This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File:                     dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier:          99bBzEb77T5zA4DqichRo/tm8kg4i60A5pwxDs3YtFo=
Subject key identifier:   2D:8C:4C:B7:61:83:7E:6C:95:17:E7:27:76:12:4F:F4:C2:9A:A6:A2
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       019B0F3775D61A7E77C2AD74CD103337FF79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number:          0FB4
Signing time:             Thu 11 Dec 2025 21:00:51 +0000
Manifest this update:     Thu 11 Dec 2025 21:00:51 +0000
Manifest next update:     Fri 12 Dec 2025 21:00:51 +0000
Files and hashes:         1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=)
                          2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=)
                          3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=)
                          4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=)
                          5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=)
                          6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=)
                          7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=)
                          8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=)
                          9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: i5wq51TdleW7Xr5O0G+VxZzYHyWq4q0gcJosOjeVjyo=)
                          10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=)
                          11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=)
                          12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=)
                          13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=)
                          14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=)
                          15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:37:75:d6:1a:7e:77:c2:ad:74:cd:10:33:37:ff:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Dec 11 21:00:51 2025 GMT
            Not After : Dec 12 21:00:51 2025 GMT
        Subject: CN=2d8c4cb761837e6c9517e72776124ff4c29aa6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:7d:c1:f3:ae:3e:da:5d:d2:f5:58:cb:91:
                    51:ee:19:cc:bb:cf:9f:ac:92:ff:09:bc:3e:c0:92:
                    ca:7d:37:12:09:db:0b:5b:00:9c:79:2b:2c:05:6b:
                    43:02:67:7b:82:d6:11:05:b3:b2:34:10:a8:7b:7b:
                    61:a9:52:0c:70:ff:a6:0e:ff:e0:09:da:5d:94:c5:
                    8d:f0:42:7d:0b:a1:c2:56:79:3c:dc:98:a1:a4:98:
                    76:19:77:8f:92:a7:a7:21:24:7c:15:c8:fa:78:60:
                    5c:0c:27:b4:b5:58:9d:86:5d:3d:33:4d:9c:ca:51:
                    8f:b2:df:a5:b1:b4:71:6b:29:b2:dd:52:bc:97:08:
                    51:79:7c:33:27:57:d9:5a:d3:76:6b:4d:bb:7e:95:
                    af:57:dd:50:d2:2a:76:37:d8:2a:e0:40:d7:b7:11:
                    4b:22:d8:89:1d:26:03:2d:59:3b:5e:2d:95:31:7f:
                    d5:d5:a9:f2:38:42:63:af:cd:e4:73:07:99:26:9e:
                    47:02:0a:f5:10:79:18:33:8e:8a:2b:10:a4:45:8a:
                    ef:27:b0:95:90:96:db:a4:2a:b1:47:62:44:6c:75:
                    75:64:ae:01:85:6b:8b:44:7b:6a:0c:37:98:d5:d1:
                    4c:3d:0e:bc:a0:b2:27:d2:a6:ee:76:96:1a:6a:21:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8C:4C:B7:61:83:7E:6C:95:17:E7:27:76:12:4F:F4:C2:9A:A6:A2
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c0:c9:89:9e:2b:22:d1:f3:dc:1d:7e:74:12:34:81:a7:eb:
         32:02:f6:3f:7a:c7:8b:64:4d:da:8a:f8:48:2d:73:c6:f0:1f:
         7d:f8:d3:e2:05:5b:a8:d9:42:2f:0f:89:cb:7c:e6:56:1a:89:
         0a:65:0f:05:69:7c:06:3b:6e:a7:55:02:e5:53:d7:fd:75:24:
         69:a3:78:95:9f:58:56:5a:ca:be:7c:f4:7c:4a:d4:a2:0c:02:
         43:52:f2:a8:62:d0:f3:6c:c9:b5:40:8c:e5:02:9b:49:a7:dc:
         91:75:31:de:96:0b:3e:1a:e7:59:38:1f:8f:bd:5e:a6:b4:39:
         3b:97:73:f4:7d:9c:51:fb:ec:73:54:e9:ac:e8:cb:46:e7:79:
         fb:c7:cf:8f:56:4c:00:74:0f:b1:cd:ac:41:03:45:e7:fe:8d:
         07:72:2b:c5:7d:c6:77:6f:db:0c:f4:10:06:20:25:b6:a9:55:
         31:a8:5c:be:20:01:1c:e8:28:e4:93:c3:09:aa:d2:b2:97:f3:
         de:1f:bc:d3:56:4c:b2:dd:df:12:52:e6:54:61:de:84:d6:a1:
         65:3e:a4:71:83:56:43:65:ab:f1:6b:f2:d4:4e:06:a3:84:2c:
         ed:59:08:7f:e5:4d:2d:32:f6:a8:ac:8f:e1:ad:13:f9:c6:b9:
         84:79:cc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 05:20:09 2025 by rpki-client