This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          pe6B22YNLvbpg0FAQlL/TtFyLBbbYNLW6iM5r+h816Q=
Subject key identifier:   07:00:84:E5:68:C8:23:B6:E8:16:02:5A:67:1A:DE:6C:C9:3A:DD:23
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019B04B3BDCDC8A260E3290810821DC56DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          17B0
Signing time:             Tue 09 Dec 2025 20:00:46 +0000
Manifest this update:     Tue 09 Dec 2025 20:00:46 +0000
Manifest next update:     Wed 10 Dec 2025 20:00:46 +0000
Files and hashes:         1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=)
                          2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
                          3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
                          4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 5RHje004WJYYOzpMV6W1RMZwMz2lSrGMpKloQfG3OJQ=)
                          5: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=)
                          6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=)
                          7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
                          8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=)
                          9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Dec 2025 16:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:04:b3:bd:cd:c8:a2:60:e3:29:08:10:82:1d:c5:6d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Dec  9 20:00:46 2025 GMT
            Not After : Dec 10 20:00:46 2025 GMT
        Subject: CN=070084e568c823b6e816025a671ade6cc93add23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:f1:fc:58:a6:78:99:a6:12:e6:99:18:61:
                    e3:c9:b9:9c:a9:89:62:7c:f0:51:71:38:52:3e:da:
                    22:05:e2:ad:e2:90:c1:79:39:ab:ba:78:97:64:78:
                    a8:78:6b:6b:92:e9:d4:e9:b2:a3:f9:a4:1a:7b:c0:
                    95:56:83:d5:ff:06:23:62:bd:0d:90:5b:ca:12:3a:
                    27:13:f3:f4:eb:37:ad:0d:49:7d:2a:6c:cc:6e:91:
                    41:e4:e4:82:f8:ef:de:bd:25:18:9a:e9:19:2f:b2:
                    3f:a2:c2:62:4b:78:96:f0:d8:74:80:ae:c5:6b:4b:
                    5f:1a:fa:98:37:0a:a3:86:6d:d2:b0:e6:74:1f:98:
                    da:4a:15:a2:a0:d8:4e:23:71:49:76:a9:8b:ac:16:
                    78:b1:22:cd:c9:44:b1:6b:09:40:19:1a:d1:d8:da:
                    91:b6:a8:b2:64:40:c9:1e:dd:a9:4c:51:96:23:d3:
                    22:f1:ba:10:4e:68:b3:c7:88:b2:17:a7:75:0d:d5:
                    3c:35:4e:98:31:e7:20:79:7c:35:bb:9a:d8:3d:0f:
                    9c:45:fc:95:71:91:28:d0:e7:2a:f5:d9:55:aa:4f:
                    cf:64:2e:0f:17:62:ba:da:9a:7e:ef:62:cd:aa:96:
                    b9:d5:4f:00:22:4a:6b:6d:d3:b4:10:18:56:5d:80:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:00:84:E5:68:C8:23:B6:E8:16:02:5A:67:1A:DE:6C:C9:3A:DD:23
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:7f:dc:4b:42:4d:51:6b:24:11:3c:59:06:d8:d0:d4:f5:
         5c:ae:2c:6d:e0:5d:91:8a:ce:eb:b8:3d:26:d3:79:60:20:bb:
         06:dd:63:ef:1a:14:68:34:b9:0c:2c:ac:5b:91:cd:f7:4d:e2:
         c4:0b:18:b7:18:f3:a5:19:61:41:e6:37:bd:b4:97:52:0e:d0:
         f2:9e:d9:5d:8f:39:23:64:8d:e6:6d:91:d2:64:d1:aa:74:dc:
         de:56:92:0b:0f:b0:13:0a:68:eb:2f:6b:dd:3e:b6:6a:3a:0c:
         b7:1f:93:84:8d:e9:81:a9:87:72:59:06:e5:58:07:62:58:06:
         f9:04:9c:38:c5:1a:c8:37:ea:01:77:c1:57:1c:0a:74:f6:dc:
         93:0e:53:5c:a3:09:a9:27:cc:6d:61:4b:34:16:18:46:e6:1a:
         fd:7a:87:e7:11:85:11:83:0a:9d:1d:32:1d:71:3c:86:ea:4b:
         8f:5c:3f:71:96:57:9b:42:cf:07:ba:68:10:83:f4:41:e9:54:
         d8:33:06:87:d8:24:f8:be:06:d5:7a:59:82:f9:de:e2:07:e5:
         cb:68:3c:bb:80:c2:b1:58:b2:d1:26:cd:7a:a3:e8:60:de:08:
         71:d7:dc:0e:c6:11:b7:32:ba:30:1f:83:d6:47:b2:d2:3f:02:
         71:bb:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 21:55:43 2025 by rpki-client