This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
File:                     DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json)
Hash identifier:          6YCN031LjuknvjQNwpHhmYnMFkEm3rUHTecU46ISItw=
Subject key identifier:   B1:9E:3D:8D:90:3F:0F:84:64:46:22:64:1F:64:DB:A3:C4:41:FE:93
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Certificate issuer:       /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial:       019AF16436B736F54AE4A3AB7C556373DF1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
Manifest number:          125E
Signing time:             Sat 06 Dec 2025 02:01:07 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:07 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:07 +0000
Files and hashes:         1: 0HwAhbsJ8G8t2z-3Pam96Qclp0Y.roa (hash: Kf+VRZglvL6Y3KqIp6jRgRnsTLA4/6Z1kOM3rWbawXY=)
                          2: 0z007PNhTMTxU6x4l8EETY8ToLE.roa (hash: u3KQ7J6hpoaw639bBvV6hHqNbQWhqLYiGZHpd1CoGHY=)
                          3: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=)
                          4: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=)
                          5: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=)
                          6: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: VjSGhGWH4CDnfVMlWYKBGWpGrA+n0ulrSgJ11rF5k+o=)
                          7: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (hash: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=)
                          8: GEK4ZpqBhk_Uf2-g6CPQDmtCUt0.roa (hash: YmXLiGi1pP0XJ9TfEfzlqfyfGLBGlCS0068r1YP0kds=)
                          9: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=)
                          10: ZlysawxM1e6NofcVQHD9jSRfzmo.roa (hash: 2/MgDGIM49q026UnmASkkXoJYYD1r2cYQAo13OQnUSQ=)
                          11: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=)
                          12: cYq8l3NcenGiSFibcz6lsDHU5MU.roa (hash: HKcrI14U8StYBCCm7qa2rnM5VoMvwwlilJxfy4MxCLU=)
                          13: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=)
                          14: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=)
                          15: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=)
                          16: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=)
                          17: x2feWTktTwyBHKrOUzd6buDUjuU.roa (hash: ligBMajluKMyvklZAk4GV5Vw2Taqgg4c/vN04Ce3XMY=)
                          18: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:36:b7:36:f5:4a:e4:a3:ab:7c:55:63:73:df:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
        Validity
            Not Before: Dec  6 02:01:07 2025 GMT
            Not After : Dec  7 02:01:07 2025 GMT
        Subject: CN=b19e3d8d903f0f84644622641f64dba3c441fe93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:67:5a:2e:98:38:31:c6:8c:ff:72:34:88:
                    e4:6d:9a:e7:d9:3a:94:d1:59:d2:b9:49:a4:d9:fc:
                    e1:41:10:b8:b4:16:2d:92:87:6f:b7:69:fd:a7:68:
                    ea:d0:50:37:71:06:84:0c:21:46:d9:37:83:f4:3d:
                    39:fa:6e:ee:59:88:1e:ed:8d:39:c2:af:dd:6a:c0:
                    0f:66:e1:5b:fa:6b:ec:ae:73:76:fd:93:23:52:01:
                    90:7a:92:43:57:58:e3:9a:df:01:d4:f5:a3:02:9a:
                    5c:f6:96:1d:b4:cb:87:cd:31:48:8e:49:17:e5:18:
                    3d:b5:7f:76:3c:7c:bb:15:13:cd:35:eb:68:21:ee:
                    64:f8:05:0b:4a:3d:43:d7:0d:fd:88:ff:07:69:66:
                    2f:bc:da:5b:84:b1:7e:6f:af:be:af:19:fb:d4:02:
                    f3:02:6d:1d:98:cf:d7:86:c4:bd:af:93:71:08:bf:
                    cb:74:27:4a:76:35:e1:de:17:3d:94:0b:59:b3:0b:
                    25:23:0b:8a:83:f0:da:f8:41:f7:6d:4c:65:74:1f:
                    6b:c1:fc:3a:e5:63:a6:c7:e4:d4:ca:8b:9b:e6:98:
                    b3:6f:09:b1:05:18:fe:7c:63:1b:87:0c:a3:e0:bd:
                    3b:8d:86:88:e7:4f:64:4a:2c:29:86:2f:cb:18:4d:
                    3f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9E:3D:8D:90:3F:0F:84:64:46:22:64:1F:64:DB:A3:C4:41:FE:93
            X509v3 Authority Key Identifier:
                keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8e:49:31:71:8c:2f:f9:fb:a0:c2:d4:c1:74:4b:9f:5a:e7:
         df:ec:79:cf:8e:a2:49:51:4b:c0:c5:d5:d8:2b:a2:44:9a:5b:
         84:c5:5b:a1:92:b5:69:74:6b:67:d3:db:02:f6:b1:57:55:ad:
         52:79:d3:da:52:aa:61:b5:56:df:82:7c:23:a2:41:ac:3e:a2:
         2e:8b:0d:ff:f6:b3:e9:f8:ae:b2:a5:e1:05:06:4b:a7:53:88:
         8b:7a:2e:14:e8:2e:9a:20:d1:c0:27:ad:f0:d7:e3:93:48:a3:
         de:e3:ac:03:d5:17:51:27:ea:5f:0b:4f:49:d1:52:73:c7:61:
         f3:30:7d:8c:1e:7f:28:72:98:c3:f3:17:de:a1:70:a1:50:58:
         f3:dd:97:73:70:24:40:7f:78:6e:65:33:37:0f:a8:d7:b3:75:
         69:69:bb:bb:aa:17:39:10:a7:90:4a:fb:c1:f3:48:55:35:83:
         56:37:70:01:8d:dc:06:3f:71:8a:7c:e8:09:b5:c7:90:23:f8:
         b2:dd:2f:33:ba:f6:40:bc:59:b1:f8:e5:3e:b2:2a:3d:7a:bb:
         66:c5:d9:cf:8b:c8:0c:e7:4c:57:14:5c:41:25:b0:a4:85:e8:
         a7:a1:ba:7e:5a:f2:a7:58:6c:ef:0d:c3:27:34:24:41:13:75:
         74:4d:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:21:23 2025 by rpki-client