This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File:                     DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier:          InFQsU9GHY7fg/al/O6pQoLqAbnqdyr1aHVyPkcG2xM=
Subject key identifier:   F1:28:FA:4E:98:AB:3E:7A:02:E6:53:D7:F0:18:62:A9:BB:27:06:F1
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer:       /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial:       019B330CC8F956C6A4C9F9A936DB64F74C3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number:          0DF5
Signing time:             Thu 18 Dec 2025 20:00:34 +0000
Manifest this update:     Thu 18 Dec 2025 20:00:34 +0000
Manifest next update:     Fri 19 Dec 2025 20:00:34 +0000
Files and hashes:         1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=)
                          2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=)
                          3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=)
                          4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=)
                          5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: aXAMAmejqQwZmM1crHaYqjeomXA1BrCbeM3aAJAkYgY=)
                          6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=)
                          7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=)
                          8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=)
                          9: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=)
                          10: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=)
                          11: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=)
                          12: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=)
                          13: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=)
                          14: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=)
                          15: da2k4kkg5lEUqU-HrsfQSd4jDyY.roa (hash: 0QYieGsvyj25fl9hPrJSkWKf4K69KfEWFeHhni5jPsc=)
                          16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=)
                          17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=)
                          18: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=)
                          19: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=)
                          20: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=)
                          21: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=)
                          22: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=)
                          23: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:0c:c8:f9:56:c6:a4:c9:f9:a9:36:db:64:f7:4c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
        Validity
            Not Before: Dec 18 20:00:34 2025 GMT
            Not After : Dec 19 20:00:34 2025 GMT
        Subject: CN=f128fa4e98ab3e7a02e653d7f01862a9bb2706f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:1f:fc:41:31:15:93:36:49:34:ce:84:4c:
                    d1:18:a4:67:d6:66:b0:d8:0f:2b:e9:52:2e:96:1b:
                    33:73:7c:6a:93:c5:92:79:b5:0c:01:89:0e:5c:a8:
                    d2:bd:61:51:f2:80:28:a1:8a:d2:30:8c:49:29:70:
                    82:28:a1:44:90:b5:d8:c9:d2:8f:bb:c5:2e:47:5b:
                    22:bc:80:f8:55:28:f0:6e:fe:01:b9:b9:7e:b1:72:
                    45:a7:ab:43:6d:00:46:27:e4:02:ec:57:e4:5f:80:
                    00:5d:9d:0a:d9:cb:d9:1b:ac:16:c2:d2:ca:e0:46:
                    a0:89:d9:1c:1b:d6:0d:ad:22:d0:44:aa:43:69:f4:
                    dc:1c:86:dd:4d:93:d5:27:ab:30:50:c0:54:20:9b:
                    5b:48:76:6f:c1:82:f8:2b:ee:19:89:63:5c:d7:ac:
                    ab:be:be:a2:39:b9:60:16:ff:92:4e:b4:fd:61:19:
                    75:e9:bb:35:2f:79:65:c7:c3:bf:ca:fd:e2:f0:0f:
                    42:cb:12:1f:59:58:41:01:1f:a0:7c:e2:34:2b:88:
                    02:21:37:12:8b:a1:c7:7d:a3:89:1f:eb:ba:f8:77:
                    7a:a3:f7:ed:4e:d4:2d:81:8c:af:ba:22:09:44:26:
                    13:0b:0a:30:09:59:95:06:a5:43:ff:20:e9:f1:ca:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:28:FA:4E:98:AB:3E:7A:02:E6:53:D7:F0:18:62:A9:BB:27:06:F1
            X509v3 Authority Key Identifier:
                keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:db:3a:66:41:f2:97:c2:85:2c:d9:b2:21:8f:89:00:f7:4e:
         5c:45:04:7c:c4:59:1b:39:e6:74:75:be:29:f6:ab:05:12:b3:
         70:71:f7:44:a2:7b:56:5d:49:2a:69:cd:15:68:8a:93:2f:7c:
         5f:16:7c:36:77:a5:cc:eb:34:71:2d:8b:66:89:26:5f:4a:33:
         a9:f4:9b:5c:7b:9b:38:08:ce:7d:3b:3c:b0:09:8a:19:aa:06:
         94:fa:21:07:f4:d3:76:36:1d:b8:d6:b6:79:c9:0d:09:b8:8e:
         9c:06:86:77:71:4b:89:8f:38:d2:c6:a2:69:76:dd:7d:c6:24:
         1e:da:dd:d7:c1:f5:65:db:8a:fb:f3:99:d4:9d:db:72:64:bf:
         4e:ef:00:30:56:ee:f0:86:22:00:01:1d:a8:6b:ca:21:98:e0:
         10:c2:f2:9b:24:2a:34:4d:d3:d4:2e:94:57:a4:97:e8:63:27:
         9b:4b:ff:38:7f:3a:cf:38:d4:0f:75:27:03:d9:b1:a4:9a:de:
         1e:1b:d4:14:b6:a8:ec:91:ff:90:7d:82:1c:cc:02:92:56:35:
         08:12:3e:08:ec:79:6e:19:4a:9b:18:45:07:98:2f:30:86:0e:
         b0:3a:b7:c2:3b:58:95:81:38:a8:ff:08:6d:26:6b:15:9f:aa:
         6e:76:53:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:26:07 2025 by rpki-client