This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
File:                     mP1EDLuwS5abkrtrOcC7tBY0zRI.mft (raw, json)
Hash identifier:          wSVeyJvh8XgwNpC4EXKgne4VWXB0FKUk5iYYQtb00Vc=
Subject key identifier:   A1:73:35:E5:3C:60:E0:D3:14:4B:F3:AF:35:71:7E:77:2C:1B:80:FE
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Certificate issuer:       /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial:       019AF164179A57A69B741C7E2E7D7696C725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 02:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:59 +0000
Files and hashes:         1: LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa (hash: cJ8bZtPB0/69tGKrzdUG2h5XVvEuA3yRLVGrsJgKFnE=)
                          2: fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa (hash: +jcPkN0cWNwP620eirlv12vXP4bDJPvRMmAHlZSYorg=)
                          3: mP1EDLuwS5abkrtrOcC7tBY0zRI.crl (hash: kR6mLaldX7dl211NDYyjaTObF40ZtE9y89aN0YHSzF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:17:9a:57:a6:9b:74:1c:7e:2e:7d:76:96:c7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
        Validity
            Not Before: Dec  6 02:00:59 2025 GMT
            Not After : Dec  7 02:00:59 2025 GMT
        Subject: CN=a17335e53c60e0d3144bf3af35717e772c1b80fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:54:71:e2:a1:86:52:7f:2a:7b:08:ff:77:
                    7f:51:9e:d2:80:c8:34:d2:37:61:56:c6:8b:ce:41:
                    7f:4e:f2:b8:00:a0:74:1b:f6:42:22:7e:92:70:15:
                    02:8b:54:06:06:d5:a2:d2:8e:25:24:86:e7:b5:78:
                    36:dd:4a:81:e4:9b:0e:5d:0a:a5:8a:be:a2:02:e8:
                    3a:c1:84:88:79:e5:17:c8:70:07:05:c4:e3:fc:dd:
                    c7:50:1e:21:d9:bc:9e:de:e5:be:42:7d:81:09:5e:
                    db:c2:7f:e7:a9:b9:81:2f:6e:84:35:9c:8d:69:8d:
                    e6:75:a7:38:c4:eb:8c:15:66:7d:11:9e:27:07:3d:
                    83:c0:ba:71:aa:6c:72:83:34:ee:93:14:9c:b9:26:
                    5c:eb:e5:54:a0:fc:7f:b0:90:b6:c1:9e:71:91:4f:
                    cb:c2:d0:d6:9e:22:d5:1d:f8:b6:6e:f7:24:b6:4d:
                    4c:d6:ff:86:a9:36:df:dc:d3:26:1e:04:e6:cc:bc:
                    12:c2:b8:f6:3b:d6:b9:bb:16:af:e2:06:ac:d5:d4:
                    c6:16:f1:f4:ab:6b:00:58:a2:a5:97:62:d3:22:cb:
                    66:68:4a:75:e4:68:7f:09:a2:72:dc:5e:a7:a6:d4:
                    7c:96:f0:96:90:b0:e7:dc:42:cd:ad:d1:c6:4c:52:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:73:35:E5:3C:60:E0:D3:14:4B:F3:AF:35:71:7E:77:2C:1B:80:FE
            X509v3 Authority Key Identifier:
                keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:71:4b:94:bf:34:b1:65:74:74:f6:75:f6:a5:00:87:6d:16:
         6f:06:f1:19:0b:81:3a:d9:6d:7a:45:3b:54:6c:2a:7f:5e:26:
         c7:82:a7:75:87:cd:2c:39:9a:78:d9:34:5d:e0:e7:a2:2a:f1:
         40:ca:ea:37:01:ef:b7:6e:71:0d:5d:94:79:40:a1:2e:69:4e:
         9e:8c:01:5f:f1:2f:18:b4:5e:bd:04:38:60:4c:71:cf:f1:92:
         20:e1:5b:67:ab:73:79:8d:b4:7f:2a:41:d5:e3:3f:0f:64:75:
         4c:0e:9b:24:71:fc:49:b2:20:8e:92:35:64:20:6d:7d:1d:29:
         41:3e:18:81:2b:71:08:5b:d9:6b:1b:1a:ac:50:81:cd:43:69:
         c9:3b:ab:e8:3c:d9:a9:ca:48:e1:3c:6d:84:bc:bf:69:9c:9d:
         3b:dc:ee:fe:6f:9f:a1:20:08:d9:b0:cc:a2:d9:67:38:34:7d:
         f0:85:4d:e7:2a:bb:6f:35:6b:f8:c9:ed:0e:10:6e:8e:34:57:
         c6:d9:87:0d:76:c5:81:ad:24:d3:ce:e2:db:c5:2a:86:a4:f5:
         0d:8b:77:0b:6d:ad:3f:c9:1a:76:19:50:e0:e6:e6:1d:49:c2:
         d2:81:b0:45:34:ca:30:45:dc:84:89:de:b1:7f:ac:a9:a4:7e:
         ce:aa:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:04:43 2025 by rpki-client