This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
File:                     DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json)
Hash identifier:          onk3l9Uz9mWKtkXeOMNULZdkNsPIpsH9b09z8KW1QBU=
Subject key identifier:   9C:2E:E9:71:DF:8F:EB:34:22:07:5E:28:8A:39:47:59:B5:DC:02:7E
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Certificate issuer:       /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial:       019B397D6C0603ACC644A0882FF5A4F11681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
Manifest number:          1153
Signing time:             Sat 20 Dec 2025 02:01:19 +0000
Manifest this update:     Sat 20 Dec 2025 02:01:19 +0000
Manifest next update:     Sun 21 Dec 2025 02:01:19 +0000
Files and hashes:         1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=)
                          2: 4SJGO0ahyGrj6_wgUycRPIM87rQ.roa (hash: KKyfxNUe79UZQMGD42WojNOLaLKHp+8lyvcAmB4f9dM=)
                          3: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=)
                          4: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=)
                          5: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: 6ScgHntC5p0xi37EaAXDNUr2V8ACcxoMeasQmTiAvUU=)
                          6: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=)
                          7: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=)
                          8: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=)
                          9: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=)
                          10: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=)
                          11: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=)
                          12: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=)
                          13: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=)
                          14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=)
                          15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=)
                          16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:7d:6c:06:03:ac:c6:44:a0:88:2f:f5:a4:f1:16:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
        Validity
            Not Before: Dec 20 02:01:19 2025 GMT
            Not After : Dec 21 02:01:19 2025 GMT
        Subject: CN=9c2ee971df8feb3422075e288a394759b5dc027e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:fd:1a:36:11:a7:ed:0d:09:27:8b:b2:b2:
                    35:ba:04:d5:4c:e3:28:4d:f2:b5:d9:80:f6:82:20:
                    da:d5:e8:21:10:58:41:73:00:07:ae:17:c2:09:e0:
                    6c:9b:ea:33:07:d0:48:8d:3d:e5:ec:a6:e7:af:45:
                    55:3a:0a:99:0f:98:f4:97:6f:2d:f2:bb:8f:00:39:
                    3e:ab:f5:f7:af:c6:39:dc:2b:5c:b3:6c:86:f1:2e:
                    55:82:26:30:fc:af:3e:92:9b:1a:97:ac:51:20:49:
                    6b:8b:96:06:d2:23:2f:d0:a5:9d:ca:bd:cd:03:7a:
                    1b:82:a7:5b:6d:b0:07:e0:c9:ff:d8:70:3f:b9:1b:
                    5d:d0:75:73:17:45:0d:b8:b4:54:82:4b:5f:21:c3:
                    85:d7:dd:27:e5:ad:34:86:ce:2e:f4:98:dc:6e:36:
                    38:0e:13:12:31:b1:02:e5:60:c8:8e:72:15:be:04:
                    72:b3:ca:90:87:8b:f6:ce:4c:e8:e8:5f:88:4f:1a:
                    61:57:09:b5:95:da:78:f4:cd:21:40:de:0a:82:e1:
                    92:18:a1:df:01:14:b1:9d:b8:1f:8a:3f:84:43:d5:
                    c9:15:bd:fc:16:be:40:e8:84:54:28:fd:2d:19:e2:
                    7d:9c:33:25:54:61:c7:be:b3:5f:9e:f6:d2:7f:36:
                    9c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2E:E9:71:DF:8F:EB:34:22:07:5E:28:8A:39:47:59:B5:DC:02:7E
            X509v3 Authority Key Identifier:
                keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:90:0b:83:0b:57:cc:36:85:9d:e3:45:85:b2:35:d3:06:5a:
         51:3b:a2:cc:cf:1c:4a:e8:af:a9:cf:56:59:18:a6:98:f5:51:
         46:a7:f4:d5:15:42:78:d4:56:63:8d:41:3d:2d:a9:f3:0d:c0:
         47:42:7a:f7:16:ec:25:2b:ac:5d:f5:5d:51:7e:26:b4:33:03:
         f0:ed:76:a3:40:1b:75:88:81:59:f0:1c:cf:5c:40:16:9f:60:
         50:2e:e7:7c:10:bb:51:e2:74:03:f6:5f:6b:b9:a7:11:33:f9:
         4f:90:ed:23:cf:81:62:ac:6f:b9:e8:d8:78:6b:58:2e:41:d6:
         93:73:17:a1:4a:43:34:c4:0a:88:1f:1d:cd:b8:e5:3e:5a:00:
         de:e4:6c:75:89:df:ae:4f:dc:e3:91:cd:03:28:87:d6:58:cf:
         26:07:88:db:8c:01:b7:84:97:e8:3c:7f:9f:e3:30:f9:3d:fa:
         f3:d3:72:54:14:0d:eb:d5:2c:9b:43:05:21:c2:4d:c3:d8:d2:
         3c:a4:d9:a6:26:29:23:1e:d8:c9:2d:12:08:0f:86:5a:80:03:
         65:f9:e3:74:f6:69:81:f3:57:ff:23:10:7c:d7:e2:6f:5f:aa:
         ae:5f:f7:bc:78:d8:1b:d6:ae:62:ec:15:a7:2d:b3:7f:44:cb:
         4e:94:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:19:22 2025 by rpki-client