This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
File:                     61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft (raw, json)
Hash identifier:          DTK7wl3Nos3Bg/9b3quALC5WJEoc8/Ay2/rBsjApV1Y=
Subject key identifier:   46:05:68:5E:26:21:32:A7:9A:38:EC:78:B5:A2:5B:38:52:86:99:6B
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Certificate issuer:       /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial:       019B0DB6BE8F6C3E8F8636126F8379548B14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
Manifest number:          165D
Signing time:             Thu 11 Dec 2025 14:00:38 +0000
Manifest this update:     Thu 11 Dec 2025 14:00:38 +0000
Manifest next update:     Fri 12 Dec 2025 14:00:38 +0000
Files and hashes:         1: 1-2EBppiSOjktT4c8541NHUWIXp4.roa (hash: mDi6ulbEvLogL54BCm4x5j5s52n2zOwohZJdy8LLDgM=)
                          2: 1-HseKewNAhORGPeG0jLZJxBWBmA.roa (hash: Gx06jT5zWYtxqZ2ePMD9C4nr+agXJCFs/O2+a8Lk6RQ=)
                          3: 61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl (hash: cqHXvNW6iIgVmQycbqDUlzcyfkj8XWbnYBd2ii8zLxs=)
                          4: 99j68jcIcmMIEjblV6YGZG7Xz-A.roa (hash: 6pGtaoOAdQOjWl1uvPVsb4nf1cwSsH0trxw0JSPAMyQ=)
                          5: eyY-erluNs3v5144XEgHxCFOudE.roa (hash: TBmAqLL8PbuQkrNWT7JMgvjhkU1ufdS4TOsNk7ShJ90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:b6:be:8f:6c:3e:8f:86:36:12:6f:83:79:54:8b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
        Validity
            Not Before: Dec 11 14:00:38 2025 GMT
            Not After : Dec 12 14:00:38 2025 GMT
        Subject: CN=4605685e262132a79a38ec78b5a25b385286996b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:0e:76:58:e5:f4:ea:7b:de:7b:5a:ef:c9:
                    cc:74:c3:fb:ad:d5:d0:95:8e:a3:3c:f0:f1:1d:da:
                    6c:c9:3f:dc:0b:be:32:e2:e0:49:0e:78:d3:e3:6d:
                    8f:fd:fc:18:69:75:fa:99:a2:a2:65:a5:90:c8:1e:
                    28:bc:90:56:e1:ff:b7:fb:d5:35:73:a1:77:d9:6f:
                    a0:3f:94:99:9c:38:dd:69:c9:00:3a:50:0d:d9:9b:
                    e4:00:61:1b:77:b6:52:26:0e:58:4e:84:cf:5c:90:
                    60:4e:4c:a3:a7:ad:74:fb:de:14:e0:13:50:fc:5c:
                    f7:27:ec:ea:76:b2:14:9d:42:14:ae:7e:51:42:f8:
                    b7:65:40:4a:7e:b3:e3:a9:38:77:e7:5b:05:08:69:
                    05:bc:1b:0c:eb:7e:9a:ee:7f:1e:9f:bb:69:3b:cb:
                    f2:cb:78:c6:67:74:c3:cc:32:7e:bf:14:f9:90:16:
                    24:39:2d:24:71:3b:e4:51:31:35:42:25:a9:e4:80:
                    bb:b4:b7:da:75:58:99:d3:16:36:26:53:de:be:28:
                    a8:16:f1:4d:8d:f9:fa:96:4e:a9:fd:04:f1:30:b2:
                    d0:88:9f:c8:cb:5b:2f:e1:6b:8b:51:9c:4d:2b:76:
                    58:04:d0:d0:78:7c:cf:24:1a:13:ca:8f:b3:0e:5e:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:68:5E:26:21:32:A7:9A:38:EC:78:B5:A2:5B:38:52:86:99:6B
            X509v3 Authority Key Identifier:
                keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:25:e4:a9:8f:d0:55:cc:0a:95:4e:ef:fe:52:9f:74:ee:09:
         11:e0:d7:e9:6e:9e:13:83:ba:fa:5e:ff:5e:27:95:f6:9e:5f:
         22:28:90:ae:4f:82:e9:c6:35:7c:6b:13:39:dd:7b:c9:94:67:
         51:52:25:24:93:01:03:6a:30:42:0f:83:07:31:a0:03:66:1f:
         40:d4:2c:f3:30:2a:59:41:e0:da:8e:0f:d7:27:89:b8:37:e6:
         69:8d:d7:71:ce:b2:7a:42:f3:26:15:1f:0e:6a:f6:0e:61:6d:
         43:f4:78:b5:d6:1e:de:0a:73:75:08:f3:8c:38:6c:ca:f7:2d:
         34:54:95:85:3a:49:bf:c2:29:fa:47:d5:7c:9c:66:29:5a:c6:
         39:a5:58:13:05:64:63:34:32:f5:f8:45:6e:cd:42:25:e6:72:
         48:c0:5c:18:ab:a7:3a:8e:5d:6d:36:1b:72:36:d7:76:78:09:
         69:dd:48:47:73:a8:75:ee:13:12:96:04:a4:2e:e8:27:94:e1:
         d3:a1:68:5b:a4:fb:ce:cf:c3:a9:ad:33:4a:79:f7:d0:ec:f2:
         3e:1e:a0:6e:22:8b:09:bd:31:e0:05:46:af:da:fa:4d:c1:66:
         88:85:89:66:61:72:9d:63:1d:ed:d3:26:46:27:57:a0:84:11:
         30:b5:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 22:13:46 2025 by rpki-client