This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File:                     DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier:          KrbL8eLJ2qO2cTeQl838mQ/FFKWbyQnVDwjgdYQgPt4=
Subject key identifier:   A8:AE:A9:63:6F:CB:F1:36:57:EE:94:89:14:18:8F:13:93:D4:65:D5
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer:       /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial:       019B3F7F0F1FB88777DAC4C67797B31F3564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number:          178F
Signing time:             Sun 21 Dec 2025 06:00:50 +0000
Manifest this update:     Sun 21 Dec 2025 06:00:50 +0000
Manifest next update:     Mon 22 Dec 2025 06:00:50 +0000
Files and hashes:         1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=)
                          2: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: S5FfUWBTaYD0QJVNhUERYCxO8AtvVgttTPdQTQ7NDOg=)
                          3: PGW1u6hsibHWgf5RkDB15fW7nFU.roa (hash: 0InCSbIA5SExLZ91M4uEAsM9+kvbm4v2lPuTA9ZO2w0=)
                          4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=)
                          5: UeY-6eT8AWic-hKV67W_oibJpb0.roa (hash: P9rAEKkeAqwEaQF6epHGIcD5QsTjObpMNhsoMNWv7oU=)
                          6: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=)
                          7: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=)
                          8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:7f:0f:1f:b8:87:77:da:c4:c6:77:97:b3:1f:35:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
        Validity
            Not Before: Dec 21 06:00:50 2025 GMT
            Not After : Dec 22 06:00:50 2025 GMT
        Subject: CN=a8aea9636fcbf13657ee948914188f1393d465d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d1:96:42:ae:c4:06:5c:f2:78:38:03:39:5c:
                    09:b4:3a:06:88:43:eb:a0:84:25:20:a4:b6:42:c7:
                    32:82:a7:1a:8a:91:21:14:31:c0:8a:69:34:30:20:
                    fa:93:f0:5a:89:17:29:f2:6e:f1:bc:a9:26:66:45:
                    d0:8e:ce:78:62:77:3a:4a:b7:d3:74:3c:dd:e3:31:
                    32:49:9b:3f:9a:1a:fe:52:a1:3c:ac:0b:85:9b:1b:
                    ca:ae:fe:72:2f:ee:1e:fb:8e:29:c2:ad:f6:c7:b5:
                    8a:fc:ea:66:02:34:4f:46:c4:36:10:dc:6c:35:9e:
                    24:10:de:9f:c3:9c:0a:8b:fc:ff:e6:86:0b:0c:cc:
                    0b:35:3f:f6:3f:15:d6:d4:ba:53:24:c3:83:34:d6:
                    29:14:e9:b6:9a:5e:36:6e:76:16:3e:cd:06:11:96:
                    cb:aa:f5:1d:8d:f4:8d:1d:06:29:47:d4:5d:9a:59:
                    24:0d:6e:bc:1c:35:8b:44:5e:81:ec:fe:f6:7d:de:
                    94:b1:08:65:df:64:cb:5b:a6:24:01:76:f1:f0:ab:
                    58:ef:01:32:35:b9:6e:11:bb:92:7c:e9:ed:53:f9:
                    da:47:08:71:02:05:53:cc:f6:11:7b:bb:93:38:b3:
                    77:4b:62:a4:d8:0e:59:d1:f2:1e:d0:a2:78:73:4c:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AE:A9:63:6F:CB:F1:36:57:EE:94:89:14:18:8F:13:93:D4:65:D5
            X509v3 Authority Key Identifier:
                keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:dd:4f:45:df:5a:b0:76:e7:17:3e:8b:3b:03:db:65:18:
         3d:a2:57:04:19:20:98:3f:08:e5:0c:0d:6a:64:ec:74:48:fe:
         ce:f0:b5:b2:7d:34:36:6c:42:5a:61:50:40:47:48:d2:cb:b6:
         d5:6a:f8:5f:00:85:c7:d3:0e:8d:e7:a4:f6:40:f0:2d:d3:c9:
         87:54:22:63:b8:11:42:e8:07:94:a3:04:79:db:90:6c:c0:98:
         1e:01:0e:ee:4a:50:3c:8f:a2:fb:53:e9:e7:0f:12:e1:74:b3:
         a9:6b:53:b9:5f:96:87:00:72:64:7e:b4:eb:1c:6f:50:cc:6e:
         31:81:15:cc:ce:b7:b5:4d:5e:80:85:96:b7:04:de:17:8d:fe:
         7b:7e:19:36:3e:bb:2c:cb:98:87:95:c0:f1:7d:00:54:14:14:
         3c:13:70:32:45:a1:c6:87:bb:4d:da:ac:da:19:16:d7:d3:44:
         36:18:ba:e0:47:e8:40:b1:09:2d:3b:a0:00:b1:1e:94:72:e2:
         f9:4e:dc:df:62:3d:1a:c1:fb:41:33:08:9e:2e:06:ac:a8:e6:
         2a:fc:66:a9:bd:d2:36:86:7d:55:51:98:37:84:9c:14:4a:ed:
         34:a9:56:21:48:ef:79:d9:fa:d9:aa:54:25:79:9e:a5:ab:59:
         cb:b3:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:13:35 2025 by rpki-client