This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
File:                     mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json)
Hash identifier:          DFZD3m1balhPIiKN9aq5/1MF+ZsJ6evjYu0sjMUA0Fo=
Subject key identifier:   31:61:46:E8:6C:10:AD:10:5D:E0:F7:5C:90:29:C3:59:20:AB:29:DA
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Certificate issuer:       /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial:       019B23D10B428DE7F4B7D2F2B47DC2B17B9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
Manifest number:          0630
Signing time:             Mon 15 Dec 2025 21:01:00 +0000
Manifest this update:     Mon 15 Dec 2025 21:01:00 +0000
Manifest next update:     Tue 16 Dec 2025 21:01:00 +0000
Files and hashes:         1: WvHTHUW2Hu_mDZctFQeVwGysiHE.roa (hash: 0IRIumTzEnldnjuLK5Mty3ubumeenKJPjlLba1MpsmY=)
                          2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: ++PaAsEfU364A5j9xCf1/W+gS1xzKUDHUExUeXzfoGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:d1:0b:42:8d:e7:f4:b7:d2:f2:b4:7d:c2:b1:7b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
        Validity
            Not Before: Dec 15 21:01:00 2025 GMT
            Not After : Dec 16 21:01:00 2025 GMT
        Subject: CN=316146e86c10ad105de0f75c9029c35920ab29da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:67:f0:79:35:95:e8:bd:9e:26:9d:e3:cb:
                    57:ce:d6:de:86:0f:83:5c:a8:b4:e3:0f:9d:b0:5f:
                    06:9b:10:8b:c1:c8:c1:d0:e0:2d:67:81:74:a5:05:
                    1d:2b:a4:78:22:9e:0f:87:57:b3:be:26:04:23:bf:
                    3e:d9:d8:1e:f3:69:6f:be:53:de:2d:9f:e1:7f:70:
                    ba:19:d3:c4:f3:cf:ed:4b:6b:21:d0:46:59:4f:60:
                    41:0f:2e:a5:a5:cf:82:10:06:69:88:c9:65:07:66:
                    52:8f:f9:7e:63:d2:fe:b9:59:d1:f2:73:16:4f:5d:
                    96:58:69:38:d4:ba:87:f2:28:d8:57:c1:94:c3:17:
                    bd:34:22:fa:01:87:b0:28:61:a9:a2:ce:17:57:4f:
                    ba:e6:72:5a:4a:4a:e0:43:7c:2c:31:0c:3e:80:44:
                    44:4f:94:6e:c5:05:27:7d:99:eb:01:f0:7b:aa:6a:
                    5d:94:39:62:52:39:91:fd:06:76:76:9d:75:68:eb:
                    b5:2a:4d:90:45:c1:b6:71:18:ec:3c:30:3f:3e:45:
                    af:be:e2:5d:49:4f:e6:b1:16:89:05:b8:f1:51:1f:
                    67:6c:3f:d4:d2:dc:3d:b1:e7:b6:1c:72:d1:9a:a1:
                    cc:e9:d4:ac:70:11:b3:af:11:d3:1e:4e:87:d9:f4:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:61:46:E8:6C:10:AD:10:5D:E0:F7:5C:90:29:C3:59:20:AB:29:DA
            X509v3 Authority Key Identifier:
                keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:54:30:25:94:cf:3c:44:db:63:87:32:ef:20:f1:45:e2:c8:
         18:62:78:b1:14:42:3d:6b:96:5c:ee:b0:84:7a:d4:26:89:09:
         46:df:b1:52:5e:1e:b8:18:89:99:a9:f5:b0:41:ae:cc:99:37:
         fa:21:1e:5e:ac:9f:b9:4e:8d:5e:44:69:d0:0d:86:80:77:a1:
         d7:b5:d7:0c:9d:ae:e1:59:47:57:26:e2:8d:bd:44:46:51:e4:
         36:37:bb:bc:a9:ff:04:71:a4:9e:5c:dc:d4:61:c7:97:12:f9:
         fc:86:10:36:be:2c:e1:8f:1e:6e:ad:0c:14:3c:9b:03:41:e7:
         9f:59:6c:22:84:79:d9:e6:c5:d7:69:c6:69:b0:66:33:05:a8:
         bd:27:e8:8a:ae:45:1a:74:10:8d:1f:1a:ff:3f:e4:8b:37:d8:
         d5:02:86:37:21:b7:96:66:33:ea:c5:ee:28:8a:d7:13:07:86:
         36:14:92:54:22:9d:38:90:7b:6a:c7:cf:0c:dd:01:b2:5c:54:
         ed:26:93:de:f5:2c:79:96:1d:3f:34:33:26:1d:72:2c:23:55:
         2f:84:78:26:15:f2:90:af:34:66:ff:64:75:99:31:f1:12:a6:
         a1:f9:b3:c2:6a:58:b8:3d:60:90:ae:77:b4:9a:c9:3d:36:cf:
         76:be:16:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:39:59 2025 by rpki-client