This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
File:                     m3RNp58FMac61vS68IN-k-toAbE.mft (raw, json)
Hash identifier:          DI+L7ILh4g7JaBRFPCnMgfN4xQ5H15L+NoWxccEIwAI=
Subject key identifier:   CF:7D:4B:E0:3A:DC:18:52:9D:45:26:80:D3:A0:84:05:4C:19:55:D5
Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
Certificate issuer:       /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Certificate serial:       019B3DFEB032038C56197E0E8015B1AD0787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
Manifest number:          58
Signing time:             Sat 20 Dec 2025 23:00:59 +0000
Manifest this update:     Sat 20 Dec 2025 23:00:59 +0000
Manifest next update:     Sun 21 Dec 2025 23:00:59 +0000
Files and hashes:         1: 0OeNkvd-8MMdjkKEPWgT5tWh42M.roa (hash: 14QSl+lc6zLbErHcCROg/UYo6UZFnpjBPJYqshbFvSQ=)
                          2: FOViJa71bONBPbhwdf8cY26xpGw.roa (hash: acfz9cNHyt0g2+N/TsWc9s6Ju/Ql+2/s0NXKkyXco/4=)
                          3: m3RNp58FMac61vS68IN-k-toAbE.crl (hash: x1tBumG7wGYNoT9zLa2xiOWdGJKlZ3HSwAs0o8VOVN8=)
                          4: x_RVWVMpfqFCU9C8fHlsYzNg98Y.roa (hash: HSJMhqY1VPTAA+uSdO1W+IOvhtrhwbuUBVftKZHkGTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:fe:b0:32:03:8c:56:19:7e:0e:80:15:b1:ad:07:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
        Validity
            Not Before: Dec 20 23:00:59 2025 GMT
            Not After : Dec 21 23:00:59 2025 GMT
        Subject: CN=cf7d4be03adc18529d452680d3a084054c1955d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:73:97:2b:90:ba:44:2f:74:f2:77:cf:46:49:
                    0b:1f:3d:61:c3:6a:0d:20:eb:d0:21:c6:0d:f5:2e:
                    79:1f:da:e9:2d:33:8c:f8:97:6b:e0:49:8b:fa:ba:
                    07:89:cc:83:06:3e:f9:57:27:a7:6f:b7:1b:32:16:
                    09:99:06:19:16:f1:7b:05:1b:0b:91:8c:c1:92:c5:
                    86:ca:0f:ce:08:7b:04:62:5a:72:40:96:9f:aa:ea:
                    f5:ee:d5:6e:84:33:26:80:63:13:95:aa:c8:dc:48:
                    a8:8d:18:1f:49:4e:22:1f:81:6b:ea:28:cd:f9:73:
                    f4:60:31:b3:bb:f3:94:51:1c:b1:bc:cd:83:a9:40:
                    ae:bc:79:95:42:0b:05:d2:3d:ca:85:c8:17:19:1f:
                    7a:d8:a3:9b:c9:59:a7:e5:fa:26:a7:60:c2:c2:28:
                    cc:55:96:2f:5c:3c:62:51:dd:b2:87:db:66:eb:11:
                    75:3f:4c:45:90:36:34:78:fa:67:fc:9d:41:66:d8:
                    e0:9b:51:db:16:0e:13:61:87:92:1c:43:e2:74:a0:
                    d5:a7:14:09:f8:ec:2f:6f:e1:4a:70:79:00:bd:0e:
                    4b:1c:64:86:fb:6f:43:e6:38:18:cf:9b:22:c8:b8:
                    38:1a:f4:8d:1a:1f:72:94:3b:04:4b:93:df:40:6d:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7D:4B:E0:3A:DC:18:52:9D:45:26:80:D3:A0:84:05:4C:19:55:D5
            X509v3 Authority Key Identifier:
                keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c5:b4:11:8e:dc:53:2e:af:7d:4c:53:6f:e1:66:fb:a6:30:
         34:9e:d2:c1:60:97:b7:82:61:4e:1f:9e:bf:78:28:cc:6c:a9:
         4c:b2:f7:1a:c7:85:12:30:13:37:06:49:98:fb:37:4a:76:ac:
         a2:90:b1:31:2d:66:97:f3:cc:ff:d2:f9:04:59:b8:bb:82:97:
         a9:31:05:7a:ec:44:77:29:b4:f9:59:63:f1:52:e8:12:93:ca:
         e3:c4:7c:ee:18:a6:87:31:1b:c5:01:2f:00:18:fc:42:17:44:
         e7:9a:37:78:47:3f:bf:59:20:7f:c2:f9:d4:59:dc:4e:36:73:
         f5:0c:2a:98:47:68:df:3e:0e:af:77:ac:7d:ec:26:77:f6:ed:
         9e:1f:3b:2c:e1:df:8c:8c:3f:a5:27:58:36:5d:c2:2c:ff:dd:
         7c:c3:4c:05:17:04:78:86:08:7c:75:3b:ad:d9:3f:2f:9f:f2:
         75:4d:43:eb:9d:d6:e3:d9:e7:22:74:06:25:af:35:a4:f0:15:
         9a:25:87:50:aa:c6:89:20:2c:a2:aa:45:e7:fc:51:2a:68:b7:
         2e:2f:d7:cf:1f:ed:5b:19:3a:43:e0:a6:6f:c6:96:09:0f:86:
         4b:ea:8b:61:91:0f:57:6c:4b:f6:7f:6b:50:26:b5:29:1a:3c:
         ba:25:85:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:20:34 2025 by rpki-client