This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File:                     dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier:          xyCov3RxqIDdNgepH77x9YbxWqzovl9ylVho+9RvWNQ=
Subject key identifier:   0D:87:A9:A6:67:91:81:34:05:37:BE:A1:99:17:16:44:56:73:44:5C
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer:       /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial:       019B3AC692545B0097EE378BF6B14DC0EA8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number:          046B
Signing time:             Sat 20 Dec 2025 08:00:50 +0000
Manifest this update:     Sat 20 Dec 2025 08:00:50 +0000
Manifest next update:     Sun 21 Dec 2025 08:00:50 +0000
Files and hashes:         1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=)
                          2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: BQFj0MCsa2PvUPRhr0lf9HYE/wQAhg0/6b8T9JImBLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:c6:92:54:5b:00:97:ee:37:8b:f6:b1:4d:c0:ea:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
        Validity
            Not Before: Dec 20 08:00:50 2025 GMT
            Not After : Dec 21 08:00:50 2025 GMT
        Subject: CN=0d87a9a6679181340537bea1991716445673445c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:07:dc:9f:40:00:46:c4:88:e7:94:10:9c:
                    01:bd:78:9f:5f:9c:06:08:e2:84:09:2f:a6:a9:f1:
                    c9:08:ee:7a:1b:d5:28:fe:2d:c9:e2:08:93:28:f9:
                    8e:a4:8e:dd:c2:04:4b:9e:7d:de:81:f8:1a:4b:41:
                    b3:fa:ab:49:15:db:48:8e:99:30:6f:41:97:97:ec:
                    e2:64:df:e7:ba:8f:a1:d1:a4:aa:30:a4:dc:22:63:
                    31:b8:8a:e8:a0:bc:39:bf:12:59:78:85:d8:e1:46:
                    db:8a:d4:89:dd:e2:e8:08:07:70:b6:95:9a:4b:8c:
                    68:10:d9:c4:e1:da:d2:58:e2:cc:fc:1a:b9:0a:16:
                    54:57:e2:0c:ee:0d:80:44:77:6a:5c:c7:b0:27:6b:
                    b6:fb:9d:45:4c:96:c5:f5:f6:51:96:2f:92:f9:3c:
                    b2:ff:93:a6:31:8a:d2:51:1b:2d:0f:17:51:80:43:
                    c6:0b:28:e9:b9:36:9a:bc:53:87:ee:8e:af:e0:8a:
                    2c:d2:34:3c:23:22:d1:cf:4a:2d:df:41:9c:f2:f0:
                    0a:e7:e0:b7:5d:20:07:9f:3d:5e:a6:90:b5:89:64:
                    c0:68:4e:a8:92:08:7a:f3:6b:b1:35:86:60:57:b2:
                    29:04:ff:68:cf:33:21:f3:fd:74:c8:64:41:78:5d:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:87:A9:A6:67:91:81:34:05:37:BE:A1:99:17:16:44:56:73:44:5C
            X509v3 Authority Key Identifier:
                keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:51:38:8d:ef:f5:cf:0c:a5:11:6b:f3:31:81:a3:57:e4:09:
         7d:1f:26:13:06:75:2d:6b:3a:84:ec:af:0a:89:4d:4b:c9:8b:
         cb:6d:d5:8c:63:e6:56:c3:72:ac:ca:c7:e1:bb:df:bd:cf:6d:
         e4:6a:7b:e7:64:5d:72:30:5e:7e:22:e2:00:7c:31:05:6c:35:
         c4:b1:56:21:42:b4:9f:d5:f4:9b:99:b5:cd:bb:98:5e:25:5f:
         68:9f:65:a6:2e:e1:46:44:54:9d:6b:5c:79:31:c7:7e:b7:c1:
         ef:f1:14:81:3f:9b:df:09:c5:8d:6a:ac:ad:fb:bd:d3:0e:9c:
         3a:fe:e6:bb:a7:7a:00:3a:52:6b:5b:0b:ae:e1:e3:15:f2:63:
         b8:cc:71:ec:04:53:ae:92:f5:1b:b2:f5:a9:b7:41:18:92:f7:
         fa:05:de:cc:af:e1:2a:c5:f8:bf:33:9e:32:89:ad:ea:b8:cf:
         1f:56:20:e2:41:d2:4d:9f:cd:23:18:80:ac:87:7a:30:6b:f0:
         c3:3b:b1:c6:f5:fa:70:85:d6:d0:78:45:11:3a:49:5c:6e:64:
         fd:5c:81:f8:1f:fd:99:50:bc:be:74:5e:25:49:f4:4f:23:e8:
         67:33:40:3e:e1:d5:a6:07:90:f1:71:d0:64:5d:5b:82:01:d3:
         d3:af:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:37:54 2025 by rpki-client