This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File:                     dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier:          par/voCvD1USeb5xsXv8Df3XysU49DmIMOEF13SVtlk=
Subject key identifier:   1A:15:60:E4:16:0A:90:4A:81:0D:20:C2:94:66:5C:E8:F5:92:0F:16
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer:       /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial:       019B3F7F3171A313A7373E05E0D75F3145C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number:          083B
Signing time:             Sun 21 Dec 2025 06:00:58 +0000
Manifest this update:     Sun 21 Dec 2025 06:00:58 +0000
Manifest next update:     Mon 22 Dec 2025 06:00:58 +0000
Files and hashes:         1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: 2cci6kEkKwWCYFvLjqPgl8DzMPrh9rP5MBZNu1wjAkg=)
                          2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:7f:31:71:a3:13:a7:37:3e:05:e0:d7:5f:31:45:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
        Validity
            Not Before: Dec 21 06:00:58 2025 GMT
            Not After : Dec 22 06:00:58 2025 GMT
        Subject: CN=1a1560e4160a904a810d20c294665ce8f5920f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:a3:46:91:cb:b6:3c:3a:d0:e0:94:c0:03:
                    26:31:d3:21:f7:1d:bf:55:a3:be:e7:c9:10:ea:3a:
                    45:27:ac:43:c4:ae:fc:a3:fb:d8:52:06:8b:04:a6:
                    12:29:ec:cb:88:e6:9b:14:fa:90:c1:c8:8d:a6:00:
                    7f:bf:c4:e6:09:01:e8:de:a7:df:18:31:cf:39:7f:
                    09:1d:20:ca:99:82:fc:cf:7a:04:9c:43:e0:fe:52:
                    3a:0e:07:8e:ab:00:71:ef:4a:02:bf:00:e5:17:87:
                    ad:4f:68:e4:c2:63:99:0a:9f:05:82:0b:98:20:be:
                    97:34:92:9f:5b:90:cc:32:c3:77:5b:d4:91:02:73:
                    ab:0e:59:a8:bf:4d:b2:72:b0:2e:fa:a2:a8:36:c6:
                    ab:05:63:22:97:97:4a:cf:3a:18:cd:4e:4a:94:52:
                    da:b2:7d:26:a7:48:da:c8:4e:de:1e:74:69:15:b1:
                    be:05:54:0d:2d:b5:db:aa:e7:8e:c0:94:4c:c3:70:
                    85:eb:85:38:eb:79:f2:62:74:59:be:fb:27:f9:ed:
                    d3:f0:71:d8:52:f6:c0:93:03:14:de:b3:1d:3a:b6:
                    5b:0c:b0:ec:7d:b4:f8:66:58:50:22:bc:94:e6:5f:
                    42:29:6c:81:f1:12:91:f7:5f:2a:73:39:99:60:a8:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:15:60:E4:16:0A:90:4A:81:0D:20:C2:94:66:5C:E8:F5:92:0F:16
            X509v3 Authority Key Identifier:
                keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:05:2b:de:c9:5f:68:44:44:a3:de:ec:a3:ae:39:74:33:b4:
         f5:bc:84:b4:3e:7c:ba:96:26:25:da:9a:7a:f2:6a:3c:ff:c3:
         72:86:67:b1:1c:29:c6:0d:af:da:17:96:0a:48:99:b6:a2:f3:
         26:15:4d:fd:06:e4:ae:45:ab:c3:d8:bd:38:52:2e:05:75:e2:
         f5:fd:f9:4e:0d:ad:b5:e4:6c:4b:c5:67:4c:5e:94:fa:94:30:
         c9:7a:79:55:ba:d2:31:51:6e:0c:e2:77:5d:a3:d8:55:cb:5c:
         c0:b4:5d:91:de:98:30:f8:b9:1a:9e:47:fc:62:ec:fb:6f:bb:
         ee:b1:b2:56:1b:48:ff:c7:a3:89:ea:e8:69:3f:a4:08:7a:1b:
         d1:aa:18:d4:16:33:5d:06:a0:d4:d8:3a:31:16:30:7c:d9:22:
         1c:75:db:46:5b:9b:6d:4e:a1:97:fa:4b:87:3a:d9:df:88:1b:
         50:d7:52:8e:6e:8e:52:66:50:4c:eb:ce:82:b3:2a:29:8b:88:
         0e:05:7e:f7:f2:38:70:c9:dc:45:8c:e4:fb:65:7f:4e:af:19:
         98:84:c3:23:34:c5:a3:d8:61:ef:a5:ac:bf:c8:0c:ea:6d:32:
         bf:08:68:e9:80:46:ee:9b:e0:99:34:1e:d5:8b:7b:5a:20:e1:
         fc:52:a6:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs/fzFxoxOnNz4F4NdfMUXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Y2I5MWI1MzlmZDdkZThhYzU1MzhjYWY1M2JiZjJmYWMx
YmIyNTkwHhcNMjUxMjIxMDYwMDU4WhcNMjUxMjIyMDYwMDU4WjAzMTEwLwYDVQQD
EygxYTE1NjBlNDE2MGE5MDRhODEwZDIwYzI5NDY2NWNlOGY1OTIwZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt6jRpHLtjw60OCUwAMmMdMh9x2/
VaO+58kQ6jpFJ6xDxK78o/vYUgaLBKYSKezLiOabFPqQwciNpgB/v8TmCQHo3qff
GDHPOX8JHSDKmYL8z3oEnEPg/lI6DgeOqwBx70oCvwDlF4etT2jkwmOZCp8FgguY
IL6XNJKfW5DMMsN3W9SRAnOrDlmov02ycrAu+qKoNsarBWMil5dKzzoYzU5KlFLa
sn0mp0jayE7eHnRpFbG+BVQNLbXbqueOwJRMw3CF64U463nyYnRZvvsn+e3T8HHY
UvbAkwMU3rMdOrZbDLDsfbT4ZlhQIryU5l9CKWyB8RKR918qczmZYKhZxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoVYOQWCpBKgQ0gwpRmXOj1kg8WMB8GA1UdIwQY
MBaAFHXLkbU5/X3orFU4yvU7vy+sG7JZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQt
MTdlMGE2ODY5Y2VkLzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQtMTdlMGE2ODY5Y2Vk
LzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQUr3slf
aEREo97so645dDO09byEtD58upYmJdqaevJqPP/DcoZnsRwpxg2v2heWCkiZtqLz
JhVN/QbkrkWrw9i9OFIuBXXi9f35Tg2tteRsS8VnTF6U+pQwyXp5VbrSMVFuDOJ3
XaPYVctcwLRdkd6YMPi5Gp5H/GLs+2+77rGyVhtI/8ejieroaT+kCHob0aoY1BYz
XQag1Ng6MRYwfNkiHHXbRlubbU6hl/pLhzrZ34gbUNdSjm6OUmZQTOvOgrMqKYuI
DgV+9/I4cMncRYzk+2V/Tq8ZmITDIzTFo9hh76Wsv8gM6m0yvwho6YBG7pvgmTQe
1Yt7WiDh/FKmYA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:40:38 2025 by rpki-client