This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File:                     d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier:          DtByVZaLsmbKHzmuo9jb9k/mju6RskyJ/qEe2UiymEk=
Subject key identifier:   4A:C0:E8:79:10:1D:D9:EE:2C:B4:4A:D1:F4:FA:AE:9E:FD:D0:57:2C
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer:       /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial:       019AF12CC83380E4D5798DABFDD87965A3BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number:          0613
Signing time:             Sat 06 Dec 2025 01:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:35 +0000
Files and hashes:         1: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (hash: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=)
                          2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: FAxnGD02ZimLrc177rtPONojidhe1rmUtb+UOlSPd54=)
                          3: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (hash: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:c8:33:80:e4:d5:79:8d:ab:fd:d8:79:65:a3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
        Validity
            Not Before: Dec  6 01:00:35 2025 GMT
            Not After : Dec  7 01:00:35 2025 GMT
        Subject: CN=4ac0e879101dd9ee2cb44ad1f4faae9efdd0572c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:11:d5:f4:5b:28:3f:46:45:9a:e3:1e:20:47:
                    3f:3f:e4:73:94:ee:3b:0e:02:0b:ef:6e:1f:38:7c:
                    6a:8d:d8:89:b3:9b:fa:cc:62:9e:11:6b:63:e6:04:
                    0c:47:27:e3:b2:db:32:85:6f:75:83:b8:95:c2:a7:
                    ad:d3:79:22:96:d1:e2:61:dd:a0:70:4f:b9:c8:75:
                    5f:e7:16:12:c8:d2:67:18:2d:aa:d3:6e:3b:02:8a:
                    a7:a4:a6:28:e6:ae:b2:ee:86:8b:3e:ad:a9:bb:93:
                    95:41:6f:ed:7a:ca:48:12:de:10:4d:e5:47:1b:97:
                    1f:50:14:77:f0:71:40:54:63:5e:03:d2:9b:11:43:
                    a8:cc:43:c3:6e:c9:fd:e7:a6:af:d0:69:ec:70:14:
                    46:c0:15:ef:df:88:b7:fd:cd:e0:6a:a8:cc:35:4d:
                    77:8c:9e:5d:5f:74:a1:38:9a:df:0c:0a:93:0f:3e:
                    20:25:d1:25:e3:76:01:31:8c:b4:6b:ec:bd:48:33:
                    18:94:e1:4d:11:cf:24:3b:2f:be:f5:8d:ca:61:c4:
                    78:d3:5a:b0:b9:67:e1:95:fc:f3:12:68:2b:22:d5:
                    3c:93:f8:e3:71:21:ee:b1:b1:bc:e8:d1:12:40:64:
                    41:c9:f7:f8:32:02:c8:48:b8:b0:1e:a4:cd:ca:91:
                    36:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C0:E8:79:10:1D:D9:EE:2C:B4:4A:D1:F4:FA:AE:9E:FD:D0:57:2C
            X509v3 Authority Key Identifier:
                keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:fc:b2:8f:8a:66:98:6a:dc:ef:53:d6:e5:81:48:d9:d3:
         79:8e:a0:4e:6b:b8:ec:15:8c:63:ad:15:ce:1e:56:b4:56:61:
         e9:47:c6:98:a7:8a:17:eb:88:7e:28:71:8a:f6:8d:6b:94:ed:
         58:e4:2a:6d:74:82:e0:28:cb:41:c3:9d:25:2a:6e:51:63:72:
         7f:75:64:d1:c2:b9:8b:db:36:67:1b:69:e7:ef:a1:34:ba:66:
         0a:4d:14:52:f2:55:47:23:7c:88:c9:6f:70:9d:37:9d:a7:27:
         39:33:38:4b:ab:76:b7:5a:38:9c:aa:5d:a4:a3:fd:04:a8:ff:
         de:67:71:78:07:ad:e0:64:c8:d5:08:1a:fa:e0:97:36:65:a4:
         d1:22:77:60:8b:af:e0:43:d6:8d:49:f8:c7:0b:56:67:12:67:
         47:47:a6:dd:fc:f6:a3:e8:4d:31:5e:44:88:ec:c2:6d:3e:c9:
         27:c5:bf:34:a2:fc:f6:ab:94:d5:95:e2:57:f0:72:91:8e:34:
         7c:e5:a3:95:9b:de:ad:d8:20:83:60:58:b4:77:74:87:81:07:
         7e:6c:6d:c0:0d:9a:cf:9e:23:7f:2f:eb:30:8d:fc:25:10:5c:
         36:8d:44:b7:30:e1:b3:af:42:ed:80:6d:45:03:ad:15:0f:8d:
         92:78:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:38:59 2025 by rpki-client