This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
File:                     Mg58DOtLoqb0uW_EuuGruFMDWro.mft (raw, json)
Hash identifier:          OMNn3896bRIwUsGHcg0lUi5gzkerDjeodxLzbC5+YK0=
Subject key identifier:   8F:A7:7D:19:1B:73:B9:25:07:27:71:70:DF:E8:C3:CE:88:D1:17:0F
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Certificate issuer:       /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial:       019AF12E7D761E1EB75D046022160A0E6957
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
Manifest number:          16F4
Signing time:             Sat 06 Dec 2025 01:02:27 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:27 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:27 +0000
Files and hashes:         1: IqkEA-rqe3obsi9U0tATjcGiORw.roa (hash: pdv/Uop5nT0xWWcfbMOXH1ucooA/J/I4hHoF5p2oy/A=)
                          2: Mg58DOtLoqb0uW_EuuGruFMDWro.crl (hash: C5V6RWFQh07Ar+lKPARlNRAQzBBBe96Y53AInIYNA24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:7d:76:1e:1e:b7:5d:04:60:22:16:0a:0e:69:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
        Validity
            Not Before: Dec  6 01:02:27 2025 GMT
            Not After : Dec  7 01:02:27 2025 GMT
        Subject: CN=8fa77d191b73b92507277170dfe8c3ce88d1170f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:74:c4:27:6b:48:bb:6d:7b:a2:94:46:20:
                    fe:fa:a4:07:99:a8:ad:07:0b:85:57:09:ce:86:14:
                    43:ae:01:65:96:ca:c2:16:ac:4c:e4:ff:aa:eb:12:
                    a6:59:ab:48:3c:5d:7a:a4:31:b3:88:62:7f:89:4a:
                    a1:a3:92:35:49:92:33:d6:f9:e2:10:56:86:39:31:
                    5e:19:44:49:2d:95:10:44:fc:fe:21:ac:36:40:8f:
                    98:7c:06:16:bd:00:04:f1:2a:1c:57:0d:30:d8:ae:
                    27:35:4e:cf:7d:ab:5d:e5:f1:31:3a:93:20:a2:c6:
                    4e:cf:6e:f3:88:59:59:3e:5a:31:ac:79:1e:bc:14:
                    a9:87:63:b1:c0:b5:e3:d5:78:22:73:bd:55:14:01:
                    8e:ba:2b:87:6e:2a:54:fc:6a:83:d1:e0:52:7d:d0:
                    af:22:d3:6d:f9:6e:59:85:76:0c:f3:af:eb:fa:93:
                    1e:10:62:c1:ea:a4:f9:d8:63:ef:de:3d:7c:ec:63:
                    04:97:a0:8a:af:04:e8:a1:cd:38:7f:a1:09:49:05:
                    44:c3:96:76:a7:c6:61:50:de:3a:f5:37:d7:78:23:
                    b6:22:76:51:76:5c:b1:1b:a4:c2:5b:4a:f5:1e:4a:
                    e1:ba:3a:81:d2:80:a8:fb:6e:d5:6e:8b:d7:b1:39:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A7:7D:19:1B:73:B9:25:07:27:71:70:DF:E8:C3:CE:88:D1:17:0F
            X509v3 Authority Key Identifier:
                keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:78:1c:a3:88:2c:0a:e0:37:37:2a:29:4e:ac:f8:26:12:88:
         21:33:7f:e3:99:28:f2:66:c6:60:a9:6a:b3:74:69:e5:c6:4b:
         27:ec:ba:6d:7c:e1:ba:33:26:5e:94:97:5a:ec:c0:bb:12:2d:
         9b:80:ae:7a:45:57:76:12:3e:3c:3b:db:c6:d9:5b:ce:25:47:
         c3:3d:90:07:30:c7:81:1a:49:2f:ea:80:6f:af:0b:86:73:a9:
         50:4e:4d:67:d7:8e:97:0a:71:53:4c:42:34:c7:db:57:7c:89:
         b5:f4:ce:9e:e3:f9:d7:d4:45:d9:de:e8:53:f1:55:86:6f:4f:
         17:31:dd:91:69:80:11:d2:a5:2e:03:2f:ba:ed:6f:35:6b:0e:
         da:0a:34:96:7d:60:58:ae:59:11:65:31:0e:c5:27:05:9c:e9:
         63:c3:60:55:28:2b:8d:b8:e7:3c:d9:9f:4b:48:0f:bf:f1:a8:
         fe:1a:0b:de:d2:7b:61:fb:2c:29:6c:e1:47:fc:ea:6a:7e:18:
         9f:b7:d4:60:aa:37:60:8e:3e:34:89:79:bc:85:6e:ca:01:88:
         d2:b7:71:aa:3c:13:5f:90:85:67:23:fe:7f:c3:fd:73:5c:fe:
         f1:4b:2c:6b:fc:67:4a:b1:f1:3a:d9:45:f4:0d:8b:b8:83:f7:
         ed:8a:07:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLn12Hh63XQRgIhYKDmlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMGU3YzBjZWI0YmEyYTZmNGI5NmZjNGJhZTFhYmI4NTMw
MzVhYmEwHhcNMjUxMjA2MDEwMjI3WhcNMjUxMjA3MDEwMjI3WjAzMTEwLwYDVQQD
Eyg4ZmE3N2QxOTFiNzNiOTI1MDcyNzcxNzBkZmU4YzNjZTg4ZDExNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjZ0xCdrSLtte6KURiD++qQHmait
BwuFVwnOhhRDrgFllsrCFqxM5P+q6xKmWatIPF16pDGziGJ/iUqho5I1SZIz1vni
EFaGOTFeGURJLZUQRPz+Iaw2QI+YfAYWvQAE8SocVw0w2K4nNU7Pfatd5fExOpMg
osZOz27ziFlZPloxrHkevBSph2OxwLXj1Xgic71VFAGOuiuHbipU/GqD0eBSfdCv
ItNt+W5ZhXYM86/r+pMeEGLB6qT52GPv3j187GMEl6CKrwTooc04f6EJSQVEw5Z2
p8ZhUN469TfXeCO2InZRdlyxG6TCW0r1HkrhujqB0oCo+27VbovXsTmAbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+nfRkbc7klBydxcN/ow86I0RcPMB8GA1UdIwQY
MBaAFDIOfAzrS6Km9LlvxLrhq7hTA1q6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNjZiYzgtZjIwNi00M2QwLTk0YmUt
MThhYWRkNjU5NTY2LzEvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jNjZiYzgtZjIwNi00M2QwLTk0YmUtMThhYWRkNjU5NTY2
LzEvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXgco4gs
CuA3NyopTqz4JhKIITN/45ko8mbGYKlqs3Rp5cZLJ+y6bXzhujMmXpSXWuzAuxIt
m4CuekVXdhI+PDvbxtlbziVHwz2QBzDHgRpJL+qAb68LhnOpUE5NZ9eOlwpxU0xC
NMfbV3yJtfTOnuP519RF2d7oU/FVhm9PFzHdkWmAEdKlLgMvuu1vNWsO2go0ln1g
WK5ZEWUxDsUnBZzpY8NgVSgrjbjnPNmfS0gPv/Go/hoL3tJ7YfssKWzhR/zqan4Y
n7fUYKo3YI4+NIl5vIVuygGI0rdxqjwTX5CFZyP+f8P9c1z+8Ussa/xnSrHxOtlF
9A2LuIP37YoHpQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:12:41 2025 by rpki-client