This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File:                     mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier:          7ZopL+hJdg6ii3bR9SuV6RCo9apmK/QfhExin4wV1/g=
Subject key identifier:   93:79:F5:67:9E:17:4B:11:8B:0D:80:42:87:57:9A:DF:98:1D:59:15
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer:       /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial:       019AF3F7FFA19786096754615D2EE170AF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number:          1785
Signing time:             Sat 06 Dec 2025 14:01:47 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:47 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:47 +0000
Files and hashes:         1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=)
                          2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=)
                          3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=)
                          4: AMENJrV8ygov73L3LGeoA2nctFI.roa (hash: gyRR16y3QtUpUlKZN2rwn2h0u1QJLqcAd5tS2Xa5lmY=)
                          5: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=)
                          6: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=)
                          7: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=)
                          8: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=)
                          9: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=)
                          10: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=)
                          11: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=)
                          12: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: qzGf1+ld/uGjU8UfiOrK/i+9YqJSHe8TpNc0RzT+xPQ=)
                          13: tGisfrUmcm7oDtUaKLvnP0jBq0s.roa (hash: nA2OAz9Nlstpul0i0fjQIz6ieEk/T79qTn4SzXVWXBw=)
                          14: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:ff:a1:97:86:09:67:54:61:5d:2e:e1:70:af:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
        Validity
            Not Before: Dec  6 14:01:47 2025 GMT
            Not After : Dec  7 14:01:47 2025 GMT
        Subject: CN=9379f5679e174b118b0d804287579adf981d5915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:61:c4:a9:3b:48:68:f0:86:f7:0a:d4:1f:
                    0c:3b:b8:05:c1:b1:60:f3:e2:7a:b1:83:18:cf:4f:
                    26:0b:bc:d7:89:d4:de:67:9e:16:40:98:63:b3:93:
                    63:74:e3:e7:d9:bf:46:85:49:24:68:85:e0:85:2a:
                    83:b7:a4:2b:04:59:36:15:90:27:4b:c2:26:a1:cb:
                    60:0c:10:2e:0d:65:67:3a:39:01:98:aa:1d:8e:03:
                    e2:97:db:31:7c:25:e5:57:10:fa:dc:4a:6f:7d:b5:
                    c6:1b:92:45:81:9b:8e:21:ab:64:1e:65:be:cf:d9:
                    a9:e7:92:1e:31:23:54:c3:62:04:ba:39:4c:0a:12:
                    37:50:4d:64:9d:f2:f8:72:2a:fb:25:a5:17:41:6b:
                    b0:57:d8:06:aa:3f:6d:ef:02:06:8a:3b:75:29:8b:
                    87:aa:94:a3:25:7a:7f:9c:9b:df:10:ae:4a:17:5e:
                    34:11:1c:92:7f:ab:8c:59:33:ed:07:69:86:d4:78:
                    19:d8:66:ec:08:31:aa:b9:40:2f:a4:5c:0b:d8:a3:
                    d8:58:5b:0d:e0:2d:31:c6:e5:3e:47:ec:ca:8b:4d:
                    5c:4b:63:2f:0d:65:ac:0f:37:07:21:24:52:32:4e:
                    e8:72:31:e0:9b:74:b8:ff:2d:1b:23:aa:21:f8:f5:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:79:F5:67:9E:17:4B:11:8B:0D:80:42:87:57:9A:DF:98:1D:59:15
            X509v3 Authority Key Identifier:
                keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:26:64:82:db:cb:80:44:d9:89:bf:2c:7a:ec:e2:a8:23:
         ce:d2:1d:70:a9:57:38:f8:8d:ba:5d:0d:b6:94:22:22:17:cf:
         8b:c5:c2:c8:4a:21:22:9d:16:43:f5:04:24:d5:ad:6c:8c:6a:
         8e:8d:67:de:6b:31:7e:81:01:51:a0:5d:ec:51:df:a1:01:1b:
         2e:e2:b7:52:2d:4a:05:ea:50:c1:9d:44:b2:65:f7:16:92:2b:
         ce:59:f1:c1:57:17:e4:cb:ec:ab:df:55:0c:01:18:f7:ed:dc:
         b9:f9:48:77:58:23:d9:f7:04:de:0e:b1:ee:f6:0a:b4:4d:42:
         04:94:02:e5:1f:0c:ee:8b:29:70:1b:65:49:70:5d:5b:dd:56:
         2b:c0:a9:a1:95:7a:6e:92:84:30:8a:3f:b9:ce:30:56:ae:97:
         39:50:86:6f:5a:72:e5:33:d9:a8:8f:71:b4:1c:81:b2:42:48:
         2b:a9:95:47:8b:51:a1:e6:26:2a:ec:05:66:c8:04:a8:5f:5f:
         b9:51:cb:9d:26:eb:4b:f3:dd:d4:15:c2:33:ac:24:b2:ed:cc:
         aa:89:fd:b2:f8:9d:f6:fb:e5:8a:ea:8f:c1:53:06:61:c1:a0:
         25:d8:83:8f:10:54:12:73:9e:79:c1:91:bb:2b:a0:8c:e7:37:
         02:9c:36:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:42:31 2025 by rpki-client