This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File:                     MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier:          C38Jr1x/NYQJK/Xgd1CkGLrD3E5K6KzRJToMJlCRoWU=
Subject key identifier:   23:08:EF:F5:20:DD:F0:F7:DB:37:F1:EB:E1:3E:AE:53:51:CE:F9:D4
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer:       /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial:       019B1B0531BDC642B8F90723C18185B71B7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number:          12B9
Signing time:             Sun 14 Dec 2025 04:01:23 +0000
Manifest this update:     Sun 14 Dec 2025 04:01:23 +0000
Manifest next update:     Mon 15 Dec 2025 04:01:23 +0000
Files and hashes:         1: 9i8DjH71Ep8U9n2vVSWdpKwB5UA.roa (hash: fm2wqDwUiAhqNuk8l7rNQtkTwCk4cyJ8IN2iwk3dti0=)
                          2: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (hash: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=)
                          3: MseO7vestFH8N1df65EU38zBzfs.crl (hash: EZBNy6iYDvP59ethSpij88Isd3vS9KdJEcpWo8TA9bo=)
                          4: O--ohDSHb3_cgUUA6fEd67yI0qE.roa (hash: ZeZLP6PWTPODtcpDZvxrQiDQ91HF+onUP31S24SY2QI=)
                          5: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (hash: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:05:31:bd:c6:42:b8:f9:07:23:c1:81:85:b7:1b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
        Validity
            Not Before: Dec 14 04:01:23 2025 GMT
            Not After : Dec 15 04:01:23 2025 GMT
        Subject: CN=2308eff520ddf0f7db37f1ebe13eae5351cef9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:ee:de:03:f5:c1:90:52:6c:bd:d3:14:82:
                    59:60:83:8f:ea:ce:db:5b:c3:37:a1:0f:bd:0e:95:
                    90:1d:07:15:bc:f6:2e:4d:3f:6a:34:58:a9:0a:53:
                    e1:f2:cf:89:64:d6:b7:20:a0:64:9e:0a:ab:6b:28:
                    82:2d:9a:13:6f:2e:e6:71:52:f4:11:a2:9b:ba:dc:
                    3c:16:c2:54:43:6f:47:42:d4:b5:ee:61:da:68:67:
                    8e:9b:aa:fe:cc:07:a7:ce:af:c6:6b:22:de:e3:03:
                    41:66:9b:e2:a2:fa:49:4b:60:6e:21:4b:e3:50:c3:
                    02:ed:58:83:2e:97:b5:8e:7b:e8:f8:77:00:f1:7f:
                    e0:64:a0:69:e9:0f:98:c7:63:42:57:94:51:e4:4a:
                    37:d5:b5:1c:1d:3a:9c:5c:38:93:26:3b:b6:87:ef:
                    22:cd:a2:cc:74:0f:41:eb:c2:08:da:b8:db:41:99:
                    aa:00:59:51:3f:ea:02:60:b9:be:02:45:ba:0d:3a:
                    68:5c:b7:94:c8:78:64:30:23:17:ce:fc:28:50:c0:
                    bd:2c:de:04:23:25:98:29:30:5b:84:27:4d:78:43:
                    b5:47:83:ef:e9:ad:81:5b:f0:c2:33:09:6e:4d:22:
                    7e:66:bd:2d:4f:3b:39:6b:76:60:27:8f:39:41:4d:
                    ff:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:08:EF:F5:20:DD:F0:F7:DB:37:F1:EB:E1:3E:AE:53:51:CE:F9:D4
            X509v3 Authority Key Identifier:
                keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:38:49:f0:f2:50:5f:2d:49:d7:33:43:fd:7e:06:17:d0:0d:
         42:85:b0:7a:0d:49:e8:ed:24:5b:15:f2:2a:1c:65:5c:50:5b:
         9e:13:1a:c5:c0:76:01:e7:4d:de:0e:05:4a:d4:72:af:99:a2:
         96:fc:d4:e5:bc:6e:2f:cf:c5:e9:83:d8:dd:36:8e:bd:9f:2e:
         78:de:79:6c:93:ce:e4:be:37:40:5e:2a:5f:5b:22:f5:f3:ad:
         34:96:e1:0c:a9:2a:05:38:4f:b0:e1:c8:14:f6:a3:e2:37:d7:
         95:0c:87:ed:78:aa:4e:27:bc:0a:d3:68:57:5b:02:fc:44:e2:
         49:36:f2:ba:2a:6b:16:a2:14:9b:3c:f1:28:6a:8b:ee:30:69:
         0c:78:b3:20:b0:50:3b:72:53:49:9c:8d:19:9a:03:5a:07:8d:
         5e:ba:e3:e8:dd:1c:b6:12:5f:58:69:ae:9c:91:60:62:ed:3c:
         af:b2:72:d1:8c:61:c0:16:83:0f:a5:5b:45:49:2d:ad:20:a5:
         ad:c2:c3:e5:a5:0c:58:78:45:b4:51:7f:f6:ff:27:15:7b:ab:
         07:fb:a4:69:17:67:65:27:00:40:d3:67:57:cf:d3:17:b1:7e:
         90:6b:a3:10:f1:27:63:74:3e:6c:6b:3f:1b:d9:8a:f3:ac:c8:
         51:0c:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 13:48:20 2025 by rpki-client