This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File:                     mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier:          Dx9JvuHhvuEICTkFTTGxsPoc2VMu8vNcdwop5zCnkqY=
Subject key identifier:   C5:DA:28:5F:71:CB:38:BE:F5:DF:2A:AF:52:CD:18:36:D2:59:7D:02
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer:       /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial:       019B3D90EB7C47AD172FE06165E05F8804CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number:          178E
Signing time:             Sat 20 Dec 2025 21:01:06 +0000
Manifest this update:     Sat 20 Dec 2025 21:01:06 +0000
Manifest next update:     Sun 21 Dec 2025 21:01:06 +0000
Files and hashes:         1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
                          2: 8xwaS60LVGP0-okttlRwMxeXtAs.asa (hash: eEQj5lWgE4ntot+6zad5rM7H1/i9Quj9OILVi+LsDxQ=)
                          3: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
                          4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: Klt75iICR72/bav8THrhbRZxdyH8+PNzox5dD0xnYPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:90:eb:7c:47:ad:17:2f:e0:61:65:e0:5f:88:04:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
        Validity
            Not Before: Dec 20 21:01:06 2025 GMT
            Not After : Dec 21 21:01:06 2025 GMT
        Subject: CN=c5da285f71cb38bef5df2aaf52cd1836d2597d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6e:4e:0c:b8:a4:cc:6d:33:28:95:74:44:23:
                    05:bc:65:ed:2c:ef:17:b0:53:2f:de:ee:e9:65:fd:
                    fa:17:fc:0d:9f:79:f0:45:ac:a0:6c:d3:64:29:07:
                    bf:73:7d:15:78:8c:d7:b6:40:98:07:59:1b:b2:13:
                    63:e1:df:44:f5:fe:90:53:f0:e7:00:9e:62:4c:e2:
                    a0:89:0a:7f:3e:f5:b4:e2:df:db:c7:af:22:46:4c:
                    9e:21:8a:c9:a7:31:a9:56:b8:c7:9d:5e:c8:f6:36:
                    f8:83:f4:14:3f:12:c3:fa:59:c7:30:91:58:1d:b5:
                    d7:ba:b4:b7:af:ca:b7:33:59:d0:47:4f:2f:60:d8:
                    94:09:70:94:a0:82:15:60:fc:44:2b:e0:29:1c:e5:
                    0e:ba:af:07:9b:f2:79:f4:c2:f7:59:d8:04:29:12:
                    f8:e6:70:11:e8:33:a4:47:8a:53:7a:55:ba:b6:4f:
                    a4:3a:be:0c:63:62:b0:7d:1f:dc:24:23:79:83:8b:
                    7c:f2:43:d0:2f:fc:15:22:f6:1f:b9:97:34:0e:45:
                    ab:71:4c:21:f7:33:47:ba:92:7a:14:fb:4a:9d:8d:
                    32:86:f5:42:f0:24:c0:49:a7:27:37:a5:d0:c4:9a:
                    b0:0e:20:25:0b:b8:b0:34:e7:97:0c:9a:61:e7:79:
                    e7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DA:28:5F:71:CB:38:BE:F5:DF:2A:AF:52:CD:18:36:D2:59:7D:02
            X509v3 Authority Key Identifier:
                keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c6:3e:fc:3a:7c:1f:af:53:a1:89:4d:12:9e:e4:9e:c2:10:
         42:a8:4b:c1:ad:93:75:5a:ce:d8:3d:15:4b:08:9f:e8:24:da:
         66:38:2d:bf:7c:11:54:cf:7a:e4:1d:f5:5e:15:f6:91:a1:65:
         13:c1:59:fd:2a:92:5f:41:76:47:82:ae:4a:bb:b1:65:f8:51:
         83:f7:f5:09:7f:b8:bc:1a:a0:a6:c4:e7:a4:37:2e:d9:64:d1:
         2a:49:35:30:19:42:35:d5:8a:07:75:06:86:f2:f8:31:17:55:
         68:56:0c:04:89:a6:75:81:9d:da:a2:40:9e:0c:a0:68:01:68:
         07:2d:e0:c7:af:51:0c:13:ca:b6:1d:a6:c5:4a:a8:cb:91:bd:
         3d:68:03:21:71:4e:9c:ac:30:27:45:26:ca:90:4f:bc:c1:96:
         35:ee:59:88:40:94:6d:87:3d:81:ae:e8:45:ec:74:96:5c:9a:
         4f:3b:ae:20:56:41:a3:d5:d5:6c:68:29:0d:67:ed:38:18:32:
         56:87:16:48:57:e2:f2:05:c3:9a:4c:e3:02:d9:c0:a5:2d:b4:
         de:c8:26:40:fc:49:6f:c0:33:fe:b2:c2:95:60:f0:ca:58:dd:
         e0:da:3e:6e:41:94:59:62:c5:96:54:35:b7:ef:73:78:e8:68:
         1d:74:56:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:08:14 2025 by rpki-client