This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
File:                     mnuajNgZ9KkgM01-cuwjQIcNd0k.mft (raw, json)
Hash identifier:          2r7njOUBip/MAgOQjpg0C1bGlW6dwSsb6jOgDDc5RVw=
Subject key identifier:   3D:E8:F0:FA:F1:39:09:B2:CD:86:1A:9C:14:DA:7D:01:0F:91:A2:A2
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Certificate issuer:       /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial:       019B3EA338E227447C7010659E7B41DEE752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
Manifest number:          09F4
Signing time:             Sun 21 Dec 2025 02:00:42 +0000
Manifest this update:     Sun 21 Dec 2025 02:00:42 +0000
Manifest next update:     Mon 22 Dec 2025 02:00:42 +0000
Files and hashes:         1: IKlMOdkuHyBNZAexC-GSK-hjGW0.roa (hash: uA4Q2gsvRlV+sSD0ED9KoTfpAy2mm9Pd7yFqglVpNvQ=)
                          2: ksVbRwAzzCZHci4kH2kQ6u8coqY.roa (hash: QaqWPpVajjOVbtuXKzhecjPRXn+V4yoJpRPVeesXbzw=)
                          3: mnuajNgZ9KkgM01-cuwjQIcNd0k.crl (hash: qvCKW4UWgTZVXRcZKNQzdET3iknmH5kUK6rYqz2hvmc=)
                          4: uOUxSiBIbzpDJ7EaKMdYFnC-HEQ.roa (hash: P7xU7zipmmpWbMdR+tIYpEi0SHoYEWAWhVNCw2vAWTE=)
                          5: xH_26XIR8lPG36a6e_UAuv1nVvs.roa (hash: skoMmZjq1jRGHL/wRavlOMxLKJaRep20S4gGa/juF00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:a3:38:e2:27:44:7c:70:10:65:9e:7b:41:de:e7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
        Validity
            Not Before: Dec 21 02:00:42 2025 GMT
            Not After : Dec 22 02:00:42 2025 GMT
        Subject: CN=3de8f0faf13909b2cd861a9c14da7d010f91a2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:15:28:da:8e:35:95:b2:fc:7d:02:34:90:78:
                    ed:59:8c:e6:b6:4f:5c:bb:1d:ac:f2:03:96:fb:17:
                    69:d8:c2:67:ab:49:dc:c4:0e:c2:1d:9a:a4:cc:f1:
                    6e:be:e3:18:bc:b1:22:d5:05:f2:3b:f5:e7:33:1d:
                    8f:11:27:2c:0f:26:06:cc:fb:4c:b8:f0:93:37:6a:
                    30:99:40:42:f9:26:98:f6:17:39:3b:5d:85:e2:ef:
                    4a:43:f9:08:d7:3a:1e:b3:ef:fd:2e:b2:20:70:4c:
                    5e:51:7f:44:be:86:4f:45:10:b1:78:04:7a:79:a9:
                    80:d8:7a:8b:56:91:8a:ee:5b:15:59:bf:f6:16:40:
                    80:01:88:a6:c0:28:ae:37:bf:3d:ff:c2:61:d6:c2:
                    06:1a:13:b2:2b:4a:89:f8:4f:94:c3:3d:11:09:a0:
                    c1:04:6a:61:16:f3:fe:16:50:21:b9:76:5c:8d:21:
                    7a:bb:5d:cb:66:01:48:dc:0c:08:f4:aa:a6:42:14:
                    78:e7:6e:f4:9e:4b:e0:8f:da:61:6b:88:50:b4:b4:
                    f8:8b:e3:f3:5f:cf:45:cd:c8:9a:6c:d5:05:4c:82:
                    76:d8:b2:ce:b8:6c:f1:54:e0:f1:68:f6:a8:5f:6f:
                    f2:0d:67:c4:72:a5:6b:90:4c:96:9b:04:34:79:00:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E8:F0:FA:F1:39:09:B2:CD:86:1A:9C:14:DA:7D:01:0F:91:A2:A2
            X509v3 Authority Key Identifier:
                keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:18:2f:4a:df:4e:75:19:e2:a1:24:19:05:5f:65:2a:86:05:
         b6:ed:ed:ff:e9:7c:0d:77:66:e8:27:c3:42:b2:ab:8a:fb:bf:
         09:b3:d7:86:6a:b0:2d:80:dc:97:d6:5f:3b:3a:0f:91:6f:e3:
         06:ef:a2:c0:6e:76:fa:0b:b4:72:fa:6a:8b:bf:8d:10:29:61:
         84:0e:41:5c:7c:1d:08:1a:a2:35:c5:60:cd:a8:7a:1c:da:ea:
         47:d9:87:de:5f:39:3a:5d:43:7b:fa:31:9f:37:5e:10:68:53:
         f6:99:d7:8c:25:49:4c:c4:24:3d:ef:fc:04:29:bc:4e:f4:2b:
         9b:f5:c3:98:f4:7d:2d:13:2c:b3:34:d1:fe:ab:2e:0b:54:a8:
         26:83:41:09:bf:92:74:05:00:62:8f:83:f3:fd:c0:c1:a3:ec:
         c9:7c:0e:4f:b3:fa:26:82:85:d6:22:cb:76:6a:62:ec:ac:d1:
         d9:a6:2d:b2:fe:b2:41:23:36:11:32:63:19:06:eb:10:37:4d:
         02:fe:28:74:9f:dd:a7:a9:87:dd:24:19:ab:b0:a8:c3:80:63:
         47:9a:9b:6f:e4:27:85:c9:4f:aa:ad:d3:36:b7:e0:f3:07:e0:
         a5:2e:38:71:52:7c:48:ca:2f:4c:29:53:25:4f:94:ec:0a:f0:
         7d:7f:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:54:56 2025 by rpki-client