This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File:                     dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier:          KJ2w2Yx3aPK477/sy83TPwMY0bTYV0WASHDF6dhgcZU=
Subject key identifier:   37:35:02:D8:10:7E:96:5A:14:1F:DE:1A:12:04:A4:5E:72:6C:1B:00
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       019AF12D5D443C04518A5A954D25CFF1FD0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number:          17E5
Signing time:             Sat 06 Dec 2025 01:01:13 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:13 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:13 +0000
Files and hashes:         1: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (hash: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=)
                          2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: jxQt2B0zPjsgSSS1IF+RPLhotwfPetYBc9P/NWa2LrI=)
                          3: pygSYveYfJ18y88VT99Py8VI8Ck.roa (hash: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:5d:44:3c:04:51:8a:5a:95:4d:25:cf:f1:fd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Dec  6 01:01:13 2025 GMT
            Not After : Dec  7 01:01:13 2025 GMT
        Subject: CN=373502d8107e965a141fde1a1204a45e726c1b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:c9:9f:78:b3:6d:37:8f:86:b2:e8:4a:55:
                    c5:80:9f:b9:f5:e6:1c:40:a4:4a:fe:d6:2b:d0:36:
                    a2:d8:db:f4:c5:c5:8d:db:54:1e:8d:31:97:2c:a6:
                    1a:cb:b6:df:23:15:3f:42:53:9c:b2:84:0a:96:ad:
                    e3:a7:42:3c:14:56:78:90:f2:3b:26:7e:a3:71:c0:
                    c6:17:60:65:c4:b4:92:c5:75:5a:77:8d:de:2f:36:
                    58:f6:3a:e0:94:14:60:8b:50:a9:ff:23:e6:d7:92:
                    fe:af:ae:c9:af:af:5f:65:05:f2:b5:3e:f3:2a:e8:
                    3f:f2:2c:2f:55:b9:6d:cd:69:cc:33:22:4e:dc:e2:
                    38:9a:bb:05:9d:ae:26:34:09:6e:c6:43:b6:a5:cc:
                    eb:fc:e6:a4:7d:6d:c9:1b:b2:a9:30:df:ba:2f:fc:
                    23:74:d7:d8:a0:08:16:17:53:52:b3:91:40:5e:90:
                    ed:40:84:c5:2b:9a:ac:a0:32:e9:e9:ff:2d:4e:b9:
                    d0:28:f9:5e:1b:81:eb:7c:05:e8:ee:89:19:b6:08:
                    10:9d:fb:78:88:ee:e0:f2:9d:d5:88:68:38:88:59:
                    55:cd:86:ca:27:02:45:7f:dd:21:f2:75:f1:ab:74:
                    93:f5:ca:b3:d3:1c:0c:81:0f:1b:c2:43:2f:39:3f:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:35:02:D8:10:7E:96:5A:14:1F:DE:1A:12:04:A4:5E:72:6C:1B:00
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:09:b0:1f:1a:37:8b:b9:d1:55:3a:78:ba:d6:09:35:cb:22:
         22:ec:8d:35:bd:17:92:db:bb:d0:c0:b1:ff:c9:75:34:86:39:
         bf:cb:75:7f:f2:aa:9c:ca:03:77:33:ad:e1:c9:f1:3a:e2:b2:
         5c:52:5f:13:dd:6c:a4:9b:05:01:ca:b4:ad:57:b6:20:b8:ea:
         71:19:be:8d:71:52:e1:8c:80:48:a2:dc:a2:e7:ea:99:69:fa:
         d1:df:bb:61:44:e0:00:72:b6:22:c3:6c:54:fc:95:36:bc:42:
         8f:bb:48:f1:96:49:2a:af:84:62:cd:9e:be:12:82:7a:ed:99:
         75:27:3e:af:f5:ba:f9:da:e9:1a:2f:1b:46:4d:75:8f:b2:b9:
         79:49:3b:3f:7d:ca:f2:e6:ab:01:29:5e:3f:a9:5a:db:b3:62:
         24:6e:87:61:68:f0:42:88:5c:45:f1:1a:c3:97:5c:f8:a8:ce:
         89:25:67:7c:14:e6:ba:3d:90:c0:b2:ce:cc:73:4d:c5:26:0d:
         5d:37:cd:10:17:b6:4f:4c:ef:5e:3b:cd:64:79:c7:0d:9e:bd:
         58:4a:e8:d2:6b:e2:da:fa:4e:78:fb:58:6f:a3:8d:7f:82:2e:
         cf:e1:64:c1:31:c1:3c:aa:5c:c5:b7:7a:0d:0f:4f:de:15:ef:
         09:fd:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:25:44 2025 by rpki-client