This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File:                     MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier:          i0YvovBX8szg5C7Cn4ZYDXS8dfwfU+ZyFF0Y6G6zPpI=
Subject key identifier:   6D:F9:B8:EC:50:42:EA:91:0D:03:CF:33:61:79:F0:72:AD:7C:D3:19
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer:       /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial:       019B0F6E2FB769129C639148D76E050968CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number:          0E56
Signing time:             Thu 11 Dec 2025 22:00:37 +0000
Manifest this update:     Thu 11 Dec 2025 22:00:37 +0000
Manifest next update:     Fri 12 Dec 2025 22:00:37 +0000
Files and hashes:         1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: TUpS9vGKOESxTAL/i5C9TZFBRlknpvWTnXrhR4iZFRU=)
                          2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
                          3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:6e:2f:b7:69:12:9c:63:91:48:d7:6e:05:09:68:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
        Validity
            Not Before: Dec 11 22:00:37 2025 GMT
            Not After : Dec 12 22:00:37 2025 GMT
        Subject: CN=6df9b8ec5042ea910d03cf336179f072ad7cd319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:62:d9:43:f5:0c:1c:89:bb:76:52:44:79:
                    a3:c3:cb:93:d3:f3:19:34:7c:9a:82:ab:7d:21:c4:
                    a7:88:10:51:e3:8f:b8:c9:1d:9d:f7:22:ab:ef:04:
                    2d:78:35:26:a6:7a:73:27:9d:eb:a4:4e:75:82:54:
                    e3:c7:8d:a4:26:86:f9:ea:6f:f3:0f:47:5d:06:97:
                    f3:34:24:82:80:93:8b:d6:0b:75:85:d5:03:ce:34:
                    45:52:76:08:2d:43:a8:34:ff:ab:07:d7:11:75:40:
                    9f:50:55:b4:bd:02:bb:fd:f9:2f:20:76:2e:2d:1c:
                    af:40:6b:5f:18:be:b1:24:43:d0:a7:88:ee:ea:61:
                    5d:2a:02:7d:d1:8e:5e:06:84:29:cc:57:58:7b:be:
                    e1:7f:e6:9c:75:e9:6f:0e:1b:d8:03:8a:8c:aa:62:
                    e5:e1:67:a5:c3:9a:b0:4c:f0:d2:b0:92:18:0b:96:
                    55:fb:98:b1:05:51:98:8d:ae:99:92:05:23:ba:2a:
                    12:24:53:63:5d:c4:f8:61:45:8e:6e:ff:31:bf:c6:
                    1e:dd:fd:b4:63:96:e7:bc:25:ab:d3:44:53:2a:b9:
                    ae:2a:84:b0:44:a8:8e:b6:30:95:b2:e1:37:3d:df:
                    60:0e:d0:c2:96:e0:6d:b1:26:56:17:47:b3:80:b6:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F9:B8:EC:50:42:EA:91:0D:03:CF:33:61:79:F0:72:AD:7C:D3:19
            X509v3 Authority Key Identifier:
                keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:a0:83:c6:bd:14:55:66:27:f9:e1:d0:38:8a:8f:74:27:
         79:ab:f6:08:59:b5:02:2a:e6:d2:6d:4f:90:5d:0f:aa:f2:3a:
         09:16:39:ee:85:59:b6:d6:9c:fe:d9:94:c8:02:71:6f:d1:8c:
         5c:6a:6e:32:70:e1:84:1d:10:39:3b:55:a6:94:5d:6f:e7:f2:
         cd:7b:2d:52:5a:ef:fd:69:9f:00:24:01:78:2d:e1:c8:40:1a:
         ac:a3:96:55:ba:75:6c:5d:2d:62:b7:58:84:e7:80:e5:0e:4b:
         6e:1d:92:9a:de:80:8c:17:db:96:14:5a:a3:b5:a3:c1:4a:ab:
         c8:4c:29:55:55:65:ad:8c:80:30:5c:81:e9:42:b6:27:a6:00:
         3d:d2:ba:ef:87:eb:8b:bf:36:c3:bc:33:4a:aa:35:2e:18:d1:
         c5:36:58:a1:6b:e7:be:46:94:6d:f2:a9:1e:6a:1b:33:65:c7:
         db:7a:97:78:2c:42:dc:31:a7:00:a5:7c:4e:94:bc:39:2c:ad:
         1c:5c:d2:e7:e8:66:9c:58:8d:b3:13:dd:51:70:55:9a:96:84:
         98:7d:f6:42:46:03:8b:5f:f1:2d:f6:35:d0:df:95:e0:0d:eb:
         62:06:3e:19:1c:f8:e3:cf:6c:9a:3d:23:32:e4:38:57:36:d5:
         87:1c:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:28:51 2025 by rpki-client