This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
File:                     DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json)
Hash identifier:          wozxh6rqDV36hIqKck4DmCF5oiy7MAmiU+r4czzYys4=
Subject key identifier:   6E:B2:25:A8:CC:0A:9F:FC:7A:92:2A:E6:6A:50:44:20:12:39:AC:D6
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Certificate issuer:       /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial:       019B3833684AFF4F8DE28E53D3B0D91254D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
Manifest number:          061B
Signing time:             Fri 19 Dec 2025 20:00:51 +0000
Manifest this update:     Fri 19 Dec 2025 20:00:51 +0000
Manifest next update:     Sat 20 Dec 2025 20:00:51 +0000
Files and hashes:         1: 1-NKP1CHafre4vU52sp4fnXcS8v8.roa (hash: v+mjhqPc9zglY03U3cT2GrpVZ5JmbXCgiLV04tLH5QM=)
                          2: 1TcXaqqR1_ZKpC5wVadTdxuukxw.roa (hash: +aHRoyHj29kaTTmbUvmAcqee3qVM7LYdakDn99RdKSE=)
                          3: AWQr6v7bqgNhObGwcUZZPxZgTwc.roa (hash: n7DDrfy5/5YOwq4RESmuSdVx+Pa2q1xl7MiHeeR3d4Y=)
                          4: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: rTyVG3EF8ap0ZeWgllPKp3nKHV38wYv70+wvNkwZ8PA=)
                          5: GHxZUkY9bOorEwdWJVU5TnZ_i1E.roa (hash: V/ninTsb+HPXbupGZSjlT5J8bNup37ea3EAw10ow9dg=)
                          6: MOue30ip0rzsnXS5CsnOkdZdXEo.roa (hash: AVvn57WEsROh6+ARUTdz4PZV+wl5iy2QvdVKr8ej4JA=)
                          7: Uadqw5OnKFpo3aB8FElCsZffdFI.roa (hash: 7lT76djrZcV40yqJ0LasX3UZ0heDZid+Ns+o7xS5REo=)
                          8: Wbs0VJkcKc0wPaUZr1NgrKtuldI.roa (hash: WCN9qi9r+Hm8rm9TUPQoS3r8Tkkj6NM9JqBneLGhwx0=)
                          9: fJ7QUHmY7g9_qP5KvxSEKPQgQ_w.roa (hash: ITyQh90VAvZCZTslbIDDuC/RBxNBRt44KDVHARLU210=)
                          10: lJA6yomITaf8wUh3Uq65gLqCvU4.roa (hash: 3uGM8CcXIJfvqbJA7catsbvaS3T0ce5UavP7oPRys/c=)
                          11: pc8KquVkf7Bjvabr2oO_2AB4Js4.roa (hash: bRnqKdovtszgM8jGx0ckj/Q6NzvUm1MzmoZsUpk8Ya0=)
                          12: tEG80p8s8oQ4Tptfq4VMliOqn5c.roa (hash: AqmsaqOT5QryNjeyheANv5QRaGt08lj8LeFrC8xbJ8k=)
                          13: w8IXiteojLyAl2hPnvm-kFaTy-o.roa (hash: MErj7Qr+atEWhbQkpkCUmfKPYXJ0Re72UrCAJYB++AM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:33:68:4a:ff:4f:8d:e2:8e:53:d3:b0:d9:12:54:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
        Validity
            Not Before: Dec 19 20:00:51 2025 GMT
            Not After : Dec 20 20:00:51 2025 GMT
        Subject: CN=6eb225a8cc0a9ffc7a922ae66a5044201239acd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:1a:d3:e6:08:2e:9b:b0:1d:b6:ab:b1:b0:
                    b0:93:ac:6a:34:b3:ec:2c:ed:20:f8:87:a4:c9:3a:
                    48:e4:2b:fc:3d:0e:d7:bb:b5:00:87:46:6c:5a:43:
                    90:de:d2:60:29:b3:0a:8e:44:57:8a:35:e9:02:5d:
                    24:91:4a:5b:a0:f1:88:56:eb:3e:a2:25:8a:4d:c4:
                    a8:f2:b0:27:60:ae:8f:c3:f2:56:2f:dd:2e:45:de:
                    3c:40:a5:af:c0:19:18:e0:27:1b:a6:f1:36:f3:e4:
                    26:68:2d:62:0d:df:94:30:d5:b0:4c:ba:42:62:12:
                    1a:db:18:83:e9:01:87:1c:7f:dc:52:ea:34:eb:b7:
                    10:9b:55:d7:60:2f:c2:60:3b:a8:34:cb:17:18:f4:
                    2f:ad:6f:3f:09:95:2d:36:e9:6d:d2:7e:7f:98:07:
                    2b:1b:0f:65:3b:38:2e:3f:72:9a:2f:43:c5:37:4d:
                    ea:e1:16:52:e7:19:14:36:f9:bc:63:69:fb:58:eb:
                    e2:64:48:fd:58:a0:10:9d:de:81:16:13:93:6b:b7:
                    f0:17:bf:9c:90:a2:5d:28:ff:4f:20:ab:02:cc:50:
                    d8:5b:cc:51:22:ba:12:f6:7b:90:1f:6d:f5:f8:5a:
                    65:63:b8:5c:f9:e4:f2:94:8a:f7:23:38:95:0d:c0:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B2:25:A8:CC:0A:9F:FC:7A:92:2A:E6:6A:50:44:20:12:39:AC:D6
            X509v3 Authority Key Identifier:
                keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:42:0d:e4:b0:5a:b3:b9:91:b1:f8:57:d6:9d:4b:28:28:1c:
         32:91:53:3a:55:df:32:53:26:f4:9c:74:72:f3:43:7b:58:a9:
         de:11:79:8c:77:49:eb:6b:cf:96:c1:07:85:48:21:71:31:97:
         8e:8d:7c:e3:1b:e6:cd:e8:cd:fa:3e:cd:9f:e6:e5:f6:40:c8:
         3d:e9:ef:8e:3c:29:6d:9c:d8:f7:ea:02:0a:ef:6a:0b:2c:49:
         b3:93:7f:22:1a:40:31:cd:9b:f9:6b:90:30:98:2d:08:ec:85:
         bf:ab:0f:5f:ae:a7:c4:2f:aa:dc:ff:c6:17:32:db:cc:1e:a9:
         95:c8:e5:97:67:de:54:2b:61:c8:37:c5:10:32:7b:a9:ca:96:
         2b:db:1c:16:b1:08:e5:7b:85:2f:99:21:8b:55:89:a6:1c:f8:
         53:e9:e3:07:cc:ff:4d:df:94:0c:a8:db:c3:73:06:24:f7:f6:
         d8:a8:ce:86:97:06:73:c0:1c:6b:e1:70:11:8a:f1:cb:6a:61:
         8f:06:bb:f3:c6:39:d0:30:47:00:b6:b4:3c:85:17:9f:fb:3e:
         4d:55:5c:f6:e0:7e:f1:78:3c:85:5d:dd:58:cc:68:d5:a4:04:
         40:b1:94:d4:11:3e:49:93:a6:a2:e3:82:42:55:e1:64:5b:10:
         54:79:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:17:57 2025 by rpki-client