This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File:                     dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier:          awQABrs6sl0KUMNxqD4FLlSwjUuO/YqcDL/KszRCk8E=
Subject key identifier:   6E:BD:79:F4:88:D0:43:45:94:AB:24:57:21:CB:99:F7:93:4C:9B:80
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer:       /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial:       019B37FC41EEED259E9EDA7B3D5E1CB746F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number:          1796
Signing time:             Fri 19 Dec 2025 19:00:37 +0000
Manifest this update:     Fri 19 Dec 2025 19:00:37 +0000
Manifest next update:     Sat 20 Dec 2025 19:00:37 +0000
Files and hashes:         1: 54dHE0jadLwCWG8zkr-DJUOEEaw.roa (hash: oNDnO3daYus3xELeZDv1QShW9ceHJLAT7TByuVM8qlM=)
                          2: G5C1ZqYlTLCRRxbHStMwHe3D7Ns.roa (hash: LpFTYAOw4TDfnjUrddNXOWvBHb296+OG0h5PcCYbZJE=)
                          3: L_hiJ_zTIPvJHKnWltGOdh1BBUE.roa (hash: fnkqnOVp0hCGhUIs9oj2vYD3xsZ2o6VTqPgLKa54b08=)
                          4: _udyEbevQeyPMsntui78RQRmYXo.roa (hash: 8RRyytezjUw6YTel2ifQgoEKUcJPXqM6Y67HGaLLOtA=)
                          5: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: n9CNGHTQuNsd2cCW/NqV7cxHWEP7T/nJqxok24oNygs=)
                          6: d_QjM08NyWxu6Tcwa6Z9vaHDI6E.roa (hash: 2UiuRNdprh1vh3n/JUuIuP4pSF4iJgcL2G0BqHfLcb8=)
                          7: gu5dao22fJp9scPActSQNTp8QK4.roa (hash: SFp8Pdfj96YgeaI0ilX+9ls8kY++x5GaLl2llXmCJNc=)
                          8: jwpY6rERA_zyIv98bpD7R8nes4o.roa (hash: zhq9elSEk74CwB7NZMhv2D35pQpbRAFiT6FBizp5Yp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:fc:41:ee:ed:25:9e:9e:da:7b:3d:5e:1c:b7:46:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
        Validity
            Not Before: Dec 19 19:00:37 2025 GMT
            Not After : Dec 20 19:00:37 2025 GMT
        Subject: CN=6ebd79f488d0434594ab245721cb99f7934c9b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:a4:80:83:2d:38:2a:d5:1f:26:9a:fc:07:
                    13:fb:06:6b:9b:8c:04:47:0a:5e:2a:06:9e:ae:1f:
                    ce:92:35:03:39:e4:2b:c5:4e:76:5d:24:71:a9:88:
                    91:2e:01:8d:20:0d:9e:7c:a1:ce:32:2d:d9:40:04:
                    e0:e0:1f:f5:c1:bd:af:cf:bb:64:38:57:ea:90:8a:
                    05:61:a2:9a:24:3a:71:07:48:5c:77:4b:97:d8:57:
                    0f:e7:25:7e:db:6c:7f:06:9a:b8:8a:ef:e0:f4:99:
                    ba:9a:86:d5:dd:a3:6f:4f:a3:5c:a7:bb:d8:dc:26:
                    be:8f:fc:32:ef:bd:09:09:8d:3f:a8:14:3f:7c:d6:
                    5d:b2:c2:67:24:69:72:ab:bf:9d:8f:70:2d:ac:76:
                    5d:31:9b:bb:11:70:64:0d:db:27:13:12:59:ae:c9:
                    5f:29:07:09:c3:15:e8:cd:9e:4f:34:bf:76:44:c1:
                    61:3e:22:c4:e7:cc:0b:25:b9:98:b3:3b:28:c8:27:
                    52:bc:98:99:fa:6f:88:99:7a:c2:36:43:11:60:4d:
                    43:49:c4:e0:65:ec:5e:9a:fb:fb:cd:a9:7e:88:42:
                    15:cc:4f:27:44:27:d5:2d:0d:e0:df:73:a3:94:8f:
                    af:cc:c7:9c:02:f5:2c:ee:eb:92:67:ae:52:68:01:
                    a5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BD:79:F4:88:D0:43:45:94:AB:24:57:21:CB:99:F7:93:4C:9B:80
            X509v3 Authority Key Identifier:
                keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:62:ef:e6:a7:f2:b5:e5:64:c9:3a:e3:f1:fd:f1:03:3e:cf:
         ad:74:3c:96:1b:fe:c5:27:be:d7:9d:f8:5a:30:30:83:9e:e6:
         d2:e5:12:d7:15:27:2d:1e:78:cc:23:c6:ab:05:e3:00:98:ae:
         14:34:e7:9b:e7:0e:52:bd:52:e1:9e:ab:8c:b7:99:a5:8e:24:
         07:da:d3:df:67:c6:7f:4c:84:d9:91:eb:c4:fa:5c:d4:94:f7:
         4a:58:82:a6:fe:46:b3:1d:4d:26:ce:24:33:40:68:02:ea:33:
         5e:be:15:ec:d3:a0:cf:3d:e9:a1:4d:52:dc:9a:18:a7:fe:75:
         25:2f:76:f4:e3:cc:4e:11:4c:a8:bf:4d:40:ce:30:8b:1c:7a:
         e8:0a:4c:50:47:0d:b1:7d:3c:d6:ac:81:ed:e0:97:16:a1:9e:
         a7:aa:0e:cd:8f:98:f1:e4:af:76:45:15:db:1e:30:7a:39:d4:
         56:aa:03:f7:50:04:d5:cb:5e:c1:38:17:aa:19:b2:5c:b3:85:
         43:4c:8f:b7:19:84:9e:c9:64:4e:10:64:f2:bf:b6:40:01:69:
         0d:70:ae:d0:ba:89:4e:ad:e1:76:c5:07:61:4c:e9:66:95:5f:
         5c:9c:88:32:bf:df:44:17:33:d4:0b:d1:f9:2a:67:9d:f9:30:
         74:d3:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:55:57 2025 by rpki-client