This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File:                     mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier:          6ure06+JkM6k0CbhLniWCfOSyo7/XUJNZi1op7halx8=
Subject key identifier:   D4:73:B8:8C:E6:DB:42:05:C0:99:1D:0A:82:28:D8:1A:92:6A:0D:C9
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer:       /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial:       019B67D63F48EF2FCFE99DF0F66B47EEA03F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number:          13E3
Signing time:             Mon 29 Dec 2025 02:00:52 +0000
Manifest this update:     Mon 29 Dec 2025 02:00:52 +0000
Manifest next update:     Tue 30 Dec 2025 02:00:52 +0000
Files and hashes:         1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
                          2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: 4kxJI+JAelCSPnkSya0eCcQHXifjqMP5CA9eF+vjY7A=)
                          3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:67:d6:3f:48:ef:2f:cf:e9:9d:f0:f6:6b:47:ee:a0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
        Validity
            Not Before: Dec 29 02:00:52 2025 GMT
            Not After : Dec 30 02:00:52 2025 GMT
        Subject: CN=d473b88ce6db4205c0991d0a8228d81a926a0dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:32:0c:56:3b:46:9f:14:3e:ca:71:55:ec:
                    1b:c8:ca:c2:f0:2e:2f:7b:51:ab:5b:d6:02:0c:62:
                    1e:37:7d:2f:f7:c6:76:af:c9:d4:c4:f8:50:b3:cb:
                    52:0f:c4:85:1f:16:0c:c1:e2:97:26:f0:e4:c2:04:
                    cc:df:07:91:4c:9f:24:c4:4a:c9:7e:5f:b1:75:63:
                    da:07:b1:64:70:51:b8:38:e3:7f:18:09:ad:cc:9e:
                    98:80:06:5d:24:30:41:93:f7:4a:e1:fa:6a:5c:ae:
                    f2:7c:f2:ac:98:c5:3c:d7:e5:3e:d6:e0:b1:d5:58:
                    fb:8b:ae:97:f9:b8:2f:f9:0e:1f:a2:d9:86:ab:10:
                    3f:55:f3:cf:e6:df:80:79:7a:5b:32:0c:1a:87:dd:
                    60:47:0a:5e:5b:62:da:bc:0f:33:f7:d1:aa:ac:20:
                    e7:5e:10:55:31:6d:47:99:8a:6a:c9:00:e6:7c:20:
                    e9:ae:af:c5:42:c0:e4:12:7d:1f:2a:e3:00:9e:30:
                    1f:41:6a:80:fb:b8:14:a5:4c:84:1f:66:10:16:f2:
                    b8:b9:73:c6:a9:a0:f0:4c:50:e0:7c:57:b3:d2:6a:
                    7a:98:57:f2:b2:64:27:c7:d9:28:fa:ae:3d:99:e7:
                    e8:69:d1:e4:40:1e:03:38:dd:7e:80:ce:24:0b:c5:
                    90:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:73:B8:8C:E6:DB:42:05:C0:99:1D:0A:82:28:D8:1A:92:6A:0D:C9
            X509v3 Authority Key Identifier:
                keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fd:b5:8f:2e:f5:3c:2c:fb:09:68:0a:c7:8b:fc:07:21:cd:
         dd:2c:9e:89:16:71:c9:c3:52:a7:7b:80:7b:0d:bb:7d:f9:3f:
         b8:6d:4a:8a:8b:d4:0b:17:da:9c:3d:c0:07:87:95:0d:fe:ee:
         d1:eb:1f:21:71:bf:c3:76:fa:9a:03:92:bd:0f:7f:da:12:a5:
         ea:22:0e:b9:ac:23:6a:e0:db:21:42:0d:ee:a8:f1:25:c1:a2:
         bf:8f:9d:4d:24:9a:df:a6:c8:9e:a1:81:ae:c9:14:1b:11:3c:
         ac:20:68:2e:6a:00:2d:7c:c7:c7:ea:64:ad:c4:2a:50:4c:68:
         ab:be:6a:0d:93:c1:fa:14:f6:43:35:73:9e:22:00:e9:16:f9:
         5c:31:3a:81:cc:08:b3:f1:d7:98:52:74:db:4d:61:6a:ea:c9:
         12:10:14:92:6f:60:75:34:6b:e6:5e:98:5f:9b:9f:f8:e7:bb:
         79:39:07:91:ae:c1:e8:0a:3a:4b:87:59:e0:ae:ac:aa:34:4a:
         b9:c7:28:cf:1f:e6:b6:53:0d:45:e6:a6:a0:ab:5c:e7:03:f3:
         5b:2e:5c:7b:e1:20:94:83:50:cf:1a:48:87:97:26:45:a9:3d:
         dd:04:d3:63:19:35:e4:a5:73:d1:95:e1:85:9e:56:8a:76:09:
         c9:a8:01:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 12:06:25 2025 by rpki-client