This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          k+Z56/EqybhBDocO0p7/xdn4G73PjvKWV8CgYAXY8bM=
Subject key identifier:   14:D9:61:B7:DE:2F:4A:8E:99:C9:69:D6:E6:DF:FE:5B:2B:50:DF:A1
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       019B101399DEB6D2D904CF377CDAEF9A2975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          0825
Signing time:             Fri 12 Dec 2025 01:01:18 +0000
Manifest this update:     Fri 12 Dec 2025 01:01:18 +0000
Manifest next update:     Sat 13 Dec 2025 01:01:18 +0000
Files and hashes:         1: BDTH3ILUan6_zfYPTgmdo2aSIEs.roa (hash: vfoMCSza5cDas2vR4Ocwzq0jqksW2l8HAJ0wMflsMqE=)
                          2: E5IVKgbJt2zbKiLJbsrX3LIySFU.roa (hash: tGHo3B7TRCKpsC+++roBe0/3ivzBH+Ps/KgroLhmH0s=)
                          3: UaT5Q9bX82Bqe6jOA8JUwqN9Vlk.roa (hash: juEH9dDl19+Gh9JzennWIbN6WX5TGedOU3KMBiUkbg4=)
                          4: Y2-uFOvDKhB51qa1_AM5U2JOtUY.roa (hash: 4c9/YhL+TK23Lox9YjacyfqcSWeripXtyhdacCRYF0A=)
                          5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: GOQ9KuIz4+qAaR7Wl7xupFZmR/cUJMM6s1cLSxWJCos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 01:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:13:99:de:b6:d2:d9:04:cf:37:7c:da:ef:9a:29:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Dec 12 01:01:18 2025 GMT
            Not After : Dec 13 01:01:18 2025 GMT
        Subject: CN=14d961b7de2f4a8e99c969d6e6dffe5b2b50dfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:56:a6:06:2f:8a:66:18:0e:95:c0:59:18:
                    ac:aa:4e:10:89:ca:63:c1:2a:f5:db:84:ec:5d:76:
                    4f:cb:68:e2:48:59:be:13:69:3b:4f:d5:9b:bb:08:
                    bf:a5:ea:a8:6a:4a:36:26:dd:e8:50:a6:18:4d:0f:
                    39:b2:59:2b:b2:45:1b:c0:13:d0:a4:91:a7:af:bf:
                    6e:2c:67:57:fd:2b:53:da:79:12:ef:8a:f0:64:f9:
                    fd:7d:6e:16:48:91:91:4f:f6:90:35:c5:62:7f:c9:
                    b6:35:04:2c:e4:11:81:79:6f:90:b4:ca:f8:f5:87:
                    fb:7d:6a:a7:8d:82:a7:5e:c3:23:0e:fe:40:56:2b:
                    9b:38:14:13:b4:e0:78:90:4a:21:1c:27:17:fd:17:
                    b4:ee:ea:dc:39:b6:60:0b:83:4a:e6:3b:87:81:9f:
                    33:80:3b:e3:3f:5a:43:20:6e:c0:d1:be:77:69:02:
                    de:56:c0:a0:3e:1a:06:8f:58:fa:77:75:e3:3d:e2:
                    9f:cc:83:a9:09:8b:07:f5:ee:ce:95:fb:22:f9:18:
                    a5:8d:e5:a3:3c:d2:7b:01:ae:92:b2:93:65:46:bc:
                    2b:b1:f7:ca:80:20:0b:99:c2:69:59:bc:93:ea:70:
                    9e:d4:3a:e9:df:1f:5f:e1:67:c3:ce:87:c5:9c:10:
                    7d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D9:61:B7:DE:2F:4A:8E:99:C9:69:D6:E6:DF:FE:5B:2B:50:DF:A1
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:df:9f:bd:cf:3c:46:7f:50:ab:26:d7:84:60:f2:24:9c:d5:
         09:eb:f3:13:53:1f:88:51:48:12:d2:86:8e:e7:a9:62:e6:ff:
         07:0d:35:ea:f6:2b:56:80:9c:4b:cd:f6:6e:6d:81:70:b4:e1:
         f7:de:cb:a8:de:0e:07:4b:74:88:54:a7:8e:68:6d:cd:89:fd:
         5d:19:da:08:78:63:f5:2c:f4:55:fd:f3:64:83:84:40:8f:5b:
         e2:cf:b3:a4:71:f9:d8:7d:02:76:2a:9a:cb:a7:9a:7c:1a:07:
         4e:1e:33:23:b2:f5:83:9f:5b:57:26:42:69:d4:2c:70:9a:a9:
         58:80:ac:47:69:97:c9:a6:a9:14:72:b9:b5:bd:c3:4c:df:1e:
         84:e1:6d:69:d8:de:13:f5:03:cd:de:b8:35:bf:98:8f:5e:c4:
         f3:e0:de:60:a7:de:a3:ff:a6:94:5a:24:c7:82:bd:29:fa:00:
         9d:c7:2e:b5:6b:26:1c:9e:af:ca:fe:1f:1d:f5:fb:e2:31:6f:
         47:14:7d:64:cb:e9:7f:58:12:51:bd:4b:d3:85:c7:12:4f:9c:
         4f:f6:91:b7:ee:ed:41:6b:9b:49:57:3f:29:c5:93:82:3e:e2:
         1c:57:51:f9:30:3e:b4:89:be:65:99:3a:b5:92:5f:6b:8f:0e:
         d6:c8:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 11:26:24 2025 by rpki-client