This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File:                     mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier:          RxlqUZtjMA6WSPfkHxaIVVemyrjrvFPn+vMrrt/kNd4=
Subject key identifier:   48:F5:DA:28:5A:E1:3D:50:F7:F8:E3:CE:46:A2:CB:FF:63:23:A5:6C
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer:       /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial:       019B32D7EFE3DA5F296CB00A8B642904ACE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number:          052C
Signing time:             Thu 18 Dec 2025 19:02:50 +0000
Manifest this update:     Thu 18 Dec 2025 19:02:50 +0000
Manifest next update:     Fri 19 Dec 2025 19:02:50 +0000
Files and hashes:         1: D8t9LetVYSLLb_TLh9xUmyS0_cE.roa (hash: 6STeuA04n6UbXt4NmyiolKvnu452YSYrUoVlj4sED8M=)
                          2: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: fmvXK/dH4WNWHQt1UBATg2nNW/p3Z9OnYyJYYZBbOrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:d7:ef:e3:da:5f:29:6c:b0:0a:8b:64:29:04:ac:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
        Validity
            Not Before: Dec 18 19:02:50 2025 GMT
            Not After : Dec 19 19:02:50 2025 GMT
        Subject: CN=48f5da285ae13d50f7f8e3ce46a2cbff6323a56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:b8:fa:48:35:25:28:24:9f:84:49:57:18:
                    2c:09:1f:c3:f9:09:74:da:01:9a:b3:27:86:61:12:
                    ea:b9:3b:a7:ab:fa:59:5a:55:bb:fd:e3:f1:1c:18:
                    6f:d7:d7:c5:cd:98:54:c9:3d:df:e1:4c:66:cd:5f:
                    73:a7:90:79:11:73:2e:2e:40:e3:05:5c:6a:1b:42:
                    56:47:7d:15:93:03:93:60:d4:97:5a:8d:da:3c:b4:
                    66:24:9d:4f:16:97:3b:6d:41:d2:cd:89:22:6a:56:
                    71:25:ab:92:1a:e4:9b:8d:b9:27:71:8e:da:b5:d7:
                    eb:20:83:53:e4:88:e8:37:3e:c2:26:d5:20:85:ee:
                    8a:1c:ef:1f:99:50:f4:a7:05:34:00:57:37:33:3a:
                    4d:57:42:fa:8b:87:95:35:3c:38:87:2c:a5:97:23:
                    79:46:87:9d:62:80:73:42:9c:b4:14:e7:71:cd:06:
                    3f:5e:c4:e0:5c:61:44:f9:dc:90:d8:ae:f9:0e:3b:
                    6c:5f:d6:ed:b7:13:fa:78:52:d3:a4:5b:fd:15:0a:
                    c8:15:41:57:5b:41:9f:0d:43:b7:2f:4f:26:2c:af:
                    f5:f3:3c:cb:08:83:9a:e0:13:ec:15:14:ac:9a:01:
                    a4:4b:5e:c2:5d:22:9f:dd:9f:5a:06:e3:b2:5e:28:
                    f4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F5:DA:28:5A:E1:3D:50:F7:F8:E3:CE:46:A2:CB:FF:63:23:A5:6C
            X509v3 Authority Key Identifier:
                keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fd:ed:1a:57:02:e4:8d:2b:c6:68:85:31:6b:22:22:e1:ea:
         72:ff:0f:81:52:fe:df:b7:d4:98:98:69:4e:ac:a1:e1:df:fa:
         49:df:f3:e3:8b:ab:7c:f0:ba:f0:20:9b:a4:37:1f:03:f0:d7:
         0a:ae:4f:5d:fe:2a:d1:e4:ba:31:48:4c:22:b2:24:e3:4d:fd:
         5a:0d:92:96:f5:86:90:b0:0d:81:37:46:ea:85:02:e7:4d:02:
         b8:e9:79:90:6a:a0:ea:e8:c6:0a:21:e3:4a:d6:ea:8a:e2:7f:
         1e:c9:f0:ec:ac:c6:0d:4d:bf:91:b9:ed:53:47:c2:a5:aa:0b:
         ce:06:65:7c:6b:a2:f0:c1:83:c3:63:1f:3e:61:f6:69:7a:9e:
         08:81:d8:4b:ec:89:6d:db:a9:36:30:19:f3:d6:db:20:f9:b5:
         d3:99:b7:48:b9:04:37:52:e1:5a:6f:eb:ee:c2:bc:78:0e:1d:
         0e:ee:28:bd:ce:29:58:71:8a:10:a6:7e:9b:ed:20:7b:e2:4b:
         c5:0e:4b:69:90:38:55:35:72:83:09:f2:0b:87:ef:b7:13:30:
         1e:64:cf:77:07:3a:f0:b9:9f:ce:56:69:eb:84:fe:dc:35:ce:
         99:f4:b5:d8:04:bb:ed:05:91:68:16:ce:46:1f:50:ef:5a:9a:
         7f:5b:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:09:31 2025 by rpki-client