This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
File:                     m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft (raw, json)
Hash identifier:          kIxLmdC3Y163y3GPIh3zQaUeZBZp0Q+kSZQF0dBIfek=
Subject key identifier:   FD:04:5C:BC:7B:E3:33:D4:7A:4D:A6:7F:80:09:5B:ED:35:75:8E:1C
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Certificate issuer:       /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial:       019B27ADEE15E5B122FF9266875A78045FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
Manifest number:          16B2
Signing time:             Tue 16 Dec 2025 15:01:08 +0000
Manifest this update:     Tue 16 Dec 2025 15:01:08 +0000
Manifest next update:     Wed 17 Dec 2025 15:01:08 +0000
Files and hashes:         1: 1-lOZ9CojkFPMarDdJI5p8kuB4xY.roa (hash: xSbooZ2aXIQhAjsl9R8IdLyOzoIrIGLJWb0yzYMG7eQ=)
                          2: 9nYCpRDqLjXkPW_4xA3ma8dX4jo.roa (hash: LTkB48lSNoDAYkD/zDK6m8vOh49htS24Ue4wI1v1Jcg=)
                          3: SO2r7hsXMD0rXtOemxDNawKSwK8.roa (hash: 3SE/M/3jMxmStavB2oSEQ1ZOQCjp7NcclCdpHKXNutg=)
                          4: m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl (hash: u2yI5Bx6F0w5oeHPsMBMouZFC5e4j39vTLfTe1zti48=)
                          5: s7p4j9URn2D7wbUlKxsLHirYGx8.roa (hash: DBs/FkHFiHhJS9lahQklwyy7rNMLV87rpIdKTKuvgz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:ad:ee:15:e5:b1:22:ff:92:66:87:5a:78:04:5f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
        Validity
            Not Before: Dec 16 15:01:08 2025 GMT
            Not After : Dec 17 15:01:08 2025 GMT
        Subject: CN=fd045cbc7be333d47a4da67f80095bed35758e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:f5:65:2b:27:b4:86:5c:f9:19:38:0a:c4:
                    af:6c:cc:cc:35:98:79:07:c1:20:80:a1:5c:09:d2:
                    32:84:4c:99:91:f3:88:40:dd:0a:8b:24:01:63:43:
                    11:31:6f:4c:db:3f:19:53:ac:2c:98:8b:b8:be:fc:
                    45:ac:b8:52:d0:e0:cd:d3:4a:83:82:92:df:86:54:
                    0f:8e:a6:7d:4b:be:bb:46:dc:9e:fb:0b:05:1f:bf:
                    dc:f9:0b:be:84:71:5d:50:a5:d8:dc:2f:73:e3:7e:
                    c7:83:ad:43:bc:1b:73:fb:20:03:57:1f:ba:10:e4:
                    d9:5d:db:86:f9:0f:62:d5:25:aa:21:4d:d2:69:57:
                    b4:cb:48:29:56:9d:8e:a5:bb:53:ed:da:01:13:3e:
                    d1:46:4e:36:75:2d:53:54:58:98:3f:fe:ab:f7:b4:
                    85:b9:1f:b6:88:fd:b2:b8:e4:20:9c:0d:10:a5:3c:
                    9f:54:5a:05:2d:93:5a:0e:c8:c6:5d:b4:01:a6:e1:
                    6a:7d:af:ad:1e:2e:44:db:3c:d9:b6:38:15:5f:03:
                    8f:30:42:55:b8:58:b1:06:59:e3:94:55:ef:d6:bf:
                    63:97:3e:4f:19:3c:0e:8b:b4:ce:de:d2:9c:f1:7e:
                    04:24:3e:ab:01:f8:55:8d:f0:80:66:46:14:b9:b5:
                    05:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:04:5C:BC:7B:E3:33:D4:7A:4D:A6:7F:80:09:5B:ED:35:75:8E:1C
            X509v3 Authority Key Identifier:
                keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:26:ec:9e:a1:50:d4:16:fa:d5:f8:fd:74:9b:22:3c:d4:
         1a:d2:88:c3:1e:52:52:d5:63:f0:4c:e4:6f:23:25:68:11:77:
         98:6e:3a:63:e1:6a:da:e3:3a:bb:81:db:34:d8:20:3e:1e:a2:
         f2:7c:1f:0c:12:82:62:fe:9a:c3:b2:a8:2f:b3:70:69:53:ef:
         20:15:5b:0d:8a:e1:07:8e:66:6e:09:4f:2c:bf:c1:fa:52:b7:
         8a:57:09:e5:e8:95:a8:23:14:02:3f:05:6d:bb:63:84:00:4f:
         0b:40:8b:1f:d5:46:8e:b0:13:66:8b:21:4d:58:e2:98:ec:54:
         23:e3:2c:50:9c:fd:6c:6b:74:f1:55:46:1d:b6:ee:83:63:23:
         f9:88:f0:09:8d:34:6e:c0:ea:13:eb:80:5c:c6:bd:a5:41:aa:
         18:43:be:26:8e:a4:08:16:d2:10:5c:71:c2:93:5c:59:5d:36:
         f3:80:7a:13:93:d7:4a:13:b9:8e:13:01:93:0a:14:2a:89:ef:
         c8:3e:3f:8b:cc:f5:f0:ca:90:74:c5:d8:c2:40:85:fa:32:be:
         bf:d0:d7:7f:43:fb:50:8b:b6:a2:99:5f:cc:6c:14:38:56:8d:
         2b:cd:40:e0:f3:ec:74:96:6b:19:12:f3:ff:e7:30:77:ba:d5:
         08:44:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:13:40 2025 by rpki-client