This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          KMufu6B22i4Q0tIo1gzs8JD0U7Pf5dZN0ZwWJThXgxE=
Subject key identifier:   2E:FB:9E:3D:73:41:EA:DA:44:14:FD:65:B6:48:5E:E1:8D:79:E2:EE
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019B69C46F6928672C0FE613A04457BE33E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          17E5
Signing time:             Mon 29 Dec 2025 11:00:39 +0000
Manifest this update:     Mon 29 Dec 2025 11:00:39 +0000
Manifest next update:     Tue 30 Dec 2025 11:00:39 +0000
Files and hashes:         1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=)
                          2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
                          3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
                          4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: kWjd0E9uowHA9KTCw21uedMnA843XFFMwo1bm3Hf9HM=)
                          5: VqhETU_HM_ISXJaoVb2Q85SiUFE.roa (hash: 4DN0T+VOF2hHbD9YtpgtWXAPNydWYghyCai8wce0SKM=)
                          6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=)
                          7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
                          8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=)
                          9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:69:c4:6f:69:28:67:2c:0f:e6:13:a0:44:57:be:33:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Dec 29 11:00:39 2025 GMT
            Not After : Dec 30 11:00:39 2025 GMT
        Subject: CN=2efb9e3d7341eada4414fd65b6485ee18d79e2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ff:5d:2a:31:b9:7f:d4:26:24:9d:be:21:b6:
                    a5:06:27:51:46:d7:83:7e:32:dd:a6:23:68:e1:32:
                    f5:a4:bc:c8:20:11:b6:0d:3e:71:7d:f2:8e:a0:22:
                    2a:00:9d:fb:c7:5e:6d:bb:7c:d9:fe:7f:39:91:0d:
                    e2:4e:bb:2e:d6:ce:d4:2b:45:2f:2e:66:52:ec:b6:
                    d9:0e:9e:15:15:0e:9c:2d:24:14:25:5c:03:bf:6c:
                    69:2d:9d:57:c7:2b:09:9a:88:1e:2a:6d:da:87:4f:
                    af:20:a4:7f:4a:64:e8:94:29:fe:40:94:29:af:fe:
                    d0:0b:fb:84:25:e3:ae:f3:eb:1a:ad:23:eb:7d:42:
                    2d:71:2c:11:1a:66:55:32:67:14:d3:7f:32:34:5b:
                    70:68:1c:17:24:0b:3a:81:5d:c4:c6:18:fe:b2:d8:
                    b7:db:f3:f4:33:b0:40:eb:25:30:76:f5:ee:2f:78:
                    68:ae:85:7c:87:56:52:5e:5c:a3:b8:56:09:73:d8:
                    7a:07:c1:a3:5f:01:b0:f7:79:12:20:35:e7:0d:72:
                    ca:92:88:91:0a:92:f4:a3:94:31:ad:51:ac:cb:a3:
                    2e:b1:ab:61:7c:a3:04:35:9b:0b:08:d9:8c:44:d1:
                    c6:9a:48:a0:3e:4a:14:4d:ba:58:e5:39:a8:7c:60:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FB:9E:3D:73:41:EA:DA:44:14:FD:65:B6:48:5E:E1:8D:79:E2:EE
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:47:8f:25:e7:89:dd:25:cd:d7:87:2b:1d:dd:01:0f:e2:b3:
         51:c8:8b:85:e2:a1:fc:db:f9:26:9a:6c:7e:69:73:ea:3e:b1:
         1d:b8:23:73:fa:71:ad:44:b0:26:18:3e:c0:ab:59:64:29:8a:
         d7:6b:92:ad:59:fb:bc:4e:8c:79:fd:64:d9:62:c6:a4:14:5f:
         7c:ad:d4:17:32:34:75:b4:94:ae:c0:e8:12:e5:87:be:49:b9:
         d4:c8:5d:ac:44:cd:ae:2e:5f:6b:3c:e5:a0:71:46:cc:4b:ab:
         ff:d4:12:89:c9:4e:d9:4f:e7:79:7c:0e:f4:f1:93:13:ea:a8:
         b7:52:8a:cb:8c:65:cf:24:31:53:e3:e5:ef:e6:11:10:96:d0:
         d7:ac:58:0b:4a:d4:15:af:58:40:ac:92:67:03:21:25:e4:73:
         ae:f7:50:de:a2:6f:d1:11:6b:e0:56:f3:57:ee:03:bf:8a:e4:
         2d:b8:fb:51:c1:ec:8c:0f:ac:58:3b:05:90:1a:7d:1b:86:70:
         0a:1f:3a:78:aa:36:0b:54:a1:3b:90:7a:59:5c:49:29:26:5e:
         b9:fb:71:ef:30:5b:40:91:8c:a2:a7:5c:22:a3:b2:ac:b0:7f:
         e8:4c:7b:5e:13:eb:e5:22:c6:d9:da:2e:3a:5b:01:07:66:63:
         21:7a:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 20:11:03 2025 by rpki-client