This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File:                     3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier:          IAt9sXc5zmuZYRqJ1hzmo6I3o/9onkaByhV3mFSOsok=
Subject key identifier:   BC:A7:94:D7:D8:16:68:23:BC:A8:CA:46:4D:68:40:B5:2F:CB:7F:A9
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer:       /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial:       019B115D14430676CF2660FE44A076C35A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number:          1446
Signing time:             Fri 12 Dec 2025 07:01:11 +0000
Manifest this update:     Fri 12 Dec 2025 07:01:11 +0000
Manifest next update:     Sat 13 Dec 2025 07:01:11 +0000
Files and hashes:         1: 2VevK0HBk8qY35gQ5UtjfqrB3nY.roa (hash: AmV1BLqc7vTs/6UGFEgRF0w9AuqYNGKRtxRFQd+4rZ8=)
                          2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: ZgtTvQ+lhgnvnif0VBVfFyHxzR5LgPsiBSKFpluPsew=)
                          3: 5vHG0OxzvrqhI56hWt2APxlEca8.roa (hash: bzsGlpjOWPgo9xk0iMmmEBroNlHWE3HqNZ6pialCu6g=)
                          4: gr8V9GG2sn3v6HXV22VsNMEvx-4.roa (hash: sigWijBONNzFo5YlkJnYB4sz+kl8GULVAa+gCk4rEkg=)
                          5: v3bh2N4thqCv2jw1YX5PjUcZEd0.roa (hash: nIfMLuntg2xncQRj0ShSY9tFssqvjsfpfyRvdL0VSvM=)
                          6: yjS8W9q67f67-uZJSGqCLJtk9CY.roa (hash: M5J4UIW6ljIVCBEds8d+YToalBiEOBtwIgj/E8wpY8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:5d:14:43:06:76:cf:26:60:fe:44:a0:76:c3:5a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
        Validity
            Not Before: Dec 12 07:01:11 2025 GMT
            Not After : Dec 13 07:01:11 2025 GMT
        Subject: CN=bca794d7d8166823bca8ca464d6840b52fcb7fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:13:0b:af:a9:af:b2:b9:8e:12:56:7f:58:
                    21:d5:7d:f1:4c:54:15:71:76:54:d8:28:32:aa:cf:
                    25:81:d0:02:7a:0d:b5:35:fd:0e:ca:cb:83:8e:b8:
                    76:0f:57:e4:70:9e:c0:54:60:a3:a6:7d:aa:37:5d:
                    62:3d:5d:28:44:29:cb:5f:18:62:14:a7:b9:57:19:
                    ae:34:f3:23:1b:9a:29:cb:6f:91:d1:f8:3a:da:09:
                    4c:1d:0f:12:40:5c:3a:1d:4a:1d:81:1f:55:d5:4a:
                    c3:7f:ef:bc:df:97:4f:d9:a7:40:a9:0d:23:9f:eb:
                    56:5e:99:d3:3c:95:81:28:5a:f1:63:a7:06:5e:c8:
                    6b:ba:03:49:74:69:23:31:1d:08:b3:c8:01:be:0f:
                    ca:d5:34:71:52:69:d9:c2:62:1b:c4:b1:f8:50:d9:
                    e5:af:d8:62:44:b7:cd:b6:f4:93:21:fd:e6:d0:79:
                    bc:a8:62:5e:c9:1c:60:87:f4:22:9c:45:3f:a5:e5:
                    e5:ab:e2:72:52:89:47:ff:1f:0f:56:5a:f0:94:cd:
                    ae:75:d2:43:75:c4:31:0a:3d:c8:d4:3f:a5:95:ce:
                    7a:dc:69:ce:24:ba:65:4d:ee:7b:5d:51:57:df:a2:
                    fd:65:1c:f9:a7:99:01:f3:8f:88:a1:e6:4e:84:7b:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A7:94:D7:D8:16:68:23:BC:A8:CA:46:4D:68:40:B5:2F:CB:7F:A9
            X509v3 Authority Key Identifier:
                keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9e:68:20:78:f4:1c:77:c1:d0:71:a8:90:13:aa:ef:7d:4e:
         ed:26:74:0c:ac:36:fa:77:20:19:b4:a3:a9:e6:38:27:4d:69:
         7a:fe:50:03:92:ef:db:a7:69:ad:b5:d4:86:08:fe:de:81:51:
         b2:5e:86:48:54:d2:37:29:cc:a6:0a:5b:c5:06:f9:2b:8f:9d:
         d7:1c:ae:47:08:c9:35:9c:b8:80:9a:88:c4:f6:62:c5:89:04:
         2f:d4:a9:17:f5:f4:e1:9c:f3:b9:65:97:71:c2:3d:de:5b:f6:
         99:10:f0:7d:97:e2:3f:f0:3b:0a:b4:fe:d9:20:cf:01:c7:6b:
         72:28:93:6b:10:c9:67:88:82:a8:d5:68:d0:bc:a8:44:cb:91:
         03:c8:0b:2a:20:9a:b9:69:50:f6:5f:c8:5d:2d:47:56:aa:cb:
         94:b7:09:0f:2c:f8:69:2b:cd:ae:5f:e1:4a:36:a9:97:6d:e3:
         4c:28:d6:39:c8:f3:40:a7:aa:a0:44:98:54:db:34:78:ec:a8:
         00:35:87:8f:1d:16:71:a5:2c:a1:67:47:98:e2:bc:03:e1:61:
         d9:cc:b2:f2:4d:e9:58:d0:18:eb:ec:22:f7:7d:dd:96:3e:c1:
         63:fc:ff:97:fd:b6:c0:32:2e:0a:fc:4d:af:ba:1b:d8:fa:e7:
         56:33:47:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:11:49 2025 by rpki-client