This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File:                     0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier:          Y94HUElJjuopSKv+49d4bMDHg9879DuwqyPv6pQu58w=
Subject key identifier:   5B:29:76:35:07:6C:C1:74:AC:82:0D:D6:BD:FA:80:97:96:DE:67:DE
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer:       /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial:       019B3CEBEDAD0A2FA8E181EC1C631B3BF39A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number:          1793
Signing time:             Sat 20 Dec 2025 18:00:53 +0000
Manifest this update:     Sat 20 Dec 2025 18:00:53 +0000
Manifest next update:     Sun 21 Dec 2025 18:00:53 +0000
Files and hashes:         1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: pBni+fw9ewhx8z8hUWU6uFDE66d9BwYv68R4TCzAur4=)
                          2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
                          3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
                          4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
                          5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
                          6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
                          7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
                          8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:eb:ed:ad:0a:2f:a8:e1:81:ec:1c:63:1b:3b:f3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
        Validity
            Not Before: Dec 20 18:00:53 2025 GMT
            Not After : Dec 21 18:00:53 2025 GMT
        Subject: CN=5b297635076cc174ac820dd6bdfa809796de67de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:00:65:72:f9:5e:f9:63:da:27:73:ce:61:
                    c9:b1:7b:ef:50:02:86:7e:d2:c7:2d:b3:f0:80:c7:
                    bd:da:13:45:c0:1f:54:be:bb:29:7a:48:a5:97:b6:
                    83:3a:1e:2a:65:01:89:59:8e:40:86:78:9e:1a:95:
                    a9:87:f6:de:de:1b:80:e4:21:4b:a7:18:9f:6d:2e:
                    e9:60:b0:f7:c8:85:5a:89:b9:32:c7:da:f1:e5:8d:
                    05:ce:b4:17:e2:c0:53:cd:fe:0a:cb:f0:31:af:80:
                    c0:72:b5:2f:47:d4:83:38:89:44:94:87:2a:47:c8:
                    38:d6:ff:9d:0d:d6:34:68:84:8f:89:a8:29:7b:8a:
                    bd:a0:d9:54:a5:d0:b9:41:bc:b0:c3:95:b0:12:4c:
                    8e:30:54:09:0e:3f:d9:9d:ab:88:07:63:7e:bd:ec:
                    a1:45:b7:e2:9a:72:22:58:5b:b6:2f:13:15:4f:7b:
                    78:df:65:84:3e:13:09:03:c4:f9:b8:6d:57:c6:9e:
                    89:0f:14:1e:19:8c:4a:ef:f0:c1:3b:73:b0:3f:b3:
                    12:1c:a6:8e:6c:72:2b:ca:42:55:83:d2:06:5f:37:
                    73:db:a9:95:b3:28:04:b8:5f:04:d0:22:fd:89:fa:
                    b7:9d:7a:b1:03:5d:59:53:c0:9b:c2:cc:11:d9:c5:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:29:76:35:07:6C:C1:74:AC:82:0D:D6:BD:FA:80:97:96:DE:67:DE
            X509v3 Authority Key Identifier:
                keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ec:0c:c1:47:3d:46:98:9a:fd:c7:18:62:b1:be:e2:25:85:
         ee:06:1f:fa:3b:e9:c2:9f:8d:34:93:0d:63:44:3a:30:c0:f2:
         04:ad:d2:e7:1a:6a:a4:e3:0c:b7:30:c2:7f:e1:30:13:64:2f:
         1c:25:be:b1:2a:02:2c:1f:64:d8:a8:8b:fe:d7:59:a7:62:56:
         11:d0:c5:b6:b3:d6:5a:7f:36:96:d2:f9:7f:1f:06:cd:fb:be:
         21:23:4d:4b:12:ae:f2:ab:25:98:4e:85:cb:30:76:c7:f6:2c:
         9a:95:03:0f:09:0d:cd:c9:c5:4a:7f:12:91:46:15:e8:2e:ba:
         ee:bf:56:de:ee:e2:57:f7:09:52:f0:ba:19:53:bb:d0:6f:9b:
         e8:88:63:75:c9:5f:75:91:73:78:e0:28:ff:4d:5f:7a:ef:1d:
         18:1a:5e:84:94:ba:a1:91:9d:11:01:5c:da:90:7e:55:e9:a2:
         e0:18:82:eb:00:31:c7:18:bb:22:79:8f:d7:eb:f2:92:a4:e3:
         4b:dd:a0:d4:b2:9a:a2:13:ce:7a:f7:bb:bf:da:f6:97:98:9b:
         29:e9:5f:c1:2f:09:28:e1:a8:09:41:f4:25:60:17:8d:ba:41:
         5c:c0:5e:c8:98:36:57:df:5b:8d:a5:5a:0e:6c:39:b9:0c:85:
         96:1b:d9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:14:18 2025 by rpki-client