This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          Me02l7Q+mXvPmV9MTLxAMNJKJJb1udy6AWjSU3MxxGg=
Subject key identifier:   72:8A:9B:E7:69:DA:D5:DF:BC:01:88:F9:56:1F:E6:BA:4E:76:8E:23
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       019B37C5CF9237E802EEBFC66D83EA2AF18F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          107E
Signing time:             Fri 19 Dec 2025 18:01:09 +0000
Manifest this update:     Fri 19 Dec 2025 18:01:09 +0000
Manifest next update:     Sat 20 Dec 2025 18:01:09 +0000
Files and hashes:         1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=)
                          2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=)
                          3: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=)
                          4: 9Viq0D0yeyudHsOyGwiWq4c9Zm8.roa (hash: F3Gen1bFVipiyLDRBWS2zGC6+19TslOL2dJD3LXtkbA=)
                          5: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=)
                          6: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=)
                          7: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: +J4KdYm/JfKTy80BSfGVbuCwjEn8AUtDne+Exyqnupo=)
                          8: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=)
                          9: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=)
                          10: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=)
                          11: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=)
                          12: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=)
                          13: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=)
                          14: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=)
                          15: _VNci0CcXhqQlp-7ibbk2c6er8o.roa (hash: 5KlbSxEJ+Lpv1MXHETwLf3XDOUs4Vpm0vwOM11754ko=)
                          16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=)
                          17: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=)
                          18: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=)
                          19: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=)
                          20: h4PDpP0M0yOGU1mpUArUtI5Idr8.roa (hash: YVprxIKiaEXVzIvOMSOvD2ydRXyvhQlAyDHVx3fQ/Zc=)
                          21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=)
                          22: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=)
                          23: qJHGcRtxHFNXE2pwXoHnIE1_KFY.roa (hash: jmsg++sOnE3uEoDqRj1pn+j4E16A/o/E+Wm48qvpy94=)
                          24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=)
                          25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=)
                          26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=)
                          27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:cf:92:37:e8:02:ee:bf:c6:6d:83:ea:2a:f1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Dec 19 18:01:09 2025 GMT
            Not After : Dec 20 18:01:09 2025 GMT
        Subject: CN=728a9be769dad5dfbc0188f9561fe6ba4e768e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:7e:38:51:59:17:82:29:ae:26:92:3d:7e:
                    30:dd:d6:37:81:f9:ce:73:4a:10:d8:33:9f:ec:39:
                    10:36:58:63:61:9c:b4:a9:d9:bb:2a:ac:fb:14:cb:
                    90:01:b7:23:28:00:3d:19:b7:7a:43:13:31:5b:b3:
                    47:b5:a4:0f:6f:56:63:ce:ee:f2:0e:88:58:a4:f3:
                    ba:0b:3b:57:d3:5d:3a:97:e2:f9:ed:c3:ab:50:c3:
                    5a:32:b3:c9:40:aa:53:fd:ee:91:1a:ef:f9:27:5a:
                    96:09:08:72:b1:b2:c2:cc:a8:e5:51:98:16:ee:57:
                    bc:a8:85:2f:2b:3b:a1:dc:b4:cf:60:af:b5:8a:89:
                    cf:d7:42:6a:fa:4b:9b:8f:4a:29:70:57:bd:ec:a0:
                    cb:34:44:0b:be:52:64:9c:b4:05:2b:d3:a6:0b:95:
                    30:e0:b1:c1:37:6d:02:83:31:01:f2:d8:4e:c2:bd:
                    d4:33:25:44:79:d9:80:76:bd:25:e1:9e:25:1e:ac:
                    19:f0:57:9c:da:c8:5f:6a:b0:f6:fc:b4:69:d7:55:
                    72:25:53:0a:ad:4f:d2:1e:4c:e7:41:0d:a7:d0:95:
                    79:b9:14:c1:b9:24:78:ce:1b:60:a8:c4:b8:b1:c6:
                    7c:94:5f:aa:52:cb:34:41:02:27:b0:07:53:63:e1:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:9B:E7:69:DA:D5:DF:BC:01:88:F9:56:1F:E6:BA:4E:76:8E:23
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:06:c8:2e:3d:47:8a:33:06:e8:bd:aa:18:2e:df:72:8e:b7:
         32:4c:e4:70:c5:6b:be:29:a7:8b:bd:ea:67:02:93:a9:8e:c6:
         e8:4d:bc:fa:88:0d:58:02:27:e4:29:02:c2:77:9e:51:e7:48:
         22:98:9c:42:bf:c6:ed:c7:9e:93:6d:77:a9:52:ac:07:62:44:
         55:46:4b:c9:cf:ac:19:b4:bb:82:e0:70:71:96:a3:d5:04:c9:
         df:6a:2f:47:30:94:2b:fd:2a:de:2e:3a:b2:59:43:fc:19:43:
         b6:e8:4a:1e:fe:0b:39:e7:c2:98:24:d1:43:aa:0e:6a:5f:72:
         c3:8c:0b:00:67:18:c5:ff:05:85:88:16:fd:81:7e:25:2c:bd:
         76:7b:47:cb:f8:b2:46:6e:5e:52:05:99:44:15:96:27:1b:70:
         d3:82:50:c9:2a:ae:54:94:29:c2:7e:63:4b:7c:55:a4:74:f2:
         e5:1f:c7:21:ae:50:34:aa:14:cb:89:a6:2c:ba:ca:ca:61:03:
         94:d5:cf:1a:df:1b:c7:d2:25:b7:88:75:d4:45:34:fc:60:f5:
         1b:82:fa:bc:7c:68:f4:ae:83:46:e5:d2:ce:66:af:d1:ce:ce:
         a1:32:e0:c5:d2:3c:48:0c:2a:3c:fe:7d:47:c5:6e:78:b9:4e:
         eb:73:73:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:24:51 2025 by rpki-client