This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
File:                     DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft (raw, json)
Hash identifier:          3ECNwdGmiCSQ6YevHx4e5iMaaTcIairBxPYfhd4wd6g=
Subject key identifier:   71:15:3F:61:46:E4:7B:60:99:86:4D:F0:97:17:F5:B5:56:39:FB:D3
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Certificate issuer:       /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial:       019AEB9889ED36C8716BC648D0CE4760575B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
Manifest number:          175D
Signing time:             Thu 04 Dec 2025 23:00:33 +0000
Manifest this update:     Thu 04 Dec 2025 23:00:33 +0000
Manifest next update:     Fri 05 Dec 2025 23:00:33 +0000
Files and hashes:         1: DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl (hash: AqqyCd0uV+9g4lstnX0ODRULBrxP6Vj8hmkI5epbRxc=)
                          2: Rx93K2Anpt2piWgsyT2tCcyOdyU.roa (hash: eSyBVCSKa61zR4IGZNVtQpHulzu9iroOreAyMMq9AtQ=)
                          3: V6bHtTcWc0Weg0ExHPfZ-jF_UOg.roa (hash: zjPqUL5Ps4cQOvmd2x7l8voc2WY0ZgzjWtjc6s/1ibs=)
                          4: WFNH6HOtR6EbYmoI7oJmjBC85CA.roa (hash: riD5vdwjLMPYyaXP6mmRBOnmZYcjqwE9dGa+53hkf5g=)
                          5: cgZ6WBJvxmkAMdxkhP2wkgGEdL0.roa (hash: Ll3C8wRu25Vic+LtIEvKcAwf1QS+GIVy+0ziubvLeB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 23:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:eb:98:89:ed:36:c8:71:6b:c6:48:d0:ce:47:60:57:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
        Validity
            Not Before: Dec  4 23:00:33 2025 GMT
            Not After : Dec  5 23:00:33 2025 GMT
        Subject: CN=71153f6146e47b6099864df09717f5b55639fbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:04:d2:09:92:c5:ef:05:55:c3:65:de:ff:
                    56:6b:46:bc:9b:45:27:19:92:9b:ad:7f:c5:37:c5:
                    e5:81:fc:97:3d:7a:ab:4b:8f:0a:e8:ba:f4:e2:5a:
                    33:38:38:6c:cf:5e:74:bb:e2:bb:be:cc:f3:9c:56:
                    ad:1d:a9:ea:fa:4f:dd:fe:a8:57:6b:e3:39:be:df:
                    c5:9e:01:8e:93:a8:69:4c:bc:df:ff:f0:cb:51:9e:
                    ec:59:9d:cf:88:0c:0c:74:34:04:44:ce:3c:7b:29:
                    ed:4e:fe:33:a7:39:89:8f:85:d1:0d:d1:9c:3c:b9:
                    83:bc:73:55:d1:2e:1e:ab:d9:e2:e7:39:57:59:7d:
                    c3:fc:01:3b:6f:c6:39:10:b7:4c:84:b9:06:57:1f:
                    7d:ea:c6:21:ed:2a:17:f9:a3:b2:a9:ed:52:5f:f3:
                    c1:e8:20:d5:cb:37:86:19:57:c2:c7:5d:4a:16:7e:
                    71:4e:48:d2:c6:e2:09:1d:c3:1a:0f:ce:7b:5d:22:
                    e0:d6:1c:be:b9:15:6b:1e:fa:6a:a5:29:50:b3:be:
                    f3:b2:9f:8e:bf:16:31:65:22:f1:9b:0f:3e:19:e5:
                    13:11:6c:23:98:fe:b7:7d:f1:85:81:3c:11:83:03:
                    cb:6c:fe:45:85:62:f4:7c:fb:16:9d:59:8b:66:c5:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:15:3F:61:46:E4:7B:60:99:86:4D:F0:97:17:F5:B5:56:39:FB:D3
            X509v3 Authority Key Identifier:
                keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f4:7e:f3:4a:50:67:49:16:11:89:67:f8:54:62:be:ca:31:
         f4:9b:3c:36:f0:3b:b1:cd:1b:0d:fe:92:6d:79:07:e3:5b:1b:
         23:de:08:77:a6:aa:2d:c0:8d:dd:da:5c:88:2b:dc:10:1f:65:
         4a:bb:35:2e:08:d0:ce:3d:8d:d6:bc:85:ee:51:7b:7f:33:5b:
         04:a5:6e:5f:7a:84:1e:ef:b6:23:00:a7:e8:d8:80:9b:7a:dd:
         39:36:a4:db:b1:66:d3:eb:b8:28:a0:65:11:37:b5:29:8b:22:
         39:af:b3:f0:e1:ee:c2:99:47:18:ee:41:7c:70:b3:2e:68:b5:
         1d:61:8c:c4:17:a7:d2:d9:c7:84:38:2c:0e:66:26:04:f8:14:
         c1:61:16:2c:f6:19:b2:46:c7:5e:90:e4:95:de:19:28:e3:5b:
         92:f1:77:d0:de:c0:1b:05:5b:47:5e:c5:e9:20:14:d2:ca:4b:
         f3:46:27:93:82:70:6f:5b:fa:74:39:ab:94:27:15:58:6b:64:
         fb:8a:ea:13:c4:89:1f:c7:86:af:b4:53:ed:a3:46:bd:ac:44:
         77:57:f8:ef:6e:cd:0a:db:a0:ee:09:8b:96:04:0c:0e:3e:72:
         c6:ce:12:f5:ad:aa:27:ee:57:d1:21:99:34:e1:32:4c:8e:df:
         27:d6:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 07:53:05 2025 by rpki-client