This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File:                     MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier:          3tI6qDZCNIDWCf+lXgz2NiaaXGBfqIzWqL9mFHMBDtw=
Subject key identifier:   95:A5:EE:3B:83:33:9D:9A:4A:50:F1:8F:55:25:4A:00:4E:41:B4:B2
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer:       /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial:       019AF1642A4BAD92B17EB0E91B060DB2D18B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number:          14B0
Signing time:             Sat 06 Dec 2025 02:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:04 +0000
Files and hashes:         1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: ZcNwu6lflIBgu4lZZmbpEL0T/f4jSzEKVUZzwS0i+PM=)
                          2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
                          3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:2a:4b:ad:92:b1:7e:b0:e9:1b:06:0d:b2:d1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
        Validity
            Not Before: Dec  6 02:01:04 2025 GMT
            Not After : Dec  7 02:01:04 2025 GMT
        Subject: CN=95a5ee3b83339d9a4a50f18f55254a004e41b4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:9d:5b:0d:bc:5a:4e:e5:e3:74:3e:e6:3f:
                    eb:b1:9a:a1:da:41:67:eb:1f:11:4d:1b:1f:25:be:
                    b2:4c:a7:86:9f:a3:99:2a:e0:54:d3:0f:0d:f5:c3:
                    f5:5f:79:87:c4:6a:9d:e6:f6:69:29:72:fd:9b:59:
                    69:ce:fd:fd:50:f9:2c:75:e5:a7:e4:bf:5e:f2:ca:
                    df:7d:5a:2f:c2:e6:c1:ae:df:de:68:32:fb:ec:47:
                    59:30:de:eb:6c:3a:c1:f2:71:bc:c7:73:80:ba:ed:
                    ee:38:04:23:07:e4:92:35:f1:39:c0:c7:db:93:e7:
                    cd:a0:cd:44:88:aa:a4:9f:d1:e5:3a:fe:0e:55:66:
                    a0:5b:cb:92:60:3a:62:50:e1:b9:81:dc:ee:04:93:
                    65:78:f7:ae:f9:e0:39:6a:dd:f7:be:a2:b6:ad:2c:
                    9c:f5:ee:69:eb:ce:03:4b:b8:ce:a4:25:54:47:58:
                    e3:54:52:28:bb:b2:71:a3:23:d0:ce:59:49:43:c1:
                    50:0e:93:cd:ee:88:36:0d:c5:a2:6a:89:04:4f:b2:
                    fc:dd:c0:f1:c4:22:d3:dd:e4:47:94:04:01:cb:ce:
                    a8:94:3a:95:4c:77:6c:f3:f8:3d:27:b1:15:d0:27:
                    4e:b4:f0:3b:de:b8:7d:e6:d3:c3:5f:09:d3:dc:fd:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A5:EE:3B:83:33:9D:9A:4A:50:F1:8F:55:25:4A:00:4E:41:B4:B2
            X509v3 Authority Key Identifier:
                keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1e:10:b0:2f:54:df:8f:85:53:6b:1e:2d:9a:f2:e1:54:da:
         e2:14:dd:aa:0b:9c:3e:9b:43:88:76:f2:4f:ae:43:4a:3c:58:
         ca:21:0b:b5:0d:bf:51:37:e6:3f:3a:b0:1c:8e:f3:d7:d1:2e:
         3a:11:bc:10:3f:78:35:3c:8e:6c:e0:98:47:4a:29:08:fb:07:
         26:79:26:62:d8:f4:7a:23:36:b8:c1:0f:85:62:68:ab:45:9f:
         11:9d:9d:90:51:7c:2d:d7:66:94:a7:3c:c1:18:75:db:24:a3:
         db:3b:74:51:3c:a2:b9:7d:78:7e:c8:bb:78:39:3d:8f:ac:4e:
         c4:ea:91:97:a0:1f:5c:bb:d8:78:24:fb:8b:4f:5c:10:94:d7:
         5f:23:85:9f:bd:0c:03:03:a2:f3:9f:7f:64:e9:f7:54:1e:9d:
         ae:60:c0:c8:21:5e:ed:6e:56:3c:a3:4f:38:78:2b:cb:fd:56:
         6c:1e:f7:8c:bb:4b:54:04:c6:2c:f4:99:23:23:45:8e:f1:52:
         fd:84:bb:ed:06:e0:0d:35:6a:42:29:6b:a9:09:a9:7a:f2:66:
         5c:3b:aa:a8:5c:a9:4f:3d:34:93:ee:34:20:b8:25:e3:0b:a6:
         88:31:ab:7a:64:5a:85:da:0d:e2:c8:86:c4:90:a0:ed:e8:fe:
         38:6e:fa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:09:00 2025 by rpki-client