This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
File:                     3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json)
Hash identifier:          5EhL9kpuwzHi56dBJ5/Qh66USRCPPoyh+YPjQF8CzPE=
Subject key identifier:   8E:E5:25:95:9B:5C:33:64:50:10:A1:45:4B:1B:AE:71:EF:0C:F1:18
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Certificate issuer:       /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial:       019AF1D253483124AAA5ABE8197CF73C3B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
Manifest number:          058C
Signing time:             Sat 06 Dec 2025 04:01:24 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:24 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:24 +0000
Files and hashes:         1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=)
                          2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: a485Ey3OvoZh3khIVMR2rM0gpcnTffhdLGnMSikqxzo=)
                          3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=)
                          4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=)
                          5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=)
                          6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=)
                          7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=)
                          8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=)
                          9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=)
                          10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=)
                          11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=)
                          12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=)
                          13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=)
                          14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=)
                          15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:53:48:31:24:aa:a5:ab:e8:19:7c:f7:3c:3b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
        Validity
            Not Before: Dec  6 04:01:24 2025 GMT
            Not After : Dec  7 04:01:24 2025 GMT
        Subject: CN=8ee525959b5c33645010a1454b1bae71ef0cf118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f3:1c:74:30:2e:c8:5b:b3:77:27:49:c0:25:
                    3b:9e:30:4e:6c:8d:87:01:d2:41:f2:8b:4c:8f:8e:
                    79:f6:f8:cf:66:78:02:80:8b:02:9d:0e:7a:0c:df:
                    2b:4d:2e:9f:e9:be:f5:ff:b8:b1:06:e1:45:7f:e6:
                    1e:6d:25:e9:88:7f:88:18:0f:e4:6c:55:46:99:1d:
                    bf:1e:e1:bf:e5:5a:25:8e:8f:59:14:ac:17:f9:aa:
                    da:97:86:77:24:8e:59:ca:0d:5e:3e:f7:b1:c7:c7:
                    6f:ff:c2:9a:8c:83:bd:f8:95:94:14:15:8b:98:c7:
                    36:e3:27:29:e2:1a:c8:d5:e1:52:92:d8:ce:ee:e1:
                    6e:10:4e:3e:7a:e8:32:56:04:13:75:4e:96:3b:31:
                    65:95:2d:ed:18:f4:bc:cf:9b:45:2a:8d:4c:57:e1:
                    4c:54:42:0c:69:58:c6:d8:e3:20:fb:92:7c:a3:a0:
                    82:31:b5:67:fd:fa:40:1c:20:ec:a3:1c:7f:5c:b0:
                    0d:45:dc:ec:36:b3:5d:b3:66:e1:59:0f:86:74:53:
                    74:b3:a6:c5:8e:69:76:5f:cc:76:23:72:63:d3:a7:
                    46:17:72:81:2f:21:dd:54:a3:1e:03:c3:34:cb:56:
                    6d:d9:3c:e1:ab:0f:af:1f:8b:ee:1a:41:4b:5d:89:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E5:25:95:9B:5C:33:64:50:10:A1:45:4B:1B:AE:71:EF:0C:F1:18
            X509v3 Authority Key Identifier:
                keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:dc:98:6f:2e:e2:ee:93:56:2d:bc:8f:e3:03:c6:c2:eb:
         17:cc:8e:f0:f4:c5:47:76:35:71:0d:a8:20:a7:c5:f3:0b:c0:
         44:5e:27:66:9c:6c:02:d4:86:63:f9:ab:3d:af:89:07:63:33:
         24:52:cd:75:d7:0f:4d:4f:63:66:a5:9e:c1:0a:9b:80:e9:04:
         37:61:f9:56:21:b1:25:29:29:a3:0f:b0:be:5f:4d:cc:05:e1:
         25:ff:cf:79:ef:b8:95:03:3e:0d:b6:23:23:cc:01:cc:b1:d9:
         46:62:ab:c8:fb:5d:8f:ed:64:ea:b3:e8:20:b5:ef:53:37:21:
         1d:2d:22:2f:5d:a3:c3:0c:3d:12:2b:82:c9:ee:84:04:5f:8c:
         74:bc:60:6c:5d:65:6e:5f:5a:cb:e7:8d:f8:89:5b:bc:ec:d9:
         b8:fe:53:83:a0:da:6e:03:c5:ad:82:8c:0a:32:f0:e2:a9:c3:
         d4:85:7a:03:18:00:b3:e8:37:b4:dc:1c:67:7e:42:45:c9:37:
         64:3a:95:bb:0c:18:f7:d3:72:d5:c4:20:75:af:77:ff:0f:a0:
         23:e1:71:70:6f:a6:fd:f6:dd:a5:c5:01:43:a4:15:8a:b2:b8:
         a2:2f:59:f4:47:5c:b4:ac:06:c3:42:2a:69:ec:1a:c5:e1:91:
         54:c6:55:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:22:20 2025 by rpki-client