This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File:                     mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier:          tkYrm7ctl+hZnpDFvDoT2qu0fhPYJnasWAkB1Fd2nkE=
Subject key identifier:   CD:CF:D3:B0:D8:5A:4D:36:5C:E4:C7:FB:33:AA:B2:5F:15:DB:C6:4B
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer:       /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial:       019B48B8E0A0FAE5EAFDDEEBB05B8E54C34D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number:          178F
Signing time:             Tue 23 Dec 2025 01:00:34 +0000
Manifest this update:     Tue 23 Dec 2025 01:00:34 +0000
Manifest next update:     Wed 24 Dec 2025 01:00:34 +0000
Files and hashes:         1: Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa (hash: B+UnfNeyWy4qc0L9iLcwdqvfvolglpTpBLhXa2BgbS8=)
                          2: _b-w9LvxuQUdQBFQTPOqft2tDNE.roa (hash: ZeBYUCPyEsrx7JXuItWCAACWIJTP5Z1eTXibb6gzJH8=)
                          3: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: sXCpuOZmzn9Nc9AhI4q4LtfnF81xIrGgKJ1E1AqNfjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:48:b8:e0:a0:fa:e5:ea:fd:de:eb:b0:5b:8e:54:c3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
        Validity
            Not Before: Dec 23 01:00:34 2025 GMT
            Not After : Dec 24 01:00:34 2025 GMT
        Subject: CN=cdcfd3b0d85a4d365ce4c7fb33aab25f15dbc64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:53:9f:a3:e0:ff:d9:08:a9:ea:a6:45:0f:b2:
                    5f:8a:2a:79:bd:2b:21:7d:4c:f6:36:2c:04:e0:24:
                    ec:09:ce:1c:04:d8:54:1f:91:64:b2:cd:1e:3f:61:
                    de:06:f0:ec:f8:e8:69:c8:87:73:ce:d8:03:75:3e:
                    a2:5b:62:7b:57:88:56:53:4a:c4:8f:11:d4:63:35:
                    3f:ea:09:29:a3:ef:9e:24:88:79:a7:1b:75:c4:3c:
                    89:a4:3e:fe:c4:e9:ef:ed:4d:25:30:2b:18:19:6d:
                    3a:11:28:db:7f:c2:74:3e:43:d8:09:eb:cf:31:81:
                    7c:6e:0b:1e:89:81:d1:5e:f3:ee:7d:63:59:56:f4:
                    51:64:62:59:fd:75:28:8e:e0:05:4d:cf:83:d5:28:
                    3e:c7:ea:2f:6b:f3:18:34:39:fd:77:f9:a9:57:89:
                    45:e6:f0:f6:d5:aa:66:1e:33:90:29:4f:da:8c:b1:
                    c0:f8:48:93:19:8a:c1:50:a4:5b:d1:18:6c:33:59:
                    a0:9f:c4:f4:ca:a7:01:be:60:87:4b:5c:e6:82:cc:
                    18:81:52:65:64:7d:d9:26:fa:3b:44:23:06:93:3c:
                    6f:e3:f1:f2:13:1c:91:9e:dc:2d:90:d4:3f:19:a7:
                    aa:7b:61:73:52:9e:05:1e:81:99:c3:c2:a6:3a:3d:
                    eb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:D3:B0:D8:5A:4D:36:5C:E4:C7:FB:33:AA:B2:5F:15:DB:C6:4B
            X509v3 Authority Key Identifier:
                keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:00:ad:97:eb:d9:fa:ea:76:0d:a3:0b:5c:c3:d4:bd:65:b7:
         b4:c8:43:b4:70:cc:3f:4f:1b:2c:ce:16:8e:ef:f2:ba:a9:7a:
         65:70:04:50:90:79:1f:34:df:43:9c:79:6b:04:4b:a4:63:8b:
         17:08:ed:7b:ba:77:11:94:34:45:5a:b8:d9:41:a0:48:1d:65:
         ce:71:a4:98:df:ab:4a:37:7d:d6:8c:2c:14:c8:44:10:80:d4:
         a8:4f:fb:f1:29:a7:71:d9:d4:3c:1d:7b:f4:55:dc:db:21:56:
         07:dc:42:95:b3:5c:17:39:af:8c:44:f5:88:a7:74:87:00:ca:
         46:ae:a8:54:3f:34:2d:be:af:35:d8:05:4d:fb:be:5e:c3:81:
         9c:fd:a3:97:79:27:39:dc:e2:6b:71:73:f8:54:3f:b3:2c:1a:
         fa:9e:1f:84:f1:91:7b:7e:3d:23:d5:2f:92:62:80:1d:c5:eb:
         f2:ae:d0:ba:d3:88:8a:c1:ea:8c:58:fd:ec:84:92:d1:e8:2f:
         d9:e1:59:93:1f:76:c7:83:c5:87:d7:b6:18:16:b3:91:9e:b6:
         f3:79:9e:ee:5b:35:22:1b:c6:5d:76:95:66:f8:b8:e1:58:f6:
         73:b3:83:a1:e6:e7:5f:b1:cc:58:8e:79:9a:cc:0c:56:b6:cc:
         ae:4f:0a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:48:23 2025 by rpki-client