This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File:                     mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier:          4xioaP/1mAdCgvjAH3VdM1txHV9SVBRuMTamT9CHeow=
Subject key identifier:   E1:79:40:23:44:51:8F:55:09:A2:0E:09:99:06:5C:13:F1:26:0A:36
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer:       /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial:       019B10EF8A3723C955430C117924067E500A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number:          146B
Signing time:             Fri 12 Dec 2025 05:01:32 +0000
Manifest this update:     Fri 12 Dec 2025 05:01:32 +0000
Manifest next update:     Sat 13 Dec 2025 05:01:32 +0000
Files and hashes:         1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
                          2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
                          3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: Ea+cKsbihTiNzIf6+VEgB6vEqjkXqJqLbf3nzJiPVx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 05:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:ef:8a:37:23:c9:55:43:0c:11:79:24:06:7e:50:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
        Validity
            Not Before: Dec 12 05:01:32 2025 GMT
            Not After : Dec 13 05:01:32 2025 GMT
        Subject: CN=e179402344518f5509a20e0999065c13f1260a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d8:82:00:45:8f:55:b1:ca:dc:39:79:59:ba:
                    bd:6e:d3:20:5e:89:84:49:23:74:81:d7:5b:1a:2b:
                    7b:bb:4e:36:07:81:ac:8e:a3:09:81:08:9b:6c:fe:
                    4a:8e:79:cf:02:2a:6c:72:00:16:5d:96:ec:8c:b0:
                    50:51:8f:0d:e0:30:df:a2:1f:36:7a:b2:48:5d:02:
                    59:27:d2:58:47:22:a7:37:f8:f1:dd:f9:44:41:b3:
                    05:f0:6d:cd:68:bd:b7:16:89:d2:dc:b8:4e:b2:07:
                    af:1f:c2:ad:ea:52:f7:18:75:cd:64:ba:c7:17:bd:
                    8f:80:02:ea:e3:89:1d:f1:9a:94:46:cf:52:10:10:
                    84:fb:d9:62:53:db:8c:0e:d8:a8:23:00:d4:33:c0:
                    0a:e3:3b:34:b2:42:c0:00:83:18:3b:ec:bd:89:e4:
                    7d:8e:eb:fc:4b:5d:a0:3a:8a:ff:75:c3:db:5a:54:
                    e0:08:a3:0a:ea:17:06:97:af:ab:ea:b6:aa:61:8f:
                    63:91:d4:74:82:4f:0d:88:47:4c:fd:39:70:82:4c:
                    54:a8:7a:7a:80:cc:37:a6:b2:58:3c:49:7c:4a:04:
                    8a:fa:87:10:73:72:7f:a4:fc:38:44:68:16:bd:58:
                    d1:67:8a:44:b5:42:95:91:ba:ec:5c:e2:e2:51:f1:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:79:40:23:44:51:8F:55:09:A2:0E:09:99:06:5C:13:F1:26:0A:36
            X509v3 Authority Key Identifier:
                keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:10:19:eb:b4:ac:70:96:3d:41:0e:79:ba:e2:51:05:fb:25:
         e1:f0:c1:c9:98:d1:d3:6c:c5:f3:98:35:63:d5:23:8c:0f:97:
         b0:0d:ba:7f:2d:6b:a4:6a:fc:57:1c:a5:1d:2f:db:7c:5c:7a:
         bb:b6:de:10:b6:10:f2:2c:c4:f9:01:5b:52:70:6f:73:db:d6:
         6a:7c:98:b3:1a:4d:2a:e5:42:86:cb:1c:7a:09:dc:ec:84:34:
         fa:1d:47:62:0d:c8:7b:7d:20:aa:65:75:c2:66:33:67:3c:89:
         f5:45:e7:94:94:ee:ec:3f:f3:29:0b:c5:51:33:51:20:5a:4b:
         4d:b1:d8:84:8c:e2:07:a0:be:f5:61:30:d1:9d:2e:ec:1e:c5:
         7c:6c:90:a1:05:d0:5a:2d:3c:ef:85:85:f4:7e:c6:67:55:d6:
         ba:b6:ce:9e:c3:29:58:c2:cf:f4:1a:63:3f:f3:a8:01:35:fc:
         95:72:d4:95:fd:5f:58:5e:5f:7e:7c:39:a2:63:32:c7:c9:1e:
         8a:94:3f:bc:11:de:63:14:eb:a9:e5:7a:07:cb:92:6b:b3:5a:
         2d:e8:22:a9:cf:a8:fa:c5:12:85:fc:16:ef:52:12:75:50:ab:
         7b:fb:ff:7e:fe:bf:02:2e:62:25:0e:16:f6:4f:ff:34:05:82:
         04:5c:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:07:48 2025 by rpki-client