This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
File:                     mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft (raw, json)
Hash identifier:          Lj1aM+9GHWOfhk13lCqOI3N5yWE7wUa7gmTwqSOIfEE=
Subject key identifier:   12:02:57:30:0D:B0:7B:23:B2:FD:0E:C3:83:1B:6D:0D:96:3B:1D:22
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Certificate issuer:       /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial:       019B15710AA3F5F1CA1A8A1F8A602DCBA390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
Manifest number:          12E9
Signing time:             Sat 13 Dec 2025 02:01:28 +0000
Manifest this update:     Sat 13 Dec 2025 02:01:28 +0000
Manifest next update:     Sun 14 Dec 2025 02:01:28 +0000
Files and hashes:         1: 1TI05eho0ULeAD5-mChu4OLasSY.roa (hash: dnqOUYMdm6jTT4ig/7qC5Cu0cKdt4coknRVuLnEzoMU=)
                          2: AbeXxMAIYICgkaX-fBnbEp53bv8.roa (hash: ynNpYcgV4hdjp9DdvyUSRnDletdqtQe2jwWhjrvFcUo=)
                          3: FTViE_nB5flZhX11bNZxevHcOSU.roa (hash: lrLA6ycucMTnLRv1QAGUJwgfaap5iDlR2rLRrE7Bf+E=)
                          4: hwStZWCkN0znsEHFOvqChrtzc7c.roa (hash: 4luRIokJUNkyJpPCWC/8Wc7YY6uXHWjOdgFXaseESDA=)
                          5: mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl (hash: UpURy032/vMeZFlKKJ32ThDf9JLFfo4X537DA4+VxP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:15:71:0a:a3:f5:f1:ca:1a:8a:1f:8a:60:2d:cb:a3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
        Validity
            Not Before: Dec 13 02:01:28 2025 GMT
            Not After : Dec 14 02:01:28 2025 GMT
        Subject: CN=120257300db07b23b2fd0ec3831b6d0d963b1d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:99:3c:f4:c2:55:9c:52:0c:d7:ad:d6:27:
                    34:92:df:b9:7b:eb:09:5e:61:07:24:89:58:52:81:
                    c6:b8:7b:0b:f1:93:5a:8c:09:ae:1e:c6:a3:2e:fc:
                    4c:27:9f:bf:97:80:23:f1:07:18:1a:28:f4:7a:94:
                    e4:e6:5d:ef:9f:89:fa:ba:61:b4:28:61:fc:3d:a5:
                    2b:a7:96:06:d2:d3:52:76:cb:82:75:0f:b7:dc:6a:
                    55:48:8b:0b:10:38:70:0a:ca:33:f8:bf:5a:2d:70:
                    45:a1:35:e7:98:78:72:23:9b:e3:f7:34:28:9c:0f:
                    b6:fa:39:8e:53:77:04:e7:23:f1:58:ce:45:df:39:
                    78:69:9e:45:27:54:d6:7b:56:75:e3:70:06:24:78:
                    cb:2a:e1:96:29:3d:1e:70:9f:a2:c9:81:8b:c2:03:
                    32:6b:8b:ce:53:0a:87:3e:e6:03:e8:1a:80:1f:e9:
                    cf:fb:00:86:52:7e:83:61:ff:9f:f3:d5:6e:9d:14:
                    c2:fd:00:c7:0a:40:82:8f:84:85:0c:8f:8b:43:b3:
                    c6:c1:9e:5e:70:a6:ab:0a:3b:eb:96:5d:4c:bc:44:
                    d0:2c:69:b1:54:85:8c:cd:cf:1c:93:2f:a6:55:c3:
                    26:37:f5:0e:6f:ff:c5:97:1c:c3:23:c1:ed:1f:86:
                    a1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:02:57:30:0D:B0:7B:23:B2:FD:0E:C3:83:1B:6D:0D:96:3B:1D:22
            X509v3 Authority Key Identifier:
                keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:21:4d:df:7c:35:20:a4:9f:e5:38:91:c5:25:1a:71:79:bf:
         5d:29:36:01:1d:3a:1e:d3:af:24:d3:b3:a7:fd:79:e0:9f:ae:
         1a:e3:3c:20:35:0c:22:9f:96:41:3b:1c:37:62:42:c0:b6:fb:
         de:f2:17:5d:f7:9c:60:b2:fb:ce:2e:b1:1d:50:a1:97:9c:c8:
         33:65:43:a6:cc:d9:de:73:7e:c7:7a:78:eb:12:9f:28:fe:94:
         4c:2c:99:73:98:5c:42:8a:f5:8c:2a:c2:0c:7f:e5:ae:5c:5e:
         b2:17:89:49:b8:eb:76:e6:30:22:f7:c1:fc:35:31:cd:24:e8:
         a3:29:d9:c6:ec:57:5a:2f:e5:fa:80:56:24:c2:99:19:63:cd:
         02:82:00:99:ee:53:12:12:06:39:22:4b:1e:02:14:73:ef:76:
         7d:3f:20:80:62:ca:96:4f:99:31:b3:ba:a3:06:00:93:3e:af:
         68:31:db:17:f3:e8:2c:7f:fd:3c:6c:a7:43:94:b0:04:e4:d7:
         fa:b1:9a:4d:d2:6f:7f:ef:2d:01:48:c6:33:cb:1f:88:90:9c:
         2d:fc:3b:89:b9:04:2e:5d:e3:e7:44:e9:0f:08:a8:c6:ab:cc:
         2b:ac:82:65:ea:ca:26:20:19:a5:ae:12:eb:e6:44:73:04:d9:
         40:95:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 08:43:41 2025 by rpki-client