e:74:f6:c4:96:3d:26:54:a0:6e:1b:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4D:AD:E2:EB:7A:8D:38:39:44:4F:67:89:1A:2B:A0:DA:2E:94:74
            X509v3 Authority Key Identifier:
                keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:37:02:7f:3e:59:45:14:14:14:09:b3:57:a9:c5:aa:60:c4:
         76:70:67:09:78:83:e3:ba:ff:bd:c9:38:74:a1:50:ea:f9:3a:
         81:0a:a6:62:7a:8b:1a:63:bc:a1:3e:4d:c3:d7:12:96:f0:53:
         b3:d3:ec:1c:d9:c1:fe:a5:ee:6b:0c:df:27:98:64:f0:b1:1f:
         7b:06:52:18:7c:1a:33:e9:e4:40:89:63:1c:ec:5b:2f:46:12:
         af:87:6a:44:96:81:b5:a5:8c:0f:9e:61:ed:64:52:7b:e5:47:
         d1:be:d5:19:90:a2:76:d2:63:d1:53:50:07:29:93:a1:44:cf:
         b7:4c:09:9f:11:27:30:11:3f:4e:a7:4f:50:2f:35:41:5e:a9:
         dc:2c:09:8a:8e:e5:7f:11:86:06:53:bc:c5:c5:a5:20:f0:eb:
         fd:6b:84:6b:84:68:2f:f2:0a:45:95:92:eb:52:77:67:5c:3b:
         77:81:18:02:5b:8b:7e:c4:24:b4:82:f5:4b:2e:2d:fb:10:4f:
         48:16:f2:34:0a:10:6b:b5:40:e3:48:c0:55:ec:25:9f:40:ef:
         0c:83:60:0f:f1:eb:b1:c7:95:bf:19:0a:c9:1c:d2:09:37:8c:
         64:7b:32:6a:62:18:b2:c7:ea:78:05:83:d1:36:af:32:bb:ac:
         dc:ff:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:22:12 2025 by rpki-client