This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
File:                     MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft (raw, json)
Hash identifier:          gji+gcfkZ6IdZGnuCyTPntv8T7xvBsg1XMaRO3kZSZg=
Subject key identifier:   6D:7D:4F:AD:63:9C:F2:33:63:33:2E:03:87:D6:F2:1B:63:1A:61:81
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Certificate issuer:       /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial:       019B4B82F44AF9F11B7FF34D727077509A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
Manifest number:          0A05
Signing time:             Tue 23 Dec 2025 14:00:31 +0000
Manifest this update:     Tue 23 Dec 2025 14:00:31 +0000
Manifest next update:     Wed 24 Dec 2025 14:00:31 +0000
Files and hashes:         1: 1eHV2MTVv9r4jaAyWzNmweINues.roa (hash: kpyvjkV25MXxf36AZvjCKoDBz8hEwaag/9XEAwnyuhU=)
                          2: IrS_FAeo7ooc2f0ynHvuFdypznI.roa (hash: TS/DBO48YVVoe6NmoNSxb9VjzjtWbDtfeR9vV0R/jHI=)
                          3: JfryfnDf58cdzPixCTHxiiFWu-Q.roa (hash: K0Yl8xYuw8CDSrVjNHAKQ9wJ8kHE2ag93Ne1V4LiqEk=)
                          4: MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl (hash: qCmUi/uifFmLN2sQP+lKEjXtmYjH84xC5AMQMDultL4=)
                          5: p7T39ptlXkI2Sj7_4UHerFc2ydg.roa (hash: qzLpNT9BMSDBwvGH+Geqegf/ZUm8N4tZ6wNOSiRS4gY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:82:f4:4a:f9:f1:1b:7f:f3:4d:72:70:77:50:9a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
        Validity
            Not Before: Dec 23 14:00:31 2025 GMT
            Not After : Dec 24 14:00:31 2025 GMT
        Subject: CN=6d7d4fad639cf23363332e0387d6f21b631a6181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:a4:10:7d:ee:bf:a4:be:44:54:a1:87:e1:
                    06:1f:7a:8a:97:09:c5:83:a2:b6:76:59:e3:ae:85:
                    a4:6b:be:79:96:7f:90:5d:c6:e4:6c:14:fd:a8:0c:
                    23:43:71:f0:8e:0b:55:1f:ed:3d:a2:88:28:1c:9b:
                    84:ef:88:81:d4:32:95:de:03:ea:01:b9:c9:cf:38:
                    5e:2c:3a:af:31:f1:71:2a:71:81:de:5e:2e:99:ae:
                    bd:0b:44:6f:f8:c8:02:08:b9:fb:fe:1e:82:48:d5:
                    d2:e8:65:59:4b:e9:37:ab:6a:e6:80:5c:26:9c:60:
                    03:90:a1:5c:5d:1a:d7:4c:82:4b:14:6d:4b:e1:11:
                    c0:e4:11:cb:c5:9f:37:7e:ff:a2:bd:1d:2c:b3:29:
                    61:24:28:c5:75:1c:83:ba:76:ff:ca:91:cc:07:07:
                    09:57:74:cc:7c:6d:6a:e0:8d:c8:0b:86:b7:40:f1:
                    1c:82:c2:e7:82:fc:ba:5e:e7:39:d4:2f:05:2e:ee:
                    30:b7:43:93:12:8f:87:32:e7:de:a1:52:de:6d:fb:
                    06:09:46:3e:96:24:1d:c8:08:ee:64:60:9f:1a:7e:
                    60:2e:1c:f1:e8:f2:98:4e:e2:a3:21:a3:b5:58:a3:
                    57:3f:64:72:3c:44:8c:82:98:c1:0c:99:00:a9:46:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7D:4F:AD:63:9C:F2:33:63:33:2E:03:87:D6:F2:1B:63:1A:61:81
            X509v3 Authority Key Identifier:
                keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d2:2b:33:49:da:a0:d2:c8:aa:d2:08:66:0f:b3:88:55:d0:
         46:b8:f6:42:ed:ac:5a:e9:3a:cb:3e:0c:7b:a6:a1:26:cb:5d:
         41:3e:90:11:31:48:0c:99:cc:c6:7b:b6:25:7c:64:8c:56:9f:
         53:c8:de:18:f1:31:dc:a6:19:d7:33:0a:ec:a0:b7:dd:54:8d:
         47:6c:44:bf:ec:ff:35:4b:94:22:05:9f:d0:de:36:c8:7e:d4:
         6c:82:d0:55:63:7d:2c:ba:ee:c7:3e:9e:a3:86:d8:1d:af:b6:
         4b:af:7d:8b:61:ef:06:b3:8d:e6:ca:1e:28:d5:e2:e5:f5:ca:
         43:54:b6:a5:8e:01:04:94:dd:4b:ce:38:4e:6a:16:4e:51:3e:
         7b:80:29:62:2e:07:de:b7:31:2e:07:dc:c9:24:54:24:88:4d:
         65:84:fb:7a:e8:af:21:41:22:b7:2c:db:b8:b3:7b:ec:53:35:
         e1:b4:e5:f3:a3:38:32:4d:64:69:2e:dc:b0:0d:37:a7:0d:00:
         06:b8:1d:44:48:58:8f:54:66:2a:10:d6:3f:4b:ec:3e:37:b9:
         5c:f0:59:0b:01:2a:3d:33:61:80:99:7d:65:36:8f:fd:f0:8d:
         18:1f:9b:84:90:a7:5a:33:d6:03:b2:cf:ae:c4:3e:ba:1d:48:
         cd:83:2b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:47:48 2025 by rpki-client