This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          A2JbaqvCFAVFWFEKjayQAYYFh8HpTJxhKpJHmuN1UQQ=
Subject key identifier:   B5:35:6D:88:B2:C3:A5:77:97:0E:82:22:7A:A6:86:96:16:CD:95:A4
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019B601D298B4420A84DD4AA8AEC7B19B22F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          17E0
Signing time:             Sat 27 Dec 2025 14:01:22 +0000
Manifest this update:     Sat 27 Dec 2025 14:01:22 +0000
Manifest next update:     Sun 28 Dec 2025 14:01:22 +0000
Files and hashes:         1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=)
                          2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
                          3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
                          4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: dWJUvVW/uGRmCLxTHwfRnklAAc+CnEsi1ujUa5qmi44=)
                          5: VqhETU_HM_ISXJaoVb2Q85SiUFE.roa (hash: 4DN0T+VOF2hHbD9YtpgtWXAPNydWYghyCai8wce0SKM=)
                          6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=)
                          7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
                          8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=)
                          9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 14:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:60:1d:29:8b:44:20:a8:4d:d4:aa:8a:ec:7b:19:b2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Dec 27 14:01:22 2025 GMT
            Not After : Dec 28 14:01:22 2025 GMT
        Subject: CN=b5356d88b2c3a577970e82227aa6869616cd95a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:d4:21:00:27:80:6d:2e:16:c2:68:dc:9a:
                    55:55:d9:1c:46:a9:03:e1:e9:3c:20:ca:ed:bb:bd:
                    92:5c:52:5a:26:fd:c4:9b:9c:4a:9a:3f:0e:5f:31:
                    a7:11:f9:23:e3:cf:04:f9:46:90:6f:71:10:e2:8b:
                    ff:43:aa:c4:62:9e:06:18:df:87:e4:45:7b:8e:04:
                    68:2b:cf:57:1a:4e:c8:5b:16:31:16:9d:ab:26:a4:
                    45:65:d7:82:06:b2:d2:e2:20:a0:25:c2:fa:bd:d6:
                    72:70:99:9d:29:db:08:49:d2:14:73:64:f1:c0:e2:
                    8e:46:ad:99:28:90:ce:b0:53:ac:59:33:6d:c1:41:
                    a2:3f:00:a0:c2:99:94:30:d0:fb:76:58:8d:a8:32:
                    f7:26:d7:28:c4:04:5d:c4:3f:20:45:79:5a:cd:39:
                    0d:a4:bb:aa:5e:bd:91:60:56:87:0a:d0:2e:db:cf:
                    a5:2b:71:33:85:28:6e:9b:8f:40:c9:29:ce:7d:a4:
                    48:19:ae:e9:8e:6e:47:b2:40:34:b5:2f:c8:23:60:
                    bb:56:1e:51:d4:9a:91:fe:90:a7:b9:81:f8:0b:fe:
                    ed:d3:8a:ac:9e:55:19:28:19:05:fc:bd:a1:46:a4:
                    fd:53:bb:51:1b:e5:7e:a9:dd:3a:8d:7c:2a:98:2e:
                    ed:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:35:6D:88:B2:C3:A5:77:97:0E:82:22:7A:A6:86:96:16:CD:95:A4
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1b:73:32:8a:68:29:9e:49:2f:2f:fa:9c:07:84:6a:22:7a:
         9a:1e:44:a1:48:66:fc:93:e2:ea:d6:8a:0a:5a:05:44:fa:38:
         88:02:a1:70:f4:76:23:94:9d:01:9a:dc:c5:42:59:ae:18:0c:
         00:d8:94:36:82:28:a9:3d:15:ba:42:75:b7:77:e4:28:2b:82:
         9f:f2:92:bb:a4:0d:a3:db:a6:e0:8b:71:35:70:fe:4a:ad:8f:
         13:0f:03:3a:63:3c:fa:e7:e5:d8:6b:f4:c1:3a:a3:0e:e8:81:
         69:57:1d:e7:97:e3:9d:cf:35:db:7e:a8:0a:31:99:fc:b6:d6:
         c0:fe:38:43:48:33:df:11:31:d0:71:c7:4d:e3:47:5b:83:ed:
         73:23:f1:cf:36:e8:2e:53:3b:14:99:3c:00:49:3e:16:55:9e:
         b9:dc:fc:38:88:15:04:9a:a5:87:4b:a3:49:6c:e1:ed:e1:08:
         c7:40:4a:1c:d5:7b:5c:3f:2f:fb:ce:a3:3b:df:92:ea:3e:8c:
         49:eb:52:c1:91:ab:cb:b7:5e:91:b1:1f:84:e9:95:a9:c6:58:
         2d:33:a3:90:02:4c:e1:98:88:a5:59:ce:65:4d:5c:06:09:7c:
         28:16:4b:ff:83:69:9d:9a:cf:1d:d6:64:c6:ad:d9:25:de:c3:
         f6:d6:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 22:33:55 2025 by rpki-client