This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
File:                     rMSPelkSBYjUFw6igV5q5RvmvP8.mft (raw, json)
Hash identifier:          cJ1r58DHSmyEgMufv53aiMgWZnoHPgJ4Et3pXqox0Jw=
Subject key identifier:   13:77:C9:E3:19:85:E3:9B:B0:E7:62:AB:B2:3A:24:1E:B4:C1:43:BC
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Certificate issuer:       /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial:       019B0F00C45940884ECD3381519CFEAAC67D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
Manifest number:          0807
Signing time:             Thu 11 Dec 2025 20:01:07 +0000
Manifest this update:     Thu 11 Dec 2025 20:01:07 +0000
Manifest next update:     Fri 12 Dec 2025 20:01:07 +0000
Files and hashes:         1: 9aHsA3_Ynggs276_sCFsSz4MycM.roa (hash: qPhn5WBiWKeIsNs1cjOrwQopHwGcYtGq0upChF7kDvI=)
                          2: B0641shvDQ9p2BIgOLZHHAVjZSw.roa (hash: bvzmPdErYhIKPNksHZ+/ri9guEtRIMbmfasCvweNx4w=)
                          3: XrEnfRZ_aS_v253DnFB44a25MQg.roa (hash: cz7gfFsvOBuR8Jx82WCxw05R+M3PHvihU0+XIidI9k8=)
                          4: rMSPelkSBYjUFw6igV5q5RvmvP8.crl (hash: xuNl967mU47qt2PNmyNvYjBTrValMk5FBSf+DD0br3A=)
                          5: sGNKOVYjDTSby3HV0d5UrQif03o.roa (hash: fEt1u0Pnd1OgLhD2ZLaC3l+U/rkH+wDu1pDtZ8ZNq+Q=)
                          6: xspPEiEQGiUUjQNMRrR4LTirJ8g.roa (hash: ij24ceO8VLn5TPnpgS1+UFG8iPy5YqTgJqLC4WCf/eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:00:c4:59:40:88:4e:cd:33:81:51:9c:fe:aa:c6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
        Validity
            Not Before: Dec 11 20:01:07 2025 GMT
            Not After : Dec 12 20:01:07 2025 GMT
        Subject: CN=1377c9e31985e39bb0e762abb23a241eb4c143bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:77:ea:12:ca:26:a1:07:49:e4:7d:fa:d8:61:
                    a0:0b:f6:4a:84:d3:27:b9:e1:8b:39:c0:16:f7:d0:
                    ff:e9:a8:d2:d1:94:8c:c1:db:c0:b9:48:d7:81:c2:
                    05:2d:e2:4d:fc:a8:21:e7:d4:0c:3c:2e:4c:2b:e1:
                    00:c8:c3:bf:6e:72:85:aa:53:48:01:54:ca:32:75:
                    27:98:90:8f:a8:39:df:e6:b1:23:9b:61:34:3c:78:
                    bf:4c:cb:15:2c:34:20:47:0f:5b:bc:a6:52:29:d1:
                    70:59:17:f4:16:e0:78:2c:17:1b:f1:6c:6f:f0:56:
                    8b:74:89:d8:1c:e7:24:fb:8a:4e:ab:82:33:da:b4:
                    9a:ab:ea:6b:20:1a:96:98:5a:e4:32:26:91:21:99:
                    56:d9:f5:5d:78:a5:ab:b8:96:85:a4:54:9b:ab:78:
                    6e:4c:2f:f8:3b:ea:e3:a3:a4:3e:09:58:cc:f7:82:
                    48:af:94:e1:ff:00:6f:a9:75:47:a4:be:85:87:09:
                    e0:33:0d:59:69:6f:0e:6e:62:ef:34:e7:7b:c9:53:
                    ed:26:6f:e9:64:00:16:6a:b2:c5:39:39:44:2f:72:
                    ca:fc:f7:ea:7b:9f:86:d4:ae:5c:92:ea:77:77:2c:
                    aa:79:a6:2c:4e:bb:67:0f:0d:e6:7f:87:cf:be:ca:
                    c2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:77:C9:E3:19:85:E3:9B:B0:E7:62:AB:B2:3A:24:1E:B4:C1:43:BC
            X509v3 Authority Key Identifier:
                keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:be:52:9d:81:6d:f7:05:82:e9:ee:73:13:09:7c:48:ff:de:
         6f:5c:b2:fb:c8:82:a0:69:16:f3:97:93:61:4e:63:c7:a5:3c:
         bf:37:56:9e:0d:9e:a0:b3:b3:3c:85:48:f4:eb:b9:0d:3c:c4:
         0f:c2:b6:98:7d:9b:d3:0d:fb:5b:0c:d3:2f:b1:6a:59:48:32:
         ed:ee:26:c2:78:48:ce:a2:8c:23:ac:4e:6a:b8:fb:7a:f7:14:
         4b:19:89:f0:74:14:58:0d:b1:91:a2:9b:62:87:f4:41:50:53:
         d6:a3:f5:26:b8:f6:67:1a:3c:93:e7:7e:85:50:1d:c3:5a:eb:
         9e:04:fe:7f:b7:6a:64:b6:75:39:6d:a1:7f:55:7e:d1:fb:cc:
         6d:07:76:08:ce:f0:9d:2d:3f:15:39:5e:a4:8e:e8:7e:e7:0c:
         ef:46:8a:f2:cf:ca:e1:ce:d4:bf:3b:e1:7a:09:27:eb:20:41:
         8f:a2:a9:0e:6e:3b:20:c4:d4:1d:12:6a:ab:dd:e0:29:f2:1d:
         98:3b:69:15:42:cb:56:33:e0:8a:ad:8e:95:6b:2d:e7:ac:07:
         70:a5:76:17:62:9f:a0:62:7b:b2:22:6b:34:b4:62:ae:29:80:
         3a:1a:58:cd:c2:3c:ca:9c:5a:88:65:d6:e8:9f:86:38:cc:cb:
         23:81:62:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 04:04:14 2025 by rpki-client