This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          eGCaZUzZ+esv2hgNWqoc0UrHpRbvQlLThT9e8P7tIqs=
Subject key identifier:   6E:57:15:EF:1D:A6:24:3D:22:A6:0F:B6:DC:F1:1C:1B:D5:88:49:77
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       019AF20985C42F76673A623BA0A42F392059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          1771
Signing time:             Sat 06 Dec 2025 05:01:41 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:41 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:41 +0000
Files and hashes:         1: 1-0L6QihwgCIdPcxlSZx30BVCxIU.roa (hash: r/v9bB2/O8eoqo0SdsHJ+0cV0GGG/FpWoOUcPgNpIWM=)
                          2: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: MmCh1jk0UqXPH3GwkIppPHJweBF18LONk3d8KvJHF3M=)
                          3: IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa (hash: qNB39/8R46KNEQ+i+JNvTzUgavEQepnYZFITugyt9Gk=)
                          4: J2u59yFgmuGdudgIENAeqcAIi5A.roa (hash: 1czvcte4D1PcVrf098gt6GCTblFnQnU2WnM5dPM5CwQ=)
                          5: K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa (hash: FTkwxwLsNPLRvw7XfELnO2lGIpcQ3JUT+SSorDdEIQk=)
                          6: fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa (hash: 2BLh0mt6BN3cuK7N2qRXjH6g7/lfrSvhbtCftnz6qGo=)
                          7: l4iAztFdyWZxSOfl8q_e1dKH1is.roa (hash: Uv7SVk02b8fR8AImRa4OOMzROmZWxN56DleM+7FbEo4=)
                          8: wdQu71DwsSZCWEGjtF-c6H8Remk.roa (hash: nQC972cihJ5AOMxuc+A8aMUofttqjMugRlO4fZX1z8w=)
                          9: zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa (hash: iF8UE/8pbMpYaV1IVf6cowiiQQTnx+niOONavMOR9ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:85:c4:2f:76:67:3a:62:3b:a0:a4:2f:39:20:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: Dec  6 05:01:41 2025 GMT
            Not After : Dec  7 05:01:41 2025 GMT
        Subject: CN=6e5715ef1da6243d22a60fb6dcf11c1bd5884977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:5f:ab:a8:e1:14:7b:07:77:b3:9e:17:e7:
                    26:bd:c1:a9:7f:b9:ac:eb:7f:48:0a:a1:b3:a4:94:
                    fd:e7:04:d2:76:97:60:3a:da:2e:c9:f3:f7:36:02:
                    06:e9:9a:51:38:bf:8d:f6:e1:a7:49:19:b4:c6:bf:
                    3e:3e:a9:77:53:69:ba:c8:f4:7a:2b:08:d3:37:81:
                    3d:88:4b:37:ba:3d:81:df:9c:a1:cc:15:db:c5:de:
                    cf:65:13:c0:3a:34:57:2a:37:59:6a:a2:45:3a:5a:
                    ea:d7:1a:45:4c:86:05:7a:10:29:bc:e5:16:ef:bc:
                    66:dc:fc:26:a7:d5:24:63:f7:b3:b0:c4:79:2c:07:
                    5e:8a:0a:f4:9a:82:bf:85:55:c9:a0:e4:8d:83:ef:
                    74:75:26:87:f4:9d:71:6b:47:c2:66:f6:1d:85:5a:
                    ef:16:4c:97:08:db:4a:1e:95:8a:b1:15:06:59:bf:
                    c7:49:72:54:1f:47:ff:16:cc:eb:e1:39:aa:14:a9:
                    a5:7d:b0:7f:58:ff:47:ca:7b:6e:7f:00:7a:85:26:
                    33:04:ae:15:be:57:60:b9:ed:e2:d1:60:55:98:ad:
                    78:45:b0:c8:57:51:e2:eb:6a:3b:20:a7:04:23:2f:
                    15:86:19:fc:19:59:d6:e7:3e:88:bf:87:36:1c:95:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:57:15:EF:1D:A6:24:3D:22:A6:0F:B6:DC:F1:1C:1B:D5:88:49:77
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:12:9a:33:b0:f1:14:44:88:32:fe:56:3e:6c:a8:bf:76:80:
         7b:e8:a8:c8:fd:b7:11:c9:17:90:ae:18:8d:9d:fd:58:0b:6b:
         1f:14:04:ed:7c:9a:b7:2a:54:e5:13:b9:69:2a:01:1a:09:19:
         b3:04:11:59:a9:aa:7d:0f:98:cf:27:0a:65:ab:ee:05:04:cb:
         7c:3a:2b:5b:03:e6:d6:8f:80:f1:2f:e1:ae:b9:5d:6c:16:f7:
         fe:60:5f:80:43:45:30:a7:7f:15:a6:0b:3a:8e:cc:7d:fc:7a:
         06:24:9e:95:a2:5a:95:93:f5:d6:cd:66:73:56:6e:a3:3b:cb:
         ca:1d:a0:c1:7f:02:32:89:d2:71:65:4f:30:08:59:38:69:49:
         0f:2c:f2:a0:38:cb:22:d8:31:71:ea:95:84:6f:ca:4f:24:bf:
         5a:3b:10:e4:0d:0c:e1:68:84:7f:6a:3a:14:e6:ac:78:fc:1b:
         20:0e:be:db:68:60:fb:8c:a8:d3:76:24:2a:fc:1e:5d:25:33:
         87:e1:d5:5c:98:b2:fb:a2:f4:4d:22:85:0a:1c:fc:6e:9d:b9:
         28:f6:cc:b9:a5:ea:42:54:94:6b:e9:a5:1c:6d:c1:a1:3d:b4:
         61:e1:9c:c1:5b:2a:5d:40:d2:0c:3c:6c:de:3c:3d:c3:21:d9:
         e9:17:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:04:41 2025 by rpki-client