This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
File:                     mwVP7CVdDNxro6uparJgNmMnLbM.mft (raw, json)
Hash identifier:          SrXHX0hWievJnt6YaJcH/n7YpAsZOzlHoR8IZyRuBHA=
Subject key identifier:   C4:AB:C3:23:43:4D:50:3D:DD:F6:CF:5D:A4:5A:D3:09:65:28:D0:B6
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Certificate issuer:       /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial:       019B5AF668E36DA537AE7F5A9729C0554385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
Manifest number:          07EA
Signing time:             Fri 26 Dec 2025 14:00:56 +0000
Manifest this update:     Fri 26 Dec 2025 14:00:56 +0000
Manifest next update:     Sat 27 Dec 2025 14:00:56 +0000
Files and hashes:         1: 8miC2Rsp1615SXSK8OmrRssi2ZE.roa (hash: nGqL5IRvbvXVDb+f+fbwv68gM09CPTOSXIrZUMH3uqU=)
                          2: mwVP7CVdDNxro6uparJgNmMnLbM.crl (hash: MtpkAk2U1gIPutE7GyBK/DnWbOB4N+CHyiz6PUbH4vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:f6:68:e3:6d:a5:37:ae:7f:5a:97:29:c0:55:43:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
        Validity
            Not Before: Dec 26 14:00:56 2025 GMT
            Not After : Dec 27 14:00:56 2025 GMT
        Subject: CN=c4abc323434d503dddf6cf5da45ad3096528d0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5a:61:aa:a6:cb:64:b1:68:58:7a:33:fd:72:
                    1b:03:3b:73:7b:ac:c6:35:e7:66:fd:b0:d9:37:3f:
                    3d:f9:a2:9f:2f:76:0a:1a:f4:94:d3:72:78:4c:4b:
                    98:90:e5:9f:24:20:e9:00:f6:cb:01:13:57:7b:80:
                    dd:bb:9b:bb:8a:7a:36:24:28:0f:4a:8d:3f:74:3d:
                    51:4b:f4:9f:83:f4:16:df:8d:44:fd:cd:39:fe:d8:
                    65:91:e5:d8:1a:88:8f:1b:f9:14:54:ff:97:d0:f0:
                    8b:9e:dd:d0:9b:7a:7d:6e:74:1a:af:8c:84:dc:bc:
                    94:0f:e7:cd:14:85:74:ee:4b:70:55:65:19:2e:61:
                    2b:8a:3e:1c:4d:9b:27:b8:14:d4:29:44:e8:21:32:
                    8c:3b:59:cd:09:51:44:5f:3d:de:0a:b4:ea:74:b6:
                    81:e1:52:7c:a0:db:fc:41:83:fb:d8:3c:6f:9b:39:
                    22:13:80:c0:9d:58:02:b5:5a:3b:08:15:72:58:38:
                    cd:a5:d4:05:fb:d0:6b:a6:dc:c0:25:c6:5f:b4:ee:
                    a3:54:3d:3c:5a:69:ab:43:8c:7d:55:b5:fc:f4:90:
                    25:cb:9b:58:38:33:01:f9:3c:a6:cc:5d:62:5f:f3:
                    19:d1:a6:b4:dd:a6:c2:01:83:8b:be:68:87:4a:c0:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AB:C3:23:43:4D:50:3D:DD:F6:CF:5D:A4:5A:D3:09:65:28:D0:B6
            X509v3 Authority Key Identifier:
                keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:40:05:7b:b5:07:4c:a2:46:67:24:bc:cf:72:4c:db:98:7f:
         e5:06:3f:c4:11:16:b7:52:55:f5:be:d6:2a:26:a8:ed:e9:00:
         e0:79:a3:f7:74:a8:7b:ba:45:e0:c5:09:57:01:93:6a:1b:39:
         a2:b5:6e:ab:db:d8:53:b0:1d:62:98:28:41:10:b6:c0:f1:09:
         96:87:a8:27:49:10:7e:e9:c9:c1:4f:f5:f3:25:f2:1e:f8:41:
         f5:55:98:8c:c4:ca:b7:42:7e:db:19:cf:e1:3b:48:6c:ba:60:
         8a:62:cc:77:32:ab:04:74:f6:91:7e:b9:d6:55:8b:70:8a:7a:
         11:56:ee:f9:72:c8:19:62:49:93:1e:7c:8f:3a:63:41:c9:3b:
         07:6c:28:a2:1e:2b:23:21:d3:c0:d3:35:b7:03:ae:45:5d:01:
         66:bd:d3:c4:1d:80:91:9f:44:4f:04:3f:b1:b9:c6:26:ac:43:
         7b:50:6e:a4:8c:10:c4:56:ed:c4:a0:3e:ae:60:a5:b4:d2:c0:
         ec:df:ab:ee:ca:ad:91:5b:ba:92:a7:df:bf:03:de:9a:87:c5:
         40:b0:19:bc:83:c9:28:32:69:eb:57:4f:3e:be:30:3e:7f:59:
         f3:ad:73:6b:91:7d:84:e8:2b:86:f9:27:ae:eb:09:9a:3a:fe:
         46:d8:20:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:03:29 2025 by rpki-client