This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File:                     DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier:          eKxysaTERjm0Mtc6s3Z3v5w4UdsgG/TYfRxa6kTkgK0=
Subject key identifier:   50:E1:1C:37:E6:BE:85:01:07:C3:2D:E8:4B:2A:F9:94:CF:1B:48:75
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer:       /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial:       019AF49BC625BD8A90677701E02C3FD8316E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 17:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 17:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 17:00:40 +0000
Files and hashes:         1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: KHJ/s2fN9P3GwpEfazQe1dqv328Ma86r/Y4OhuGzOnY=)
                          2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
                          3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9b:c6:25:bd:8a:90:67:77:01:e0:2c:3f:d8:31:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
        Validity
            Not Before: Dec  6 17:00:40 2025 GMT
            Not After : Dec  7 17:00:40 2025 GMT
        Subject: CN=50e11c37e6be850107c32de84b2af994cf1b4875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:b5:ba:df:64:2b:36:e0:cd:9a:c4:f9:19:
                    c2:00:c8:c5:71:03:5e:ea:1e:85:04:c3:b6:e8:2d:
                    8c:ba:37:9e:e9:63:0c:ab:2a:a7:71:1f:36:c5:8d:
                    6e:3e:e0:1b:d5:c3:49:84:63:50:1e:d5:d8:eb:4f:
                    7c:1e:0a:c9:9e:af:4d:8b:bd:59:7e:7a:d7:de:8e:
                    f4:ea:6d:39:9e:44:ae:ef:86:bf:b7:c5:70:3e:7d:
                    0b:0b:33:6b:03:a3:22:1c:69:f4:81:6f:23:08:14:
                    6a:70:e2:3f:97:e6:1e:39:de:92:2e:43:73:53:e3:
                    62:e1:5f:a7:48:78:57:fa:1b:c3:cc:e9:d9:ab:7d:
                    c6:61:18:7c:fd:66:75:43:01:81:91:8c:47:db:54:
                    a1:49:5f:0b:51:73:5f:25:07:6d:50:59:a1:ec:e6:
                    fb:89:16:cf:06:45:35:b0:dd:eb:d6:55:41:38:bc:
                    41:70:0a:05:cb:63:2c:f6:6d:bf:92:f8:dc:c9:94:
                    66:3b:b6:9a:81:18:99:0a:5f:9a:6d:d8:c4:79:9f:
                    7d:1d:2d:e7:02:57:62:e8:6e:8c:2a:c4:d6:16:1a:
                    c7:6c:73:77:8d:7f:19:e6:41:5c:cd:df:b3:e9:4f:
                    98:3d:ac:97:63:56:b4:03:24:77:a4:05:19:45:9e:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E1:1C:37:E6:BE:85:01:07:C3:2D:E8:4B:2A:F9:94:CF:1B:48:75
            X509v3 Authority Key Identifier:
                keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:78:14:79:6e:d2:01:03:2f:b8:0e:c1:a9:86:c9:83:ca:99:
         ec:3d:64:69:65:c1:24:50:4e:da:6d:70:4f:03:7c:cf:7a:17:
         8f:de:2d:2e:e5:23:75:34:9d:9b:ae:d2:88:18:a4:0a:e8:19:
         75:df:12:5f:3c:71:a1:eb:44:14:46:40:32:6a:f4:00:3c:ba:
         81:22:5d:bb:ee:10:4f:43:6b:8f:f2:5a:32:1a:61:1f:9c:6c:
         10:94:35:ae:3d:58:08:5f:0d:44:62:9e:e1:6c:5f:d6:fa:d0:
         b3:45:4a:dc:58:d7:22:5e:99:af:72:c3:fb:52:8c:bf:d3:42:
         77:5f:14:d0:ff:23:c4:d6:11:26:7c:a2:80:97:c3:2c:71:c4:
         ee:0a:ab:18:80:ac:83:2c:eb:2a:11:79:6f:9a:a3:96:c6:e9:
         10:ca:58:ce:9a:1e:04:8f:ee:0b:d2:a1:ee:d6:0a:e9:5c:29:
         5f:8b:43:ca:48:5d:02:7e:80:a9:21:d1:80:d1:a2:df:d5:b6:
         bb:44:35:4b:22:19:0e:4d:56:c8:a1:78:43:c9:f0:60:eb:26:
         a5:a1:f5:d2:27:80:30:1e:40:cd:40:3d:23:9e:20:3a:6b:15:
         a7:c3:6e:94:b1:18:97:10:c7:7c:7c:84:bb:3e:11:a2:d4:0e:
         74:13:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:52:52 2025 by rpki-client