This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
File:                     dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json)
Hash identifier:          hBKoeDzjuT5R7PLA8exEntpycD//aW7Gp2jk2ug2fGM=
Subject key identifier:   0E:0D:95:F7:E6:0B:A8:6E:61:0A:C0:00:66:C7:4E:F4:A9:B8:24:1E
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Certificate issuer:       /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial:       019B134B2854497CABF60FF75AC16BF1D1D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
Manifest number:          0F5D
Signing time:             Fri 12 Dec 2025 16:00:51 +0000
Manifest this update:     Fri 12 Dec 2025 16:00:51 +0000
Manifest next update:     Sat 13 Dec 2025 16:00:51 +0000
Files and hashes:         1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=)
                          2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=)
                          3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=)
                          4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=)
                          5: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=)
                          6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: G3k4Shhvm8doFO3bXOauX7WR8+xokTcoQ4cOx1o/Qhs=)
                          7: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=)
                          8: oWAjJbQBfxx3e4wlWi3kdlBilW0.roa (hash: PNb++l6AXajvtQHdYlCiHKFX324+t6SV7D+grw9N748=)
                          9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=)
                          10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:13:4b:28:54:49:7c:ab:f6:0f:f7:5a:c1:6b:f1:d1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
        Validity
            Not Before: Dec 12 16:00:51 2025 GMT
            Not After : Dec 13 16:00:51 2025 GMT
        Subject: CN=0e0d95f7e60ba86e610ac00066c74ef4a9b8241e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:a3:09:74:1e:46:fc:73:e4:d6:61:5e:c5:
                    ad:bc:5b:80:42:1a:61:f4:a0:12:e4:5e:53:fd:df:
                    56:a5:92:b0:d5:01:d2:b4:03:5a:2e:bf:da:61:87:
                    c3:c6:b4:ce:ae:3b:84:8b:a2:4a:6a:36:db:cc:9e:
                    17:c6:0b:ff:ba:ee:67:aa:af:66:45:d0:3b:cb:9a:
                    ce:aa:8a:99:81:5a:fe:8a:96:5a:8d:dd:45:c9:fb:
                    ca:f7:49:aa:72:a9:41:14:8b:55:4f:b0:1f:42:b2:
                    b8:44:46:88:6b:61:71:32:2b:8b:a5:91:9b:a2:eb:
                    b4:69:64:46:69:0c:a1:2e:b0:78:31:53:05:a5:ad:
                    13:52:f1:73:8d:d1:7b:04:c3:f0:18:86:f1:c7:f2:
                    2a:9e:f8:39:62:82:c0:c6:f4:9c:45:dd:e5:c1:fc:
                    85:fc:57:2c:45:bf:0c:c1:70:f4:bf:e6:34:f6:10:
                    b7:ca:8e:a0:5b:1e:6f:29:ba:7d:82:d3:99:51:3b:
                    f5:98:f8:67:96:f7:29:02:d8:e6:60:81:af:03:59:
                    86:9f:a2:ec:61:fa:d2:12:12:f3:ae:b5:48:4c:d8:
                    50:56:78:2d:5d:f5:77:e5:e2:83:11:70:63:da:b5:
                    cf:e2:ab:d9:23:27:0d:22:dd:45:03:c1:74:e4:f7:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0D:95:F7:E6:0B:A8:6E:61:0A:C0:00:66:C7:4E:F4:A9:B8:24:1E
            X509v3 Authority Key Identifier:
                keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:bc:b6:fa:05:59:cb:e5:57:fa:08:55:e7:f4:07:82:db:9e:
         c8:fa:35:60:91:04:b1:5a:f8:83:cf:d5:99:00:00:ca:a8:b1:
         c6:be:00:6e:2f:1b:08:1c:b4:65:e8:56:47:db:65:5b:17:be:
         4e:68:65:27:7f:2b:96:45:73:e3:d3:e9:65:92:e2:fa:3b:ca:
         f0:1a:ef:ed:21:7b:bf:52:64:91:2c:ae:92:c4:b4:2a:a6:df:
         46:06:d9:12:dc:a5:3d:fc:7a:37:5a:f1:e8:21:a1:a5:15:00:
         57:4e:db:f9:98:d6:22:80:33:e1:da:a9:b5:51:c1:e1:b5:22:
         74:f2:87:35:51:8b:e7:88:77:3e:b0:c5:b8:83:02:77:b1:22:
         14:08:4b:1c:51:a9:29:1d:31:ff:d3:12:e1:a1:a1:35:93:dc:
         7e:47:d2:18:66:67:3d:b4:4d:10:3e:e1:3f:ed:b7:52:fb:fd:
         12:d0:89:51:a2:9d:a6:6a:8a:98:ba:1b:4a:e7:ff:8e:a6:f4:
         14:ac:ef:85:89:27:33:b9:e2:42:da:c3:2a:bc:9e:e0:aa:05:
         e0:9f:12:be:11:a2:44:4f:78:69:b6:d0:b4:d9:89:74:ac:be:
         b6:39:5c:d1:09:e7:de:17:4e:4a:e4:5b:4c:43:d9:8f:e3:f0:
         09:a8:cf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 19:29:15 2025 by rpki-client