This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File:                     mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier:          HYquB1nO5+LZDk0TaoVMamkxOyAgbvfqa/N5GkK8UiI=
Subject key identifier:   AB:77:C7:AA:B3:D1:5B:D0:22:5C:AC:5D:83:89:EF:DD:AA:15:F3:1F
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer:       /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial:       019B35A0F138056235724AEBF0A6C4BC5FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number:          1306
Signing time:             Fri 19 Dec 2025 08:01:38 +0000
Manifest this update:     Fri 19 Dec 2025 08:01:38 +0000
Manifest next update:     Sat 20 Dec 2025 08:01:38 +0000
Files and hashes:         1: ONDqQfjr9_AJ9RydMAScKqXbPqA.roa (hash: tzIBuHIsI+gH6B58aDq25YyBMDZoGOkfi5bBeLvI+/k=)
                          2: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: NfTlUFTcm7I2PqC+XviIJSM6vmTlVbffx2g4OuG9YfY=)
                          3: sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa (hash: Mg+YYDsRO2iqoqy0HjPvZxJm7jFKR4if92J93XJagMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:a0:f1:38:05:62:35:72:4a:eb:f0:a6:c4:bc:5f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
        Validity
            Not Before: Dec 19 08:01:38 2025 GMT
            Not After : Dec 20 08:01:38 2025 GMT
        Subject: CN=ab77c7aab3d15bd0225cac5d8389efddaa15f31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0d:92:30:1d:7c:7a:17:d1:82:0f:a4:e9:a5:
                    98:df:6c:91:bc:d0:8c:7a:17:f5:32:f0:a2:dc:ac:
                    3a:46:be:92:14:35:fc:15:50:67:dc:00:87:42:8b:
                    7d:18:99:8e:fe:95:3f:38:a2:66:8b:38:4b:5b:49:
                    8e:96:a5:f5:10:1e:23:52:9e:81:21:0f:ff:4d:3c:
                    0e:e1:7a:b2:fb:56:50:52:52:6b:06:85:e0:5c:df:
                    3d:8d:a4:79:dd:a4:ef:71:73:76:11:2b:84:07:72:
                    38:d5:52:8f:bf:67:e3:b1:cf:8d:f9:69:89:36:f8:
                    25:c7:60:eb:d2:fd:42:8a:4e:6c:5c:a5:0c:55:fc:
                    ed:54:8a:7b:86:21:d2:19:93:c6:d9:40:c4:47:4a:
                    6f:7f:a9:13:a9:6f:ff:d1:e7:b7:15:9d:cd:b5:10:
                    49:df:15:48:c0:fa:b6:09:b1:2e:17:35:74:58:36:
                    1c:0f:e8:af:88:84:62:82:c3:0a:0c:99:7b:6e:5e:
                    ab:61:1a:d0:bb:0d:1c:15:5c:9a:29:81:9a:98:d0:
                    65:fb:bc:39:c5:d3:47:cd:3b:db:cd:f8:1c:c8:19:
                    8b:2f:8c:22:70:78:4c:71:57:d9:28:dc:72:d9:93:
                    ea:c5:34:21:c7:4f:aa:cb:27:a4:88:54:fc:98:f7:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:77:C7:AA:B3:D1:5B:D0:22:5C:AC:5D:83:89:EF:DD:AA:15:F3:1F
            X509v3 Authority Key Identifier:
                keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:14:15:ff:65:6c:be:d3:7b:19:19:aa:58:1f:94:8d:82:dd:
         e3:53:82:c4:b3:c2:84:df:00:06:04:7b:1d:44:6d:2c:9d:d0:
         c8:11:51:9f:62:65:21:4f:23:fe:e3:73:23:31:bc:06:a2:91:
         11:3f:04:ac:03:07:53:10:78:07:f3:85:9b:74:99:01:34:11:
         0a:ae:bb:95:51:4e:0c:04:07:fa:23:eb:09:f6:15:86:72:c2:
         2a:0d:03:ca:fc:57:22:91:6a:ad:31:ef:e6:ee:0a:94:86:48:
         24:d4:04:8c:d9:a0:88:90:5f:94:bb:72:d9:38:ed:ed:bf:69:
         48:df:5d:b4:1b:f3:9b:36:2a:e4:0d:6e:fb:e5:4e:4b:e0:4b:
         94:51:af:8d:95:97:e3:0b:34:c7:26:50:e2:72:56:c3:ef:6b:
         09:e4:22:d4:c0:ae:de:b5:37:fb:f7:96:05:99:e5:98:09:f2:
         65:79:08:45:1b:d6:53:b0:cd:f8:71:43:93:48:8b:ca:1a:24:
         b9:73:e6:19:0e:62:81:47:9f:09:38:8f:ac:4a:05:9f:c9:ff:
         88:92:53:e3:10:3c:d9:d0:ac:5a:12:a0:72:de:03:76:5a:54:
         17:39:67:d0:08:b9:25:cc:73:47:e2:f6:28:06:87:df:45:dd:
         0f:fa:d1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:58:17 2025 by rpki-client