This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File:                     mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier:          PSJlEfisxO9W8w93EDuejk2cLYDPiTssrD+OpESDWgQ=
Subject key identifier:   E8:79:C9:92:9C:13:C3:1F:C2:3A:08:92:E7:35:7F:D9:A4:28:C2:3D
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer:       /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial:       019AF31D7398CFFF21F70C95C1240961F4CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 10:03:04 +0000
Manifest this update:     Sat 06 Dec 2025 10:03:04 +0000
Manifest next update:     Sun 07 Dec 2025 10:03:04 +0000
Files and hashes:         1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
                          2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: VT3NY88laLgcl5Ab90Ad94cdXtF+P/aC0mSx4qzZvTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1d:73:98:cf:ff:21:f7:0c:95:c1:24:09:61:f4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
        Validity
            Not Before: Dec  6 10:03:04 2025 GMT
            Not After : Dec  7 10:03:04 2025 GMT
        Subject: CN=e879c9929c13c31fc23a0892e7357fd9a428c23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:10:fb:23:a6:60:7a:d6:57:f3:7c:58:b6:
                    2c:9c:9c:11:67:03:ca:92:1d:27:9f:d8:3e:f2:77:
                    e9:f5:84:92:76:0a:e0:f6:05:ce:36:e6:de:bc:5e:
                    b5:05:e1:5c:0a:75:e5:f8:1b:79:c3:85:f9:51:c0:
                    ee:47:4f:3a:df:8c:37:66:c8:d7:f0:fc:2d:3f:50:
                    e7:a8:25:88:0a:41:5e:d2:f9:0a:95:aa:1d:de:96:
                    5f:7a:ea:b8:81:98:b6:28:98:f5:a1:0d:78:eb:a0:
                    63:ea:82:26:d7:7f:5c:56:69:28:ff:c4:a1:7e:1a:
                    d9:7f:a9:dd:8a:f0:80:ed:c2:20:10:06:d1:de:36:
                    d0:e7:68:d2:10:5a:84:7a:f4:6a:cd:c6:5f:40:4e:
                    3f:96:31:c9:be:ae:c2:20:ea:88:04:d9:69:5a:88:
                    ce:b8:08:a7:ab:64:8c:54:77:8b:a9:6e:87:97:c2:
                    15:54:ab:b1:83:14:53:ce:d1:bc:dd:f9:10:69:2a:
                    92:dd:39:08:ee:a2:c3:bf:d9:45:4f:16:f3:1c:86:
                    5b:31:d5:f3:af:88:c9:02:7b:4b:85:22:a6:5b:e7:
                    ad:d8:b6:61:98:be:44:c8:4e:88:ac:13:fd:45:94:
                    dd:9e:0b:90:a1:b6:9d:67:30:58:a3:ce:43:72:cb:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:79:C9:92:9C:13:C3:1F:C2:3A:08:92:E7:35:7F:D9:A4:28:C2:3D
            X509v3 Authority Key Identifier:
                keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:37:5b:73:16:e2:ef:e5:b7:7b:48:89:9c:05:2d:b5:51:dc:
         d1:7d:8b:00:e5:93:18:96:89:2e:c0:ca:4e:e3:31:71:09:bf:
         cf:af:b2:78:81:82:9c:60:72:ce:43:f0:a7:c9:11:e0:74:4f:
         94:ea:6c:2f:75:17:bc:ed:21:69:43:34:92:cf:97:1d:95:78:
         da:ae:b3:15:9b:ae:ef:f0:f0:97:37:7c:40:f0:a7:90:17:1c:
         4c:73:82:c8:04:8c:cb:ec:a8:57:96:d9:11:f1:3f:e1:1a:d6:
         82:d6:21:f3:56:a6:3f:5e:8b:02:bd:39:00:44:9a:97:06:f6:
         ef:91:d2:99:fb:93:e1:1a:9a:a7:28:13:4e:98:10:3f:f1:45:
         8f:9e:80:bb:f3:3a:de:11:73:24:35:0a:58:7c:ab:2d:24:21:
         b3:14:25:e0:97:f7:11:d7:66:e7:d5:93:17:25:df:a8:8d:b2:
         f8:80:fe:b4:6b:41:e7:e1:db:5a:69:64:3f:0a:5c:f1:58:b9:
         60:00:07:fc:1d:bf:8b:d6:7e:3d:21:98:fb:53:09:9d:96:39:
         ab:29:25:d3:a1:58:b2:fa:5a:51:f4:eb:51:7a:f4:f8:2a:24:
         ba:6e:03:73:7e:e9:13:fe:42:6a:55:a5:28:27:04:0a:2f:18:
         e6:a9:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:29:34 2025 by rpki-client