This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
File:                     Mw5kD51jupQ6l7PcENTGhEpdPcE.mft (raw, json)
Hash identifier:          QC9cDgOBpQIh5eH9KW4HKr1z7nNC7tRM/FVvHg+8w8A=
Subject key identifier:   C8:CE:F4:1E:BA:BD:6E:9B:CF:87:D0:E1:39:FE:D0:95:19:34:1F:AC
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Certificate issuer:       /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial:       019B093586E09AFC372708E3BE0C6A76A8CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
Manifest number:          1777
Signing time:             Wed 10 Dec 2025 17:01:01 +0000
Manifest this update:     Wed 10 Dec 2025 17:01:01 +0000
Manifest next update:     Thu 11 Dec 2025 17:01:01 +0000
Files and hashes:         1: 1-Jd_qc8apOR4p6laQN0XEPGV69E.roa (hash: GOoNb/QIaZMGL6bF2qxv1TbNPoQ9D5q5E8h1u/bWgGs=)
                          2: Mw5kD51jupQ6l7PcENTGhEpdPcE.crl (hash: 4twIM8vRe0SbS85YVO/ThkH3bHbl5fZBthbqZdC8E0w=)
                          3: mHYNXLzzWgHgWDnXKZl-4Vzir0c.roa (hash: li78OcXCZpUgKLA0YsVNzvnIFn5UmiFLcC5dihhrvhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:09:35:86:e0:9a:fc:37:27:08:e3:be:0c:6a:76:a8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
        Validity
            Not Before: Dec 10 17:01:01 2025 GMT
            Not After : Dec 11 17:01:01 2025 GMT
        Subject: CN=c8cef41ebabd6e9bcf87d0e139fed09519341fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:a1:d5:c5:a0:d0:45:30:63:7d:83:d8:c3:
                    9a:e6:5e:f2:02:7e:cb:37:01:cc:e1:53:4a:d1:be:
                    80:4b:a9:6c:ec:21:9d:50:8e:b3:99:1c:6a:57:8b:
                    7b:8f:84:97:48:cb:fa:e7:7f:4b:95:4e:c2:d8:32:
                    04:43:c4:28:89:52:2e:f0:09:59:93:a4:66:9e:50:
                    ba:e2:6a:7c:ea:7c:19:30:64:20:38:8c:d3:4b:0d:
                    6f:98:f3:4d:e8:ac:97:3d:5a:9f:55:99:2d:72:19:
                    28:7f:99:88:1f:f0:eb:eb:b2:50:c6:e8:ce:ad:fc:
                    5c:6c:9d:15:6a:60:dd:6a:1e:35:59:c4:92:8c:48:
                    92:7e:d9:c2:76:4b:da:75:f5:a0:3e:28:34:81:e1:
                    c3:6e:77:e1:90:f2:f5:75:a2:1c:4c:a0:6d:65:54:
                    cc:0c:df:c5:ab:63:5a:d8:83:e5:23:c7:3c:66:fe:
                    1d:b4:ba:48:87:b0:8c:9f:03:7f:f1:71:b7:a3:ab:
                    74:27:a6:df:59:13:27:6f:8e:f6:a3:1d:4b:6b:ef:
                    60:8e:e2:af:39:b6:be:93:83:98:7d:20:77:7e:b2:
                    26:56:cf:8d:00:ae:10:6f:fe:a4:8a:25:08:46:b9:
                    25:76:e5:b5:2c:38:07:e6:c8:14:ad:3e:b0:4d:f9:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CE:F4:1E:BA:BD:6E:9B:CF:87:D0:E1:39:FE:D0:95:19:34:1F:AC
            X509v3 Authority Key Identifier:
                keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:33:2c:e4:7b:0a:1c:e9:f6:35:a4:37:92:56:c4:c3:51:73:
         9c:35:16:63:4f:34:ff:d6:ec:2e:85:15:80:43:3b:bb:07:b1:
         e9:20:52:22:0b:5b:9e:cb:08:27:df:ba:0c:8a:ae:3c:d7:b4:
         6c:03:36:2d:35:f3:a5:a4:a4:73:3e:08:2c:e7:a8:dc:86:37:
         97:74:9b:ec:0a:fd:c7:f1:1f:3f:70:44:c4:bf:23:e7:97:e7:
         24:20:d1:9b:b8:46:f4:99:ca:67:f0:9c:ea:6e:1d:cd:5a:a3:
         65:38:f5:40:2f:35:7d:2e:40:fb:5c:73:8f:03:9e:47:6c:ff:
         2a:25:f1:b7:a8:b5:9c:17:d3:fe:fc:d6:44:6d:57:bf:ae:0f:
         55:26:ac:08:15:ee:1f:e2:7f:d6:1b:ea:11:78:14:02:a6:20:
         51:9c:be:9e:a5:8e:bd:f3:4c:85:bd:6a:ee:34:90:73:ba:8e:
         68:9a:b3:66:a2:f4:ad:b0:54:a1:e2:1b:68:dd:3a:40:79:2f:
         a2:24:d6:74:fd:33:36:16:1a:bc:6f:fc:dc:98:1b:c9:e8:80:
         4a:9a:ce:a6:5d:3d:02:20:b3:31:9a:f3:a6:35:80:29:da:f8:
         d6:c6:64:10:95:e4:10:39:03:a5:c9:05:ee:67:8f:e5:c1:cd:
         60:84:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 21:45:09 2025 by rpki-client