This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File:                     1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier:          Z1+VnyO9ysgYnO+4o2rKXT9cnk6m0mL4Qopj+8kmbuM=
Subject key identifier:   FE:1F:2F:6D:01:FF:DF:10:09:38:CA:7E:D7:F6:D7:4A:A0:08:B9:37
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer:       /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial:       019B46940675AD454A0E57B092A7461C3BD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number:          14C2
Signing time:             Mon 22 Dec 2025 15:01:04 +0000
Manifest this update:     Mon 22 Dec 2025 15:01:04 +0000
Manifest next update:     Tue 23 Dec 2025 15:01:04 +0000
Files and hashes:         1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: pgQG13vRttvAEAlJaBp5dsky+rdMF24xDaq4hLY4qoQ=)
                          2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:46:94:06:75:ad:45:4a:0e:57:b0:92:a7:46:1c:3b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
        Validity
            Not Before: Dec 22 15:01:04 2025 GMT
            Not After : Dec 23 15:01:04 2025 GMT
        Subject: CN=fe1f2f6d01ffdf100938ca7ed7f6d74aa008b937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:5a:20:55:cf:78:eb:a5:5f:f1:53:a0:af:
                    96:6e:a5:4b:ff:96:c1:03:46:f8:04:90:49:22:eb:
                    fc:7b:86:8f:66:fd:21:3b:1a:21:23:3c:c0:83:b4:
                    0a:26:52:46:b7:db:d9:26:42:c8:4f:26:ec:13:ff:
                    46:5e:b3:68:ba:44:86:55:58:24:cd:46:2a:80:be:
                    14:0b:7c:75:ba:b7:41:f3:ba:be:74:68:42:a1:98:
                    41:cd:ca:f7:bd:d0:9d:f0:1f:81:96:bb:71:f8:ca:
                    1a:2c:8f:0f:f7:56:8c:04:68:a3:68:a7:a5:30:d7:
                    cc:d2:1b:fc:39:2d:92:41:8a:fe:1f:42:01:7a:90:
                    88:52:6e:ed:c0:22:85:e5:f7:c7:25:53:03:8d:a1:
                    c9:68:65:fc:07:2d:44:e5:fa:38:46:69:c9:15:ea:
                    17:15:94:5b:74:fe:7f:9a:53:67:db:77:a6:4f:48:
                    c2:3b:c4:5b:e1:1e:23:98:a0:d6:4e:0e:eb:b5:c6:
                    66:ef:d6:0b:00:41:39:2d:6b:c8:86:2d:c5:88:12:
                    ba:34:56:1d:92:42:c6:6a:cd:72:20:1d:2e:e4:5e:
                    62:c2:2b:6f:92:52:75:54:b3:8d:98:ab:96:f7:e4:
                    d5:f8:57:bd:c2:4a:32:3f:2d:78:1c:4f:fa:2b:ab:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1F:2F:6D:01:FF:DF:10:09:38:CA:7E:D7:F6:D7:4A:A0:08:B9:37
            X509v3 Authority Key Identifier:
                keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f0:c1:10:13:d5:85:ee:bf:b3:90:39:cd:94:18:c4:9d:87:
         6d:42:e0:41:4f:bd:95:b8:2a:57:05:48:ee:d1:84:b7:10:06:
         5f:7c:1f:ec:f3:5e:90:b0:22:b1:0d:d9:37:d0:c2:cc:fd:fd:
         d8:29:e7:ac:5c:2b:3a:af:7b:ac:29:82:b5:6f:74:82:5e:13:
         28:fd:e6:98:40:b2:44:02:b0:85:d1:32:af:67:a4:89:a5:35:
         64:27:9c:90:2a:e8:97:83:e1:b8:71:0a:db:25:98:a3:8f:75:
         f6:97:77:8b:15:22:a7:23:b2:53:23:df:a5:b7:17:58:7a:74:
         ed:b3:2b:67:19:d4:c2:d5:9c:aa:d0:04:0e:98:ab:b5:c6:fc:
         88:ef:bd:06:af:e5:ed:4c:cc:81:55:06:d3:10:b5:79:30:c8:
         af:8c:79:34:b3:28:be:8c:73:d1:dd:86:96:94:e8:02:65:2d:
         37:59:f4:cc:62:ab:e5:ab:df:5f:9b:fb:62:ce:09:78:cc:3a:
         4b:9e:4b:4f:83:52:41:ae:0a:e0:60:e3:22:e8:2b:2e:ff:6c:
         f2:1a:bc:f8:46:54:c6:bd:9b:42:01:a1:1f:d6:0e:24:ed:ab:
         ad:53:49:66:4a:67:03:14:c6:cf:3f:0c:e2:bc:ec:0f:c9:72:
         c9:cd:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 00:49:03 2025 by rpki-client