This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
File:                     mufWYa_KPTNwuOY0SU1SRrg9WF8.mft (raw, json)
Hash identifier:          Mh4iRv0UNU3n0a1alJs9E0wYXJRVeLzsMRoHrkdzsy0=
Subject key identifier:   F2:B5:BF:6F:3D:D5:32:08:CA:5C:19:6B:CE:AC:47:D8:24:18:A5:F0
Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F
Certificate issuer:       /CN=9ae7d661afca3d3370b8e634494d5246b83d585f
Certificate serial:       019AF12DCFFF31F2CBEFD0AF5AA23D2E71A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 01:01:42 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:42 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:42 +0000
Files and hashes:         1: Lm17pgMk2BDV2OeIcb6BBLpoQWU.roa (hash: VGsuyNfzfr/GzDDdXYimTSNFocuLHOKMiHb8B0Qh1O4=)
                          2: M8tcAEtobc_HjXn0aPPPoIVg2j0.roa (hash: jvlpLwOiPWCn9YztYqEXIDpMuvLmxqIvyCBv7RToVIs=)
                          3: mufWYa_KPTNwuOY0SU1SRrg9WF8.crl (hash: zxu2rZiR+vB4GCPkqJEKaxZ9p9lFdmzIaAknmE0Fpfc=)
                          4: urzNFgi_gE8fSu_5YoQ_GQRDVw0.roa (hash: T8tIXkvw/aUJVTl8RyXo5fkRTTwdXnzNgefZluAgHWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:cf:ff:31:f2:cb:ef:d0:af:5a:a2:3d:2e:71:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f
        Validity
            Not Before: Dec  6 01:01:42 2025 GMT
            Not After : Dec  7 01:01:42 2025 GMT
        Subject: CN=f2b5bf6f3dd53208ca5c196bceac47d82418a5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:b9:27:2e:ce:37:5d:08:20:3b:3e:cf:27:
                    bc:5a:96:95:99:63:68:8c:9f:41:1e:43:a2:29:48:
                    3b:98:36:a9:7f:b5:0b:67:58:91:d2:98:ad:b0:c5:
                    62:d0:08:7b:ff:57:bb:a0:b7:73:b3:74:9b:c4:d1:
                    01:fc:43:aa:a7:85:a8:5d:38:4a:12:15:c4:b2:38:
                    04:06:9a:aa:78:9a:95:09:03:e6:b7:18:01:03:92:
                    a4:a3:64:88:07:9e:2a:8b:6c:9b:a7:19:e1:4d:9b:
                    41:e5:c0:0f:8d:50:75:6a:1f:f9:b0:bd:a5:be:af:
                    52:8b:24:bc:8b:01:37:c7:d3:2c:2f:96:99:f0:c2:
                    91:4f:8e:aa:4f:f5:2e:b3:51:b3:34:b3:06:b3:f9:
                    26:c8:07:a2:62:d7:32:02:a3:da:2b:0b:24:35:b4:
                    a4:4d:27:a1:8c:ef:33:5e:b8:f6:07:c3:57:f7:f5:
                    a4:7e:49:de:7d:fd:93:a6:6c:cf:d6:b9:5d:44:4f:
                    70:01:55:bc:39:62:e1:4a:89:e1:2a:d1:77:97:8d:
                    f8:9f:ad:b7:ef:73:00:db:4e:a6:eb:2d:e3:88:eb:
                    76:eb:be:e2:66:14:ca:7d:2c:41:b4:79:4b:d2:f1:
                    89:3d:7b:84:14:57:ca:c1:46:02:61:c7:19:3f:4e:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B5:BF:6F:3D:D5:32:08:CA:5C:19:6B:CE:AC:47:D8:24:18:A5:F0
            X509v3 Authority Key Identifier:
                keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:24:d2:9d:29:0f:35:ed:d9:0a:08:e8:e6:85:55:5c:09:
         14:94:d7:1f:3c:ea:a4:41:1e:eb:97:0a:29:c4:92:18:72:a6:
         53:c1:11:ea:b3:92:a6:37:7d:23:06:60:4c:4e:d0:a5:59:d4:
         39:22:9c:de:6b:fb:b6:9b:4b:5d:07:59:05:5f:aa:af:2c:7c:
         61:d8:be:56:ca:d4:73:81:40:ee:99:e3:21:85:09:0d:ed:c5:
         3e:97:ea:32:16:c6:5b:b9:21:25:fd:f5:a4:13:34:83:c9:43:
         ac:a9:c8:69:2a:a7:c6:6c:a3:a1:77:db:cc:71:ea:50:6e:26:
         a2:14:6d:04:e8:11:98:e6:a0:34:e6:ef:51:f2:9f:de:ba:4d:
         03:ab:23:04:e7:d3:f5:48:05:c3:e4:38:3c:08:59:c5:5a:72:
         ed:c3:ad:6a:30:7b:e7:a0:5f:a5:57:f0:52:8f:ba:cc:ed:c7:
         d7:96:6d:2b:28:dd:c5:e6:91:8e:6d:7d:19:99:f9:00:e6:39:
         23:e4:ba:78:63:c3:ad:4c:7c:c6:40:bf:4a:00:e1:51:c8:38:
         00:c5:d6:bb:65:40:be:02:c4:8f:2a:e5:14:f2:12:6e:06:6c:
         9f:ae:d5:94:03:cc:01:80:6f:f5:96:7e:db:24:af:15:f0:82:
         79:56:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:29 2025 by rpki-client