This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File:                     mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier:          lSJDk0qk5cqw+qsnQn7DmxkEgCYPd5T0xZ6LgK01hHk=
Subject key identifier:   78:EF:EA:46:58:03:AF:BA:E7:6B:A7:DD:BF:4E:BF:1C:36:E9:D4:EF
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer:       /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial:       019B6BE98398B172B3CBBEA6838402C31017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number:          10C2
Signing time:             Mon 29 Dec 2025 21:00:24 +0000
Manifest this update:     Mon 29 Dec 2025 21:00:24 +0000
Manifest next update:     Tue 30 Dec 2025 21:00:24 +0000
Files and hashes:         1: MiKRdbGABW7H7vIb5R-saUTi7Ps.roa (hash: IcsqNxh/vQa5gPXIyGMaar+4UAAjRSfgokvENVkA4RM=)
                          2: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: K2HAFSQ4cyikHd2zlCahucHh6qTMp8Rp/q/pWWqn6p0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6b:e9:83:98:b1:72:b3:cb:be:a6:83:84:02:c3:10:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
        Validity
            Not Before: Dec 29 21:00:24 2025 GMT
            Not After : Dec 30 21:00:24 2025 GMT
        Subject: CN=78efea465803afbae76ba7ddbf4ebf1c36e9d4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d7:23:71:01:da:0d:20:e6:73:7e:ff:4e:a6:
                    75:77:f3:10:4e:ed:f6:d5:c7:c2:86:c1:50:23:d9:
                    96:7d:5d:b2:c3:78:34:21:fe:0a:b8:c7:6a:0d:e0:
                    b1:24:b7:ec:93:1c:83:99:0c:62:b2:5e:49:34:4b:
                    bb:a0:53:b3:4b:c8:0b:0c:91:e5:24:d1:73:56:fd:
                    69:69:86:2a:18:17:99:bd:8a:ca:14:1e:17:7c:b6:
                    8b:82:95:1c:29:bc:d2:16:bf:df:16:89:a9:40:84:
                    0b:2e:df:70:5c:f0:4a:bc:50:16:37:2e:b3:82:1a:
                    88:29:59:62:0e:e6:fd:ff:d0:de:2e:ef:23:61:6d:
                    74:5d:3b:60:37:57:0d:22:43:fd:0e:e7:50:51:be:
                    7c:5e:1f:dd:52:bc:65:08:31:53:76:3a:21:cb:84:
                    14:5d:4f:62:83:65:ca:53:4c:bc:d9:1e:7f:e0:d9:
                    82:ad:06:3e:ae:f2:31:2b:2c:b9:26:6f:fc:18:da:
                    07:1d:27:42:70:2b:f2:c8:c8:39:b9:d1:e8:d6:bd:
                    8b:ca:56:da:a5:62:5e:6f:0b:5c:2f:7d:5d:c5:ef:
                    81:93:8d:4f:08:3f:a5:ee:5f:ee:26:14:e6:e9:f4:
                    bb:be:17:f7:69:f5:f3:79:b0:57:b8:ad:6c:da:6f:
                    c3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EF:EA:46:58:03:AF:BA:E7:6B:A7:DD:BF:4E:BF:1C:36:E9:D4:EF
            X509v3 Authority Key Identifier:
                keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:44:47:54:ef:3d:ca:7a:b1:68:29:2e:88:d3:33:29:ff:31:
         68:c2:4c:cc:04:ad:76:bc:97:41:c8:26:20:17:cf:c6:b8:65:
         3c:d2:1f:d6:a3:6c:73:91:7b:07:83:77:a1:b8:42:52:d4:53:
         ea:3f:98:8e:a3:10:ab:09:ed:6b:76:c9:3e:9a:a4:b1:c0:26:
         2b:20:0c:36:96:b6:e9:5b:00:ee:ad:79:82:61:b9:4d:2a:1c:
         f7:8f:91:2c:ed:d5:e2:f5:41:3e:34:b9:88:15:ab:dd:b6:93:
         3a:57:56:3a:47:54:97:37:ce:c0:60:56:11:15:83:f7:fd:59:
         c8:ec:7c:98:f2:a1:04:2a:56:42:ed:2d:ec:5e:20:18:45:09:
         3f:f1:c0:84:bd:41:60:7f:09:0a:10:b0:60:4b:01:fc:34:50:
         ec:fd:de:67:3d:20:2e:81:d8:2f:99:f6:bf:c9:30:0b:f5:4c:
         34:40:4c:91:8f:ed:31:a1:8d:ed:23:24:e8:d7:49:f1:d7:48:
         84:15:4e:fc:68:b7:85:9e:3c:ea:73:5b:2d:70:46:22:20:6a:
         e6:8b:c9:af:d4:96:84:ba:9d:c9:d1:cf:97:63:62:c1:d4:2d:
         09:bb:e4:72:a5:21:12:a8:81:16:d0:0f:85:72:b6:5a:59:f6:
         24:32:84:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 04:56:38 2025 by rpki-client