This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File:                     MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier:          yL082uIfMLvfwXonJc1YB1KwGETdbZ9koMo0QHMcUJM=
Subject key identifier:   13:56:6F:2A:DC:73:CD:33:40:23:FA:6A:EF:E4:F2:77:F1:F3:DF:99
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer:       /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial:       019AF19B9EDE19330E2F7E03E1A052C12511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number:          090B
Signing time:             Sat 06 Dec 2025 03:01:39 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:39 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:39 +0000
Files and hashes:         1: 57B-StK2AQ9sl4U1coOqd8wTgag.roa (hash: n83L+DsDXWJdoYcHoR653OskwlFSlFS/GtJPH3Goy+M=)
                          2: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: QiHY0u5sRBusYkJs3kxyoCytcjy1EHYTEyIOVYr06dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:9e:de:19:33:0e:2f:7e:03:e1:a0:52:c1:25:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
        Validity
            Not Before: Dec  6 03:01:39 2025 GMT
            Not After : Dec  7 03:01:39 2025 GMT
        Subject: CN=13566f2adc73cd334023fa6aefe4f277f1f3df99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:f0:27:87:7f:a4:8b:41:05:06:f9:59:74:
                    19:4c:97:fc:b6:21:79:51:a3:3c:e9:82:8b:54:e0:
                    bb:75:e5:e1:f1:fd:01:04:3d:5a:fa:21:fb:b5:18:
                    e0:1f:10:ed:b9:a6:e2:a2:41:03:5e:72:b8:d4:ec:
                    69:0f:a6:01:d3:d6:3f:53:68:9f:f9:8a:56:60:ba:
                    60:09:47:ac:39:55:83:24:f5:5b:94:13:86:be:3e:
                    a4:f4:8a:d8:81:f8:59:cc:36:24:72:0e:cf:4d:4f:
                    b8:8f:2c:01:68:d9:6c:e4:7b:01:d2:ce:b1:8d:3a:
                    d2:1d:96:99:94:9e:0b:80:1d:98:8a:17:c6:8d:1e:
                    a3:67:54:19:bd:b1:a1:70:d6:73:aa:9a:b5:09:1e:
                    4b:4e:e5:54:2f:9c:4f:51:1b:2c:61:91:06:e2:01:
                    24:6e:29:67:3b:64:85:1d:d7:04:0c:e6:8c:f6:7f:
                    00:72:96:06:27:a7:c0:c7:0e:34:6e:19:0b:aa:e6:
                    3f:59:11:4a:db:40:8b:6c:57:0d:58:a4:fc:f9:20:
                    39:83:ef:86:d9:6b:62:1f:f2:44:b1:41:d6:a4:92:
                    dc:68:d7:30:74:d7:75:05:bc:95:54:5c:a0:31:11:
                    84:63:31:48:1b:4b:c5:76:4b:7d:37:b5:7b:52:fc:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:56:6F:2A:DC:73:CD:33:40:23:FA:6A:EF:E4:F2:77:F1:F3:DF:99
            X509v3 Authority Key Identifier:
                keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:be:48:ad:46:fd:bc:54:4a:c4:cd:15:2e:b7:b8:1e:42:
         86:32:bc:0c:bf:ce:d7:11:fd:5e:24:11:f0:f8:f0:0b:38:50:
         66:19:c4:cf:54:6e:75:3f:9e:47:f2:ee:ab:7d:a8:c8:37:b3:
         8d:db:75:ad:42:dc:a5:3e:04:78:ca:21:16:0f:2c:d2:40:ad:
         7a:28:81:16:7a:3a:a7:01:07:c5:3a:9d:8f:d3:98:5e:94:fb:
         a4:16:5e:00:67:5a:ba:fe:04:31:2f:19:e2:fb:21:9a:d9:fd:
         06:61:45:3a:ce:f4:8a:21:36:95:3e:ae:19:8e:04:db:3d:2d:
         df:24:5c:3b:68:45:2b:f9:2b:52:30:33:0f:3a:41:bd:d1:c7:
         31:55:c2:92:ed:10:72:61:ab:56:bf:b9:04:3f:e6:ab:43:19:
         78:5c:b7:e7:82:47:f5:c2:06:9d:f8:b2:b3:08:fa:54:b4:13:
         9d:21:8b:05:89:66:17:15:fe:39:0f:47:17:1a:8d:6a:aa:d7:
         6d:c1:66:56:d8:6f:6b:65:08:89:21:84:56:42:04:1c:29:62:
         8e:aa:65:2b:90:b0:ed:6c:6c:4a:9d:ea:47:ba:ee:74:a0:79:
         03:d9:5a:5d:1c:fc:fb:9a:01:fe:73:a3:37:21:0a:4f:33:ac:
         50:b7:f4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:10:17 2025 by rpki-client