This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          W1UlMTv0SXEit5PxL5p5qjwNHVthdwtAImkY4Fcot7A=
Subject key identifier:   86:24:8F:93:ED:0D:CD:57:1D:7A:E7:CC:E8:9A:31:A1:1B:C8:19:F6
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019AE9730AC366B0D6AD586B47BA0FA5141B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          17A1
Signing time:             Thu 04 Dec 2025 13:00:21 +0000
Manifest this update:     Thu 04 Dec 2025 13:00:21 +0000
Manifest next update:     Fri 05 Dec 2025 13:00:21 +0000
Files and hashes:         1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=)
                          2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
                          3: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=)
                          4: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
                          5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: XCrLEHC2p0dhpnC9/httXb7Tn97TE2/v7NPJamweNA0=)
                          6: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=)
                          7: ff_a8SBBXF3be68FdU0vfTPnh5s.roa (hash: bW2UtMneC9Mg6cMlRlCRXeNJHB26wQRTTLDsoAfILRU=)
                          8: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
                          9: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=)
                          10: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e9:73:0a:c3:66:b0:d6:ad:58:6b:47:ba:0f:a5:14:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Dec  4 13:00:21 2025 GMT
            Not After : Dec  5 13:00:21 2025 GMT
        Subject: CN=86248f93ed0dcd571d7ae7cce89a31a11bc819f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:7c:ed:97:c4:f7:eb:0d:eb:b8:e8:e0:66:
                    93:4c:c4:60:00:e8:45:96:41:83:cd:1d:8f:27:99:
                    50:1a:4f:9d:56:f9:cf:40:78:13:d3:52:db:6e:80:
                    f0:19:9e:b6:d7:a4:38:73:01:43:07:ec:61:0f:a1:
                    4b:2a:98:75:83:66:0c:e7:20:df:84:2e:dc:87:03:
                    bd:48:9c:f8:9b:55:b5:ea:07:e1:0e:63:3a:3d:75:
                    92:68:b5:3b:86:98:02:4a:30:07:bc:a5:57:8f:5f:
                    54:be:fd:0d:7d:0b:d2:de:ee:7d:46:3a:4b:b2:24:
                    83:be:48:47:cb:27:06:c8:9f:27:48:35:88:df:b4:
                    ff:59:3e:18:90:df:4b:de:56:8b:25:53:c7:82:c4:
                    56:18:39:f7:d5:73:d8:5e:e6:01:86:31:98:63:bb:
                    4f:73:f4:f0:3c:00:0b:af:99:19:da:bd:87:03:dc:
                    a3:ea:9c:e8:50:3c:87:0b:6e:c1:4e:fb:05:38:f8:
                    20:b5:e9:2f:58:61:0b:8f:f2:be:91:ad:86:5a:e9:
                    12:2e:7d:3d:c0:3f:92:ba:9e:5c:e4:e1:4f:aa:27:
                    81:59:67:24:ca:0b:9b:6a:69:64:31:5e:b7:89:8d:
                    2b:ce:2d:e9:ad:93:d7:60:f1:de:83:5f:44:4b:7a:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:24:8F:93:ED:0D:CD:57:1D:7A:E7:CC:E8:9A:31:A1:1B:C8:19:F6
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:16:12:cf:6b:7a:69:c5:f0:fe:0d:65:08:eb:0d:8e:37:
         71:6c:1e:ed:5f:1c:cb:70:8c:20:d6:01:6b:1a:02:bb:2c:d1:
         70:2e:bf:f3:f1:32:fc:f4:84:89:91:3e:6d:1b:b2:54:2c:35:
         01:6c:9b:c2:08:77:38:57:7e:55:8e:b1:5f:ff:bf:cb:d6:e2:
         eb:aa:2c:06:23:78:85:98:0c:d2:01:a8:19:d9:1f:ba:29:5a:
         ad:ef:dc:c5:3c:e3:ed:92:b7:91:f3:2f:17:c7:bd:38:7e:64:
         2d:59:a4:7b:02:78:6b:a1:b6:a6:53:b5:bc:57:30:9a:90:2b:
         7d:1b:fd:d6:5a:f0:82:21:74:39:5a:9a:c2:d0:b5:d6:ce:45:
         0b:27:74:f8:df:19:20:4a:0d:35:dd:94:68:d1:11:7f:d1:95:
         2e:a2:e2:0e:4e:f9:6b:2f:6d:52:f6:c2:6f:f0:6c:e8:dd:76:
         17:11:73:0d:e1:77:c4:91:d9:7b:57:9e:ae:dd:4e:66:a1:c5:
         7d:82:13:17:5a:be:f8:0a:92:b7:01:a6:de:00:7a:3c:c0:9c:
         b0:d6:77:df:ad:57:3f:4d:c8:11:b7:62:51:c9:de:38:03:92:
         2f:67:83:45:87:4a:f2:4e:13:69:c3:28:aa:6a:34:cd:43:35:
         55:96:01:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 18:02:17 2025 by rpki-client