This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
File:                     m3RNp58FMac61vS68IN-k-toAbE.mft (raw, json)
Hash identifier:          ++zSaM4mifqCWUcRU8AWImPGcz8ksZIMkcBkc4vIqUw=
Subject key identifier:   57:94:8A:3B:20:61:44:91:61:E7:83:1D:06:31:1F:91:8D:82:C7:76
Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
Certificate issuer:       /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Certificate serial:       019AFA6787A47F9AB888E81EA530DF4E2FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
Manifest number:          35
Signing time:             Sun 07 Dec 2025 20:01:20 +0000
Manifest this update:     Sun 07 Dec 2025 20:01:20 +0000
Manifest next update:     Mon 08 Dec 2025 20:01:20 +0000
Files and hashes:         1: 0OeNkvd-8MMdjkKEPWgT5tWh42M.roa (hash: 14QSl+lc6zLbErHcCROg/UYo6UZFnpjBPJYqshbFvSQ=)
                          2: FOViJa71bONBPbhwdf8cY26xpGw.roa (hash: acfz9cNHyt0g2+N/TsWc9s6Ju/Ql+2/s0NXKkyXco/4=)
                          3: m3RNp58FMac61vS68IN-k-toAbE.crl (hash: sPX9qLuzkaCsNP+Igpt6NhHHMi+oS0oZZ5JX3AH3r/U=)
                          4: x_RVWVMpfqFCU9C8fHlsYzNg98Y.roa (hash: HSJMhqY1VPTAA+uSdO1W+IOvhtrhwbuUBVftKZHkGTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fa:67:87:a4:7f:9a:b8:88:e8:1e:a5:30:df:4e:2f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
        Validity
            Not Before: Dec  7 20:01:20 2025 GMT
            Not After : Dec  8 20:01:20 2025 GMT
        Subject: CN=57948a3b2061449161e7831d06311f918d82c776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:eb:7e:72:3f:2e:2e:5a:a9:46:45:5d:a9:
                    8c:01:a9:92:24:e1:9c:56:07:24:f4:21:a6:16:f3:
                    f4:c9:50:2f:83:48:ac:32:9f:c4:1b:e8:23:22:9d:
                    78:02:57:5c:36:e3:18:0c:9b:f5:f7:97:de:fa:d0:
                    93:30:b8:98:de:1e:ca:73:a2:b8:e1:5c:55:7f:f1:
                    eb:ab:72:7a:ed:60:7c:d1:90:a0:8a:6d:e6:14:7c:
                    41:01:f8:71:19:32:d1:e8:02:47:ae:35:52:a2:09:
                    30:b3:01:77:df:b2:09:9f:3b:cb:4c:82:68:ff:a8:
                    fe:6c:95:4b:7d:84:cd:e8:11:d0:6d:cb:5b:3c:f8:
                    98:38:8f:64:f9:22:43:ef:d1:97:47:ca:66:bb:43:
                    e3:97:8f:2f:c8:b3:16:01:cb:4f:4f:ae:bf:a5:e7:
                    c5:cc:34:ba:9b:a8:df:fc:2a:95:4e:43:13:71:08:
                    e0:2a:33:2f:9a:ac:2d:6a:fc:00:8e:75:06:6b:19:
                    64:e4:ff:41:86:0c:30:a5:c8:3b:37:57:c2:c8:ab:
                    5e:7b:a7:77:b5:d3:fd:54:48:98:ae:75:0f:1a:bb:
                    23:cf:87:3c:7d:65:83:d3:9b:f9:40:46:17:ee:e6:
                    81:5e:08:73:96:d9:a1:58:9b:0c:3a:d6:36:b6:12:
                    65:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:94:8A:3B:20:61:44:91:61:E7:83:1D:06:31:1F:91:8D:82:C7:76
            X509v3 Authority Key Identifier:
                keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ef:eb:26:70:62:8c:99:9b:fe:75:55:1a:ac:13:d2:fb:e2:
         39:64:b2:69:78:9f:1f:a1:48:eb:c4:03:fd:a5:7b:45:75:bd:
         85:d4:94:b3:e9:9b:85:a6:e7:f9:d1:3e:4b:63:60:ba:7a:9b:
         63:67:96:6d:7c:75:96:e6:0f:81:b8:87:ee:95:f3:46:18:d2:
         d4:a3:90:48:37:f6:7c:aa:76:2c:0f:22:92:01:71:e7:7b:cd:
         4f:d8:96:bf:d0:a2:bb:96:d7:31:83:76:ad:cc:8d:e2:e4:51:
         e6:be:01:3f:a7:9c:e9:1c:86:64:9f:79:8f:02:20:91:fa:58:
         74:c1:bb:4b:ba:9b:5c:2b:6c:fe:68:9e:a9:ac:0e:81:ad:e6:
         16:4d:83:09:c1:f5:e3:38:df:77:54:8f:21:aa:22:a4:85:67:
         7f:a5:9e:0e:ea:3f:61:46:ee:fc:b5:80:c8:88:25:08:02:f2:
         34:e5:18:51:4d:ee:63:dd:55:87:48:90:04:30:41:dc:f3:e1:
         ad:11:5a:0a:0e:98:6c:f1:45:1d:7a:e7:df:19:09:d9:96:1c:
         ff:f5:4a:ea:98:a1:32:cf:80:ed:aa:1b:33:fa:51:49:9b:aa:
         40:ca:29:7e:83:6a:79:6f:7e:48:69:48:33:18:a5:7a:76:27:
         d6:b9:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 23:05:04 2025 by rpki-client