This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File:                     miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier:          vyD+nDkVb2yz6x5FXJEcSFPyVvcCnFhppiPcl5KvUAs=
Subject key identifier:   CF:1E:1E:8F:6B:E7:03:F6:9D:41:5B:69:13:98:36:00:80:86:8E:28
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       019B10135493ADCB66DDBE08D6191C979607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number:          0667
Signing time:             Fri 12 Dec 2025 01:01:00 +0000
Manifest this update:     Fri 12 Dec 2025 01:01:00 +0000
Manifest next update:     Sat 13 Dec 2025 01:01:00 +0000
Files and hashes:         1: 091iixnQKcvUxbZE0chkzY9OKaI.roa (hash: JSnoQNQ5Cj53Jy2TNMmAxUXyySm/GL1z5FN+d2LDjbk=)
                          2: 65SCsGDULNXmsnaaY_HwCpiRDJs.roa (hash: BdpbgQGpWh/WB7tfPqtYzLSc4bRtCkrcb4wfalu+zjk=)
                          3: 8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa (hash: CVVH3DKSw6OPD6uGHDaKNZyh/Yf/ppoZnuIgn8Lk+VM=)
                          4: hZOTpFRy13nYnktswcCNkeUCTr8.roa (hash: 4dFC4O4Uj8mTI6RVQjx/owGxcN/2ee3qO80AUI3+pDc=)
                          5: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: iRXIBFDNQ9vfyryuqq10NoKizTkQaSA1Mqe0JJULOeM=)
                          6: yATYs5RQnNSomy8BdI2rSObywPg.roa (hash: b8O6fsQ738Y0NuUeiBS8msZwSYfgqn0qenaET6r1H/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:13:54:93:ad:cb:66:dd:be:08:d6:19:1c:97:96:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: Dec 12 01:01:00 2025 GMT
            Not After : Dec 13 01:01:00 2025 GMT
        Subject: CN=cf1e1e8f6be703f69d415b691398360080868e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c9:f0:2d:7b:01:f8:a1:00:c0:4c:86:dc:6f:
                    38:fc:45:43:24:30:8e:28:69:a3:29:aa:a5:54:77:
                    8e:56:e9:4f:32:c3:4d:cb:32:99:f6:cf:2a:2e:9b:
                    22:f6:d3:2f:a0:eb:f1:29:da:15:f9:63:4c:36:ed:
                    51:23:3c:b1:7c:e6:dd:eb:1a:a5:af:b9:65:e7:cf:
                    dd:a5:9c:75:d0:2d:f0:a2:d7:40:3c:1c:1d:d6:83:
                    ef:63:86:61:09:9a:26:eb:1d:77:78:e4:4d:d9:de:
                    d1:4d:a4:b2:ca:66:ae:db:cb:a3:e2:b3:21:cf:c1:
                    ec:68:14:40:c5:5c:b7:ac:61:3f:81:89:0c:34:50:
                    72:e1:9d:74:d9:e6:6e:9a:4a:39:51:a4:b2:3a:be:
                    27:5b:5d:9e:0e:31:32:73:4e:d5:58:ab:05:be:f2:
                    84:2f:ac:b5:d1:f6:a9:ea:77:cd:06:72:4d:ee:21:
                    53:7c:99:ac:3d:70:b4:a0:0e:d3:07:20:31:a1:eb:
                    61:90:f8:23:2b:0c:e6:5c:13:e6:d5:cd:bd:7e:94:
                    0c:e6:65:a8:cb:b6:2c:cf:55:f7:47:c6:d2:85:cb:
                    86:28:3c:f9:cb:fd:d7:d4:06:81:94:30:9a:13:28:
                    bb:48:dd:5b:ba:a3:2a:28:1d:10:2f:21:51:f0:1d:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1E:1E:8F:6B:E7:03:F6:9D:41:5B:69:13:98:36:00:80:86:8E:28
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:22:cc:c1:6c:e1:7f:ad:16:98:25:8e:89:3a:d8:e1:4e:00:
         ae:cf:8d:a9:2a:07:51:2f:91:33:50:78:11:15:2f:f3:cf:ea:
         7a:7a:88:a1:13:92:e8:47:81:a7:b0:e2:e9:81:ba:4c:e1:5e:
         15:f0:70:2c:aa:5e:6b:5f:9a:8a:6e:0c:72:fc:72:44:12:a0:
         05:d7:86:6f:3f:44:c1:c6:e5:8f:ce:13:ca:ec:22:cf:2d:a7:
         28:a5:90:c4:e5:5a:d0:99:3d:df:67:6d:73:79:69:e2:fd:f5:
         a6:ab:85:0d:23:0d:0d:6a:93:69:d6:89:99:79:68:6c:7e:57:
         2d:c1:df:33:5f:8e:51:5e:d6:f1:00:61:8e:08:28:17:cd:f9:
         16:a9:df:df:59:ad:c0:d4:94:59:e2:91:cb:c9:b5:ed:a6:e6:
         c8:78:a0:68:a1:6c:c5:a0:33:22:8e:6a:ae:f5:56:f7:d1:43:
         65:a6:a1:35:4b:4c:6d:a5:89:43:26:74:d5:8e:f5:b4:70:c2:
         21:9e:7e:de:8c:2c:36:e2:6f:5f:cb:51:3f:01:80:0f:ec:41:
         d5:d7:f7:a1:e8:bd:6b:3d:54:73:94:8f:42:7a:73:b1:5b:14:
         d6:e3:62:18:1c:86:ae:e7:87:89:0d:d5:69:0d:f1:6d:b4:77:
         b6:b2:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 03:42:49 2025 by rpki-client