This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          0KUKB3F5+1iLc2PmeFBl+NAISjJL9RFUGDIoX1BPRms=
Subject key identifier:   6D:53:DA:05:5A:18:02:66:6C:D0:FC:77:30:09:55:82:EB:A5:80:8D
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       019B3042E42D145CB877FE81641AD04600F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          14BE
Signing time:             Thu 18 Dec 2025 07:00:48 +0000
Manifest this update:     Thu 18 Dec 2025 07:00:48 +0000
Manifest next update:     Fri 19 Dec 2025 07:00:48 +0000
Files and hashes:         1: EyLJPLoc1mf1XKSvIsGtzo0HWV0.roa (hash: VgIFzU52fyCieiST8EuwqC7zFrwO10To39Vg1ZioEQ8=)
                          2: FpVk8TrExM7qh1EJO4WIiE3lVyE.roa (hash: WexubyfSWld4FcW4VTmRPdxVwZX9FjWbZF4QKeBNJNA=)
                          3: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=)
                          4: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: gcPA5ynsUWfoz2DfznMMrOtjPVx/TK5PurXfm0/zs+A=)
                          5: jhWC4VcKEFCcAy7tHeec7gAf82w.roa (hash: 7kjHvNbyfi414kEOc9U4Whd+kcEAvUzGwLY0UKhItcI=)
                          6: vtRikZxiMqZlac-W_YNJqMqHlm8.roa (hash: /xWSJ6cfywQEVV4RvpwuIXXt62aA58kIylH8Fa9/PsE=)
                          7: y33SBpnij0Kjvfz-rw1jNAzGe9M.roa (hash: +G4n27KUzm1afB/8sada6nItov0UFlI98LmgnjjGQ5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:42:e4:2d:14:5c:b8:77:fe:81:64:1a:d0:46:00:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Dec 18 07:00:48 2025 GMT
            Not After : Dec 19 07:00:48 2025 GMT
        Subject: CN=6d53da055a1802666cd0fc7730095582eba5808d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:d6:cb:67:f3:f1:cb:ff:4b:95:2b:60:bf:
                    fd:16:14:07:6f:40:d5:d9:b2:cc:eb:ba:9a:3b:28:
                    ba:6f:94:4f:8b:70:4c:1a:b3:b0:cc:b2:51:08:e2:
                    d1:bb:e5:c6:04:bc:9f:d0:76:1a:d1:63:85:bc:cc:
                    72:a4:e8:f6:ff:eb:ba:f8:e1:41:9c:de:47:b2:29:
                    1d:d4:30:35:96:4d:b9:04:91:3b:6a:ef:09:a0:7f:
                    a3:e0:6d:f3:f2:0a:e9:16:c2:99:d4:9d:f3:2d:80:
                    ce:96:a7:e2:ab:3c:1d:eb:73:a4:ff:3e:3e:2f:8e:
                    81:59:6e:25:12:a6:38:e6:3c:e7:5c:be:7e:2e:28:
                    d9:de:27:f9:c1:98:cc:4a:99:e5:cb:b4:4f:fd:5a:
                    85:fd:7a:88:a3:40:e5:45:62:82:86:d5:bf:5a:b2:
                    8d:d7:84:17:61:65:fb:e2:3f:00:23:85:03:e6:96:
                    7e:5a:4d:9d:c0:b5:6c:d4:d0:0a:c0:a0:25:6e:e7:
                    dd:20:3f:60:b8:02:f6:a2:94:73:a8:38:f7:9a:49:
                    24:12:11:04:2d:ee:65:64:51:51:35:e4:1f:09:50:
                    42:e3:88:4b:00:46:81:c3:0b:a3:12:21:ca:33:60:
                    7e:20:8e:e7:d5:05:f4:ee:44:b4:a9:d8:3f:9c:fd:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:53:DA:05:5A:18:02:66:6C:D0:FC:77:30:09:55:82:EB:A5:80:8D
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:8c:c0:6c:3f:bd:82:cb:a3:70:c6:d4:9b:e0:59:64:e5:3c:
         68:38:1f:13:1d:62:7c:6d:ad:19:8a:d3:a3:4f:b7:34:60:4d:
         89:48:b2:38:18:44:da:df:1a:37:6c:ed:a3:56:e8:da:53:b7:
         44:ec:94:e2:88:f7:3b:a0:56:e2:50:6e:04:e1:f8:ff:8d:d4:
         18:62:11:08:1e:42:fc:6a:21:1c:17:51:7b:6e:bc:39:57:72:
         84:40:ca:83:32:f4:6c:6e:6d:40:2f:82:39:6d:be:44:a5:58:
         72:31:b9:31:5c:3f:16:0b:26:88:6b:7c:67:31:8f:fb:22:d0:
         5b:73:83:8a:42:7a:87:3e:cc:b7:dc:65:11:bc:26:a0:98:b9:
         3c:91:2d:f6:99:77:8d:14:5d:dc:83:37:25:8b:42:19:c2:ea:
         b1:9c:89:85:1f:a2:70:92:63:82:13:f4:f1:1d:5d:16:d8:e3:
         4d:b1:35:0c:6e:b7:ba:6a:68:47:c9:50:97:b2:26:0c:21:d3:
         d0:b4:fc:16:c6:0a:d4:fc:2a:15:66:e7:52:8f:a8:fe:0c:59:
         b6:2a:bb:22:39:a8:c7:85:f7:de:f1:f9:24:05:64:64:e3:67:
         50:27:ae:fa:a2:59:43:72:b8:ea:15:56:1b:14:99:4f:df:86:
         ad:6b:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 12:58:22 2025 by rpki-client