This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
File:                     02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json)
Hash identifier:          RmGljhBeHqBQU2+zuII345xEL7X2vIZ8zBSUAbe+puE=
Subject key identifier:   96:3C:B6:4E:18:45:2D:DA:34:31:C5:05:03:74:FD:51:3F:34:91:84
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Certificate issuer:       /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial:       019B07B554F10494818388E956A063C93EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
Manifest number:          177D
Signing time:             Wed 10 Dec 2025 10:01:22 +0000
Manifest this update:     Wed 10 Dec 2025 10:01:22 +0000
Manifest next update:     Thu 11 Dec 2025 10:01:22 +0000
Files and hashes:         1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: cX0yq09u4x8UWb7Pcvtl9SKMESFdF0nMHb5HHm+7xP4=)
                          2: 2WkxZ6d8ewxrLWO8WH12o0AY6xw.roa (hash: nbEjkYORzyFd58OrYmjVC1fHN4kRwapxAIIPY/slelc=)
                          3: AG97hJvhy0UeDTt3HIas70L9MWQ.roa (hash: CpGaF4KcigctK1KLFQXtXWhD0jjodHuaq3LolhI5NC8=)
                          4: EEkMm6nCb9R4YLtB4IXzgCR8OOM.roa (hash: 7A7HQmXagHkrgjRynPlWf1aNJTOS5cJM4PvFKY2czsg=)
                          5: Iy0xYJFVaSUpkc2TbsdezF59hPQ.roa (hash: yc/wxf6t0jomAnEf1S9R6mg0/BH4SO1UAudfyh2QjG4=)
                          6: JdavXfgS1C88UGPje2KGgh-CbRs.roa (hash: fsvo1+m2SxrjapW7ugn4l/vkPt8HqDS/T913gxJRh4I=)
                          7: KoO3sM7qwS5mA20IsKbDhxcTB1U.roa (hash: tjrHSpdKeLdJHbMSWc5OzlqZez0K6Pu4HPg+UKvTrTM=)
                          8: M-yd6Ugm4j37VvR5jMt-KNJrmEI.roa (hash: vqjDdTSN4DxJrQed7BY7JJ0opDc9Ee98YYBmwBxXED4=)
                          9: Nedx1_M66uIc0vDKNZQnQXlLIdM.roa (hash: zJ8+VfMNsVLvkhPB7kvPUzmVC3uoyAUluiAWRCM46n4=)
                          10: jLnip0BdB36NRqrdIhQucDZy8-A.roa (hash: PgGmCULcevmCru0Kv0QVroNMx8/gH95JrLZ6JaAFDWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:07:b5:54:f1:04:94:81:83:88:e9:56:a0:63:c9:3e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
        Validity
            Not Before: Dec 10 10:01:22 2025 GMT
            Not After : Dec 11 10:01:22 2025 GMT
        Subject: CN=963cb64e18452dda3431c5050374fd513f349184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:30:a6:cf:57:e9:fd:0d:44:70:7b:50:1d:98:
                    03:e8:2a:a1:84:a7:2d:37:85:1f:02:93:cb:a6:4b:
                    cf:16:ae:b1:3c:58:41:20:7f:cb:c5:97:e7:95:d3:
                    5a:9e:31:c2:63:1e:34:cf:c2:eb:12:17:3a:9a:a9:
                    78:d8:50:d2:87:10:ac:63:d2:5d:d2:81:95:91:52:
                    08:68:61:82:cc:dd:21:ad:54:84:c1:54:b9:55:94:
                    c6:74:f1:01:cd:53:23:5b:e3:98:9f:30:0b:c0:5a:
                    5c:34:0f:74:fb:ad:cd:6d:25:db:e9:fe:35:8e:c1:
                    78:c2:7c:5a:67:69:99:c7:8d:8e:6c:5a:b1:f0:9e:
                    a1:3b:2f:b7:c1:d3:bc:cf:6e:b8:87:37:01:a9:9b:
                    8c:c8:f6:3c:b2:1d:93:47:f0:e2:d1:88:75:6a:7f:
                    c3:a1:10:d4:7b:5b:a5:13:61:8f:2b:f8:c6:09:db:
                    87:d6:17:65:db:d4:a6:85:91:55:8a:4c:fb:20:ce:
                    2f:fe:89:b7:e6:10:27:14:4d:38:78:61:a8:f1:70:
                    47:22:f6:d3:8a:d2:c2:d8:1d:74:a8:bc:e5:48:57:
                    30:92:bf:cf:a9:28:e2:c9:22:9a:a7:7a:0a:32:ca:
                    72:dd:17:eb:92:ed:66:f8:66:81:30:30:c2:39:57:
                    b1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3C:B6:4E:18:45:2D:DA:34:31:C5:05:03:74:FD:51:3F:34:91:84
            X509v3 Authority Key Identifier:
                keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:53:7d:eb:21:0a:52:94:32:1d:d6:ea:b6:18:29:14:c5:5d:
         bd:ed:5d:9b:c0:b2:21:98:56:1e:89:82:c4:56:8d:fc:6f:2e:
         43:89:93:85:4f:0c:14:fe:70:29:fa:f6:bf:7a:e5:e7:7c:25:
         b0:a5:7f:0f:aa:98:9b:7a:82:e8:82:71:3c:6a:8f:e0:62:6d:
         72:d5:99:93:32:67:ff:e7:ec:8f:89:58:2e:49:59:62:1a:2a:
         db:8b:73:09:9d:e5:c6:19:1d:4c:ff:7f:1e:05:c4:29:e3:56:
         97:63:6f:0e:1a:65:2f:6f:0c:2a:b8:cf:07:18:f1:60:6f:1a:
         2f:f1:12:68:e5:96:b3:e1:1e:f8:0a:6e:31:cc:40:79:87:09:
         d7:8c:8c:5a:9a:60:fc:cc:0a:8f:03:8d:52:1b:82:95:1a:dd:
         dc:d1:3a:b9:7e:d5:b0:f1:6e:07:95:e5:51:cb:8e:0a:82:71:
         e7:2c:89:37:06:64:bb:54:28:33:3e:56:29:58:32:ce:a3:e9:
         d3:ef:a1:8f:3c:dd:3d:04:cc:23:37:d3:79:3d:9c:47:f8:51:
         e9:2b:d0:37:0e:50:0c:8a:25:1a:43:55:03:d0:f8:14:de:70:
         76:01:4c:d3:31:78:5e:f2:7b:40:de:69:c0:80:42:fa:a2:a1:
         a5:22:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 14:17:31 2025 by rpki-client