This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File:                     dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier:          7yRMuEoaOhGJbhRT0CZ85JPitZRacSBJlZgCwTpYfB0=
Subject key identifier:   AD:98:8C:31:3C:2F:26:2C:1A:24:2F:1F:33:6F:12:C0:47:2B:E5:57
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer:       /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial:       019AF12CBDF703C0DE643C5EADE52AE300A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number:          16F7
Signing time:             Sat 06 Dec 2025 01:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:32 +0000
Files and hashes:         1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
                          2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: m/0gItaoM1tS2iNsT7CEAEoBGJNVioOoL9F6tiHUaC0=)
                          3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:bd:f7:03:c0:de:64:3c:5e:ad:e5:2a:e3:00:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
        Validity
            Not Before: Dec  6 01:00:32 2025 GMT
            Not After : Dec  7 01:00:32 2025 GMT
        Subject: CN=ad988c313c2f262c1a242f1f336f12c0472be557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:85:78:4f:da:11:ee:11:87:0c:61:4d:16:b2:
                    c3:ea:72:35:0b:02:f4:de:9c:f0:b5:56:a5:f7:89:
                    42:82:c3:a2:6b:5f:72:a3:09:df:d7:13:c4:05:91:
                    fc:46:b9:8e:0f:f5:13:56:9c:5e:88:b2:12:50:d0:
                    ff:78:e6:1c:33:55:e8:fe:05:6a:ab:10:fd:2c:42:
                    82:83:f7:e9:91:28:e8:29:35:00:f3:0c:f8:8b:50:
                    b6:22:1f:a4:ab:5d:d5:37:08:b2:7e:fb:de:10:f1:
                    ec:14:10:e9:98:a0:66:9a:7c:7b:d3:17:76:e0:12:
                    1e:53:29:75:03:f1:f7:01:1b:0a:63:75:d4:72:6c:
                    0d:a4:d5:91:12:30:44:f9:19:c8:be:c9:03:98:96:
                    e7:e5:8d:7d:ec:95:01:3f:cb:d4:ab:4e:64:0f:96:
                    40:72:19:34:c4:9b:bb:f0:91:39:0a:83:56:bb:84:
                    35:3b:bf:27:59:55:e2:89:7f:b5:c0:05:3d:77:99:
                    29:06:cf:d5:bd:e7:2a:99:22:5c:df:7f:d6:fc:c0:
                    81:dd:f9:5e:a4:4b:d1:73:cb:bf:89:c1:db:6e:e5:
                    a9:32:5a:5e:ad:58:94:c6:11:fc:79:82:00:bf:0c:
                    37:92:68:76:2b:f7:8e:5a:89:e0:5f:7d:1c:8b:cd:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:98:8C:31:3C:2F:26:2C:1A:24:2F:1F:33:6F:12:C0:47:2B:E5:57
            X509v3 Authority Key Identifier:
                keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:04:82:70:4e:e0:a3:27:e9:6a:7e:9d:01:cc:23:d5:d6:19:
         48:cd:43:d7:7c:f9:be:6a:6e:56:73:92:94:41:a1:de:22:1c:
         16:e2:3d:e6:3f:35:1c:d1:4a:c1:c9:81:42:31:a1:28:1d:7e:
         ce:2a:58:ed:cd:33:07:36:0e:19:28:b1:06:18:ef:63:14:35:
         36:26:34:55:d5:cc:54:72:93:35:cf:86:9e:43:5a:93:8a:a2:
         af:35:9d:39:79:d6:bd:fa:d5:74:29:ae:2c:02:73:8c:02:a6:
         ee:0d:ca:43:3e:f7:44:4c:86:1f:0a:6f:79:9d:c5:97:00:66:
         2e:a4:1a:ca:77:86:f9:bb:1e:0a:fd:c2:cb:01:d7:a8:5d:fd:
         c0:f2:22:8c:de:4c:d4:39:80:ac:d3:6e:40:f6:e2:50:c1:39:
         59:2b:75:58:4e:5a:6d:30:dc:26:3f:ad:ad:ee:d5:d1:a9:d0:
         11:d8:a2:f3:f1:3d:75:d3:d1:94:42:66:e7:6d:9a:e3:b7:db:
         59:c1:f1:10:41:05:47:cc:10:c2:86:27:1b:bf:a4:79:6e:b1:
         85:d0:46:2a:d7:af:06:25:cb:92:9a:dc:5c:04:e9:7d:63:d5:
         f1:65:0b:46:a6:da:0b:e1:9e:59:50:18:af:73:a3:45:53:2e:
         f3:4a:14:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:12 2025 by rpki-client