This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File:                     RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier:          7b3ZpQsjsk7X8nPEjfa+fMPF7QO9qPhObMzzxNvCBOY=
Subject key identifier:   DC:8E:17:51:84:5D:FE:BB:80:65:BE:C4:68:B4:A0:7B:9E:18:73:9F
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer:       /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial:       019B2BC2414DF815C9FC13229297BF8F34B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number:          177E
Signing time:             Wed 17 Dec 2025 10:01:49 +0000
Manifest this update:     Wed 17 Dec 2025 10:01:49 +0000
Manifest next update:     Thu 18 Dec 2025 10:01:49 +0000
Files and hashes:         1: 7pJi6mSeC7Mrh9AG1jBKFX0rR-0.roa (hash: b11wVnyFk1XxJZbXy67FWmoxGHyh6LyfdFAUoV7JdAI=)
                          2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: /NNrWnQUCJMYPw+plWrI7Lk4/WnhZiOowbqtf5Rskh8=)
                          3: vgV_HmZnBn6siqRpblhJDHolxhY.roa (hash: CU3IQ42U8bx3rzB6RefYOwaftXWSsseBjQQDCbcW70Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:c2:41:4d:f8:15:c9:fc:13:22:92:97:bf:8f:34:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
        Validity
            Not Before: Dec 17 10:01:49 2025 GMT
            Not After : Dec 18 10:01:49 2025 GMT
        Subject: CN=dc8e1751845dfebb8065bec468b4a07b9e18739f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:64:4a:5b:f5:75:6c:59:eb:2e:86:f7:33:
                    22:bf:30:f8:c9:1b:df:53:eb:a7:9e:fe:ca:92:63:
                    97:64:26:26:d7:10:75:ad:74:ef:3c:dd:ac:7d:2c:
                    46:59:79:37:37:ad:1a:f3:17:92:60:49:13:9b:c0:
                    c8:cd:7a:94:c7:34:47:82:92:16:33:6d:cd:98:70:
                    ae:12:9f:d1:4e:bf:27:06:f7:c5:b3:3f:2b:a4:6e:
                    0c:b2:bc:03:3e:a9:7e:5c:07:f0:8b:33:ca:75:73:
                    45:d8:11:d4:bc:d0:72:bf:df:23:c8:55:2d:07:a7:
                    87:fb:0d:d7:f5:23:f7:1e:80:de:43:41:f8:5c:0d:
                    82:27:7e:6f:8c:07:29:c8:b4:28:2d:43:40:17:c8:
                    9d:3a:45:e0:4d:03:ab:40:91:07:1b:b2:05:68:c3:
                    48:b6:aa:0e:5e:62:85:23:e7:54:65:24:83:1d:1b:
                    80:1d:cd:b6:0a:05:6f:33:c8:c9:fe:b0:56:22:a3:
                    84:63:dd:22:40:ae:47:96:7e:45:d4:bd:64:a1:b9:
                    a2:7d:bd:07:53:a1:aa:29:f4:b0:95:23:dd:0f:9b:
                    bc:59:d9:d8:11:6f:c1:da:3c:51:b9:ae:13:e7:57:
                    0d:f7:73:c5:4a:91:a7:32:8c:73:98:58:a1:17:d9:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8E:17:51:84:5D:FE:BB:80:65:BE:C4:68:B4:A0:7B:9E:18:73:9F
            X509v3 Authority Key Identifier:
                keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:26:d8:11:74:55:9f:0e:24:2c:a5:f1:e2:27:c6:90:e5:2b:
         36:4a:9f:e6:91:46:9c:03:32:e3:1f:bf:0f:68:0c:93:dd:12:
         ca:39:3c:a9:40:58:3b:d0:b5:f1:41:e2:a7:66:d0:cf:0d:67:
         2f:bd:43:ed:76:59:bd:8a:2c:61:73:4b:23:d3:6b:d7:83:7e:
         f7:bc:1c:25:f7:2a:29:b2:8f:19:63:75:17:93:34:b3:91:34:
         65:6d:3b:7e:f5:d7:57:80:3b:84:e9:fd:6d:ad:20:29:d4:a3:
         e8:54:c3:b1:2a:84:93:ec:2f:ac:e0:94:54:30:1d:36:ee:44:
         56:fa:cc:eb:62:89:37:fc:ee:88:d1:e2:ec:67:87:71:b1:96:
         de:cf:40:2c:86:5e:6a:d2:5a:e4:e6:62:eb:e8:ef:f7:a6:c7:
         3d:67:ca:93:6a:dd:98:23:67:b7:21:af:15:4a:aa:2b:7d:c1:
         78:9c:00:81:0a:fe:bb:e8:d1:b0:78:9d:ea:37:96:03:88:39:
         dc:6f:4d:4f:04:16:91:b2:57:c4:04:5b:71:93:b1:89:53:fe:
         9b:b3:73:f8:f7:85:39:0a:6d:ba:e6:cc:5f:9a:e4:2c:90:b6:
         21:33:f6:b2:b9:ef:6b:42:43:f8:77:10:c4:e2:73:8c:7b:e8:
         99:79:ae:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:11:45 2025 by rpki-client