This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
File:                     KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json)
Hash identifier:          2DYuouPu3aU7LE824tCCyIKFiHH3o/P9y9qckgIuvOA=
Subject key identifier:   B9:90:45:DE:B5:DB:90:E2:CF:6F:8E:79:9F:7F:E1:32:51:49:11:F8
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Certificate issuer:       /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial:       019B0F3797D81ADF4C03C39026B96E2A0500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
Manifest number:          0C53
Signing time:             Thu 11 Dec 2025 21:01:00 +0000
Manifest this update:     Thu 11 Dec 2025 21:01:00 +0000
Manifest next update:     Fri 12 Dec 2025 21:01:00 +0000
Files and hashes:         1: 40-Fe0ClJjM3rGq3tKMY4lgTO0c.roa (hash: lMieyX7jH2Flr7s7p5R5H9gYjE+H53LSKunrL+hZLEw=)
                          2: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=)
                          3: FbAqPaVw4Lc8kzGFywuLUOLuN6g.roa (hash: 5y6ol4UAm9wCL/bXngkdTGDKDxUzmNqQsajx2DmmhCQ=)
                          4: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=)
                          5: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: mVJJcB206TCDt81Q7ZxleKxblcACfN9XvSJK2tFY1wY=)
                          6: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=)
                          7: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=)
                          8: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=)
                          9: ca6XJ5NiIiIJ1gn26NWoBZY1OOE.roa (hash: m0MfY3W/yHtAcpQIPruy2IhGfS2aQQkvwxrvdJx1dpE=)
                          10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:37:97:d8:1a:df:4c:03:c3:90:26:b9:6e:2a:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
        Validity
            Not Before: Dec 11 21:01:00 2025 GMT
            Not After : Dec 12 21:01:00 2025 GMT
        Subject: CN=b99045deb5db90e2cf6f8e799f7fe132514911f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:d7:f6:23:42:91:b6:33:69:ac:cc:8e:80:
                    f9:25:22:e2:8f:af:77:df:d0:7f:b1:dd:13:d0:ab:
                    ab:da:27:4f:14:50:e1:0c:50:af:55:e8:5a:dd:56:
                    4d:26:70:7a:a2:32:9a:29:1a:23:a3:cf:73:2d:b6:
                    b6:53:11:ad:4b:5b:d5:4d:82:4e:a9:fc:3e:14:a6:
                    1c:0e:79:bb:ad:74:ab:3b:f7:34:52:66:e6:59:ed:
                    13:bd:0c:90:bd:cc:05:d2:26:3b:df:e5:76:c4:f1:
                    4d:38:b2:af:e9:38:65:f8:d7:92:66:cf:90:d9:f5:
                    f1:31:c3:77:21:8b:8b:18:6a:0f:2d:fc:fe:d7:0f:
                    0d:94:96:79:86:81:81:2a:eb:bd:93:fa:66:fc:ea:
                    6d:78:f5:fb:b2:3e:d4:f7:39:2b:68:b7:72:01:3d:
                    1c:ea:c9:fa:06:29:7b:b2:b1:0c:a5:c0:b6:3a:a5:
                    76:43:22:24:9d:1c:58:df:76:e7:03:2e:96:52:93:
                    73:7d:aa:f9:d0:b1:2d:3b:5d:44:37:91:2f:aa:e5:
                    48:d8:06:0f:77:2f:3f:e6:e2:d7:e0:67:34:18:44:
                    68:be:d4:ca:5e:44:5a:35:38:a0:85:5d:66:84:aa:
                    ff:a8:1a:d1:69:ad:69:fe:b8:31:e1:23:b2:cf:14:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:90:45:DE:B5:DB:90:E2:CF:6F:8E:79:9F:7F:E1:32:51:49:11:F8
            X509v3 Authority Key Identifier:
                keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4c:e7:09:de:f2:87:01:54:18:e0:4e:7b:9e:76:6e:ca:5b:
         20:33:2f:0c:6a:9a:ac:4b:ed:a9:54:89:29:cc:98:d0:1a:16:
         8f:5c:72:ee:8e:b3:e7:62:fd:11:72:f2:46:f6:1c:5b:2e:d9:
         b9:1e:18:6e:ef:a2:4e:98:79:4d:66:6a:e2:61:02:e3:ae:3b:
         5b:93:ac:fa:86:ad:29:e1:b5:e2:0b:6d:a0:25:71:d9:1f:43:
         f1:55:60:09:4f:19:69:4f:d0:0e:c8:a1:2d:9a:2f:f1:a2:38:
         9f:4c:1d:f5:13:e5:c7:81:f3:08:0e:8c:cc:97:b6:48:da:de:
         ae:93:ce:a9:ae:f0:44:30:a9:9a:4c:16:a9:eb:97:0c:ae:bb:
         aa:6d:af:e2:38:8d:8b:d3:3b:84:fb:e0:33:ec:7a:71:34:92:
         c6:4d:52:a4:80:42:97:19:25:47:7a:bb:b1:5d:29:98:1d:ac:
         e9:18:9f:2b:f8:52:56:0d:34:03:2b:66:de:60:5a:eb:93:26:
         70:3e:da:50:47:e8:6c:53:a6:fd:e9:6f:45:42:ad:81:3a:9c:
         18:ce:f1:e0:39:29:14:40:1b:03:ce:82:ea:52:63:c2:29:af:
         01:84:cb:09:2d:40:6e:8a:dd:7a:37:38:ab:a0:0a:00:07:29:
         5a:f6:b5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:11:29 2025 by rpki-client