This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File:                     9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier:          XVr+Jhxke0fYQytC/fslnYulE1J88Pte7LCS+b0NozM=
Subject key identifier:   DC:29:DA:CE:50:5E:3D:47:E0:F9:C5:E5:BF:4E:C3:82:37:54:B6:B6
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer:       /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial:       019AF276A7EF37AFF10EFBB4A516C54FB5EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number:          1772
Signing time:             Sat 06 Dec 2025 07:00:53 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:53 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:53 +0000
Files and hashes:         1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: 7IjbNbfxqAv1TkCVwY8tgJE+tPwmz2l4dkueYjLMqPk=)
                          2: VThOfYn2yicDk7nCFvApHsO86Wg.roa (hash: mej7dGpuagdDYe3wWlS5P2O07cvlpo15DDfF6tOHiTI=)
                          3: tTfX1pe5RTBDA8rpWDL9o3SrrsQ.roa (hash: 0Boop2PPC+Kquo+edf/AvMEIcfKlqZO/IjiPFQIbjyo=)
                          4: uOIlSnTF6fTtDAo-t67l55RoI68.roa (hash: dB5cropfobX2xCE84HM5iEAEEedSs1cybSdhKv0KvQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:a7:ef:37:af:f1:0e:fb:b4:a5:16:c5:4f:b5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
        Validity
            Not Before: Dec  6 07:00:53 2025 GMT
            Not After : Dec  7 07:00:53 2025 GMT
        Subject: CN=dc29dace505e3d47e0f9c5e5bf4ec3823754b6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:f5:e6:92:01:5b:2f:c2:2c:dd:ae:40:f0:
                    06:19:6a:40:64:76:e8:5d:d7:ba:da:d0:b4:9e:28:
                    a3:e3:ae:0b:db:b2:85:bb:6d:4f:c3:13:03:ca:d5:
                    d7:94:82:d6:cc:97:41:7b:31:25:ce:a6:0f:b0:0d:
                    c0:e8:b0:46:6a:6d:c2:62:b3:1f:3f:f6:72:a5:62:
                    48:81:17:bc:8f:1a:17:7e:64:7c:2c:8a:0d:b0:5b:
                    8b:ff:66:3d:86:a0:24:ba:f5:f1:d9:32:86:a0:b1:
                    4a:40:2d:70:ce:61:8a:76:de:a9:cd:15:10:df:eb:
                    74:e4:03:ae:6e:8f:39:dd:f0:a7:50:5b:98:c6:5e:
                    56:ee:3e:6a:8e:57:2e:5a:1c:4b:ba:d7:b3:79:83:
                    e1:3d:5e:1d:14:8e:be:c4:d2:9f:f8:f8:05:c0:46:
                    c8:11:8e:58:3e:c8:06:60:24:e1:71:be:4e:16:93:
                    33:8f:c9:3c:2b:7e:73:35:0b:4c:e4:fc:6f:fe:3f:
                    8a:37:00:fd:63:d9:1a:63:26:ad:3b:5a:bf:12:f5:
                    64:2e:12:30:f7:21:86:07:c1:81:8d:53:00:de:61:
                    f0:a5:51:2c:8f:1a:5c:86:83:63:05:a7:e7:82:5d:
                    20:41:02:b9:7a:56:85:5b:b8:3e:c7:23:64:19:6c:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:29:DA:CE:50:5E:3D:47:E0:F9:C5:E5:BF:4E:C3:82:37:54:B6:B6
            X509v3 Authority Key Identifier:
                keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:63:af:de:4d:0f:d2:5a:a1:ba:a0:74:32:e1:cf:1d:d8:
         8f:df:77:41:8e:e2:08:71:70:07:0e:8e:a7:46:40:dd:d8:88:
         4a:dd:24:52:14:4c:9e:1a:25:72:2c:9b:e3:56:07:5b:d7:53:
         9d:ed:b9:6d:a3:52:1e:6d:6f:bc:80:67:4c:6e:ee:bf:1c:a7:
         fe:51:b1:dc:52:5c:3c:d1:78:d9:2c:0b:5e:d2:3f:07:f6:8d:
         ad:db:a1:4f:05:ab:1e:f8:1d:04:27:22:52:95:ba:33:a2:de:
         78:f4:32:60:b1:31:af:4c:09:f4:aa:23:1d:b3:48:11:fc:25:
         40:2f:7d:36:34:8a:07:8e:19:a5:63:94:f1:f9:43:1d:f3:53:
         41:21:7e:d4:5c:5a:93:d4:7b:61:ca:cf:61:e9:26:57:99:77:
         3e:b9:92:5e:7c:2f:9c:c6:01:3e:b6:38:2f:f5:44:e2:09:03:
         e0:b5:a0:d3:49:a4:de:d2:70:95:2a:71:01:51:ae:dc:f7:96:
         81:57:d4:70:6b:eb:85:e6:e7:bb:ff:5f:19:ca:e6:e1:0b:df:
         21:75:f8:75:81:6a:8e:80:b6:c2:fd:67:87:53:db:27:34:d1:
         75:21:55:f7:68:c8:9e:13:ba:8d:e5:6c:cf:3f:41:02:d2:8d:
         a3:71:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:15:51 2025 by rpki-client