This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File:                     DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier:          04LTOkIUcDy/DjhkVyrcZblQ00UlkYQbgGmbCro8VN0=
Subject key identifier:   1F:AC:1E:A4:BF:A3:A6:67:60:FA:BC:2E:70:8B:54:1B:95:0F:11:01
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer:       /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial:       019B4438913644BBFE2B6008B7462C41F324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number:          054D
Signing time:             Mon 22 Dec 2025 04:01:56 +0000
Manifest this update:     Mon 22 Dec 2025 04:01:56 +0000
Manifest next update:     Tue 23 Dec 2025 04:01:56 +0000
Files and hashes:         1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
                          2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: fl9G/hsBXDh+9Qs+1ZgRF2enVO+GpANTpW5+WOokwXE=)
                          3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:38:91:36:44:bb:fe:2b:60:08:b7:46:2c:41:f3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
        Validity
            Not Before: Dec 22 04:01:56 2025 GMT
            Not After : Dec 23 04:01:56 2025 GMT
        Subject: CN=1fac1ea4bfa3a66760fabc2e708b541b950f1101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:21:aa:43:36:c1:52:cf:74:a3:7a:9a:b7:
                    28:82:3b:90:de:0f:3e:ff:d3:d7:93:0d:4b:13:1c:
                    85:2e:a6:3e:8d:3a:48:66:e3:1e:e5:2d:5f:ea:bc:
                    dd:6d:b9:0e:69:8d:20:fc:c6:2f:98:8d:eb:d5:50:
                    16:2d:ba:38:5e:81:2a:3f:99:60:01:bb:05:51:53:
                    07:35:ee:80:37:f0:82:ec:39:63:4b:ce:f2:ed:af:
                    44:87:a6:77:e4:47:99:9b:39:c7:d8:6b:e0:7b:c7:
                    f9:05:93:a9:3a:bb:af:0d:0a:46:cc:f9:0b:a5:36:
                    2b:29:c5:9d:09:d0:05:4a:50:d9:73:8b:d2:0e:da:
                    82:e7:01:ae:7e:95:f2:93:33:f8:34:ee:a9:6c:13:
                    34:df:d7:44:b3:53:4d:f7:fc:ff:aa:e0:f1:d3:cf:
                    17:44:1b:60:75:ed:d6:35:d8:25:73:59:8b:da:01:
                    9d:fc:a1:46:c2:95:ce:ff:42:26:fa:5e:e8:3b:29:
                    b6:dd:9c:82:52:1e:67:a7:b0:fc:a3:7d:e5:7c:66:
                    4d:54:fb:ff:22:67:ef:f0:8f:f7:6a:25:8a:8e:a9:
                    b1:83:de:f2:ec:56:33:be:c9:26:29:de:3a:f5:68:
                    e6:90:ad:af:c6:4a:ab:ea:d3:4f:19:4e:e9:40:48:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AC:1E:A4:BF:A3:A6:67:60:FA:BC:2E:70:8B:54:1B:95:0F:11:01
            X509v3 Authority Key Identifier:
                keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:72:a6:df:20:40:d3:84:87:ae:d1:9c:24:27:83:69:60:
         21:aa:db:c8:94:01:4c:c3:40:f6:47:1d:7a:f0:8f:da:f7:b7:
         a9:4b:89:17:ec:50:06:b4:bd:54:c4:c3:b1:77:2d:fc:10:55:
         9c:83:74:b8:20:23:5b:6f:35:78:25:ba:88:35:56:3b:3b:cc:
         c5:bb:69:c3:3c:7a:22:97:29:79:e7:44:6e:61:c7:42:e4:51:
         ef:b5:ed:49:1f:3d:94:46:f1:79:bf:9c:3b:06:c9:7c:a1:8f:
         88:f7:7d:3e:17:9d:20:0d:f5:ae:96:49:77:42:29:da:7f:00:
         f2:48:60:8d:f3:fa:14:3b:8c:c6:96:dc:c4:e8:f8:a4:96:29:
         54:58:da:89:42:95:a3:01:5e:15:fb:4f:af:2f:d1:24:14:b2:
         66:93:eb:3e:09:84:cf:9e:22:ea:f5:63:f8:79:b3:e5:58:2d:
         d4:0c:d6:88:25:4c:95:52:d7:85:ec:a2:c0:f7:ce:33:8a:64:
         9c:34:a8:a8:e9:86:a1:c5:19:ce:70:49:e7:27:7f:ae:87:16:
         b7:6e:1e:0e:19:de:19:f4:ea:f5:9b:ef:56:82:cb:95:54:04:
         8d:9e:d3:42:7a:6c:a8:f3:03:89:e8:47:73:25:a7:92:12:b9:
         f8:12:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:57:56 2025 by rpki-client