This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File:                     M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier:          x7KraL0Z9yh4DIc8IJ+9Fvr+45ftswIDSF6qwi7auJU=
Subject key identifier:   76:F8:DD:EB:D3:0F:18:52:A4:28:05:6A:E5:A6:CB:E7:36:5B:A9:15
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer:       /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial:       019B3EDAFA229A4789C418C4EC747B1E39D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number:          16E0
Signing time:             Sun 21 Dec 2025 03:01:36 +0000
Manifest this update:     Sun 21 Dec 2025 03:01:36 +0000
Manifest next update:     Mon 22 Dec 2025 03:01:36 +0000
Files and hashes:         1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
                          2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: 6wigLJAMcYxkXXhCXOmMlvCjQaSGJGkKdMtLkqZdvxc=)
                          3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:da:fa:22:9a:47:89:c4:18:c4:ec:74:7b:1e:39:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
        Validity
            Not Before: Dec 21 03:01:36 2025 GMT
            Not After : Dec 22 03:01:36 2025 GMT
        Subject: CN=76f8ddebd30f1852a428056ae5a6cbe7365ba915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:80:b1:4c:94:48:1e:12:41:f6:59:73:0f:
                    dd:5c:69:1a:65:04:36:0b:54:57:f1:5b:aa:a8:83:
                    f9:c9:f0:62:2b:d7:29:48:ab:03:5a:85:84:d4:8a:
                    52:62:1b:9c:cc:90:e5:1c:b7:72:be:b4:4e:33:08:
                    2c:8f:d5:e7:e6:6a:c8:2b:6b:b0:57:45:5d:30:01:
                    d4:e8:05:76:50:0e:d1:52:af:93:30:34:48:f3:b1:
                    55:99:48:81:85:d7:cc:01:a2:4d:0e:39:b3:a5:92:
                    c0:68:22:45:13:05:04:1f:aa:89:a1:e3:4b:c8:41:
                    16:5a:23:32:0d:98:e5:a3:87:23:0b:af:f3:90:67:
                    4f:69:2e:3d:99:ca:3e:46:d3:58:de:66:6a:a7:95:
                    39:8a:62:e4:ec:7a:1f:5f:f3:dd:82:99:5e:c4:75:
                    82:c2:5c:c1:e8:28:d9:a1:3f:cb:a8:af:52:0c:92:
                    0d:9a:63:8a:7c:a6:73:f9:82:3d:70:2d:92:4d:b4:
                    ef:d5:e7:22:cd:94:81:e4:9e:e2:71:ce:4f:fa:70:
                    ed:68:74:c9:bf:d1:31:ce:90:7b:7d:0b:8a:49:53:
                    01:c1:72:cf:04:30:0e:81:ba:88:94:87:40:6b:5a:
                    c9:65:54:e8:14:d9:4a:b4:be:d4:0d:bd:5c:42:5a:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F8:DD:EB:D3:0F:18:52:A4:28:05:6A:E5:A6:CB:E7:36:5B:A9:15
            X509v3 Authority Key Identifier:
                keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:42:6f:be:2a:55:be:58:6e:90:10:4f:1e:d3:55:e5:f6:1a:
         38:e7:ab:b8:63:bf:a4:dd:b6:76:2c:72:45:b5:9e:24:7c:a3:
         f3:a2:d2:3a:6d:37:04:31:1a:bb:e8:c1:9d:09:e9:f8:61:bb:
         3e:16:14:05:44:c0:1a:d2:7f:ec:ae:f8:d5:75:c7:03:19:63:
         db:28:0c:28:ae:fb:b2:6a:28:1c:c4:b3:c8:26:15:ce:27:64:
         69:ea:cd:fb:c1:ef:a5:a4:a3:5e:c0:fa:e8:85:9a:06:c3:be:
         bb:57:f2:3d:ef:e2:a3:f2:9e:af:23:5d:21:ba:2c:d8:40:14:
         e0:d4:f3:f4:02:0b:0f:e5:2b:ce:19:16:2a:cd:4a:84:cc:8e:
         8c:97:be:c9:7c:99:34:35:26:70:12:d5:bb:39:5d:f5:f6:9f:
         e2:f1:65:b1:56:b6:76:cb:12:24:3f:cf:74:7f:d4:f4:81:10:
         b8:51:7b:c2:70:8b:cc:c5:60:bf:42:f4:92:be:1b:4c:2a:49:
         3e:d9:a6:01:be:1d:1a:4b:d2:e1:d7:21:8d:e1:a1:09:44:1a:
         cf:ce:2d:50:aa:a2:eb:3b:12:7f:19:2b:03:a0:fa:1a:4b:b0:
         dd:8d:8f:66:21:11:94:7d:36:da:88:2a:2e:55:8a:f3:20:ea:
         f3:52:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:13:35 2025 by rpki-client