This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          G8g7nFQWDM0W+qD/nrBkc5sy6OKTB1JvefL07ORkMFk=
Subject key identifier:   E7:92:E7:0F:0B:53:35:12:A8:DC:58:77:7F:34:6B:72:2E:0F:66:01
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       019B38A257EE60AFC81EBE0DB2B44E99C3FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          179F
Signing time:             Fri 19 Dec 2025 22:02:01 +0000
Manifest this update:     Fri 19 Dec 2025 22:02:01 +0000
Manifest next update:     Sat 20 Dec 2025 22:02:01 +0000
Files and hashes:         1: C_ziNaXKn4VDpbrAEu9weVF52JA.roa (hash: uW9Tu1YIQ5nRvRVJvhMOdJvsptWQiAhpmFSnfRGl4eY=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: 14/lX60MYiTRnAL1MoBJV0LLug3NxvdC60IyS8otcO8=)
                          3: MhkIG3M7fwR8fILw15Agvyj3QKI.roa (hash: FFjReexmd0K3X+SEM/x6XzG86nvZA19Vvp973XX9p0Q=)
                          4: X0VOPwSHvzkDEaI9vdnqoeKICu4.roa (hash: QYZRUmSjoVGFNA4mKmXvECcmo9Gvd4pgJxevI7UENLo=)
                          5: h8Rooww-YtXgZdj5PaYT_SFfSvw.roa (hash: u6xVJHYA1uzH6xbwrO/RW/GLLxj+VO2zqxgk0PQuKro=)
                          6: mrqVIwSDxW20lv8kvtQ7QFndJZU.roa (hash: J/buU17qNgp7OI4nvhA+Zkd2w7B/8zGPPbTTlXaLVUM=)
                          7: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 22:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a2:57:ee:60:af:c8:1e:be:0d:b2:b4:4e:99:c3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: Dec 19 22:02:01 2025 GMT
            Not After : Dec 20 22:02:01 2025 GMT
        Subject: CN=e792e70f0b533512a8dc58777f346b722e0f6601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fb:37:cb:18:96:1a:44:45:73:a6:fa:fa:35:
                    ed:ae:13:b5:bc:68:f6:19:4d:9f:0e:7a:08:99:4e:
                    41:ac:c2:01:d5:05:a8:66:86:d5:e2:62:40:ae:40:
                    c9:10:ef:5f:4a:69:2b:19:09:a7:c8:ec:0c:28:ef:
                    e2:aa:2e:11:14:54:90:f4:ac:21:6a:b8:e0:97:f0:
                    7b:e1:9d:e0:49:9f:32:2c:b0:37:21:9b:60:cb:d4:
                    9a:c8:71:44:40:e0:5b:79:56:fd:6a:0e:07:41:1b:
                    08:29:2a:36:f8:82:0c:7b:9d:ea:da:db:12:43:a2:
                    14:3d:be:b3:bf:77:07:22:7a:58:69:a4:ed:9f:a8:
                    cc:a1:11:67:21:b9:8a:74:6c:30:16:11:26:45:b5:
                    80:3e:4b:b9:6f:9e:4a:cc:e8:89:ce:95:3a:d8:b9:
                    19:3f:93:50:c0:af:99:20:ef:92:f2:8c:ba:00:3a:
                    85:2f:8b:de:4f:ba:dd:81:35:01:5a:5b:ae:ff:a6:
                    72:38:79:c9:d3:9a:67:5d:44:50:b8:3d:05:ca:b5:
                    e9:34:a2:48:42:8e:18:c4:28:2c:fb:e9:3b:b4:b3:
                    8d:20:7c:ad:88:08:26:38:ae:3c:4d:d7:0a:9a:d1:
                    25:30:02:71:1f:c4:b5:b3:b8:17:90:1f:ac:9c:b1:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:92:E7:0F:0B:53:35:12:A8:DC:58:77:7F:34:6B:72:2E:0F:66:01
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4f:f9:8c:79:40:a9:3e:1f:5a:cd:db:12:a8:74:02:20:32:
         b8:84:d2:3d:f9:17:59:71:25:8c:0e:42:47:1a:f5:4c:1f:65:
         56:58:2a:2e:45:61:97:67:0b:7c:a7:50:37:de:2d:87:d3:e1:
         dc:a8:60:35:8b:62:44:e0:23:50:4e:38:de:4b:2d:85:c0:8c:
         78:89:a2:19:82:aa:80:5a:a1:e7:47:a6:eb:53:d2:d6:dc:2d:
         2d:66:23:94:0c:ac:34:cf:e3:f9:fc:4c:b3:07:8e:a7:e5:62:
         fe:fd:a4:e4:41:b8:bb:7d:6f:cc:9f:df:7a:e9:cb:a1:67:69:
         34:34:98:40:d8:08:f0:d7:12:48:f4:21:be:69:06:ae:e5:8a:
         7a:5e:a9:a5:33:28:b6:89:ea:06:20:55:bc:c2:3c:e2:f9:12:
         17:c0:36:26:de:d6:b5:f3:e0:f4:dc:31:2d:ab:d3:b1:79:0f:
         03:e9:4a:69:f5:ee:7b:02:9d:97:17:87:e2:d3:59:4d:18:fe:
         71:eb:c9:bf:06:d8:79:8f:9a:14:3d:b6:64:51:31:0a:e4:57:
         5f:40:3b:80:a8:ae:f1:18:eb:0c:fa:18:a0:6d:ff:39:9c:11:
         e7:9d:95:c9:25:fb:79:ea:cb:cd:9d:a4:be:b2:48:82:94:b6:
         1e:da:5c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:06:07 2025 by rpki-client