This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
File:                     mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft (raw, json)
Hash identifier:          aJeNPQn7fmYeOg71n4IJ76SM9xHIZMJM+RDJXVqHDYE=
Subject key identifier:   75:B6:AA:B5:23:0E:65:F3:28:C0:C0:32:CF:AA:B9:2D:93:B7:9B:14
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Certificate issuer:       /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial:       019B3FED3CFE0EB42778EE2B565A77642E69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
Manifest number:          12FF
Signing time:             Sun 21 Dec 2025 08:01:10 +0000
Manifest this update:     Sun 21 Dec 2025 08:01:10 +0000
Manifest next update:     Mon 22 Dec 2025 08:01:10 +0000
Files and hashes:         1: 1TI05eho0ULeAD5-mChu4OLasSY.roa (hash: dnqOUYMdm6jTT4ig/7qC5Cu0cKdt4coknRVuLnEzoMU=)
                          2: AbeXxMAIYICgkaX-fBnbEp53bv8.roa (hash: ynNpYcgV4hdjp9DdvyUSRnDletdqtQe2jwWhjrvFcUo=)
                          3: FTViE_nB5flZhX11bNZxevHcOSU.roa (hash: lrLA6ycucMTnLRv1QAGUJwgfaap5iDlR2rLRrE7Bf+E=)
                          4: hwStZWCkN0znsEHFOvqChrtzc7c.roa (hash: 4luRIokJUNkyJpPCWC/8Wc7YY6uXHWjOdgFXaseESDA=)
                          5: mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl (hash: 5w9rk1s6Ti+i4birhDTIGxbENiJbYEtaRwYWLynzgxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:ed:3c:fe:0e:b4:27:78:ee:2b:56:5a:77:64:2e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
        Validity
            Not Before: Dec 21 08:01:10 2025 GMT
            Not After : Dec 22 08:01:10 2025 GMT
        Subject: CN=75b6aab5230e65f328c0c032cfaab92d93b79b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:fe:6e:16:6f:72:3c:62:b0:13:4c:19:0a:
                    4f:7c:4d:98:b9:4d:68:dc:d1:63:9b:1d:c4:2c:34:
                    cf:a1:9a:66:11:26:1c:a0:43:47:0e:a2:fe:c3:d9:
                    6b:c1:96:f3:a5:b6:7f:70:74:da:bf:b9:f9:4d:36:
                    aa:da:da:5f:38:5d:dc:6c:4f:0b:21:b9:70:91:2f:
                    ec:0e:05:b0:a3:bd:a8:74:a5:b4:52:52:a8:60:34:
                    1e:2d:c1:34:ec:e5:3d:44:6d:9e:8c:98:5c:69:f4:
                    bd:61:bc:28:4d:e5:7a:f0:91:92:a4:04:0e:b7:82:
                    66:59:2f:68:ba:21:62:c6:17:f7:e5:fc:89:ba:4f:
                    63:a9:db:47:d1:b4:dc:12:18:7b:3c:96:5f:85:cb:
                    47:d0:da:d1:91:f0:21:88:73:02:1a:34:74:00:6f:
                    21:18:33:91:89:9e:e6:31:fb:66:a2:4e:60:62:ec:
                    9c:a0:76:95:a4:f1:89:63:6a:19:3f:2f:f0:eb:e7:
                    8a:1e:86:59:de:9a:58:32:30:55:ab:49:a8:b4:2a:
                    c6:72:b8:ab:a6:5f:02:5a:89:f7:f2:bb:f4:fb:e9:
                    0c:37:dc:6d:66:8c:cf:02:7b:52:ea:a8:46:86:c4:
                    5d:2e:3f:5d:9e:9f:c4:f1:1f:64:60:20:1a:b3:45:
                    09:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B6:AA:B5:23:0E:65:F3:28:C0:C0:32:CF:AA:B9:2D:93:B7:9B:14
            X509v3 Authority Key Identifier:
                keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f6:78:3e:2e:e8:6e:eb:5f:3b:79:91:b6:bf:a7:20:73:ce:
         cb:13:35:37:f4:f2:8e:97:0e:90:84:96:44:9f:04:04:63:e5:
         d8:45:58:06:9b:8b:66:3e:d8:d3:54:33:fd:88:0c:52:35:ae:
         c7:16:18:db:15:bc:89:37:10:57:88:2d:b0:5c:f4:6b:bd:61:
         39:8d:d0:0f:fb:6c:10:7b:b1:aa:d2:37:98:00:4d:3a:56:20:
         6f:5a:5a:b9:78:31:d3:b1:ab:48:a4:e5:e7:bf:b3:7f:13:61:
         26:53:a1:4f:98:0e:59:2d:4a:23:74:12:a3:b1:65:88:70:86:
         42:3c:4a:08:1d:94:19:55:5c:dd:42:05:ad:1b:84:b1:6c:31:
         db:1c:7f:d0:c8:69:0c:55:25:f2:9f:e3:1e:71:2f:d6:b3:9e:
         0d:3a:a4:26:ba:13:53:d8:03:e0:63:c1:4b:86:99:8f:a3:b1:
         ef:1b:e2:9b:e4:63:11:1f:be:a1:f2:f7:53:b3:7b:bf:0a:8e:
         b8:b9:a5:fe:97:02:8f:37:71:e6:08:a7:c9:04:a2:7f:53:eb:
         43:6f:29:61:98:ed:46:ff:31:b2:16:6f:ad:45:0f:d8:4e:10:
         3a:1b:f4:9b:ba:55:6c:1c:a3:b2:11:a8:92:da:9c:ea:59:8d:
         9a:d8:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:32:13 2025 by rpki-client