This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File:                     dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier:          P6pr1mLv3pYkVfGXZvJGt3jjE0FXs6TDl1iuTH+FLqQ=
Subject key identifier:   3F:40:55:67:0E:42:BE:CA:46:39:79:8A:04:74:94:5E:79:5A:65:BE
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer:       /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial:       019AF38983FD490BBE84EA3647D8C74CF25E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number:          176A
Signing time:             Sat 06 Dec 2025 12:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:06 +0000
Files and hashes:         1: PVmSZDGrn03CmC3ystxrDr3TZfo.roa (hash: Pjr4/1MqbKXy/FJJPo44XPup/Kfr50sF5z3bYT1o0SU=)
                          2: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (hash: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=)
                          3: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: PWd4rhIwzSGDySWMeXrmnRWO5h1fb5zUXPoJOxThiLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:83:fd:49:0b:be:84:ea:36:47:d8:c7:4c:f2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
        Validity
            Not Before: Dec  6 12:01:06 2025 GMT
            Not After : Dec  7 12:01:06 2025 GMT
        Subject: CN=3f4055670e42beca4639798a0474945e795a65be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:83:f4:4b:f7:ba:8c:9d:a0:57:16:52:89:
                    98:86:13:61:3b:4e:e7:d8:45:7b:90:d8:11:15:b7:
                    03:c6:c1:9e:04:c1:cd:54:b1:be:6b:90:a7:18:21:
                    9d:63:80:bd:4d:9c:ac:28:f9:dd:6e:b9:b3:54:f8:
                    4c:e5:8c:b1:a5:ab:56:5a:75:46:20:73:ec:ac:79:
                    34:f6:64:95:3d:d3:65:80:b3:4d:ff:b3:12:49:b0:
                    a2:95:ab:c0:f5:8b:2d:53:4b:30:b3:94:0a:8a:12:
                    cb:78:d5:84:3a:ab:5a:1e:e5:75:e3:43:b2:f8:b0:
                    01:fe:3b:2c:fb:20:3b:3b:90:df:9d:a5:e1:f2:33:
                    63:99:ac:26:67:d3:b3:cf:6d:28:03:9e:00:21:96:
                    6a:43:e0:a3:b1:65:06:2a:1f:4f:27:a9:c1:9c:bb:
                    82:a7:39:d3:1e:ab:35:6e:42:ff:7a:1b:16:fe:79:
                    fc:8a:1e:07:fd:29:02:d8:b9:7e:70:3e:38:81:e3:
                    c0:5e:fb:0d:0f:c5:9c:2a:94:35:c1:ba:5b:46:fb:
                    87:a3:61:ce:98:d8:25:0e:24:c5:d2:7b:74:f5:6a:
                    60:83:1d:9e:7a:c5:ad:59:61:71:15:a7:0a:c4:f7:
                    1b:97:4d:9d:fc:18:96:39:f6:65:b7:4d:cf:6e:27:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:40:55:67:0E:42:BE:CA:46:39:79:8A:04:74:94:5E:79:5A:65:BE
            X509v3 Authority Key Identifier:
                keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:29:ea:a7:26:1e:10:a3:7e:db:58:48:de:ec:60:f4:14:
         ae:7d:0e:ae:0f:ef:2b:a8:71:ae:90:7b:3e:33:16:43:7e:e6:
         a0:17:db:fb:9c:5a:48:bf:c3:fa:ad:b8:98:de:c9:73:f4:60:
         86:1c:26:84:79:06:fe:87:8e:48:65:eb:dd:f8:3a:e1:3a:a9:
         92:9b:3b:3d:e3:ab:60:f7:7b:2f:b7:4e:bb:29:09:12:9e:16:
         c4:c9:f7:d2:96:f6:37:46:4a:0a:10:62:3e:a0:27:ac:b8:8c:
         90:4f:7d:a8:1a:b4:f3:26:9c:7a:e5:9e:47:be:d0:5a:cf:91:
         02:50:c6:00:36:0b:b7:e9:81:b0:ec:bd:5a:93:34:56:13:1e:
         15:56:41:b5:19:06:34:38:72:b7:16:30:f4:4f:0d:88:68:b8:
         02:df:44:21:57:db:26:d1:3d:91:d2:b4:69:e5:f5:87:2a:60:
         cf:22:a8:a9:94:21:46:7a:3a:ae:09:c6:9a:2b:0c:a6:5e:7e:
         99:30:c1:39:86:5a:63:10:7a:3a:3f:29:ed:f8:a6:69:32:d2:
         56:f9:92:4c:0f:27:1c:bd:22:56:28:65:4a:d4:8d:da:87:28:
         f7:25:7c:1d:2e:63:c7:91:36:73:81:83:8e:04:0e:cc:57:6b:
         1e:03:76:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:11:37 2025 by rpki-client