This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
File:                     Mjq1upi-9dDZvQzqAxof4Td3pIY.mft (raw, json)
Hash identifier:          2iB85jiUQKrEJP+8mazsQ8dVGXyegLCXoj6SRkiwsRE=
Subject key identifier:   58:45:78:B4:83:05:31:9E:1B:F6:A8:79:93:C3:B8:7B:50:E9:F6:80
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Certificate issuer:       /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial:       019AFBB10C5CBA99F51054D2F03B12693C97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
Manifest number:          176D
Signing time:             Mon 08 Dec 2025 02:01:15 +0000
Manifest this update:     Mon 08 Dec 2025 02:01:15 +0000
Manifest next update:     Tue 09 Dec 2025 02:01:15 +0000
Files and hashes:         1: 1bbk3xQO4GAsakJYReXogLvLM4k.roa (hash: ma7JWfiezOV+JM83OPhYUisosrWCLMi3zSbBAzKD2O0=)
                          2: 4eUjU3FviKAA-8zjNHUXmCGN0-k.roa (hash: cYvBww/EyQVYauVbE6pk42UaaR9Wj899DGdPG2LUf3g=)
                          3: Mjq1upi-9dDZvQzqAxof4Td3pIY.crl (hash: mlmxvvzEgLJqbCsWdI5I/EdZ6CVMuqsC79mWSgZlcow=)
                          4: P79q0XI6jMHcEUJUje7vbekXqMM.roa (hash: rfk192nc+MyT+AA9yTeZKZSIGbJXkqx89FY7vI7SgFM=)
                          5: qKUS3aWdXNKyGrEPIZqo9vOOxtM.roa (hash: aMMBOBw0agva6obgWYqVlq2psGGrS2vafTYjFkbH+48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fb:b1:0c:5c:ba:99:f5:10:54:d2:f0:3b:12:69:3c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
        Validity
            Not Before: Dec  8 02:01:15 2025 GMT
            Not After : Dec  9 02:01:15 2025 GMT
        Subject: CN=584578b48305319e1bf6a87993c3b87b50e9f680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:7f:d2:ca:f6:3e:13:79:a3:d3:a6:60:c9:
                    8c:b6:3c:b4:d6:22:18:08:b5:9d:44:4d:18:89:12:
                    49:13:88:14:18:eb:6b:17:d7:65:22:cc:3b:f8:9e:
                    fb:b5:da:3c:a7:0d:0b:db:fb:66:a4:e8:7b:4d:71:
                    72:b1:b8:9b:ec:70:e2:e8:3f:b2:e2:3a:6a:8b:8c:
                    18:c1:84:3c:13:a7:c5:87:08:e5:91:dc:6a:90:1d:
                    7e:c9:81:85:2c:e5:5c:43:0b:25:98:03:18:78:de:
                    0c:49:b1:0e:b1:4b:38:32:64:9e:77:2d:f5:36:77:
                    7d:d3:47:a2:71:7d:84:83:ab:2e:43:d1:c2:85:28:
                    92:51:49:8c:ee:87:6f:25:44:15:06:ba:88:ff:cb:
                    2b:5f:12:cb:ee:25:1a:b5:7c:86:0e:dc:ef:35:49:
                    35:76:1a:70:d7:b2:b4:8f:98:d5:13:3d:b6:06:1f:
                    e2:4e:89:95:d1:db:87:08:d6:7d:6e:1b:76:42:d3:
                    c0:89:7b:6d:de:6b:02:74:7c:8b:a8:ef:5b:fa:54:
                    9f:d5:d5:f1:48:02:3a:c0:c0:0d:bb:99:72:c3:e9:
                    b7:06:81:93:c4:c2:09:c7:b5:bc:55:24:e2:c2:0a:
                    84:2b:40:79:e8:53:47:d4:72:31:73:56:37:1a:a1:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:45:78:B4:83:05:31:9E:1B:F6:A8:79:93:C3:B8:7B:50:E9:F6:80
            X509v3 Authority Key Identifier:
                keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:76:1e:fe:b1:34:aa:fa:2b:8a:6a:29:ed:36:11:02:b9:32:
         68:fc:dd:c2:2d:6c:b8:df:dd:a0:45:03:9b:e4:91:0f:3c:88:
         10:ca:9a:a0:7f:b9:98:d1:90:95:92:f3:b1:7d:fb:0b:9b:a8:
         0e:a0:02:b5:15:38:8c:b3:dd:41:a1:c7:34:62:73:31:a6:6e:
         f3:3a:0a:5c:4d:4b:fa:36:58:23:07:ee:79:60:85:82:0e:44:
         b7:18:90:48:85:f2:e3:95:2a:ef:d9:09:df:e1:51:ba:d0:f3:
         70:60:ff:23:a5:94:b1:ac:1b:02:58:8b:8b:37:0c:c1:15:03:
         c4:93:17:39:76:a2:eb:07:0a:8c:7f:75:35:b6:18:14:1f:76:
         95:17:da:81:83:2c:7b:0a:c4:af:e7:d4:02:ac:94:c4:25:95:
         07:bf:84:a8:42:f2:7f:1d:78:33:cc:7e:a5:61:0c:32:da:ce:
         84:cf:f5:c4:82:07:97:d2:ba:c1:ee:ac:05:7f:b4:20:47:7b:
         58:4c:0e:c2:86:df:bd:86:5a:4e:b7:91:32:c0:d7:0b:e0:ec:
         15:cc:a4:fd:77:72:96:0a:24:c9:e4:72:7b:03:3c:64:78:74:
         45:9c:26:5d:e1:0b:4a:52:ea:23:90:1e:de:bd:17:9a:3e:94:
         53:b1:8e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:36:02 2025 by rpki-client