This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
File:                     nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json)
Hash identifier:          aDq507GRtC3iNH+1eHUhxG2XZt8iBAqLqeEz0Zwaqa8=
Subject key identifier:   DE:D6:72:E5:1A:3D:47:67:34:20:4E:A2:19:CD:AE:F4:07:21:2C:70
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Certificate issuer:       /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial:       019B1BA9F0A3016F67B334DDE24A6AFAD7D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
Manifest number:          1776
Signing time:             Sun 14 Dec 2025 07:01:20 +0000
Manifest this update:     Sun 14 Dec 2025 07:01:20 +0000
Manifest next update:     Mon 15 Dec 2025 07:01:20 +0000
Files and hashes:         1: EP3bkF_F-0JN_ikpcovpxVorS-8.roa (hash: hqxhbHTgDziJ5finpaZT0guvZfxkt53C1CG9ZliF94Y=)
                          2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: zErTI8Ouv5ycPxJPXualvNbU35PoXP1/417wd6Kh9CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:a9:f0:a3:01:6f:67:b3:34:dd:e2:4a:6a:fa:d7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
        Validity
            Not Before: Dec 14 07:01:20 2025 GMT
            Not After : Dec 15 07:01:20 2025 GMT
        Subject: CN=ded672e51a3d476734204ea219cdaef407212c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:d6:f4:7d:32:53:62:41:1a:27:e9:a6:a7:
                    c1:54:90:e8:78:57:f3:a5:6f:d2:3c:5a:f7:e4:3c:
                    51:19:ac:a3:51:fa:63:2c:c8:3b:e4:81:9e:aa:d8:
                    64:07:79:1e:ad:6a:ee:3c:a2:dc:87:54:31:0b:e3:
                    78:ae:e8:e1:cb:a4:9e:82:cd:1f:50:f4:85:24:26:
                    02:67:fd:b3:d6:1e:9c:b2:ec:4c:04:1a:3a:cf:8f:
                    59:1a:3b:e6:51:fd:2a:bb:b5:33:32:36:fb:cc:cf:
                    24:c3:9f:fd:e6:10:db:4c:fa:96:b7:b4:d6:97:fc:
                    47:6e:4c:b6:e8:03:79:a4:41:5b:19:1f:34:e3:b2:
                    5f:56:11:a5:03:f9:b5:0c:17:c2:7f:4b:57:e9:a8:
                    fb:cc:db:45:0b:97:43:25:01:e5:ee:23:f2:44:e0:
                    a1:fa:c1:68:76:f8:90:ba:68:93:90:71:02:3e:f3:
                    a5:01:69:7a:a1:93:17:48:bb:98:8b:49:3a:d1:09:
                    78:55:e1:bd:e4:7e:82:46:49:f8:20:80:b4:4f:f3:
                    d6:f5:58:d4:bc:33:3f:e4:55:7e:54:d9:7a:75:95:
                    21:8d:41:49:fd:50:3b:ed:3c:d2:48:8a:0c:77:fc:
                    6b:93:50:4b:22:c8:0f:84:f7:93:fc:85:d6:2d:93:
                    4a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D6:72:E5:1A:3D:47:67:34:20:4E:A2:19:CD:AE:F4:07:21:2C:70
            X509v3 Authority Key Identifier:
                keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:70:12:df:c9:da:b5:97:7a:fa:d8:a7:30:10:a4:39:a2:f2:
         45:2e:0d:9d:6c:c9:49:73:49:ab:4d:81:e2:d4:54:c2:9e:02:
         92:6a:9e:a7:27:c3:f5:4d:38:87:f8:76:c0:fd:f4:c8:8b:ca:
         dd:bc:36:a4:a0:15:fc:39:0f:88:45:2b:cf:ed:dd:a5:3b:ec:
         c6:72:fd:f3:e5:b9:5e:3d:7a:e6:01:2a:fc:4b:bd:8a:0c:5c:
         b2:b3:55:39:f7:2a:93:56:8f:4a:18:a0:f1:c6:8b:8c:72:8b:
         a9:9d:fd:9b:8a:71:3b:80:ac:ea:8f:f2:27:6b:69:18:09:9a:
         12:d9:98:18:98:98:7e:2a:55:1d:c8:3e:8b:40:81:8a:66:1e:
         aa:f7:ff:f9:05:41:de:35:3b:e8:68:03:38:56:3d:54:9d:68:
         19:f8:cd:38:67:c7:22:bb:04:e0:e0:3b:34:ec:d1:27:cf:88:
         50:9d:8b:86:b4:7f:3e:6a:e6:72:9f:ca:8e:b4:c4:6d:ae:18:
         6d:13:fd:a8:93:3c:b6:e2:0b:3e:c6:85:6b:e2:15:1e:71:83:
         0e:48:00:c8:5a:31:25:6f:c8:43:03:2c:b2:64:46:03:be:ab:
         a2:01:aa:85:89:cc:c3:1f:1e:11:37:98:09:6c:8b:14:29:cb:
         d8:ac:6d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 12:03:44 2025 by rpki-client