This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File:                     3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier:          Pd2PWmSMyGMDe0z0KKPLPGdALx3A7DMEptwHkn/CWhk=
Subject key identifier:   79:7C:45:7B:5C:FA:66:C6:D4:88:CC:81:53:68:DE:E5:A2:25:1A:1F
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer:       /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial:       019AF2764C0D81FAD78501BF65FD4BF87812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number:          1436
Signing time:             Sat 06 Dec 2025 07:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:30 +0000
Files and hashes:         1: 2VevK0HBk8qY35gQ5UtjfqrB3nY.roa (hash: AmV1BLqc7vTs/6UGFEgRF0w9AuqYNGKRtxRFQd+4rZ8=)
                          2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: TNJO5gbWi5oIHWoqs/e2JcCqnbnJhiY3uqYiYxfal8k=)
                          3: 5vHG0OxzvrqhI56hWt2APxlEca8.roa (hash: bzsGlpjOWPgo9xk0iMmmEBroNlHWE3HqNZ6pialCu6g=)
                          4: gr8V9GG2sn3v6HXV22VsNMEvx-4.roa (hash: sigWijBONNzFo5YlkJnYB4sz+kl8GULVAa+gCk4rEkg=)
                          5: v3bh2N4thqCv2jw1YX5PjUcZEd0.roa (hash: nIfMLuntg2xncQRj0ShSY9tFssqvjsfpfyRvdL0VSvM=)
                          6: yjS8W9q67f67-uZJSGqCLJtk9CY.roa (hash: M5J4UIW6ljIVCBEds8d+YToalBiEOBtwIgj/E8wpY8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:4c:0d:81:fa:d7:85:01:bf:65:fd:4b:f8:78:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
        Validity
            Not Before: Dec  6 07:00:30 2025 GMT
            Not After : Dec  7 07:00:30 2025 GMT
        Subject: CN=797c457b5cfa66c6d488cc815368dee5a2251a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d4:78:5c:f2:b4:c5:a6:1f:24:5c:24:4b:2a:
                    9f:7e:91:90:bd:34:46:ad:ee:13:32:71:f8:4c:f1:
                    9b:d4:f0:49:7b:52:5a:c9:81:9d:9f:1c:6b:bf:ab:
                    70:d4:89:62:b7:84:34:a4:da:43:8b:1f:db:0c:10:
                    c9:45:ed:fe:e8:eb:08:08:bf:35:97:fe:24:dc:e9:
                    da:1a:1b:47:66:00:fc:75:05:83:7a:a2:c6:6d:e1:
                    74:5f:9e:df:2c:df:91:e8:37:cd:bf:11:71:62:ac:
                    80:91:66:bb:30:26:f3:ac:a5:38:f3:b6:2e:27:81:
                    83:c7:4d:00:ed:fc:67:3b:b8:68:05:de:2d:7f:b5:
                    a1:a2:c2:87:11:a0:00:a8:4f:1b:2f:e4:fb:b5:60:
                    18:b7:60:53:ca:e9:03:8b:22:fa:0c:11:ad:b0:1c:
                    80:b4:09:d2:dd:32:3f:8f:96:01:1a:a3:64:1e:a3:
                    8a:5a:84:27:e8:99:ac:85:a7:d1:19:44:b9:93:25:
                    36:b4:43:77:9d:1c:38:cd:c8:32:7f:22:e9:07:ee:
                    f4:5b:e7:c4:8d:a0:68:78:4e:84:74:ff:29:2d:2d:
                    07:bc:57:6d:d1:dd:0c:e0:62:63:f5:6c:a8:cb:1f:
                    94:21:11:eb:c1:fa:80:14:a2:a8:93:d7:97:46:be:
                    5e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7C:45:7B:5C:FA:66:C6:D4:88:CC:81:53:68:DE:E5:A2:25:1A:1F
            X509v3 Authority Key Identifier:
                keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0e:30:fb:ff:1c:d8:0f:84:d5:d9:ac:db:cf:3c:a4:d2:92:
         62:1d:50:28:ac:15:42:9a:d7:15:ce:69:c5:ac:9d:e7:09:f9:
         fb:73:bb:f3:8b:c8:42:c1:c4:9b:7e:5e:d7:cd:81:32:5f:2a:
         af:87:1b:d0:29:cf:99:f9:6d:00:2a:bf:c7:a2:d5:9d:b2:ab:
         53:07:08:c1:f4:6c:90:05:c2:37:05:f7:a0:af:b5:fe:97:a7:
         18:5e:7c:67:1b:83:75:df:72:52:30:5b:65:3a:e5:77:9b:c6:
         e6:98:ec:8d:b9:28:f2:89:fe:dc:fe:dc:ba:4e:5b:93:98:86:
         8b:c7:99:ca:f1:3d:23:48:63:e0:d9:80:5e:8a:24:7c:9d:9d:
         83:aa:86:bc:52:cb:37:d4:1d:3c:a5:ec:3b:96:db:e2:71:32:
         cf:07:50:92:c8:b2:c4:6c:1b:41:ce:80:c1:92:fd:29:d4:75:
         d8:00:27:e2:a0:b8:c9:ea:54:62:5b:d7:41:36:fa:5a:54:6f:
         e1:49:48:1f:90:70:70:53:e2:6f:e4:0c:11:fb:e5:2b:9c:42:
         84:62:f3:ab:a1:da:63:57:8d:55:a8:fb:15:2f:75:72:be:78:
         53:b3:b4:eb:9b:af:73:51:4d:b4:18:66:b7:ac:ed:8b:28:fe:
         4f:ef:7e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:21:32 2025 by rpki-client