This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File:                     MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier:          QuuDAMlK1yVdgGi4xts5FX+uoDjiiMB3xg8LOhoysZ8=
Subject key identifier:   01:7D:E3:85:C0:EB:AE:32:76:F3:DF:A1:EC:7D:FB:CC:66:41:1D:06
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer:       /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial:       019B687B889A9B86F4F3D47B0205703ECFDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number:          179F
Signing time:             Mon 29 Dec 2025 05:01:24 +0000
Manifest this update:     Mon 29 Dec 2025 05:01:24 +0000
Manifest next update:     Tue 30 Dec 2025 05:01:24 +0000
Files and hashes:         1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=)
                          2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: dMcKdB42agWJDDw3iABJD0teZPA2tNZV4ZsnQkTtTlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:68:7b:88:9a:9b:86:f4:f3:d4:7b:02:05:70:3e:cf:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
        Validity
            Not Before: Dec 29 05:01:24 2025 GMT
            Not After : Dec 30 05:01:24 2025 GMT
        Subject: CN=017de385c0ebae3276f3dfa1ec7dfbcc66411d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:ce:ef:48:a9:64:24:fe:16:d8:b1:51:2f:
                    cd:35:05:f2:b4:95:a1:fb:33:5e:f6:92:cb:48:5e:
                    c5:40:cb:c7:b8:1b:8c:95:14:d6:b8:05:6c:36:74:
                    b9:9c:e9:59:ca:33:70:5b:6b:15:20:30:e3:b4:7e:
                    dd:ba:34:ab:4f:bd:0d:a9:0c:71:7c:ae:17:32:69:
                    ac:c1:b4:07:f7:10:98:ff:2e:8a:0f:73:ec:3a:0e:
                    77:f5:d8:c0:55:ca:c1:96:53:c1:30:f3:ef:08:28:
                    d2:4a:97:1e:3f:30:e1:54:43:64:d5:35:4e:d7:81:
                    84:4d:ad:b6:5d:3c:6a:df:d3:09:51:09:16:94:e7:
                    7c:f7:ec:4d:e8:3c:ee:ac:56:49:cd:53:22:0d:a9:
                    f3:15:cb:61:9c:0e:81:cc:87:b1:26:a8:99:52:fc:
                    dc:65:fc:91:be:90:48:e4:66:be:5c:09:25:d0:e8:
                    0b:25:5c:5c:d5:2c:3b:62:d3:aa:2e:2e:dd:09:1f:
                    6b:d6:7b:98:bc:e9:83:c1:4b:2a:f1:ae:c9:2a:f7:
                    c4:01:82:68:fa:39:dd:87:03:28:e3:53:9a:5b:e2:
                    c2:b0:e7:14:f0:da:8e:5f:a2:96:e6:52:85:34:16:
                    68:4f:29:db:5e:5e:2d:48:ca:e5:30:3a:6c:ea:4c:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7D:E3:85:C0:EB:AE:32:76:F3:DF:A1:EC:7D:FB:CC:66:41:1D:06
            X509v3 Authority Key Identifier:
                keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:db:46:69:e1:db:23:37:66:6d:e8:61:4e:a8:1c:5f:d3:97:
         a7:7d:30:14:cb:76:17:9f:05:d8:b8:4c:77:7f:f5:c1:7f:81:
         ca:f4:4d:0d:81:0b:c6:02:e7:30:de:fd:f2:0a:98:30:3e:50:
         79:bb:66:d9:06:dc:71:e8:90:50:67:1d:a9:37:10:27:4b:bd:
         ce:24:02:35:2a:51:37:00:a2:58:26:32:ec:d4:2b:68:a2:4b:
         ea:5f:51:e9:30:47:e1:d2:16:84:a7:09:2a:08:93:23:8f:ac:
         8d:2a:16:24:8f:7a:86:89:ac:4e:46:81:66:09:3b:c8:5e:d8:
         e4:5c:34:6d:4a:5a:a7:04:71:1c:8f:a6:40:c6:44:d5:f9:99:
         43:14:5b:07:ca:41:62:26:36:9a:a7:b9:71:50:12:ee:e9:75:
         35:02:75:b1:87:2e:90:9a:ad:3a:c5:10:e7:a1:ac:b0:d0:62:
         fc:e6:7d:b7:7e:24:0b:8d:3c:ee:0d:ee:24:c2:fb:81:3d:86:
         4b:af:be:d9:f2:d6:db:be:ee:da:ea:2f:ad:3d:6a:ee:83:89:
         ae:3d:7d:4f:c4:c7:fb:7a:28:58:63:29:01:07:5d:d6:23:6a:
         4f:90:67:10:b6:ee:cb:60:f2:8c:69:15:12:a9:d9:75:7d:09:
         21:bd:2f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 07:07:41 2025 by rpki-client