This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File:                     mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier:          JrbwIs0M52Qa6YbGngQwVn2TG3qHfuYJJS8RK1/zA8c=
Subject key identifier:   16:C9:B7:E2:75:4C:B6:35:C2:A9:CF:26:A4:28:21:DE:88:26:31:6E
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer:       /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial:       019B3C1052EFC2D90B0FBA43687A24FFA42D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number:          1179
Signing time:             Sat 20 Dec 2025 14:01:01 +0000
Manifest this update:     Sat 20 Dec 2025 14:01:01 +0000
Manifest next update:     Sun 21 Dec 2025 14:01:01 +0000
Files and hashes:         1: LghvM2HkoxwkfnMrVuGOmbXEEys.roa (hash: 1OZRBAIe8Cgw+ndoc+DfU+Xu6V9sRaXB9Lxh1AlcmzI=)
                          2: OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa (hash: /2DSINFIyLLAuWT+NSN2AERglHoq5WMezjiuaEAGBLc=)
                          3: UMwJfotBVzQ9ei8MWZTF-MMyZ9s.roa (hash: 7E8VN4G/FyL9Hwi63NY6rXsJXVoge0Qr5gQg0WbzGjo=)
                          4: YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa (hash: Bw/ViWsgEqyxUU4QLJ0NfAmaEK6jP82CD1tF0xNBYgI=)
                          5: i0UQOeJ6YNtAxZECZiMmxjiaF3I.roa (hash: Tq5saoxoAZ2SR0wF+u5fAsszTDxNlUp7BPSS54+/SOc=)
                          6: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: zjVwO5Emlnd5POLbV87myqXpPEETZiE/vo0ODhc3ffY=)
                          7: qOY7wbeKs3nIQqhImhSE17lPdCk.roa (hash: jaqajIIr+ngeFDOwuzVR6399SRRk8jyurbScXxLtxAE=)
                          8: qpRtX4nTQAXf7W0iXup_p_c22k0.roa (hash: oaoByfuIIELfDuNhi1s5K/79IREcQBqmDkYcHlpZHyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:10:52:ef:c2:d9:0b:0f:ba:43:68:7a:24:ff:a4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
        Validity
            Not Before: Dec 20 14:01:01 2025 GMT
            Not After : Dec 21 14:01:01 2025 GMT
        Subject: CN=16c9b7e2754cb635c2a9cf26a42821de8826316e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:ec:55:7d:93:c1:50:6e:53:53:e7:1f:ba:
                    27:83:7d:a5:22:de:30:ed:da:73:c2:45:74:4d:b2:
                    1f:59:39:1f:e6:06:5e:a7:f3:21:3f:33:c0:a6:12:
                    3a:94:7c:00:7a:75:ee:98:74:52:aa:d4:62:15:7f:
                    9c:14:0b:c8:1f:62:98:ac:d4:db:5d:33:1b:e8:f6:
                    37:c4:56:74:88:09:11:fd:7a:63:6f:e4:5b:9e:52:
                    11:19:75:f1:d8:6d:5d:21:ba:21:07:75:39:a0:9a:
                    5f:38:04:9e:bf:76:d8:14:da:ff:46:77:8d:80:f1:
                    98:c7:dd:e3:62:a4:00:b4:df:c8:86:68:1d:c2:bd:
                    25:15:7d:a3:8f:23:eb:f8:20:45:94:27:07:8e:c3:
                    fa:a4:d7:f8:03:2a:f6:76:3c:fc:a0:a8:ca:f3:47:
                    9b:1e:b3:f2:b8:34:ca:1d:13:14:b8:e5:cd:aa:59:
                    f8:36:46:52:a2:ab:9e:e1:3e:81:7e:b1:bb:2a:85:
                    5f:aa:26:05:2e:34:f5:96:39:b5:44:2f:e8:bb:3b:
                    fe:33:8e:07:50:a0:28:4c:1d:00:08:5a:f2:46:28:
                    02:9d:6b:1e:95:e1:af:61:54:95:3f:7c:18:bd:68:
                    c0:38:1d:df:e9:8e:be:8f:b0:61:cf:d3:79:0f:49:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C9:B7:E2:75:4C:B6:35:C2:A9:CF:26:A4:28:21:DE:88:26:31:6E
            X509v3 Authority Key Identifier:
                keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:7a:f7:3a:85:4b:d1:04:0e:f5:f6:2c:77:21:31:cd:cf:76:
         a1:6c:99:af:bc:b2:6c:5a:dd:c5:d6:86:b4:11:49:ec:40:88:
         04:ab:36:3d:9b:df:ab:5d:5c:f8:83:55:59:4d:fe:b3:d8:73:
         78:fe:81:73:fa:7c:2d:71:65:f1:22:57:d3:28:37:8d:dd:c7:
         20:61:d5:32:5a:92:ce:98:c3:a7:93:8c:ce:92:3c:21:a2:b9:
         e2:33:bd:50:72:a3:2c:9f:39:99:30:46:e6:c4:08:78:53:07:
         da:2b:1d:a6:52:2c:af:3f:8a:b1:e5:c2:7f:e4:b9:d9:15:5d:
         a3:54:d9:f8:7c:91:c6:07:09:9d:27:de:8e:82:47:a4:3e:bf:
         3e:2c:db:c5:65:dc:7a:07:54:99:c5:a4:08:19:59:61:ba:d7:
         f3:bc:7b:6f:a7:f2:72:27:76:08:94:e3:8d:39:71:99:fd:4e:
         a9:40:09:55:0d:87:53:9c:b8:72:9f:88:22:8a:5c:6c:b4:8f:
         33:b2:d0:df:7b:e4:c7:7f:82:7c:78:2b:36:8a:2e:67:d2:70:
         1a:ff:8d:b7:23:cb:2f:8c:c0:7d:44:f4:de:70:54:2e:b4:6a:
         0a:75:83:e7:50:80:cb:ab:fc:60:ef:26:53:07:b1:39:ef:28:
         5b:4e:80:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:27:56 2025 by rpki-client