This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File:                     mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier:          233j2Lila4dwy98g6JcluVINupKkZQDOrvPbSErQK6g=
Subject key identifier:   FF:F1:4C:14:B8:CB:12:D8:03:E7:3D:28:BF:F6:B9:34:2C:6D:55:AF
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer:       /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial:       019AF209956926B1AE5FBE5CC240DFA6AB5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 05:01:45 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:45 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:45 +0000
Files and hashes:         1: UxU055m6SYgLYJdY0EIHyH-buK4.roa (hash: L8Prey4FtmmkUZS9Fb3qw934vxOuIVmwZLaUrRs5uYI=)
                          2: g-ueJOZ8CrwpGCeGD3tl16S98d0.roa (hash: bDoSFJsdsspb9o+5HCKGnMJFTdCyV6X4FzTImtyv2cE=)
                          3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: svJTyQVJlMa6sgAdF0y+/+xQQl03aT81VV/lQuGAPRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:95:69:26:b1:ae:5f:be:5c:c2:40:df:a6:ab:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
        Validity
            Not Before: Dec  6 05:01:45 2025 GMT
            Not After : Dec  7 05:01:45 2025 GMT
        Subject: CN=fff14c14b8cb12d803e73d28bff6b9342c6d55af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:b0:b9:7e:5a:2c:8c:16:48:b5:cb:88:6d:
                    d1:8e:f4:09:db:8d:cf:85:71:34:f3:d6:9a:07:03:
                    9e:bc:84:93:fd:bb:da:50:06:35:b5:56:26:83:13:
                    52:f9:79:fa:62:30:d5:fd:bf:fe:fe:7c:66:b9:12:
                    41:0c:bc:07:a5:02:86:98:c2:ff:a2:c2:8b:d5:d4:
                    02:4f:2e:fe:46:52:06:a5:ec:05:de:8f:98:27:31:
                    5a:3a:d4:44:5c:58:bf:53:e2:8b:f8:c9:19:67:bf:
                    61:8b:7f:0d:71:cb:93:c6:cd:5d:09:dc:ff:e9:6b:
                    d4:00:39:18:d5:c1:84:7f:f6:0b:28:94:15:7c:74:
                    89:f0:46:90:bb:df:b7:d5:90:d4:c0:3a:46:6f:14:
                    75:d9:21:f1:66:4a:7b:46:e0:a7:64:87:a0:7d:7b:
                    8e:4a:f6:48:22:08:b7:03:df:c4:c9:8d:f2:e5:51:
                    8c:a1:8e:56:92:2f:e0:01:95:9c:74:c1:50:2d:db:
                    74:4b:68:f7:39:9e:36:7d:b5:26:01:76:2f:92:e4:
                    32:1c:b2:ee:54:19:6e:f1:45:c4:22:7a:7b:be:04:
                    05:67:99:dc:68:e3:ba:f0:ce:06:31:b5:63:5b:6e:
                    cb:76:e5:ed:dc:0b:f6:4e:db:2d:8a:48:d2:63:f4:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F1:4C:14:B8:CB:12:D8:03:E7:3D:28:BF:F6:B9:34:2C:6D:55:AF
            X509v3 Authority Key Identifier:
                keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:47:72:3a:52:12:8a:12:f7:79:44:9c:b9:ab:44:8d:a1:df:
         bd:7d:3a:fb:48:4d:67:19:ab:c8:58:9f:a6:5b:c1:f7:5a:6c:
         9b:a2:50:26:f9:36:b2:55:0f:93:18:90:72:f9:5f:47:f8:a8:
         22:a3:da:1b:45:10:f3:1b:f8:68:c6:21:83:c1:7b:df:4e:92:
         92:b9:00:2a:a3:85:f6:c1:a8:8e:27:a8:59:f0:86:01:04:df:
         c3:83:40:76:a6:21:d5:e2:ed:9f:36:2c:68:0c:2c:74:2f:67:
         27:af:86:84:d5:59:05:2d:ae:1f:fd:7c:d3:df:90:69:40:f4:
         f6:66:f7:b9:47:af:80:83:df:1a:24:f7:c3:e1:55:9b:6a:94:
         37:3f:ca:2a:bf:7a:b3:cc:d3:06:41:07:15:9d:7b:c6:b9:8d:
         8f:83:14:97:bc:92:b2:fe:6e:59:ee:d9:e6:08:f4:f9:4d:58:
         51:03:ca:6e:70:6f:06:53:49:71:97:79:c9:be:ac:3c:09:03:
         60:27:da:0b:3f:62:d1:2d:b2:4e:c6:a7:19:75:16:a7:83:b7:
         c6:af:0b:40:e4:dd:d7:13:c5:b2:14:fc:50:1f:3b:3a:fe:46:
         6e:3b:58:f4:28:81:a6:45:16:ad:05:02:de:5f:41:0e:4c:f3:
         8f:f0:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:01:02 2025 by rpki-client