This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File:                     dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier:          rKGP1eMZQKPnepOzw24ziL6Jly+Da07cJ1SFqgMSGQ0=
Subject key identifier:   81:D3:3A:BC:B1:EE:DA:88:0E:8A:10:04:87:0C:83:83:94:F7:B5:16
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       019AF23F9FF77BC4CFB4310B37F28C519062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number:          0FA5
Signing time:             Sat 06 Dec 2025 06:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:47 +0000
Files and hashes:         1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=)
                          2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=)
                          3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=)
                          4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=)
                          5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=)
                          6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=)
                          7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=)
                          8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=)
                          9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: 0rvWUHavOXl4b5UOAGwnOiMqck+nk0ujvijxP2/OtHo=)
                          10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=)
                          11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=)
                          12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=)
                          13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=)
                          14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=)
                          15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:9f:f7:7b:c4:cf:b4:31:0b:37:f2:8c:51:90:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Dec  6 06:00:47 2025 GMT
            Not After : Dec  7 06:00:47 2025 GMT
        Subject: CN=81d33abcb1eeda880e8a1004870c838394f7b516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:80:2e:cd:a8:f1:46:7e:41:b9:f7:7d:ed:2a:
                    89:61:d9:db:b2:50:e8:2a:ce:7a:16:90:59:7e:50:
                    a7:65:c1:e9:76:5d:71:13:e6:0b:dd:6e:6c:0f:f8:
                    be:3a:0e:35:27:cd:86:f9:c6:08:67:5e:78:5a:c9:
                    ec:83:ee:6f:69:4f:1e:3d:8f:7e:5a:25:6a:05:1f:
                    6b:61:63:9b:e5:72:79:21:ad:21:67:9a:de:f0:15:
                    6c:e5:d8:c6:ed:d7:7e:a9:8f:b6:61:71:53:d2:74:
                    0e:7a:94:20:55:56:86:f4:91:d9:44:ca:ee:c6:78:
                    1e:e5:00:68:54:bf:2b:d6:95:50:e2:3f:2b:95:45:
                    7c:31:30:49:54:82:1d:63:8a:d2:d8:95:82:9c:7f:
                    11:1a:c7:0a:15:e2:f0:e6:c1:ba:94:d5:b1:28:03:
                    e7:aa:8b:6e:f3:d3:a0:86:b3:9e:e7:cc:de:f4:cd:
                    4c:d0:00:5f:92:f3:15:74:31:d7:d1:05:1f:e1:4a:
                    d7:b2:03:44:45:4d:88:86:b8:5b:ab:a6:0b:b1:b2:
                    3e:10:b7:7a:84:10:7b:01:03:b7:0b:fe:c6:23:c1:
                    f1:11:7d:36:18:32:05:54:ba:a6:67:22:c7:54:14:
                    3d:dd:5f:06:05:d5:2f:88:87:9a:aa:0d:9e:91:5d:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:3A:BC:B1:EE:DA:88:0E:8A:10:04:87:0C:83:83:94:F7:B5:16
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:27:6b:75:e1:73:f1:57:60:1b:b9:3e:3b:52:5e:e4:7a:78:
         95:51:6b:d5:3f:d1:c8:ac:ec:67:3d:82:12:fb:d8:f2:67:3d:
         1a:81:2a:88:40:1a:54:04:45:2b:a4:ad:24:7c:41:39:2b:22:
         df:6e:3b:5f:1e:4f:04:9b:be:f2:0e:a1:59:49:b9:aa:c7:25:
         79:82:62:86:08:e4:34:1b:0c:06:df:f0:2c:48:94:e6:01:ac:
         e5:6c:4b:06:8b:04:86:a1:a4:4c:f9:8a:5d:9e:b8:a8:c6:8c:
         33:13:97:f3:ba:14:01:2c:5f:ea:43:8f:37:ce:4a:97:79:b6:
         11:18:5b:66:e9:63:89:a9:38:34:ee:6a:71:28:13:ac:80:13:
         0c:3a:e4:d8:bb:f3:25:cf:ed:c2:e7:af:39:0e:cd:6e:14:9c:
         64:51:d6:1e:a0:17:2a:42:94:3b:dc:97:d1:04:ec:48:d4:c1:
         5e:6a:f1:50:a7:f3:76:7c:2d:12:d5:0b:13:37:ed:76:a2:90:
         2b:74:e4:8d:80:77:23:9e:24:98:b7:42:23:1f:dd:da:84:37:
         d8:8d:c1:62:f6:05:21:9b:e0:5f:35:fe:69:2e:d3:b8:06:8c:
         45:90:2c:17:a8:c6:8f:3c:5c:4e:4e:51:ab:74:44:03:2d:41:
         40:3b:f9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:14:39 2025 by rpki-client