This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          xynU/CeKDTcKvW1DjgFdRS6F63a/6kTPOXAUnYZ4py8=
Subject key identifier:   D5:51:B4:2E:71:7A:EA:12:C3:A2:DE:82:EE:D2:A0:93:8C:40:0E:C3
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       019B1F87B4F4DBD2B5F3A404FF9CE81B2F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          0753
Signing time:             Mon 15 Dec 2025 01:02:25 +0000
Manifest this update:     Mon 15 Dec 2025 01:02:25 +0000
Manifest next update:     Tue 16 Dec 2025 01:02:25 +0000
Files and hashes:         1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=)
                          2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: n+YAPRIbbnPFz5tG8nSwKVdUug8QYhKXUFPymOh+qNk=)
                          3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1f:87:b4:f4:db:d2:b5:f3:a4:04:ff:9c:e8:1b:2f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Dec 15 01:02:25 2025 GMT
            Not After : Dec 16 01:02:25 2025 GMT
        Subject: CN=d551b42e717aea12c3a2de82eed2a0938c400ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b6:8a:28:6b:9a:06:7a:3e:6c:a7:be:9c:61:
                    c6:63:ab:1c:6a:6c:79:fd:b7:d8:74:da:d6:ee:12:
                    a2:bf:93:61:52:c8:4d:50:9c:12:4f:6f:43:bd:5a:
                    54:1b:53:13:e3:06:06:5e:65:3c:e4:aa:69:b4:5c:
                    2b:f6:90:69:d6:e6:8e:42:be:49:b3:e4:1e:08:22:
                    5f:9b:21:89:0c:81:78:4f:ee:aa:72:21:a8:0d:63:
                    91:48:85:f1:20:fd:e3:b3:6c:7c:82:19:f7:48:b5:
                    32:0a:ed:d8:57:86:1e:ac:b6:0b:67:36:e7:cd:38:
                    ca:e3:f5:5a:34:7f:1f:c0:77:cd:6e:6b:f0:1a:8d:
                    f0:db:29:1f:8c:d2:51:90:42:1f:1f:cd:8d:72:02:
                    eb:20:92:93:b6:f3:3a:6e:08:36:cf:46:39:7c:76:
                    b5:8a:bd:65:e7:c3:78:e0:6a:1d:95:38:9c:f2:ac:
                    2a:6a:02:7b:92:9a:34:18:e3:58:dc:ff:28:c3:80:
                    16:06:67:c4:5c:8d:26:41:96:47:39:8e:fc:33:c8:
                    33:11:03:0d:1d:27:86:d5:da:62:d2:85:a4:98:4c:
                    67:69:ca:10:d2:90:d3:bd:5c:31:df:ad:69:64:71:
                    ab:c2:8a:fa:c7:b9:99:fe:4b:cf:6c:13:19:f2:99:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:51:B4:2E:71:7A:EA:12:C3:A2:DE:82:EE:D2:A0:93:8C:40:0E:C3
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c6:c5:30:04:85:e3:db:4f:0d:ed:cc:4b:a1:26:a2:4e:ef:
         11:cf:5e:f8:3a:c1:d6:43:dd:2e:fe:ec:35:6a:82:8a:37:1c:
         11:83:75:5c:31:97:a9:13:87:bb:f7:8b:0a:9e:81:8c:73:f2:
         0b:04:10:a5:35:9d:2e:dc:67:60:3f:50:fb:f8:1c:8c:41:4d:
         de:d1:33:7c:33:e1:ea:5a:90:c9:fb:8e:f4:4f:64:1d:d0:c6:
         9c:e0:fb:c3:c1:93:87:f2:83:28:9b:a2:58:e4:17:b5:99:bc:
         65:2a:cb:3f:c3:f5:62:2f:1c:21:25:12:8d:e7:30:59:2b:41:
         b5:74:86:8e:f5:38:25:98:8e:21:60:b6:59:bf:fa:55:38:83:
         d4:86:20:bf:ea:a2:b8:1f:49:e6:09:27:7d:d6:56:76:48:c7:
         b2:44:f8:23:a9:a2:86:07:49:f3:90:f4:72:b0:fc:49:3e:ae:
         f6:33:3f:fe:f3:c3:02:dd:9a:5c:8c:ee:b4:e8:c0:13:81:56:
         f7:80:85:65:23:9c:35:ae:5f:67:fb:1c:d1:31:74:70:61:07:
         99:56:25:65:bf:4e:8d:85:5b:90:85:2d:f0:52:b6:74:5e:36:
         c2:d4:8c:82:f6:2c:2b:dc:39:02:00:ab:1e:b7:fb:d6:2c:8e:
         a8:45:da:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsfh7T029K186QE/5zoGy9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5
NWNkMzQwHhcNMjUxMjE1MDEwMjI1WhcNMjUxMjE2MDEwMjI1WjAzMTEwLwYDVQQD
EyhkNTUxYjQyZTcxN2FlYTEyYzNhMmRlODJlZWQyYTA5MzhjNDAwZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LaKKGuaBno+bKe+nGHGY6scamx5
/bfYdNrW7hKiv5NhUshNUJwST29DvVpUG1MT4wYGXmU85KpptFwr9pBp1uaOQr5J
s+QeCCJfmyGJDIF4T+6qciGoDWORSIXxIP3js2x8ghn3SLUyCu3YV4YerLYLZzbn
zTjK4/VaNH8fwHfNbmvwGo3w2ykfjNJRkEIfH82NcgLrIJKTtvM6bgg2z0Y5fHa1
ir1l58N44GodlTic8qwqagJ7kpo0GONY3P8ow4AWBmfEXI0mQZZHOY78M8gzEQMN
HSeG1dpi0oWkmExnacoQ0pDTvVwx361pZHGrwor6x7mZ/kvPbBMZ8pmtXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVRtC5xeuoSw6Legu7SoJOMQA7DMB8GA1UdIwQY
MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt
NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj
LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcbFMASF
49tPDe3MS6Emok7vEc9e+DrB1kPdLv7sNWqCijccEYN1XDGXqROHu/eLCp6BjHPy
CwQQpTWdLtxnYD9Q+/gcjEFN3tEzfDPh6lqQyfuO9E9kHdDGnOD7w8GTh/KDKJui
WOQXtZm8ZSrLP8P1Yi8cISUSjecwWStBtXSGjvU4JZiOIWC2Wb/6VTiD1IYgv+qi
uB9J5gknfdZWdkjHskT4I6mihgdJ85D0crD8ST6u9jM//vPDAt2aXIzutOjAE4FW
94CFZSOcNa5fZ/sc0TF0cGEHmVYlZb9OjYVbkIUt8FK2dF42wtSMgvYsK9w5AgCr
Hrf71iyOqEXaEw==
-----END CERTIFICATE-----
Generated at Mon Dec 15 05:35:29 2025 by rpki-client