This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File:                     m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier:          WGUfEX3KNGIX4j6tgLeWj3GAS1FZrgVBOx0XtEDIxM0=
Subject key identifier:   EA:76:AD:13:CD:8F:93:3F:0C:8C:FF:56:9E:07:DF:3B:2C:74:E3:77
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer:       /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial:       019AF12E64EA20B9B0406ACD6ADAD1AE0248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number:          0F4B
Signing time:             Sat 06 Dec 2025 01:02:20 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:20 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:20 +0000
Files and hashes:         1: 126M92i4yvgJWpcn8XcIW24xKRw.roa (hash: gvLu6/32Bhn0SToW2HYoFaVXP2rKf3ibNrus5LTj59I=)
                          2: 2Y-BQWwW7_ggvBXNnc8W9Hw_ByE.roa (hash: JhmK62xSjdy0MLOq5+Y9bNPh5TyhHzNoMKSxAmlyqP4=)
                          3: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: MVdXzojrUYSRhqgntPIhF3hiMpqsXMJ4BwN2eL8Yis8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:64:ea:20:b9:b0:40:6a:cd:6a:da:d1:ae:02:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
        Validity
            Not Before: Dec  6 01:02:20 2025 GMT
            Not After : Dec  7 01:02:20 2025 GMT
        Subject: CN=ea76ad13cd8f933f0c8cff569e07df3b2c74e377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:31:19:e0:fb:8e:2d:34:21:eb:5b:9a:17:
                    14:b9:b1:b8:ef:b3:62:9b:97:9e:ca:c3:c7:b2:e4:
                    0d:f8:ad:36:fa:70:aa:8c:eb:97:f7:0c:bb:de:74:
                    75:f9:44:3e:0c:14:a2:18:f0:0b:00:89:47:46:fa:
                    b5:7d:78:ff:f6:a5:fa:3b:61:56:62:a1:cf:73:8e:
                    f4:ff:43:95:67:f9:77:4f:9d:fb:d4:e3:27:f5:71:
                    e8:3d:e5:6c:ea:09:8c:13:6a:01:eb:07:f9:2e:97:
                    83:a8:a3:3c:54:d6:6b:44:fa:f3:af:cc:53:58:82:
                    44:15:a7:6d:30:f5:71:d9:0e:b4:72:87:70:ae:49:
                    1b:1a:80:0b:25:e7:bd:30:44:09:25:db:9a:50:c0:
                    ee:de:4a:c9:10:42:7f:9b:37:0a:a2:d5:46:82:b5:
                    7a:4b:1a:40:5a:cb:e0:5b:2e:bb:87:e6:7f:79:19:
                    de:bb:46:50:23:df:74:85:52:fe:d7:43:29:5c:5a:
                    29:8c:d3:d3:09:84:c4:48:90:07:c7:c3:3c:cb:7a:
                    bb:54:f0:dd:8e:f0:34:c1:e8:8d:11:5d:33:f6:71:
                    48:b2:4d:b6:b3:9e:e0:ce:02:1f:b4:46:a7:d5:77:
                    17:a9:7e:45:6e:39:51:d9:25:e9:2a:4f:9a:70:86:
                    fc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:76:AD:13:CD:8F:93:3F:0C:8C:FF:56:9E:07:DF:3B:2C:74:E3:77
            X509v3 Authority Key Identifier:
                keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:79:12:55:68:0c:36:ad:9b:7c:a9:ab:f9:52:00:6f:99:88:
         21:65:4d:c0:c5:7c:1e:5b:b7:c5:02:8d:0b:6b:fc:c5:75:e6:
         4d:91:fb:27:3b:a4:9a:6d:36:9d:10:c4:47:58:bc:bf:21:a7:
         03:88:0f:92:1e:06:dc:71:df:db:47:fb:a3:ce:2b:c4:d8:71:
         8e:d3:11:81:69:7a:d3:fe:11:c5:5a:8b:9b:8d:c7:b8:80:53:
         d7:f4:29:24:25:12:ee:90:b9:4e:eb:d0:e5:8f:fe:ac:c4:fe:
         7c:25:5f:a8:b0:13:84:7a:f7:f6:9b:40:12:f7:4a:15:8d:71:
         f6:13:3a:ff:a9:d1:2e:2a:32:8b:13:a1:e4:e8:ca:b3:5b:b3:
         59:31:bc:a4:c9:26:06:1d:53:13:aa:5b:3c:60:cd:90:87:c4:
         0d:60:81:34:45:64:21:17:f4:20:df:41:16:d6:a6:99:5c:1b:
         4f:cc:f0:40:2c:da:b2:96:6c:d6:4c:6c:7b:b3:74:32:ac:57:
         60:fd:e4:44:6b:c4:97:f7:7d:27:69:a0:34:31:bf:72:65:59:
         f5:72:64:0c:03:fe:c6:d5:b1:09:4d:b9:ac:85:ff:22:79:7c:
         03:e7:63:6a:6c:67:41:f1:26:99:fd:5c:f2:21:23:a3:d2:de:
         cd:55:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:29 2025 by rpki-client