This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File:                     k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier:          wmh2zSWStmf68hEYECyg9dxPzKoS9wxSJKpLNG9GefM=
Subject key identifier:   D0:DC:4E:0A:E2:75:F6:1A:FE:4F:12:6B:9F:1C:66:A1:65:6D:F6:6B
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer:       /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial:       019B661EDADADC85E718576E0C1CE102EB0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number:          1498
Signing time:             Sun 28 Dec 2025 18:00:56 +0000
Manifest this update:     Sun 28 Dec 2025 18:00:56 +0000
Manifest next update:     Mon 29 Dec 2025 18:00:56 +0000
Files and hashes:         1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
                          2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
                          3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: JEJbPq0viixQY/zTKNfJ/Oxgd5Ceo/rWcdRu8kfhVPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:66:1e:da:da:dc:85:e7:18:57:6e:0c:1c:e1:02:eb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
        Validity
            Not Before: Dec 28 18:00:56 2025 GMT
            Not After : Dec 29 18:00:56 2025 GMT
        Subject: CN=d0dc4e0ae275f61afe4f126b9f1c66a1656df66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:1d:b8:0a:4a:a8:e4:5a:09:c8:6b:63:a0:
                    87:97:d9:08:ec:59:a1:14:9c:33:f2:65:9f:7c:a3:
                    19:b5:2d:a5:87:0f:ce:81:f9:72:d3:51:b9:a9:29:
                    b8:7a:17:57:2e:4e:c9:4d:85:6a:b9:cd:bc:70:b2:
                    0a:f4:48:3d:59:45:10:ba:8a:6f:6e:aa:a5:c4:43:
                    31:f9:69:93:c6:58:e5:07:75:b5:6e:0c:dd:6c:b7:
                    52:0a:a3:da:2c:b3:11:36:16:0c:bd:ca:c2:cb:24:
                    2f:c0:88:79:b3:ec:ea:13:f4:b2:6e:0a:cd:85:67:
                    a5:70:ab:bf:69:88:37:1c:1a:b5:21:bf:d8:e5:8d:
                    22:7e:a9:3d:ee:37:4a:33:35:ea:c2:1f:c8:09:ed:
                    60:4a:1d:f0:28:3c:3a:14:ae:eb:b4:8c:aa:85:ad:
                    ed:ae:d8:03:00:ef:6b:39:4f:a6:1d:70:13:e8:f2:
                    4d:60:7c:e1:db:ab:71:6d:75:14:2a:3a:b6:4a:89:
                    7d:6b:2f:41:65:8f:ca:77:f5:d6:c4:ea:09:24:35:
                    29:32:f2:fe:40:52:51:d8:67:3c:e2:bf:50:d7:a6:
                    5a:d6:57:0a:d1:8f:39:17:54:e2:5e:39:e2:e3:29:
                    79:a0:02:5f:b3:ff:90:12:18:6a:3a:01:fb:ab:a1:
                    fe:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DC:4E:0A:E2:75:F6:1A:FE:4F:12:6B:9F:1C:66:A1:65:6D:F6:6B
            X509v3 Authority Key Identifier:
                keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:29:ce:1b:17:85:f0:c1:6e:59:b4:92:15:74:d8:9f:e7:a2:
         f8:36:e2:ef:73:7f:16:fd:39:3e:fa:00:f7:20:43:0d:57:27:
         f5:e9:6a:93:7b:75:28:9c:ff:93:f4:82:33:0f:f1:87:3a:a9:
         f0:4c:b4:e2:cd:c7:83:a4:90:f8:04:6f:1a:c7:52:bc:cc:65:
         a3:ab:0b:37:7c:a3:f2:5b:7c:15:c4:b3:53:cb:88:18:79:25:
         b7:63:29:bf:93:f6:24:fb:f7:c4:7d:f2:6f:a9:f9:34:2c:26:
         9f:3e:78:48:31:d3:61:46:0b:05:d1:9c:0b:96:a8:96:2f:9e:
         b9:0f:e9:d4:ed:c1:4f:72:11:eb:95:85:06:94:22:af:5b:f0:
         9a:b9:16:71:78:32:95:b1:64:c6:f6:d1:1b:f5:91:d5:ed:9a:
         dd:85:2f:2a:ed:1b:0c:c9:ec:ee:59:e4:1a:e6:48:bd:61:31:
         ef:4b:a3:78:c7:ad:21:5f:ff:2e:e0:33:7a:73:23:40:db:5a:
         6a:24:59:5b:05:38:94:15:f5:bf:b5:93:e9:5b:8e:b8:d8:ee:
         ce:68:8b:97:ed:6e:68:02:44:c3:75:df:7a:98:7a:53:43:80:
         af:ee:ff:45:1f:f4:db:a0:46:51:58:a6:71:e8:15:df:22:0d:
         b5:03:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 23:21:57 2025 by rpki-client