This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          K21lmHKO5NFTRKJNy6783X+FHHLYmqEs8jsfOQKGZ2Q=
Subject key identifier:   54:7F:D3:62:D0:F8:C9:8B:2F:D1:E9:74:56:0F:D6:6D:B5:67:50:38
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       019AF28E177FABCAA505DAC9915029A64EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          1057
Signing time:             Sat 06 Dec 2025 07:26:29 +0000
Manifest this update:     Sat 06 Dec 2025 07:26:29 +0000
Manifest next update:     Sun 07 Dec 2025 07:26:29 +0000
Files and hashes:         1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=)
                          2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=)
                          3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=)
                          4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=)
                          5: 9Viq0D0yeyudHsOyGwiWq4c9Zm8.roa (hash: F3Gen1bFVipiyLDRBWS2zGC6+19TslOL2dJD3LXtkbA=)
                          6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=)
                          7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=)
                          8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: Bi/NHxk67rHZxgivaMX+/kHXUzEpqTgl1Zde+00f3Jw=)
                          9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=)
                          10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=)
                          11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=)
                          12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=)
                          13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=)
                          14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=)
                          15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=)
                          16: _VNci0CcXhqQlp-7ibbk2c6er8o.roa (hash: 5KlbSxEJ+Lpv1MXHETwLf3XDOUs4Vpm0vwOM11754ko=)
                          17: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=)
                          18: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=)
                          19: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=)
                          20: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=)
                          21: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=)
                          22: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=)
                          23: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=)
                          24: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=)
                          25: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=)
                          26: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=)
                          27: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=)
                          28: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:8e:17:7f:ab:ca:a5:05:da:c9:91:50:29:a6:4e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Dec  6 07:26:29 2025 GMT
            Not After : Dec  7 07:26:29 2025 GMT
        Subject: CN=547fd362d0f8c98b2fd1e974560fd66db5675038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:61:fe:76:45:27:7e:1b:4f:79:c5:63:cb:b7:
                    95:7c:ef:58:5a:ef:3d:6a:dc:76:fd:8b:a2:31:01:
                    dc:68:e8:bb:af:48:f2:b3:03:a6:39:d6:35:3b:47:
                    b2:01:1e:5e:81:4a:bc:92:56:9c:00:34:fc:5c:35:
                    c1:25:ad:63:93:d1:11:d7:4e:1e:00:60:ed:6f:ea:
                    8b:d0:f6:62:f2:d6:25:9a:4c:99:cc:78:f8:bb:78:
                    db:7e:8f:2e:87:1e:d3:92:dc:63:2a:9d:f0:3a:0a:
                    24:7b:ad:44:c7:d9:40:3a:cf:ec:f1:d1:db:a4:3e:
                    a8:99:9c:0b:ed:34:c5:1d:00:a3:d8:f1:ec:e0:55:
                    ee:49:40:db:e0:f9:8a:38:92:42:c1:a0:ff:6c:97:
                    e4:17:29:fd:e9:8e:37:7b:cc:39:f0:11:1f:4c:27:
                    1e:02:d0:b8:76:63:29:e4:1a:4b:16:47:7d:c0:95:
                    78:68:91:e2:4b:92:aa:8c:e3:b3:4a:8e:e7:ed:eb:
                    ae:59:7b:eb:35:93:60:fc:1d:2d:f4:f4:0e:ba:68:
                    b4:54:ff:00:36:f9:c2:af:fc:ab:90:1c:66:c1:ac:
                    27:84:3a:de:ff:a0:ab:82:e0:cb:c8:4a:ea:ef:13:
                    ef:aa:8b:ea:c3:2f:33:71:16:5a:72:91:b4:1a:3b:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7F:D3:62:D0:F8:C9:8B:2F:D1:E9:74:56:0F:D6:6D:B5:67:50:38
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a2:18:82:c9:d3:3d:4e:f8:06:3f:5c:60:67:dd:ca:57:5c:
         b8:e6:e1:c4:a6:49:67:40:9f:17:7e:27:b3:d8:d4:28:01:e3:
         4a:48:c4:d8:89:6a:52:e0:4b:45:e5:29:97:96:7b:b3:9a:89:
         54:2e:31:ca:75:58:3b:4e:ef:ee:5b:1d:f0:cd:e6:22:84:bb:
         65:be:50:3c:89:8a:e1:50:2a:40:9c:cb:60:5a:0a:f2:23:d0:
         ab:16:f7:b1:1c:24:4f:6a:db:df:cb:ac:fd:5a:c8:94:de:11:
         a8:0b:c8:4a:8c:3e:bc:c2:23:14:1a:82:87:0f:f6:63:6a:55:
         be:8d:6e:05:11:80:71:3a:0b:a0:0a:75:f9:aa:2f:ea:ee:56:
         fd:65:4e:12:45:58:68:cc:a5:33:24:7a:ef:10:a3:86:6c:78:
         26:f3:97:fc:7a:20:b9:a8:79:06:95:b6:46:3d:59:bb:79:35:
         3e:aa:98:f9:d8:2d:3b:02:4f:71:8c:c3:7d:41:c6:a9:6c:64:
         ce:ed:2c:e6:4d:41:32:41:ac:f8:7f:ff:13:0c:5b:1d:28:cb:
         cb:6b:64:37:fe:fb:13:39:65:6a:69:3d:7c:69:3c:20:2a:19:
         84:9c:9e:63:5c:15:79:01:96:ed:a9:8c:47:6a:7e:7a:67:e2:
         de:d8:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:29:42 2025 by rpki-client