This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
File:                     DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json)
Hash identifier:          Oi7QwKIdG2F+0iJIE0acIQP+2ajWT7OmIJV0UuTE32A=
Subject key identifier:   BF:7F:31:5F:27:2B:61:C4:62:6C:F1:F6:F7:E2:36:D8:FC:86:D5:F1
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Certificate issuer:       /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial:       019B378EBDACD55047B62F9A8FB618FD05BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
Manifest number:          1152
Signing time:             Fri 19 Dec 2025 17:01:00 +0000
Manifest this update:     Fri 19 Dec 2025 17:01:00 +0000
Manifest next update:     Sat 20 Dec 2025 17:01:00 +0000
Files and hashes:         1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=)
                          2: 4SJGO0ahyGrj6_wgUycRPIM87rQ.roa (hash: KKyfxNUe79UZQMGD42WojNOLaLKHp+8lyvcAmB4f9dM=)
                          3: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=)
                          4: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=)
                          5: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: ukB8NdlGEICU9TCTMFSb0+gcJZgURk3EgAEpcPdryt0=)
                          6: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=)
                          7: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=)
                          8: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=)
                          9: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=)
                          10: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=)
                          11: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=)
                          12: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=)
                          13: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=)
                          14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=)
                          15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=)
                          16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:8e:bd:ac:d5:50:47:b6:2f:9a:8f:b6:18:fd:05:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
        Validity
            Not Before: Dec 19 17:01:00 2025 GMT
            Not After : Dec 20 17:01:00 2025 GMT
        Subject: CN=bf7f315f272b61c4626cf1f6f7e236d8fc86d5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:11:3f:00:ec:27:8c:6c:2a:cb:33:c1:ff:
                    4a:81:0f:a3:2b:b8:08:ed:aa:bd:fc:25:dc:93:0e:
                    b1:f5:b5:52:99:8c:db:d8:19:94:bc:5e:73:73:61:
                    5f:b8:aa:ba:93:bb:96:43:ad:c3:09:30:d3:19:3c:
                    d6:f7:5c:f4:fd:f7:14:0d:71:aa:d4:da:d1:b6:01:
                    a1:73:d3:18:cf:ad:63:d7:3c:a5:b2:1c:ba:30:d6:
                    3f:fd:85:54:57:18:9a:57:55:2c:65:d4:a8:5a:2c:
                    19:23:77:00:ae:82:84:b6:88:43:3d:d2:9c:17:5a:
                    d9:38:a0:e6:e2:40:3b:d3:db:41:31:94:0d:5a:c0:
                    db:4e:c1:58:ef:f4:a0:4f:8f:5b:98:1a:ac:d1:16:
                    ae:d5:26:56:d6:1f:a7:b3:bb:f7:c5:f6:57:7b:89:
                    d4:91:71:81:87:40:1b:9d:97:7d:12:b8:ef:de:6d:
                    d5:67:8e:44:ea:06:86:05:61:a5:93:ae:19:a3:51:
                    2f:6e:d4:66:16:45:90:db:e3:76:9d:77:99:43:da:
                    1e:23:1f:20:16:c1:0f:ef:83:49:61:69:6c:fa:fb:
                    35:51:25:63:71:71:ad:f1:f3:c1:48:8f:f4:79:ae:
                    86:be:a3:9c:5d:31:2b:88:18:55:43:98:f1:86:c4:
                    8e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7F:31:5F:27:2B:61:C4:62:6C:F1:F6:F7:E2:36:D8:FC:86:D5:F1
            X509v3 Authority Key Identifier:
                keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e3:8f:ad:18:64:df:09:c7:b9:95:f1:66:c1:92:bc:ef:8a:
         cc:06:66:86:69:86:2f:d0:e4:60:e8:7d:96:3d:2c:bd:66:8f:
         93:26:e9:d5:4f:80:0b:ac:45:79:fd:4a:f7:56:df:80:42:2d:
         e8:ed:66:a9:12:c5:88:55:e2:ae:c2:ff:28:bf:64:fe:0e:fd:
         50:0e:05:e0:7b:22:57:7f:92:aa:d9:f7:2f:bd:66:6a:5f:79:
         79:d3:5c:10:a3:7e:c8:fe:10:c1:62:19:90:4a:3b:e5:99:a5:
         55:7f:35:66:7e:05:72:72:8a:18:4d:63:52:bd:b5:cc:fe:5f:
         0f:d8:e5:cb:4b:67:10:92:02:19:93:87:7c:ae:fa:91:63:84:
         72:fc:0d:b0:73:db:54:d2:1f:0c:e0:03:25:9a:4c:f4:7d:61:
         7d:4f:f8:e9:39:16:3b:55:54:7c:68:96:57:81:3e:89:f5:f3:
         24:62:af:16:59:ce:7a:4d:ee:ed:fd:00:ac:35:7f:a7:04:08:
         25:b3:cc:d7:a4:08:db:3e:0e:26:75:85:66:e7:4e:c3:5e:1e:
         48:d3:38:41:b2:1b:7c:b6:6f:f7:4f:47:c8:7f:1a:83:07:e2:
         3c:97:ad:e2:15:22:31:70:05:ea:88:c3:8f:eb:6c:50:a0:7c:
         9f:a0:97:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:01:36 2025 by rpki-client