This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File:                     mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier:          SzIYdQMkODuEzdphKg4/izONpU08Kop8L8QF24t5uCg=
Subject key identifier:   96:53:89:36:7A:F7:C8:9A:C2:0F:43:6F:A2:BD:DC:43:BC:64:B9:FA
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer:       /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial:       019B45133028108C05E2AC52A4C16AB8A3E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number:          0484
Signing time:             Mon 22 Dec 2025 08:00:43 +0000
Manifest this update:     Mon 22 Dec 2025 08:00:43 +0000
Manifest next update:     Tue 23 Dec 2025 08:00:43 +0000
Files and hashes:         1: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (hash: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=)
                          2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: FyaYb0K4TDmjXSV7OTYruM2bpSC5FKQnqM1hVvBHfis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:45:13:30:28:10:8c:05:e2:ac:52:a4:c1:6a:b8:a3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
        Validity
            Not Before: Dec 22 08:00:43 2025 GMT
            Not After : Dec 23 08:00:43 2025 GMT
        Subject: CN=965389367af7c89ac20f436fa2bddc43bc64b9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:96:66:5b:3c:cd:fd:37:53:c6:01:9d:b4:
                    ee:9e:8b:39:b8:a9:19:0f:60:f3:6f:11:7e:fc:b5:
                    79:31:15:c4:6d:16:ec:b7:9f:dd:df:ca:e5:0c:5b:
                    16:70:83:5a:01:b8:7b:f7:41:5a:c1:b9:f0:76:97:
                    b4:c4:60:e1:7c:98:fa:8c:ab:9f:1e:64:78:8d:b0:
                    a6:fb:63:80:5e:0e:8f:ad:5a:17:d5:c4:06:63:49:
                    86:79:0d:05:b2:4c:b4:c2:1f:35:7c:35:5f:36:f7:
                    b1:75:71:e9:f2:03:8c:f2:02:4e:ab:fa:0f:0c:2c:
                    23:fd:8b:ba:10:5d:b7:e1:8e:8c:7c:5c:80:55:94:
                    cc:bd:41:09:46:1b:8a:b0:42:e4:bd:03:75:59:d5:
                    ad:2b:81:a5:01:2e:81:ff:c8:91:76:17:30:7e:00:
                    16:4c:d3:41:f2:f5:c7:47:b5:d0:64:76:0b:80:aa:
                    b2:97:7f:2f:b4:08:d3:38:ae:b7:fc:31:47:3a:e1:
                    bf:6e:df:b5:e7:f0:2a:6c:42:1c:b6:a4:30:10:68:
                    82:3b:5c:d6:a2:23:38:12:02:64:9d:36:27:d4:96:
                    14:a5:64:77:b4:c6:4e:4a:a4:b2:e5:39:d6:c4:e1:
                    53:f3:b8:09:0a:3e:f1:9f:19:3b:34:e2:7c:d4:fc:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:53:89:36:7A:F7:C8:9A:C2:0F:43:6F:A2:BD:DC:43:BC:64:B9:FA
            X509v3 Authority Key Identifier:
                keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7d:ec:78:29:20:cf:4b:b9:9d:c8:4d:95:36:1d:86:4d:02:
         c4:f8:64:5e:e3:56:22:dc:35:ac:ae:9f:12:58:4d:7a:00:df:
         b7:a6:b4:27:ad:9c:30:74:c2:68:61:1b:c7:27:91:33:22:2a:
         2b:de:34:50:e1:a4:92:7c:b3:ce:d5:7e:e4:5e:2f:2f:37:23:
         75:61:92:62:48:0c:1a:79:fb:0a:fe:68:72:8c:40:8b:a5:c8:
         fb:77:e5:fe:8a:0f:00:8f:8a:05:0c:c7:a5:b3:6a:aa:2a:38:
         b4:d3:4a:bd:3d:6b:a2:58:07:14:3e:8d:20:cd:e7:2b:f5:bc:
         20:0e:53:1f:62:b9:ca:3b:20:43:78:57:07:47:8d:e4:bb:35:
         1b:8b:28:ea:c3:53:ad:62:26:96:37:15:c9:0d:b2:06:26:4f:
         88:ce:bd:1f:6c:b2:d0:a7:63:8d:48:d2:b3:2f:72:3f:9f:25:
         60:16:c8:9c:78:28:25:c0:bc:cb:9e:68:4f:17:75:dd:3c:d1:
         47:c5:6b:cc:f9:b2:b4:34:af:05:f9:00:0f:85:24:30:56:5a:
         2a:1d:42:5b:bb:f3:b3:1c:d5:af:bd:b7:0d:f7:13:cf:01:bf:
         1b:fb:af:e7:1e:f5:df:ef:cc:a4:b7:bf:f6:b4:99:c8:0d:23:
         7c:85:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:05:19 2025 by rpki-client