This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File:                     99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier:          KV1iBQI+l7EvO3lRvysDhxwc9dDzhIw1WINtKSaNY0o=
Subject key identifier:   04:23:0C:53:F0:DC:15:C0:52:E7:47:F0:53:23:D2:85:56:56:7F:B5
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer:       /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial:       019B2A09AFB560388B3F18499E2286A65160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number:          1786
Signing time:             Wed 17 Dec 2025 02:00:36 +0000
Manifest this update:     Wed 17 Dec 2025 02:00:36 +0000
Manifest next update:     Thu 18 Dec 2025 02:00:36 +0000
Files and hashes:         1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: QiVCurf+P3y82Io849WCDww/lUeyvex3FVjC3X/4GOg=)
                          2: FYg_psCFhdR_n5VNhP25gINYx6M.roa (hash: h+fjKLWgHVAllkPWeuz1NL6KyEoRyUzS/iNO+yf1JFI=)
                          3: ZhvVa7SGL0ihaaWqEDQl81ffNSw.roa (hash: ytKQDKvlQVK8AL0ByiBKUDRRuwN5/717YGo/cNpO++k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:09:af:b5:60:38:8b:3f:18:49:9e:22:86:a6:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
        Validity
            Not Before: Dec 17 02:00:36 2025 GMT
            Not After : Dec 18 02:00:36 2025 GMT
        Subject: CN=04230c53f0dc15c052e747f05323d28556567fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:81:6a:aa:04:b1:5c:be:09:2a:87:9c:e7:36:
                    ea:3a:af:29:a0:5f:db:3f:58:c7:34:97:8c:1f:7e:
                    93:6d:6b:25:cb:9b:26:c4:e7:94:5d:ff:a4:2c:8e:
                    71:a4:cd:29:d4:c9:cf:85:16:ea:3a:7c:87:a7:a2:
                    a6:f9:7a:d8:f3:ee:c4:25:88:3a:55:91:0c:a9:6f:
                    3a:9e:d6:78:2e:4c:7f:bf:7a:cc:59:6b:ef:76:34:
                    e5:3e:a5:8b:6e:19:08:5a:fd:e0:d3:2e:88:81:64:
                    88:3d:9a:00:dc:19:70:f8:51:67:4f:91:bb:27:86:
                    28:55:82:57:cd:41:fc:9e:53:f9:68:a7:fb:91:49:
                    d0:be:d8:37:8d:4a:de:60:ef:49:aa:de:08:13:64:
                    e9:ed:f6:07:cb:35:a7:0d:07:d4:74:54:3e:2c:f4:
                    53:3f:26:3f:9a:3e:55:39:f3:3c:44:73:33:71:8b:
                    2a:d0:47:1d:99:87:bc:36:ab:23:18:46:f6:3c:5c:
                    f3:35:11:cd:0c:ed:db:ab:09:5b:49:aa:3c:23:c7:
                    bd:45:08:4d:1d:c9:a2:4b:0a:eb:52:61:80:23:f3:
                    a1:e7:04:0e:b6:8c:7d:bd:78:05:31:eb:a3:3a:ea:
                    be:b1:53:d9:b1:fe:fb:e8:eb:bc:9d:27:a7:b6:d4:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:23:0C:53:F0:DC:15:C0:52:E7:47:F0:53:23:D2:85:56:56:7F:B5
            X509v3 Authority Key Identifier:
                keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8d:ff:5b:44:04:ca:31:76:d3:b8:3a:f4:c8:1c:8e:26:5b:
         e6:45:00:4d:f3:77:8a:9f:25:0f:5e:e0:80:f4:6a:84:3c:79:
         38:79:2c:97:6e:ff:27:b8:8d:0d:fc:c3:13:5f:af:71:e4:77:
         d3:22:38:40:3c:4a:75:86:1a:12:4b:12:06:aa:7d:ab:c2:99:
         98:f1:44:a9:04:54:b0:79:1c:ee:9a:59:75:0c:26:27:59:a7:
         d4:2f:bc:4f:75:18:88:7c:80:3d:bf:4a:31:82:1d:87:e9:7f:
         36:79:b5:b5:71:c4:85:a5:a7:aa:c3:18:87:9d:51:43:53:18:
         a0:90:93:2c:2c:ba:c3:c1:3c:b3:33:64:fa:25:3f:08:a8:8f:
         e1:df:b6:69:6b:8a:f3:dd:a7:ac:b1:9d:fb:4d:a0:ae:84:1d:
         96:41:67:a3:44:c0:4e:5b:50:23:0f:c8:f7:f4:04:7f:60:bc:
         4a:93:15:08:55:73:3b:11:e7:d0:d3:ab:5e:60:15:45:70:ff:
         9c:d0:be:9d:18:48:18:c4:ac:c4:d0:4f:dc:94:a2:ac:66:25:
         76:d8:a1:9f:51:89:c1:40:8f:6c:24:53:0a:71:bb:ae:c7:29:
         00:00:be:5f:2e:33:71:fb:f8:7d:a8:82:f3:ee:f4:00:a5:d8:
         c3:72:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 09:49:54 2025 by rpki-client