This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File:                     mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier:          9w+2Zw+Wm75h9cfYkftqe8Roaom4REZCneEgPJ+uNFU=
Subject key identifier:   C6:D8:53:D5:16:03:C8:E3:27:97:CF:0C:36:4A:48:92:7E:51:A3:28
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer:       /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial:       019B53AC188830D7DBB90448AFEB991A90CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number:          053D
Signing time:             Thu 25 Dec 2025 04:02:25 +0000
Manifest this update:     Thu 25 Dec 2025 04:02:25 +0000
Manifest next update:     Fri 26 Dec 2025 04:02:25 +0000
Files and hashes:         1: D8t9LetVYSLLb_TLh9xUmyS0_cE.roa (hash: 6STeuA04n6UbXt4NmyiolKvnu452YSYrUoVlj4sED8M=)
                          2: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: XeGX0AyW0abfwVRLApqKRfwSohlHbePiqYZDWYbdBrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 04:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:53:ac:18:88:30:d7:db:b9:04:48:af:eb:99:1a:90:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
        Validity
            Not Before: Dec 25 04:02:25 2025 GMT
            Not After : Dec 26 04:02:25 2025 GMT
        Subject: CN=c6d853d51603c8e32797cf0c364a48927e51a328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e1:18:81:41:27:15:96:c5:20:c2:0f:1a:34:
                    dc:45:30:d1:62:4c:f7:16:02:1a:4d:ed:eb:50:12:
                    85:b7:15:c3:b1:cc:86:62:86:4b:03:5b:f9:b2:92:
                    e8:1e:d0:fe:71:b9:68:53:2f:00:92:22:47:ed:97:
                    83:08:67:7a:da:df:4b:5c:5f:10:ee:e8:8c:d5:89:
                    0a:19:ed:28:9f:57:5f:5c:42:d8:e0:c1:99:8d:eb:
                    24:38:f6:b1:3b:4d:47:7c:c7:8a:a7:c8:69:e1:1c:
                    d4:9f:ec:3e:e9:82:99:c3:98:e0:b6:55:59:2c:6e:
                    42:7c:b4:33:c0:18:70:06:40:79:32:8c:8d:31:04:
                    8b:e9:c6:65:26:07:7d:a2:7c:eb:2e:12:b7:6e:1f:
                    ef:cc:ac:b5:f0:eb:b3:09:1f:2f:e9:80:12:a7:6b:
                    c3:07:22:82:06:e3:c1:36:93:fc:26:8d:88:de:62:
                    77:1b:d0:e4:4a:20:25:c0:30:e0:2d:68:73:4c:34:
                    34:a0:c7:25:a0:fd:f3:37:5f:7a:8c:d5:22:d7:7b:
                    8f:70:ea:f3:b5:bc:c5:93:28:9c:d8:de:23:71:b1:
                    d4:b4:b1:07:45:43:32:d4:86:a5:5f:2c:d5:bc:87:
                    18:53:66:76:1f:b8:0f:38:03:42:b3:e3:62:31:3a:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D8:53:D5:16:03:C8:E3:27:97:CF:0C:36:4A:48:92:7E:51:A3:28
            X509v3 Authority Key Identifier:
                keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:71:cb:08:46:c4:d5:02:0c:ba:b0:42:c8:0a:79:fb:24:4c:
         85:64:2c:6f:b3:b8:aa:76:55:65:f7:d2:e9:1b:93:10:77:4e:
         1e:54:1a:0a:83:dc:41:4e:0b:d7:5a:36:f4:14:dd:ec:66:ec:
         69:3f:6b:a5:13:c9:fa:b3:cb:68:9e:f3:e8:1d:20:a1:ab:93:
         58:e3:86:03:23:7f:a0:1a:90:ed:61:20:43:1b:59:b9:31:3a:
         32:b2:db:14:6d:7c:46:99:5a:09:02:e4:3d:6e:1b:aa:9e:ca:
         71:bc:76:a4:79:44:e9:33:61:a8:9b:69:6a:1a:91:e5:b5:b4:
         c0:3c:5a:6b:e5:e4:9d:8d:7c:0c:5c:87:e6:ac:a8:37:db:93:
         e9:3a:ed:ad:96:71:e7:a2:4d:74:97:2a:69:e3:b6:90:31:52:
         b6:8e:1e:d2:7b:f4:4a:45:fd:7c:79:8b:c3:4a:c2:b3:86:b5:
         30:ad:2a:07:4a:31:96:14:0a:96:5d:7a:0c:96:f1:b5:cb:08:
         fd:b4:a8:c6:a1:9c:84:03:dd:b3:64:94:99:59:15:46:89:f0:
         ee:8b:f3:4f:fb:a3:00:cb:93:1a:23:58:c5:65:25:f8:a0:2c:
         aa:25:68:f2:1b:97:63:8a:90:78:f0:26:03:ee:d3:7a:1f:47:
         ac:35:0b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 14:20:12 2025 by rpki-client