This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          6FPDDWXpKhFy76Aps5ySufH64110Eh0XAuK6mGDNto4=
Subject key identifier:   C0:49:68:08:23:BA:C8:B4:CB:17:4F:7B:06:3F:9F:5B:47:8D:B1:3D
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       019AF12D572B89AEE0D2C1C9B3F4F76CDF9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 01:01:11 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:11 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:11 +0000
Files and hashes:         1: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: URk6zajFsPkdITfbYcjAxhYvcTZMDhAEif4su0WyUcs=)
                          2: KX71aYDc7COcBvGYMtW_I8jVEro.roa (hash: m4mYzz0InD89bmwaO+N//OYVwFvsqF8sbCWbylUSfpU=)
                          3: VLH2ggfYLmRlUNQmOTDaXEZemRU.roa (hash: r81ADMKeWWOVhBZY/dzL8YFhvpB6T7KTTWyAmAeGrA4=)
                          4: Z31e2uZ4ZUo0ifh9SmP5d6rs9YA.roa (hash: 99LlYSdIOpp68PEiIS1MO6ONGzvLDbJLydlaJmSyBos=)
                          5: dpvfrInTYFYCDpSNy4nBJ7fMOBk.roa (hash: MFcK6MCir3IwgLRCLZLFYaFpQhejKg3ixDBCQgs5rTk=)
                          6: iY-7T8h9t9V2urHTmIgGwZIOHVQ.roa (hash: irtz9XTfXBHEHapv6cSGMQPMme8obAG5vt6M1vHm4qQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:57:2b:89:ae:e0:d2:c1:c9:b3:f4:f7:6c:df:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Dec  6 01:01:11 2025 GMT
            Not After : Dec  7 01:01:11 2025 GMT
        Subject: CN=c049680823bac8b4cb174f7b063f9f5b478db13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9f:10:7f:6c:d5:94:52:69:a8:de:fb:d3:6a:
                    83:18:7c:c0:41:f7:2f:71:dd:50:dd:67:b2:c7:57:
                    b7:c0:62:c9:2e:43:a1:ca:7a:71:2a:3b:90:91:36:
                    8f:48:21:ae:c5:dd:23:24:7c:9a:23:7e:bd:31:85:
                    5f:d4:d5:1b:96:5e:66:1a:ab:de:f4:c8:2a:f2:2a:
                    b9:a4:fc:8f:6f:a3:37:45:dd:3b:e7:64:62:48:c1:
                    11:a5:0d:31:e5:98:19:e4:f1:b8:f3:b4:45:4e:1d:
                    59:e9:8c:1f:fe:4a:53:d9:4b:99:54:dc:97:4a:b1:
                    51:af:ce:a5:8e:e1:03:45:00:14:d2:0c:35:67:92:
                    75:30:18:92:0f:76:70:67:ac:15:9c:20:1b:c9:de:
                    46:10:82:d3:ee:cb:81:54:3c:22:3f:83:aa:89:19:
                    33:b0:99:15:54:59:c2:a8:0f:4b:6c:aa:05:1f:87:
                    0f:b7:a2:b1:e1:b4:d7:11:68:d2:1f:7b:f7:45:b5:
                    44:f5:1d:c5:9f:44:0c:42:b9:4e:03:9e:bb:dc:79:
                    73:8f:03:4b:40:dc:03:8b:f7:23:f7:51:ba:a4:6e:
                    fb:1f:28:49:3b:aa:98:e4:5e:3a:75:e0:08:10:31:
                    56:19:c3:b2:e1:7b:e8:97:af:e9:93:a3:e1:0b:e2:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:49:68:08:23:BA:C8:B4:CB:17:4F:7B:06:3F:9F:5B:47:8D:B1:3D
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:27:40:d0:c3:d7:80:b7:9b:b4:e7:03:9d:f8:c0:da:fb:65:
         a3:39:10:32:16:e5:9a:fc:51:a1:bc:15:9e:47:70:a5:9a:f1:
         47:54:c7:a2:74:fb:65:23:d1:1a:5c:3d:50:af:89:a6:cc:6c:
         8f:a3:17:e3:cd:11:49:fa:f5:65:3f:5a:d3:69:a2:0e:55:d6:
         4f:65:f4:1b:c0:6e:da:9c:6a:6c:0f:8f:c0:b3:43:41:c6:ad:
         ee:17:79:3c:00:87:b9:98:46:93:47:07:59:8b:2a:16:47:df:
         74:f7:91:7e:83:bc:de:54:8a:e9:15:dd:76:95:76:ea:c2:7e:
         b8:22:96:0f:91:ed:e1:da:95:98:e5:84:56:42:36:7a:84:4b:
         97:8d:7a:e6:ea:d2:c6:64:d3:80:c1:2c:55:11:f3:fc:50:1e:
         25:00:c7:a7:07:71:8d:bd:36:8c:37:30:22:49:6d:af:72:59:
         c2:56:61:83:a9:84:e2:5a:9c:9f:79:1e:c4:98:5b:e3:f3:58:
         01:a7:8d:fe:43:69:52:ce:dd:92:8c:75:1f:ba:d9:3f:50:1a:
         9b:31:41:c1:d4:51:a0:e7:08:f6:83:c9:0c:21:00:af:7a:06:
         bf:f9:68:72:a5:93:56:af:bb:ce:91:8f:4d:0e:85:a2:cc:02:
         54:19:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:03:31 2025 by rpki-client