This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File:                     dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier:          SsrsJR+cfWfNdRDknj4QU3WxQdhyFYx5K6u6Br89UuE=
Subject key identifier:   7F:76:6B:92:0E:F0:80:63:F6:64:18:04:8C:3A:78:8D:FC:A6:A3:46
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer:       /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial:       019AF577FE2CE7604114AA74788F762DDE32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number:          10B8
Signing time:             Sat 06 Dec 2025 21:01:13 +0000
Manifest this update:     Sat 06 Dec 2025 21:01:13 +0000
Manifest next update:     Sun 07 Dec 2025 21:01:13 +0000
Files and hashes:         1: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (hash: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=)
                          2: Lf8_T-o7ZHygGu0g3mlzua1_1HA.roa (hash: CQIDTTHcfVlCnxAPq4hAkvv2QsASVNkVlmr+LBxrlLU=)
                          3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: DTHH2d8sQ3ELhFi1eg5wwoAyFBdlFzxkOayNoDT7JYA=)
                          4: vYaVLKXY1-Vrl86mKkE3Y-3XdFU.roa (hash: 8y0C99LYt4H2oUrCqNFHSxS/1TMmBVBqFKxb6zfEFoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:77:fe:2c:e7:60:41:14:aa:74:78:8f:76:2d:de:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
        Validity
            Not Before: Dec  6 21:01:13 2025 GMT
            Not After : Dec  7 21:01:13 2025 GMT
        Subject: CN=7f766b920ef08063f66418048c3a788dfca6a346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:6d:70:2e:e7:ff:d2:9a:3e:bf:38:a9:22:
                    01:27:7e:80:a5:0c:e9:fe:35:f9:f2:3f:8b:b7:b0:
                    1d:be:17:f1:72:6a:3f:b8:ce:86:b9:b8:e2:d0:5a:
                    fd:83:b1:6f:ac:7d:6e:e9:b8:fa:4e:b3:e5:87:35:
                    2e:b0:14:c5:6d:b3:52:ae:92:0d:85:19:14:0d:8d:
                    2a:98:7c:b6:24:62:5f:2d:fc:67:73:e0:df:7c:00:
                    ca:d0:81:0a:c5:9a:72:f3:48:9b:ec:ba:8b:76:6f:
                    b4:92:c8:53:ca:d3:ac:85:82:cc:98:96:7c:53:0c:
                    30:e7:e7:df:90:91:db:c8:ae:87:8c:8e:e5:b6:b4:
                    84:81:35:89:1a:dc:bb:10:37:2c:75:cb:a1:70:78:
                    e9:2c:2d:e6:35:43:45:a2:e6:c7:a4:e5:1e:7a:e9:
                    43:cc:19:69:88:24:81:7c:e1:57:e7:70:e6:a6:66:
                    ab:83:22:77:88:91:aa:76:78:bf:b8:8b:e3:0b:b0:
                    13:18:f3:47:74:37:47:e6:eb:77:dd:47:1d:da:c7:
                    e1:85:90:37:52:a9:10:05:a2:7e:a4:b6:58:9c:43:
                    e9:2c:96:21:c4:4c:4c:cb:ab:44:25:ec:29:cd:e0:
                    8b:c4:61:23:53:8e:85:3d:00:f3:f5:40:93:38:45:
                    91:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:76:6B:92:0E:F0:80:63:F6:64:18:04:8C:3A:78:8D:FC:A6:A3:46
            X509v3 Authority Key Identifier:
                keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3d:3c:63:85:65:f4:e3:6e:5b:63:ab:70:b6:79:11:9f:0e:
         e4:b8:f5:f4:9a:78:b2:09:94:9e:79:51:9e:d0:29:62:ea:e6:
         a4:fd:f5:72:52:5a:43:35:90:a5:6d:50:8f:57:47:dc:7b:7f:
         a8:da:e4:e2:1e:16:02:af:92:96:3f:ea:86:0a:53:f0:4a:50:
         de:8a:4a:6b:37:0e:ca:48:7e:0f:92:04:ff:80:f3:04:8f:94:
         8d:9a:62:ca:2f:6a:62:6d:8e:c1:29:ae:18:a7:c2:cd:cf:04:
         33:d5:be:18:b9:82:7d:5c:65:8f:30:34:69:e7:a5:c3:e4:cd:
         c5:0c:b4:55:28:6d:be:98:fd:97:b7:18:da:ff:53:9e:4c:e4:
         ed:46:9e:bf:d4:62:ed:84:72:29:85:53:c0:f4:cb:13:7d:2b:
         67:76:23:9b:c9:96:68:7e:67:5d:8d:55:02:de:89:69:d3:28:
         f8:8b:17:ac:d0:29:18:a9:c1:22:21:9e:98:5d:43:1c:a5:b3:
         58:ee:8a:17:e8:59:d5:d8:a5:2f:1d:8d:74:b5:32:e3:23:e7:
         74:c2:81:0f:d5:e2:62:6d:e1:25:8d:49:3e:c2:c5:81:a2:58:
         98:e4:ee:95:44:0c:1d:68:64:d0:c6:92:2a:f5:c0:1f:61:15:
         71:67:fe:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1d/4s52BBFKp0eI92Ld4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm
YmUzMWMwHhcNMjUxMjA2MjEwMTEzWhcNMjUxMjA3MjEwMTEzWjAzMTEwLwYDVQQD
Eyg3Zjc2NmI5MjBlZjA4MDYzZjY2NDE4MDQ4YzNhNzg4ZGZjYTZhMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulxtcC7n/9KaPr84qSIBJ36ApQzp
/jX58j+Lt7Advhfxcmo/uM6Gubji0Fr9g7FvrH1u6bj6TrPlhzUusBTFbbNSrpIN
hRkUDY0qmHy2JGJfLfxnc+DffADK0IEKxZpy80ib7LqLdm+0kshTytOshYLMmJZ8
Uwww5+ffkJHbyK6HjI7ltrSEgTWJGty7EDcsdcuhcHjpLC3mNUNFoubHpOUeeulD
zBlpiCSBfOFX53DmpmargyJ3iJGqdni/uIvjC7ATGPNHdDdH5ut33Ucd2sfhhZA3
UqkQBaJ+pLZYnEPpLJYhxExMy6tEJewpzeCLxGEjU46FPQDz9UCTOEWR0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH92a5IO8IBj9mQYBIw6eI38pqNGMB8GA1UdIwQY
MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt
YzQ5NmY5Y2FmYTgzLzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz
LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAj08Y4Vl
9ONuW2OrcLZ5EZ8O5Lj19Jp4sgmUnnlRntApYurmpP31clJaQzWQpW1Qj1dH3Ht/
qNrk4h4WAq+Slj/qhgpT8EpQ3opKazcOykh+D5IE/4DzBI+UjZpiyi9qYm2OwSmu
GKfCzc8EM9W+GLmCfVxljzA0aeelw+TNxQy0VShtvpj9l7cY2v9Tnkzk7Uaev9Ri
7YRyKYVTwPTLE30rZ3Yjm8mWaH5nXY1VAt6JadMo+IsXrNApGKnBIiGemF1DHKWz
WO6KF+hZ1dilLx2NdLUy4yPndMKBD9XiYm3hJY1JPsLFgaJYmOTulUQMHWhk0MaS
KvXAH2EVcWf+yA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:09 2025 by rpki-client