This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          7h/c/eG4YNh4UzovP8DEkyNHYeFhlLRB6wOsSlfHOzU=
Subject key identifier:   88:92:59:0C:BF:5F:F6:9A:15:7D:23:AC:7D:93:7C:66:A3:3B:DC:D3
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       019B378F1588694E45948BF3743A87B551C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          111C
Signing time:             Fri 19 Dec 2025 17:01:22 +0000
Manifest this update:     Fri 19 Dec 2025 17:01:22 +0000
Manifest next update:     Sat 20 Dec 2025 17:01:22 +0000
Files and hashes:         1: 8FzhGMtZv2x-9zLN2UYHeQV341o.roa (hash: qGnveFjiOnO4NOM7gilbdoFw5wFNnGKNy0BPR46F8X8=)
                          2: A454pJNoUsORGbO3OAfK7YV_Whc.roa (hash: ktLhYNOBSpXYd1+zR/ovh2Wfy7oD07XxrxHk2YHvGTs=)
                          3: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: I/5ganS7WemcC8bmzk/FPZnEw7GAh/ERgHRponu60BE=)
                          4: VKJdOQxl7p8p7x4aN4Wby4zX0pY.roa (hash: yezqvXwILM44YJ3tHBGsCwM+mCK4UNXyobV3FDKf4iQ=)
                          5: eDgDXUFrSK7xUZkPtBuSB2bzf-g.roa (hash: EmMIdVFxxDw1T5QOtxoH7PieLIsGiM73XYNo7gIlAMg=)
                          6: egnrXyyNbGvpg6aIGoEfRznijCU.roa (hash: 4f5nrivsxBbMxXIQjQ1VQo/t3u3N6GzzpzWYXL7wFf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:8f:15:88:69:4e:45:94:8b:f3:74:3a:87:b5:51:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: Dec 19 17:01:22 2025 GMT
            Not After : Dec 20 17:01:22 2025 GMT
        Subject: CN=8892590cbf5ff69a157d23ac7d937c66a33bdcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:0f:d3:5a:fc:de:de:f9:fa:7c:f7:7d:c1:
                    13:9d:d2:4c:46:94:b0:d9:85:55:fa:95:6a:82:17:
                    85:b6:05:aa:19:14:0d:39:e2:32:51:8b:48:14:bc:
                    15:db:c5:27:02:2d:e5:cb:a9:93:9e:aa:01:7a:2f:
                    0f:2a:cc:57:63:cd:b6:d4:05:c0:53:22:2c:af:e1:
                    0c:9f:59:e7:76:b4:bb:c3:03:7b:9b:88:07:71:5b:
                    52:69:62:d6:b1:3e:d4:39:06:e4:25:35:80:ed:c9:
                    62:58:90:cb:cc:84:ef:89:a1:db:0a:0f:00:d2:81:
                    3e:43:07:46:07:54:5c:74:5e:06:d8:da:7d:a8:c6:
                    2f:88:89:c3:24:73:79:0a:40:17:f2:e1:04:e5:ed:
                    47:17:3e:f1:1a:a9:94:01:18:18:c4:9c:ed:fe:65:
                    a6:e3:0f:3c:51:37:48:21:1a:f8:2f:ad:c5:fd:fc:
                    84:de:a4:d9:7a:29:3c:94:26:21:76:19:02:74:03:
                    f7:99:83:fb:41:07:57:f1:f6:ba:02:ee:2e:07:3b:
                    9b:de:ab:f4:b0:d5:14:bc:af:3a:28:4a:ba:6c:e1:
                    13:37:f1:3b:ce:1f:b8:0f:d5:b5:04:52:d2:8c:1b:
                    df:2a:ea:df:db:6f:b1:e1:43:bc:f5:f3:d3:fa:97:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:92:59:0C:BF:5F:F6:9A:15:7D:23:AC:7D:93:7C:66:A3:3B:DC:D3
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:80:0d:55:59:8e:37:04:0c:03:d8:81:76:12:2c:19:91:fe:
         83:ba:8b:db:82:b8:ff:0f:95:34:57:21:c5:0b:ae:02:f3:32:
         cb:bc:56:3b:d7:bc:9b:e4:91:80:28:1b:40:81:86:88:73:43:
         81:cf:24:cf:ed:f7:02:ec:43:eb:07:1b:db:bc:cc:e4:f7:c5:
         02:b7:25:ba:86:a6:bf:a8:73:38:c9:04:4a:88:25:f2:eb:cf:
         47:ee:09:87:95:36:5e:09:02:f2:f3:6d:54:7b:dd:12:3a:65:
         cb:85:de:eb:4d:dd:07:c8:85:76:c4:3c:e9:03:35:24:de:18:
         26:1e:26:02:d8:e0:aa:0c:e7:e2:73:c1:1a:68:82:31:8b:76:
         74:23:25:14:4a:98:78:0d:8b:4a:38:20:b4:ef:72:5e:ad:85:
         1c:ab:d6:eb:8c:ac:e4:fb:30:b2:17:96:a8:8a:42:38:13:d9:
         22:5f:a1:66:6a:78:ae:65:3b:37:37:5c:07:f4:89:d7:c2:ce:
         73:f1:f5:9d:d0:a0:12:ba:de:53:6a:01:55:30:85:25:41:43:
         bd:1b:d2:2e:0b:f1:8a:50:fd:75:ff:32:d8:1f:6e:1e:76:39:
         85:0d:bc:45:6a:f6:a7:d3:58:f4:47:2f:66:27:43:4d:87:04:
         f2:8f:d1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:23:32 2025 by rpki-client