This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
File:                     PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json)
Hash identifier:          qBiQcsPJF5MLwZjvIFFcWuZHsNHmpORIvLVLhIdq77M=
Subject key identifier:   61:6F:B6:DB:9D:8B:72:77:2B:56:CF:11:92:B7:97:27:14:46:AE:E6
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Certificate issuer:       /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial:       019AF208E10D5C2E45895FD50B6FDA587B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
Manifest number:          03BC
Signing time:             Sat 06 Dec 2025 05:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:59 +0000
Files and hashes:         1: 0zozhddFGxlaDU0eMcPGzCbmd6I.roa (hash: HhrjUsFCH402W4XdhuJKvzUEm96xMJ7A0tUrjiNFw6Y=)
                          2: 2z44fAwQyyEeWoKCF_G5EjvRE_Q.roa (hash: Z34LIfgBtYIlenX8BP2t8IUqfPpsJULSyBoNS38aJWk=)
                          3: 4kquCz-i6kJDkS1O2XQAUk_agCI.roa (hash: Pez2ubHTLSNld28U0wPkDbmTvFBCVvXm37XAiS5Y0fA=)
                          4: FukUNQ-1MuiT_YZ8AK4IiNn3ZEM.roa (hash: Q+TDgTJT6+GCL8Icb4N9FEYd+k8ybFyashs6L8F6jRA=)
                          5: Ih96IDuDaMSdBEjycgfBHMlpv1k.roa (hash: gzRNZYScETmPIIaSnlA3ny9nEyJmD80+p4ZodHIyvdw=)
                          6: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: 1ZxKi/CFSnf0nq1Sq4hEMELq+lxojHwTxwwg/Ma3yzI=)
                          7: fDTEunNvzlH5X-k5xdeAmWjVRig.roa (hash: kSsYzCwppDZTwjMBzSM9jNvsq5Yv3fwitPhSPp+j0to=)
                          8: s8x3Zl1NTIQSd2VaNW3r7mX9Qt0.roa (hash: 955pA2YQRo69WOfGT4zy28ccgCxBC3J2614wD9x3OY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:e1:0d:5c:2e:45:89:5f:d5:0b:6f:da:58:7b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
        Validity
            Not Before: Dec  6 05:00:59 2025 GMT
            Not After : Dec  7 05:00:59 2025 GMT
        Subject: CN=616fb6db9d8b72772b56cf1192b797271446aee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4d:27:63:b8:9e:85:5b:12:3a:f4:4c:a0:94:
                    ed:58:ab:8a:83:80:12:4d:29:f6:c1:e2:57:2d:4b:
                    31:4c:22:2e:a8:31:c1:ac:16:d5:e9:53:00:c9:fc:
                    2a:27:85:0e:70:ca:fb:5a:12:7d:d0:23:9b:35:23:
                    da:b4:b7:8a:89:6c:83:c0:48:f1:f6:7d:25:e4:a3:
                    6d:46:eb:fb:74:f3:cf:f0:03:a2:77:58:80:c5:d0:
                    e0:5b:1d:62:67:af:06:98:9c:25:19:68:e5:27:52:
                    48:bc:7e:4b:05:70:43:fb:47:4f:03:14:80:f4:49:
                    cd:12:39:a8:d0:f2:cb:c0:e8:a6:b5:ef:34:98:15:
                    7a:c1:97:5a:25:aa:bc:99:e4:a6:08:56:07:5c:05:
                    21:7e:d0:6c:6f:e9:ea:96:9b:6c:70:fa:67:83:ca:
                    cb:23:4c:16:b4:59:41:5a:71:93:c3:6f:6d:38:6b:
                    02:a0:53:a9:a8:eb:ef:20:f9:3b:58:be:ef:b9:8d:
                    d7:e4:3d:6d:8f:3e:18:73:7d:dc:b4:9c:2b:59:48:
                    a7:ad:52:a0:71:82:ed:7d:2a:27:7a:90:70:c2:9f:
                    db:f2:44:7d:3d:d4:af:91:eb:e2:36:8f:24:42:90:
                    f4:db:d4:48:8a:21:ba:a0:c5:4f:7d:85:5f:9c:40:
                    d7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6F:B6:DB:9D:8B:72:77:2B:56:CF:11:92:B7:97:27:14:46:AE:E6
            X509v3 Authority Key Identifier:
                keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f2:28:5c:e6:d5:86:d6:7e:0a:97:fd:65:e5:00:6c:79:fe:
         a9:91:1c:85:2a:5e:ce:7d:a6:fd:96:1c:59:7f:21:3f:b7:b5:
         9e:62:1b:dd:20:05:2a:8c:f0:c5:59:3f:fa:9e:78:30:02:78:
         0f:45:16:96:86:61:0f:7a:e8:ee:a3:15:9c:f5:77:39:76:57:
         8c:d7:34:f0:d4:4b:24:5b:ae:0c:87:13:0c:36:31:83:d2:17:
         dc:c2:ba:67:95:9c:87:7c:61:dd:80:36:c2:a4:26:9b:80:1c:
         64:33:23:60:f5:07:ac:71:ca:92:82:d7:53:66:59:65:32:26:
         f2:8c:4d:28:49:28:51:f3:ed:b9:0d:aa:b8:9b:95:c7:e1:ca:
         b9:43:bf:87:7f:0e:a6:50:02:c4:90:d9:a3:82:6e:13:31:aa:
         7c:06:c1:66:66:00:bb:6a:e1:17:6c:70:5f:c3:dd:58:90:7d:
         67:65:fd:ee:f2:ba:bb:23:f9:44:e9:36:97:3f:ae:44:45:4a:
         b2:8c:16:de:c9:0f:a3:7f:b4:27:db:bc:f1:9c:9e:a2:70:d0:
         7a:ca:f9:27:83:72:fc:c7:67:01:b0:ef:3e:c0:41:e6:8f:36:
         a3:ce:55:76:4c:49:08:2b:7d:76:14:1c:e7:f4:0a:a4:61:70:
         c5:5d:19:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:05:25 2025 by rpki-client