This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File:                     DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier:          gRnVJoYMqD2OvP/4V8lT5OF4YjQ+LDiKhm3GEEmR21I=
Subject key identifier:   E2:78:83:4A:78:D0:EF:F1:E4:7F:A4:D1:44:E4:B6:D0:34:F4:62:D1
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer:       /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial:       019B1193D9963C8BBE7BEE5906413246FBC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number:          1461
Signing time:             Fri 12 Dec 2025 08:01:00 +0000
Manifest this update:     Fri 12 Dec 2025 08:01:00 +0000
Manifest next update:     Sat 13 Dec 2025 08:01:00 +0000
Files and hashes:         1: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: UMP95gxNUf90jfdyLaMGSSj9XObew0mJSeZW6KxzSHo=)
                          2: Hhl_Ps8o2QGnYco4FO1OXr5ijFU.roa (hash: 6fvLi0/fqupKmxDBTFAgP5SGIqAO7BfwicUQEAWog9E=)
                          3: Nkr_GlprDZw9lnWd52PmBmd7vrQ.roa (hash: 9YHLm9DxE2hQJ58if++TORCN8vsnbZqNWmb+Zklfpt4=)
                          4: YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa (hash: Jrnsr/C5NjCKGrVhAZ6DhSLYahtukJ6T9Dv6tWtZGv4=)
                          5: ZXngKU01a_kjXn9mpqf40kcafVA.roa (hash: 8RfkCh0AjrRQHRpm6NpNuh0rqzoYMIsu54leaUMRXA4=)
                          6: c8o0B4Kc0K00BPoNjWfCYKoQvYg.roa (hash: UmQmGO4jozhIbdSa6hU/VftLF6XoNAfjEHYNN7++TiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:93:d9:96:3c:8b:be:7b:ee:59:06:41:32:46:fb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
        Validity
            Not Before: Dec 12 08:01:00 2025 GMT
            Not After : Dec 13 08:01:00 2025 GMT
        Subject: CN=e278834a78d0eff1e47fa4d144e4b6d034f462d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8b:3b:13:40:4d:2d:a1:01:95:22:77:93:cd:
                    ca:7b:34:f4:93:ea:ca:f3:e8:a2:08:fd:8e:bc:6d:
                    79:71:d7:48:81:8d:71:98:d0:b8:9c:82:c9:17:ca:
                    8f:0d:39:45:99:f8:5c:14:fc:94:e5:97:9b:9d:b8:
                    3c:97:f3:87:38:4a:2e:00:3b:eb:08:e1:99:03:20:
                    ce:91:49:08:b3:09:10:88:c2:23:9a:bf:88:d0:6c:
                    41:5e:a5:8c:73:d9:70:d5:cd:21:ae:25:40:fb:e8:
                    fe:b8:4e:0c:8e:3f:c1:49:87:b0:e0:99:5c:48:58:
                    90:ae:96:2d:8e:c8:80:3c:75:bf:2f:2b:c7:66:97:
                    37:5a:ae:8a:41:cd:7a:63:aa:a5:0b:55:4f:97:36:
                    04:13:0a:17:35:ad:a6:b8:df:88:7f:99:83:2a:5f:
                    b8:bc:f5:c8:f5:2e:14:d7:7b:b8:94:45:13:b6:63:
                    d3:7b:18:69:d9:29:2f:95:3f:dc:1a:ab:6b:6c:9a:
                    70:f0:44:5c:28:ff:34:5c:13:6f:bc:a7:91:0f:68:
                    8b:55:47:ff:cb:52:6e:c9:99:76:90:18:58:16:cc:
                    1b:b9:98:3f:3d:3d:c6:e7:92:77:98:d6:04:37:38:
                    c3:a2:41:ca:c4:52:fe:11:b6:f3:7f:76:2f:2d:e8:
                    11:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:78:83:4A:78:D0:EF:F1:E4:7F:A4:D1:44:E4:B6:D0:34:F4:62:D1
            X509v3 Authority Key Identifier:
                keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:1b:be:41:3e:6e:b0:e3:a6:ca:76:9d:de:63:41:87:71:15:
         9b:42:2b:17:fc:65:67:fa:0f:b1:fc:aa:55:5f:47:41:88:2f:
         56:7d:03:aa:8f:08:88:bd:4f:bc:ea:2e:02:ed:61:70:9b:2c:
         c3:05:37:06:e7:91:6a:83:c7:bd:3a:fd:93:a4:c1:b4:db:06:
         98:8c:8e:5b:0c:cc:78:ca:f4:b2:70:28:aa:ee:89:5a:32:9c:
         70:79:27:2e:7a:bc:54:67:fa:1e:4d:a6:c4:e1:fd:98:da:98:
         44:81:c5:79:55:b1:89:fc:97:af:d7:08:03:73:df:64:d4:1a:
         1d:03:e5:3f:c3:1e:af:d2:53:a6:13:1b:be:58:9e:59:50:d4:
         9e:9e:23:e5:3f:e0:6c:f8:dd:84:7c:bc:2a:24:26:09:bc:e7:
         56:cb:48:3a:1c:72:e4:85:c1:0e:a5:59:44:b5:3e:3f:0b:7f:
         36:9c:d5:b6:1e:d5:28:7c:31:60:e6:13:12:8d:bf:13:34:2c:
         87:1a:24:df:ef:88:cf:20:1c:10:ed:ad:1a:7a:72:3a:c2:99:
         c0:4b:2b:7f:ad:17:cb:ba:a9:aa:4d:7b:de:89:b4:46:5f:f6:
         fc:8d:d1:a3:fb:39:78:fb:fa:c1:a2:b7:8d:93:93:4c:57:1d:
         0c:ab:a3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 11:25:34 2025 by rpki-client