This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File:                     DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier:          VpPOF/5XxiTTb1T1uLrlFZEb/BTjoMIYNaWTMUtnqkQ=
Subject key identifier:   0D:DD:C4:3C:77:5F:4F:1C:59:8F:AF:9D:54:92:D3:11:FE:1C:95:3D
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer:       /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial:       019AF4656551EB6C5EFBA2A6601B4F16B9F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 16:01:16 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:16 +0000
Manifest next update:     Sun 07 Dec 2025 16:01:16 +0000
Files and hashes:         1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: 54F6eOAe+5YirgEw0/FiDObYWedFkh8Ky80H4xNSREM=)
                          2: ZfyPZAhLEDJfbRWOZTPW6i5uxAs.roa (hash: lVcg5S8ltJ0oxrMYvDgCBMGIQj26liJSgr9Rj1kE0c4=)
                          3: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:65:51:eb:6c:5e:fb:a2:a6:60:1b:4f:16:b9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
        Validity
            Not Before: Dec  6 16:01:16 2025 GMT
            Not After : Dec  7 16:01:16 2025 GMT
        Subject: CN=0dddc43c775f4f1c598faf9d5492d311fe1c953d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:11:6d:6f:13:51:33:70:04:42:92:49:51:
                    db:b3:29:72:a3:6e:3a:62:dd:a7:c0:24:ff:d1:59:
                    c2:56:96:19:39:9c:3a:6f:51:dd:97:b3:bf:dd:52:
                    8e:01:5f:24:97:92:ae:af:2f:f3:71:d4:2d:e5:cd:
                    82:57:2a:8e:d1:46:8f:31:f8:2e:a9:64:f5:15:a0:
                    af:b2:3d:e6:5b:e2:bf:62:4e:da:13:aa:6f:a9:82:
                    3f:4c:20:db:92:aa:4c:aa:8d:cf:1c:17:59:6c:34:
                    bd:67:d7:85:64:1c:dd:d9:10:23:aa:1a:06:0b:d6:
                    20:0e:f8:97:35:da:49:71:bd:1b:1b:c7:9b:61:86:
                    6b:0a:08:d0:72:3f:7b:35:1d:ff:2a:7d:de:f3:91:
                    c9:c6:5e:d3:0c:76:84:34:1c:22:d2:5f:1b:3b:47:
                    72:7a:2e:93:dd:9d:0f:92:22:4f:f2:98:a4:db:ce:
                    0a:7c:f9:7c:11:06:3a:67:df:11:09:47:68:b3:bc:
                    f2:c7:80:95:b1:ad:cf:9a:45:63:d2:91:48:48:91:
                    1c:b0:25:c4:6e:cb:74:2a:1e:65:f6:69:ee:73:9b:
                    be:ef:9c:ff:b6:51:c6:d2:aa:14:20:10:6b:f0:03:
                    52:72:f0:30:84:a6:09:39:77:4f:1c:7b:30:d7:a0:
                    01:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DD:C4:3C:77:5F:4F:1C:59:8F:AF:9D:54:92:D3:11:FE:1C:95:3D
            X509v3 Authority Key Identifier:
                keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:01:78:29:e0:26:29:fb:c4:d4:db:87:d6:49:1a:7e:a1:30:
         2e:89:0a:cf:ee:a1:10:01:ed:49:d4:49:c2:61:e2:a5:0f:c3:
         cc:90:52:ec:e7:af:92:41:15:18:b0:15:4b:43:e2:d6:54:91:
         a6:b4:0f:1a:98:53:a2:3a:d6:7f:49:cc:00:18:93:9e:80:bd:
         89:e5:9e:fb:07:74:d3:18:eb:8b:44:4c:5d:ab:4f:7a:d5:6f:
         56:57:a8:9f:3a:ba:58:6a:0f:c5:11:3c:73:c3:bc:25:d4:99:
         d3:0b:0e:6e:d0:84:d3:06:80:74:9f:4b:2f:5e:b4:72:af:76:
         b9:43:85:b4:10:a3:eb:52:92:7f:ed:ef:a6:af:57:26:1a:ae:
         97:f5:5c:d2:03:79:4b:11:ef:82:dc:b2:e0:b0:51:73:ad:93:
         d9:b1:e1:86:4f:15:fa:07:bf:8d:34:d6:51:22:66:1d:c4:6f:
         92:e5:4e:4b:86:d4:88:06:38:8b:c9:7d:35:77:3f:3e:3a:a6:
         f2:96:61:be:74:3f:57:4d:13:ec:2d:3c:76:c4:1f:0e:2b:42:
         d5:4c:a5:53:65:dd:8b:64:ba:ca:3a:9e:0a:9a:0d:e5:fe:a7:
         74:95:8f:55:cd:80:4c:ea:01:b0:d3:dc:a7:65:65:fe:63:1f:
         cc:65:66:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0ZWVR62xe+6KmYBtPFrn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWJlNjA1NmViMGMzNjUwYjhmZTIxZTJkNzI2YzFiODNl
YzgyYjMwHhcNMjUxMjA2MTYwMTE2WhcNMjUxMjA3MTYwMTE2WjAzMTEwLwYDVQQD
EygwZGRkYzQzYzc3NWY0ZjFjNTk4ZmFmOWQ1NDkyZDMxMWZlMWM5NTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ0RbW8TUTNwBEKSSVHbsylyo246
Yt2nwCT/0VnCVpYZOZw6b1Hdl7O/3VKOAV8kl5Kury/zcdQt5c2CVyqO0UaPMfgu
qWT1FaCvsj3mW+K/Yk7aE6pvqYI/TCDbkqpMqo3PHBdZbDS9Z9eFZBzd2RAjqhoG
C9YgDviXNdpJcb0bG8ebYYZrCgjQcj97NR3/Kn3e85HJxl7TDHaENBwi0l8bO0dy
ei6T3Z0PkiJP8pik284KfPl8EQY6Z98RCUdos7zyx4CVsa3PmkVj0pFISJEcsCXE
bst0Kh5l9mnuc5u+75z/tlHG0qoUIBBr8ANScvAwhKYJOXdPHHsw16ABOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3dxDx3X08cWY+vnVSS0xH+HJU9MB8GA1UdIwQY
MBaAFAxb5gVusMNlC4/iHi1ybBuD7IKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQt
ZmZjN2YyYTMxOThjLzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQtZmZjN2YyYTMxOThj
LzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwF4KeAm
KfvE1NuH1kkafqEwLokKz+6hEAHtSdRJwmHipQ/DzJBS7OevkkEVGLAVS0Pi1lSR
prQPGphTojrWf0nMABiTnoC9ieWe+wd00xjri0RMXatPetVvVleonzq6WGoPxRE8
c8O8JdSZ0wsObtCE0waAdJ9LL160cq92uUOFtBCj61KSf+3vpq9XJhqul/Vc0gN5
SxHvgtyy4LBRc62T2bHhhk8V+ge/jTTWUSJmHcRvkuVOS4bUiAY4i8l9NXc/Pjqm
8pZhvnQ/V00T7C08dsQfDitC1UylU2Xdi2S6yjqeCpoN5f6ndJWPVc2ATOoBsNPc
p2Vl/mMfzGVmEg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:38:59 2025 by rpki-client