This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File:                     RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier:          3Dxmzpn+l+PbsRbzaQnSdFC7K6e+ielD+m6iC4hqjA4=
Subject key identifier:   44:6A:69:CC:86:95:DF:88:62:3C:67:4E:BA:F9:A9:83:FE:86:4C:D1
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer:       /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial:       019B0EC9F2112D1909D194CE9EFA754D5E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number:          1771
Signing time:             Thu 11 Dec 2025 19:01:14 +0000
Manifest this update:     Thu 11 Dec 2025 19:01:14 +0000
Manifest next update:     Fri 12 Dec 2025 19:01:14 +0000
Files and hashes:         1: AaeTZJ_Mx4pF3TF16wEEVAdeKg4.roa (hash: uC6UcXyt2Kmfls1QdacCrz5Tf6o/T5Y+fDQ00/99ycM=)
                          2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: VX1Hh880q3EXrrERXWKPI4PmpR7pjuyNy21uHRx8JQE=)
                          3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:c9:f2:11:2d:19:09:d1:94:ce:9e:fa:75:4d:5e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
        Validity
            Not Before: Dec 11 19:01:14 2025 GMT
            Not After : Dec 12 19:01:14 2025 GMT
        Subject: CN=446a69cc8695df88623c674ebaf9a983fe864cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:51:b7:a3:22:f8:db:3a:4f:50:14:37:ba:
                    d6:31:5c:e7:96:bd:33:ef:bd:14:d1:99:90:b7:81:
                    48:05:08:d8:d8:13:88:cc:e1:7c:3c:0b:ad:40:0e:
                    fc:22:22:8f:88:b5:5d:a5:ab:4f:e0:a8:0a:89:44:
                    d3:be:93:e7:27:fa:5f:36:ca:f4:2b:57:42:c8:ee:
                    45:36:c4:70:38:3b:58:05:ef:f3:69:ea:26:a0:4b:
                    00:a0:d5:ff:bf:bd:fa:33:57:7f:a4:27:86:33:6b:
                    7d:dd:44:be:63:36:df:4e:a0:6d:aa:ce:69:c4:01:
                    8a:b9:90:96:23:d6:00:b1:d7:07:4a:3c:98:fe:a8:
                    4e:cc:12:d0:b8:f9:14:70:b5:d8:b0:3b:3a:34:8a:
                    e5:a5:a6:11:c9:22:f2:3f:43:5e:cf:c9:f5:d4:a0:
                    66:1b:ee:7d:b6:79:90:db:d2:1b:68:1b:61:9d:35:
                    a5:a4:c7:4d:d3:f3:ab:db:65:5c:c1:d6:78:30:80:
                    e0:41:80:cd:50:9e:ed:02:4e:e1:47:33:03:79:08:
                    f1:7d:00:61:80:95:c8:31:2f:e5:8d:81:6c:59:48:
                    1b:cc:b7:a9:07:74:6b:5a:5f:ce:93:af:2b:ae:96:
                    9f:ff:cb:80:d9:45:69:93:24:f7:87:54:70:ef:01:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6A:69:CC:86:95:DF:88:62:3C:67:4E:BA:F9:A9:83:FE:86:4C:D1
            X509v3 Authority Key Identifier:
                keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b8:1d:4b:72:01:63:44:d8:ac:4e:2d:f4:7a:80:d7:a0:59:
         63:89:79:09:51:24:9b:2a:a9:33:ce:9f:6e:a9:ae:64:99:98:
         b0:7f:63:4f:3f:97:ce:92:81:60:78:2f:4a:07:a4:37:b4:7a:
         83:92:28:77:d2:1d:30:fc:fa:a1:87:fb:bf:a1:3d:75:5a:ba:
         03:bf:df:27:53:92:1d:7c:bd:c0:30:e2:1a:7b:d8:af:4f:b7:
         12:1f:62:eb:e3:c2:1a:06:80:c6:73:1b:76:b9:b7:89:61:db:
         1d:38:29:15:a9:c0:c0:10:84:0b:96:2b:38:b6:62:a9:4d:7f:
         0e:97:9e:1c:c3:1c:c7:94:8a:44:59:8f:d7:75:be:80:3e:9c:
         7a:32:c6:ab:91:7d:6a:99:ef:86:0d:16:b3:32:6e:98:61:30:
         e2:f0:03:b3:72:87:64:01:8e:05:7e:30:66:1d:34:27:55:4b:
         ba:bc:de:ec:cc:2d:8d:a5:67:c0:23:80:9d:56:19:3a:d2:d0:
         37:96:0b:2a:0b:ff:24:e9:29:74:b8:d4:d4:25:a9:df:95:5f:
         34:58:39:a5:01:b4:13:b6:1a:47:6b:78:33:14:b0:d9:43:89:
         52:11:73:5c:fa:a7:02:1d:d6:1d:6d:b9:c3:d5:d0:51:de:23:
         bb:38:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:18:39 2025 by rpki-client