This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File:                     dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier:          mLwkp3WJzZFBCD5dP3rJ5Sh23O9n8r1c4UJJtW0Tul8=
Subject key identifier:   25:3C:26:25:EA:67:31:EC:CC:16:F9:89:78:1F:47:D0:3B:1F:83:D0
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       019B37C5FBB9C2E8AB06EE3CA3BEBB108812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number:          0FC9
Signing time:             Fri 19 Dec 2025 18:01:20 +0000
Manifest this update:     Fri 19 Dec 2025 18:01:20 +0000
Manifest next update:     Sat 20 Dec 2025 18:01:20 +0000
Files and hashes:         1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=)
                          2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=)
                          3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=)
                          4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=)
                          5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=)
                          6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=)
                          7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=)
                          8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=)
                          9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: G+SPAH3k5NFp/8P4UjyPO641V5FFuhmrB9MvoMqzYbA=)
                          10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=)
                          11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=)
                          12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=)
                          13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=)
                          14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=)
                          15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:fb:b9:c2:e8:ab:06:ee:3c:a3:be:bb:10:88:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Dec 19 18:01:20 2025 GMT
            Not After : Dec 20 18:01:20 2025 GMT
        Subject: CN=253c2625ea6731eccc16f989781f47d03b1f83d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:9f:63:62:1a:c7:76:6a:4e:87:2b:5d:87:
                    00:2f:80:d2:84:3e:21:8f:e4:ca:a4:c8:9f:c5:8e:
                    11:bc:b6:95:ef:5e:fe:15:bc:78:fa:d6:ad:7a:ce:
                    fb:c7:35:c4:11:f7:a8:35:9c:28:86:6d:1c:35:25:
                    47:6a:64:be:9f:ad:ac:d2:3a:76:de:a0:e5:39:92:
                    eb:9b:d0:5f:78:78:21:ff:85:19:e1:0d:84:ab:2f:
                    52:b9:f4:f3:a9:bd:45:61:64:ff:8c:9b:04:28:37:
                    59:fa:8b:9c:59:19:10:78:87:c3:40:1c:a6:9e:1d:
                    64:cf:05:0e:0b:ab:87:56:04:f0:09:8b:c9:e1:06:
                    b3:fb:b9:e5:7b:41:c6:3d:45:4a:99:e7:27:d6:b6:
                    8f:08:db:0e:13:91:0e:4a:7b:24:b6:1a:41:0d:01:
                    de:35:c6:65:db:3c:9b:77:6d:ae:bb:4e:9a:75:db:
                    aa:a7:7d:fa:db:9e:c5:c7:8d:e9:aa:e3:2e:40:85:
                    a4:98:9e:ea:cf:fc:01:55:a7:bb:b1:b4:35:9a:cd:
                    f9:9c:ff:e5:90:02:f4:f6:b9:7f:82:48:67:aa:17:
                    93:51:71:f0:97:b0:92:1f:e0:73:b8:80:00:a5:fc:
                    82:12:38:49:c7:04:b2:78:da:dc:a3:4b:56:d6:67:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3C:26:25:EA:67:31:EC:CC:16:F9:89:78:1F:47:D0:3B:1F:83:D0
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9d:a9:0d:d5:53:c9:36:3c:ee:0b:bf:63:6a:e2:c3:5b:d7:
         32:12:dc:0c:c9:2b:a7:3d:89:12:7e:33:e6:b0:02:33:a4:3e:
         ca:7e:fc:c3:f0:43:fd:11:57:c3:ee:2e:a3:33:8f:70:4e:11:
         5b:aa:e9:a0:8d:6d:35:6b:54:77:3e:14:66:67:0b:8b:b6:78:
         d4:85:b3:cd:95:fb:21:2c:7a:3a:ce:19:87:d5:c3:74:b2:35:
         af:ea:cc:f4:75:61:14:3e:9d:e0:c0:88:af:bd:f0:84:8d:0d:
         c2:d7:52:65:f6:23:eb:67:33:12:cd:87:ab:05:73:a5:98:a4:
         a4:15:ff:79:cc:55:f3:cd:e5:68:9f:84:2b:31:5b:9c:de:61:
         78:eb:5a:e0:e2:89:f9:f8:af:01:28:39:ed:03:9a:c6:f5:4e:
         c2:99:32:b8:0f:3c:b6:11:ed:47:e0:e6:06:84:d0:53:4e:8d:
         60:06:ab:ed:6b:14:f2:af:92:e4:fe:0b:4e:a7:2a:8a:6d:d0:
         28:bc:56:2a:d6:24:16:e1:02:2d:e2:63:2a:63:8b:c1:58:4e:
         4d:92:54:7c:e7:8b:0f:c5:66:ed:a5:e1:93:e4:0d:68:c7:19:
         53:d5:61:3c:4f:3a:6b:2a:60:00:a0:3b:d2:a8:a6:60:fe:47:
         57:0b:86:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:41 2025 by rpki-client