This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File:                     DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier:          5S6AwoYcUrKmbAZa0/N/W+uFSC4ErvGEh8iXLzhJvRA=
Subject key identifier:   7C:E5:E9:C4:7C:68:0B:AF:C4:BD:B8:43:94:8B:65:88:88:23:BF:3D
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer:       /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial:       019AF3C02352E2FA0675F1BA254D2A245445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 13:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:46 +0000
Files and hashes:         1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: K2pAXBu/vLv/gYVI990NQrQui0VSLgswmDrVA60g9S8=)
                          2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=)
                          3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:23:52:e2:fa:06:75:f1:ba:25:4d:2a:24:54:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
        Validity
            Not Before: Dec  6 13:00:46 2025 GMT
            Not After : Dec  7 13:00:46 2025 GMT
        Subject: CN=7ce5e9c47c680bafc4bdb843948b65888823bf3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:91:d0:58:09:2a:f5:20:d8:48:50:c1:b9:
                    f3:f1:d9:ad:16:5b:47:30:24:e5:b5:65:3f:7b:c5:
                    d9:d7:ac:a8:9f:ba:79:d7:ec:de:d8:dd:d3:fe:85:
                    ef:ea:b5:0a:74:4e:4a:d9:4e:27:a2:c5:68:f0:91:
                    fc:80:75:ec:d8:82:84:18:ab:ab:89:f4:c0:e8:1a:
                    88:8c:76:f1:7c:d6:4d:81:f6:dd:21:3c:f4:bf:c4:
                    a9:8d:14:3a:96:b2:5d:1e:c3:4d:d5:46:40:f3:c9:
                    f9:bc:ef:2c:7f:ff:d8:d7:f6:b5:4f:12:01:77:a6:
                    b5:18:aa:fb:32:5a:b7:a2:7f:1b:1a:ca:ee:20:89:
                    40:dc:c5:08:81:b0:0f:9c:b4:7e:a4:ee:0c:dd:26:
                    c9:6e:84:06:d9:ad:5c:d2:a3:d9:4a:68:f8:2e:fa:
                    35:f6:39:68:52:fb:2d:a2:b4:5e:f9:9e:e3:b5:f5:
                    98:25:00:96:f4:34:42:d2:74:de:72:d4:5a:4a:b9:
                    50:7e:08:d2:b0:02:97:5e:90:32:57:30:22:c2:7d:
                    b9:1e:70:27:e4:ed:d9:ba:26:08:f0:c2:76:1e:4f:
                    5b:77:6b:9d:38:50:c7:d1:da:46:a9:7f:bc:75:a8:
                    08:0d:0e:f2:75:cc:f5:5a:9f:4e:2e:fb:cf:a0:b0:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:E9:C4:7C:68:0B:AF:C4:BD:B8:43:94:8B:65:88:88:23:BF:3D
            X509v3 Authority Key Identifier:
                keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6d:35:c5:56:9e:14:da:af:26:ec:3d:ef:e6:f6:9e:6e:a6:
         ae:81:75:4f:51:e3:3f:b2:f1:dd:a9:28:0e:01:03:88:60:77:
         b9:8b:7c:6a:fc:77:20:10:bb:0f:78:ea:91:82:cc:24:e8:5b:
         ba:16:a1:d5:d8:16:0f:bf:0a:5e:e1:d0:02:3d:74:45:12:b8:
         0c:e7:89:36:29:fd:b8:f1:8f:e0:9d:d0:92:33:d3:b1:0a:08:
         86:fb:16:23:67:43:6f:c0:37:3e:d7:69:6e:5c:47:9a:bc:92:
         1f:0b:50:15:35:d9:8e:22:80:22:42:4b:ec:eb:08:fa:dc:b1:
         c5:0c:e3:58:ce:41:ed:5d:aa:e6:6a:c1:4a:a3:25:5e:64:4e:
         75:54:cd:2a:99:8e:ee:fc:e2:8d:00:19:eb:a5:b8:a6:45:27:
         50:33:38:e8:62:d2:ea:7a:f5:52:91:6e:a5:90:ed:fd:ae:79:
         fa:04:98:da:7b:cd:d7:74:e5:70:13:a3:c2:d1:33:a9:cc:53:
         4e:80:1d:f9:b9:39:e0:63:3f:df:1f:d2:b0:4d:fd:32:6d:3a:
         00:e5:1b:06:18:33:f4:be:10:45:2e:10:68:ef:f2:6e:6b:9e:
         ad:f7:e3:59:07:7a:4a:62:67:3b:69:9e:d9:c7:27:8c:97:95:
         61:4c:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:17:32 2025 by rpki-client