This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          RpxsVzq4P+mMGBeHi7wOngKxhs1igdFvM0Ok/soDLA8=
Subject key identifier:   E0:7D:65:EE:47:30:EB:8D:40:51:C6:3C:47:51:59:AE:28:2C:F3:91
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       019B1BAB0331D4D845F0899E477D7E9DDB74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0D5B
Signing time:             Sun 14 Dec 2025 07:02:30 +0000
Manifest this update:     Sun 14 Dec 2025 07:02:30 +0000
Manifest next update:     Mon 15 Dec 2025 07:02:30 +0000
Files and hashes:         1: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (hash: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=)
                          2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=)
                          3: Iel88vR033hS2mHZK9DcUHuaXsA.roa (hash: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: ayO6ueOaTzBe7Pm7TdvF7VERjazl25Yg+IVa/07gKTY=)
                          5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=)
                          6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:ab:03:31:d4:d8:45:f0:89:9e:47:7d:7e:9d:db:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: Dec 14 07:02:30 2025 GMT
            Not After : Dec 15 07:02:30 2025 GMT
        Subject: CN=e07d65ee4730eb8d4051c63c475159ae282cf391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:cb:ee:b3:20:75:9f:1c:a2:cb:88:c2:ce:
                    db:8f:c3:62:d6:c1:80:36:46:88:f1:7b:f6:2c:01:
                    14:ae:43:ca:8c:54:9e:86:82:a8:98:06:6f:74:22:
                    12:f0:5c:43:50:c4:8b:e8:a3:e7:a6:c5:43:62:29:
                    7f:18:94:4c:fe:28:ec:aa:1d:c5:c6:69:fd:a7:61:
                    35:f2:24:56:40:36:7a:2b:a0:98:76:86:59:79:33:
                    cb:d4:7f:8c:28:d4:77:29:9a:f8:7a:66:7d:29:d1:
                    9f:7b:0a:0c:df:17:fa:5e:4f:08:20:3f:d4:b4:d8:
                    39:62:67:55:e1:55:79:a9:54:e1:68:a0:22:3c:29:
                    6a:e6:c7:9e:0a:a4:02:dc:e4:a1:6e:42:b6:a7:b6:
                    a4:da:eb:39:0e:86:69:74:d1:5d:c7:67:50:17:27:
                    1a:9b:e1:24:69:56:a1:57:57:3b:c1:07:79:cc:d9:
                    17:17:33:0b:c0:43:75:20:d7:1b:cb:9a:02:d5:c5:
                    7a:d1:a7:8c:1a:8c:c4:ba:d8:c1:c5:29:7c:8b:83:
                    95:23:64:e6:ad:d4:64:df:d3:49:95:28:13:9d:15:
                    90:63:cd:7c:af:dd:9a:11:c6:9e:a6:71:89:90:d1:
                    86:47:3a:28:0f:89:e6:74:1d:c0:58:c8:9f:c9:14:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7D:65:EE:47:30:EB:8D:40:51:C6:3C:47:51:59:AE:28:2C:F3:91
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:eb:73:77:91:3c:25:19:89:75:79:ab:93:76:d6:10:48:db:
         95:20:52:31:1f:70:ed:6f:9b:f9:a5:f4:7d:7c:7b:7a:38:c1:
         11:63:b7:34:fc:6b:21:a7:62:67:14:2f:5c:84:1e:2f:d3:b9:
         e9:b2:51:f5:08:5d:79:92:e6:59:4c:d7:22:36:74:90:9d:66:
         66:23:d1:8c:a6:b5:f5:17:47:c8:9e:91:f8:8c:de:f5:14:18:
         e0:90:0b:02:c7:23:2f:bd:0c:14:f1:c0:96:42:26:7f:6a:48:
         2b:c4:4d:6d:6a:74:54:db:c1:d5:b9:49:69:89:a9:2c:46:45:
         d5:d7:75:35:17:d0:6f:48:4a:5a:f9:ff:34:0d:db:19:90:2d:
         c7:89:54:d5:3c:61:b3:7d:e8:93:79:bd:f9:0a:79:07:3b:57:
         86:fd:0a:d4:41:7a:1e:8d:73:87:fd:c0:7e:2c:83:8d:9f:11:
         8d:b3:96:d6:da:0b:7f:b1:74:a4:ca:2c:2b:3b:df:a0:5b:bd:
         20:13:33:fb:68:74:6c:2a:0f:6d:49:20:9a:06:f1:ce:9e:97:
         c7:63:30:41:e4:7d:92:4d:36:bc:6b:9e:33:7f:38:1c:3e:6b:
         b1:c8:d8:88:67:f1:5b:26:95:29:c7:56:5c:06:d6:79:db:99:
         6f:fa:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 13:45:43 2025 by rpki-client