This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          fViSeODGnHZYF8dGu+hleblF2UBZ1+IC+XWO1w2bBdQ=
Subject key identifier:   75:4E:33:E4:0A:65:6E:9F:41:30:BF:23:A0:03:66:E0:28:EB:09:9F
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       019AF1D21FBEA7E1E427096CD999F6ECED65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          149D
Signing time:             Sat 06 Dec 2025 04:01:10 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:10 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:10 +0000
Files and hashes:         1: EyLJPLoc1mf1XKSvIsGtzo0HWV0.roa (hash: VgIFzU52fyCieiST8EuwqC7zFrwO10To39Vg1ZioEQ8=)
                          2: FpVk8TrExM7qh1EJO4WIiE3lVyE.roa (hash: WexubyfSWld4FcW4VTmRPdxVwZX9FjWbZF4QKeBNJNA=)
                          3: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=)
                          4: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: a1Yr5ldxrOQqiN6714wr83XQZSkHVdK5QXjIVEZaXEA=)
                          5: jhWC4VcKEFCcAy7tHeec7gAf82w.roa (hash: 7kjHvNbyfi414kEOc9U4Whd+kcEAvUzGwLY0UKhItcI=)
                          6: y33SBpnij0Kjvfz-rw1jNAzGe9M.roa (hash: +G4n27KUzm1afB/8sada6nItov0UFlI98LmgnjjGQ5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:1f:be:a7:e1:e4:27:09:6c:d9:99:f6:ec:ed:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Dec  6 04:01:10 2025 GMT
            Not After : Dec  7 04:01:10 2025 GMT
        Subject: CN=754e33e40a656e9f4130bf23a00366e028eb099f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:d6:5e:5c:a9:97:2a:08:42:06:6d:43:88:
                    f2:f1:50:86:ff:de:08:18:2f:2e:70:f5:77:85:50:
                    1b:ba:a7:b3:88:70:06:a1:81:6e:ed:05:b8:62:6c:
                    bb:38:e9:81:85:26:7a:1a:c7:2b:42:c6:e5:98:8d:
                    82:0c:b3:84:1c:5c:76:9f:85:51:eb:d4:fc:81:3b:
                    79:7a:bd:a1:7a:04:e3:e1:6a:73:3d:c4:db:89:f5:
                    0d:34:58:36:f7:98:09:14:d5:c1:04:d2:7e:c8:93:
                    2a:48:c7:9f:5c:b0:1c:df:ce:2f:18:bc:94:14:f6:
                    53:b0:98:f6:33:da:25:58:b6:4b:7c:f8:66:7e:a6:
                    a3:26:50:c0:06:e7:09:5a:49:d1:b9:ba:2f:a6:70:
                    93:77:51:81:c8:9a:2b:f3:41:53:ad:40:00:39:5a:
                    54:02:1f:ff:30:13:2d:11:e5:f0:fa:87:3d:e8:b9:
                    eb:9c:cb:3f:89:f9:ae:f8:62:aa:b3:21:f7:5f:7e:
                    cc:d4:3c:72:b5:f4:6b:d4:85:88:a2:d2:01:83:5a:
                    cb:4b:24:69:32:c9:07:7b:4b:55:fc:a1:ac:83:9a:
                    2b:61:02:cc:c2:52:bd:c3:da:cb:26:20:08:24:f9:
                    71:dc:3b:b7:92:bd:c2:c0:0b:31:2b:35:6e:7c:ee:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4E:33:E4:0A:65:6E:9F:41:30:BF:23:A0:03:66:E0:28:EB:09:9F
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:7d:ad:6e:50:79:dc:87:21:0b:14:c6:02:a9:8d:0e:69:
         ef:3c:4b:78:c8:78:71:41:b6:52:ad:5c:b6:ce:87:92:0c:5c:
         78:ed:e6:4f:0f:bb:d4:d6:ce:7f:12:3e:77:31:9c:3d:ca:8e:
         e5:2b:0b:e3:7e:f3:80:df:78:04:6c:b9:56:ae:5d:75:e2:1b:
         57:5c:b7:45:4b:b9:60:6a:a8:99:72:a3:6e:16:e7:37:17:78:
         8d:69:cc:11:af:fd:cc:d7:3c:92:50:b6:08:18:d0:c0:a8:57:
         ce:23:57:0a:0d:48:d8:7c:8b:36:38:8b:16:d5:a1:f1:1c:00:
         8a:ad:75:f4:a6:40:72:cc:63:49:92:41:43:c3:4d:fe:56:12:
         28:f0:8c:7d:05:8d:fc:64:10:88:e2:8b:c8:24:73:83:d5:b6:
         d2:79:3f:a6:57:00:12:ec:ab:50:f9:ff:1e:3f:8c:18:00:da:
         7d:e1:42:c3:62:f4:68:e1:bd:e7:fa:7e:89:1c:1c:79:af:4b:
         a7:73:9a:f3:ff:76:6f:f5:94:9d:73:d6:79:b5:7f:96:77:54:
         23:5e:5d:89:33:24:fa:de:ac:be:c8:67:0d:1a:9a:56:67:cf:
         15:be:8d:6b:06:aa:9b:9c:67:f9:2c:28:c3:bb:23:d6:52:8d:
         7b:ef:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:58:56 2025 by rpki-client