This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          pvKrr1sVIYsNKp7FErPEXePEMh5YoZ/WFBlzy0ZATps=
Subject key identifier:   C9:10:8B:26:9F:3D:BC:B2:97:64:4E:09:B6:77:82:BF:7A:3E:80:0D
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019AA45BAC213015DE0E295378146D559538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          177D
Signing time:             Fri 21 Nov 2025 03:01:02 +0000
Manifest this update:     Fri 21 Nov 2025 03:01:02 +0000
Manifest next update:     Sat 22 Nov 2025 03:01:02 +0000
Files and hashes:         1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=)
                          2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
                          3: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=)
                          4: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
                          5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: q4Ba4u2/B8HEvYfJI+Z33tgFStxUv6nw4mIYeimkd+g=)
                          6: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=)
                          7: Oi1LQnm4lsa7_1hR1J20jJ6vxNI.roa (hash: SY2CzV8LXx9B2pkUZksUiYNXDfeS5dNBeKSh1IfycAI=)
                          8: ff_a8SBBXF3be68FdU0vfTPnh5s.roa (hash: bW2UtMneC9Mg6cMlRlCRXeNJHB26wQRTTLDsoAfILRU=)
                          9: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
                          10: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Nov 2025 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:a4:5b:ac:21:30:15:de:0e:29:53:78:14:6d:55:95:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Nov 21 03:01:02 2025 GMT
            Not After : Nov 22 03:01:02 2025 GMT
        Subject: CN=c9108b269f3dbcb297644e09b67782bf7a3e800d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1f:99:1e:b7:8c:69:db:15:c3:07:e8:2a:77:
                    a2:0e:ca:37:39:bc:cd:90:1d:ca:cb:8f:a2:43:5a:
                    6e:e3:64:dc:69:38:59:8c:17:d2:7d:26:06:20:29:
                    6c:8b:39:3a:dc:79:da:57:21:ac:97:b3:88:b5:3c:
                    02:ef:20:5e:a4:a9:43:4e:d9:fa:97:6e:56:9e:83:
                    04:eb:92:aa:c5:3f:86:87:fb:9d:ac:c4:93:73:d0:
                    a2:a9:13:78:ea:8d:75:6c:c9:7d:34:36:16:7c:3d:
                    3e:2c:2d:8b:b2:57:e4:71:23:bd:20:44:d8:28:d6:
                    5b:50:4f:49:f2:10:9b:01:c6:30:26:dd:71:d3:9b:
                    d8:e2:e7:2e:7e:de:64:1a:ee:52:40:72:c7:5f:81:
                    71:52:3f:9f:d0:a3:10:dd:76:e0:02:c9:c6:86:39:
                    a3:7b:23:43:c7:66:e8:e7:5f:f4:70:c5:71:09:2f:
                    a2:36:b7:f9:9a:79:7b:9b:cf:05:ba:34:8c:1c:a2:
                    ce:12:f9:f1:47:3b:21:c7:d5:34:d9:98:47:08:79:
                    cf:53:24:ec:36:81:eb:19:ea:61:fc:57:2b:51:a4:
                    ea:71:ec:7d:21:da:ff:12:4a:ee:04:e9:f8:4e:cd:
                    83:32:b5:04:bf:92:01:84:e0:fb:c6:4b:bc:c1:7c:
                    a4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:10:8B:26:9F:3D:BC:B2:97:64:4E:09:B6:77:82:BF:7A:3E:80:0D
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:cb:78:e6:08:f2:21:b5:8e:75:94:16:02:51:fa:38:cc:
         57:ee:af:9d:38:a4:ae:1f:1b:fb:2a:fe:05:6e:3e:42:b7:4d:
         bf:c7:d4:4d:75:b4:a3:c0:77:47:04:b4:c6:08:26:78:ce:9d:
         ac:cc:53:14:22:44:83:6b:46:e2:44:cd:c4:1f:20:45:a3:b1:
         e7:8a:24:3a:90:ce:bd:51:26:6f:c3:ab:3c:e8:fd:10:38:33:
         18:0a:fc:c9:7b:0b:ad:69:80:5d:8b:84:59:f4:c4:3a:7c:e7:
         6a:9a:96:b0:18:6a:43:fb:9f:23:4f:db:f4:27:47:93:7f:b6:
         29:16:35:0e:b0:06:64:f5:6a:b0:fc:5e:a7:5f:e6:17:18:a0:
         06:c8:0f:b8:f1:dd:b8:23:67:a4:17:1b:63:83:aa:3f:f9:e8:
         60:41:44:e6:55:3b:21:3d:72:60:57:3f:35:45:69:4f:d8:59:
         a9:f8:b7:98:c3:d9:50:c8:af:38:9d:ed:8d:89:50:92:4f:35:
         7d:c6:ff:cf:1c:6a:69:b6:0e:61:9f:82:0f:a5:70:ed:be:5b:
         f5:06:de:98:dd:f1:76:b4:91:d1:74:31:43:02:ae:28:1a:ba:
         96:bc:fb:2c:af:25:a0:b7:7e:70:5a:4a:59:81:7c:0e:85:59:
         e3:83:56:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 10:25:29 2025 by rpki-client