This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
File:                     DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json)
Hash identifier:          J6Eak24gPou+hilDYeWDw7881C2GBlyF8RQEXTJP1rI=
Subject key identifier:   C6:B1:B5:D0:C6:AA:39:79:48:65:AD:E9:68:86:DD:5E:27:1B:E3:E9
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Certificate issuer:       /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial:       019B30E923325C00A8F1389A4B3DF9E43D63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
Manifest number:          0EB1
Signing time:             Thu 18 Dec 2025 10:02:23 +0000
Manifest this update:     Thu 18 Dec 2025 10:02:23 +0000
Manifest next update:     Fri 19 Dec 2025 10:02:23 +0000
Files and hashes:         1: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: k0x44bnFJhpXG1SblsJR19T28ke5NqKcHx6Dw8qJgK8=)
                          2: fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa (hash: ywjvOQhNwUvuKUliKOgNli6M3ye5boySGrRRcKij+48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:e9:23:32:5c:00:a8:f1:38:9a:4b:3d:f9:e4:3d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
        Validity
            Not Before: Dec 18 10:02:23 2025 GMT
            Not After : Dec 19 10:02:23 2025 GMT
        Subject: CN=c6b1b5d0c6aa39794865ade96886dd5e271be3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:e9:b1:8f:d8:db:70:64:d0:5f:12:59:a7:
                    8f:b0:5c:42:60:3c:da:c7:0d:12:e5:1c:81:40:f3:
                    b1:5a:5d:56:5e:72:e2:65:6b:b4:00:fa:36:d0:73:
                    d3:a6:99:47:d5:4a:e3:5d:2c:d6:56:64:c3:59:ab:
                    78:76:be:bc:55:5e:7f:c7:04:d1:de:35:26:2f:ca:
                    98:7e:6f:5b:31:82:5b:18:c7:ba:c9:bb:60:63:99:
                    70:6f:58:28:50:88:f9:e1:e5:e7:a5:5c:3c:a1:67:
                    a9:4a:50:18:73:87:5a:e1:24:33:3a:f4:3b:54:55:
                    99:99:17:72:ba:c8:f6:59:96:03:16:b9:38:17:99:
                    26:65:c3:b2:b0:9f:47:74:ea:5b:3c:a0:58:2a:d2:
                    3c:87:9c:f5:3c:82:d6:a5:a0:9a:68:4f:67:05:68:
                    2d:99:66:66:12:6e:6b:a9:e4:cf:58:bd:e4:4c:cd:
                    ef:44:83:3a:5c:db:3d:ab:28:a6:b9:4f:71:ef:3b:
                    78:b9:2d:bb:e4:78:b6:44:ba:a2:a7:7f:b8:37:65:
                    e3:c7:61:c5:ce:8c:7b:c7:a9:9d:51:92:be:8a:fa:
                    e2:0d:93:77:d7:eb:7f:a9:bf:5a:54:0a:b6:fa:9c:
                    a5:5a:35:d7:d9:df:00:77:6c:84:6b:17:ea:7f:9e:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B1:B5:D0:C6:AA:39:79:48:65:AD:E9:68:86:DD:5E:27:1B:E3:E9
            X509v3 Authority Key Identifier:
                keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fe:bd:65:f4:99:62:2e:02:8f:37:92:64:2c:14:53:3d:e9:
         df:6a:49:16:6f:fc:9f:c1:92:ff:d9:7c:00:bb:15:64:70:06:
         96:bf:89:8f:7a:70:94:e1:83:ff:96:bd:ff:25:03:99:bb:3d:
         97:aa:64:9f:ae:7c:61:90:59:c5:2c:96:3f:88:7d:e8:31:b8:
         5e:48:1b:85:3b:81:68:a1:bf:fc:e2:10:30:2d:61:4f:10:3b:
         c4:66:96:e8:b2:b7:f2:02:68:0d:a8:8c:9f:0d:85:32:b5:1b:
         26:6e:e6:4e:33:18:78:86:5d:bf:c1:0d:e1:07:16:aa:06:e1:
         9b:b7:3c:03:23:9e:69:34:2f:ae:47:75:c9:51:17:b1:f9:9a:
         96:1c:ce:67:ee:9e:ba:2f:94:96:74:ef:af:aa:a5:53:c1:6f:
         e9:b3:b2:97:33:da:83:6f:15:8e:de:0f:46:52:9d:1e:c1:c1:
         76:c6:13:82:dd:dc:ca:3f:35:7e:b4:c5:4b:26:2b:94:e1:3b:
         ec:4b:98:7c:6d:d8:c9:a6:f6:a6:9f:4b:32:5a:11:59:80:58:
         f4:16:83:41:f8:23:39:eb:50:01:70:4d:48:5b:86:1d:28:c0:
         17:f3:1a:8b:5d:d4:cf:2e:4d:d6:b3:69:46:d4:f7:2a:49:be:
         87:87:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 12:42:10 2025 by rpki-client