This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File:                     dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier:          i64gYnYoxxMEV3MM+KTazw9bm2TZgjr09ag5BDndIsI=
Subject key identifier:   DB:60:91:E9:8B:B6:21:2A:F8:26:42:9E:36:73:81:D1:C9:08:B4:47
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer:       /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial:       019B360E67B84B866A05AFD38793751A0835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number:          1309
Signing time:             Fri 19 Dec 2025 10:01:12 +0000
Manifest this update:     Fri 19 Dec 2025 10:01:12 +0000
Manifest next update:     Sat 20 Dec 2025 10:01:12 +0000
Files and hashes:         1: 8mTPFQW3wW-m-Njwc5f28bH9rKw.roa (hash: ycM5ko9FIfkWlLnDoZpXM6ToY3euiLPcPeAx4DLhqfU=)
                          2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: B/hd5zjlQVFqIu1R04/wCpLUSwXKrx/UIxqXs5HZa2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 10:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:0e:67:b8:4b:86:6a:05:af:d3:87:93:75:1a:08:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
        Validity
            Not Before: Dec 19 10:01:12 2025 GMT
            Not After : Dec 20 10:01:12 2025 GMT
        Subject: CN=db6091e98bb6212af826429e367381d1c908b447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:1c:48:02:e7:b1:55:45:7e:84:ce:35:3e:
                    b1:e3:cd:9d:20:31:0b:41:17:0e:a0:5b:6d:a6:ed:
                    ec:db:f9:3a:65:83:0c:13:c3:14:6c:46:62:25:d2:
                    93:ca:76:8e:f9:57:7a:ce:1f:76:70:1f:8c:4c:60:
                    84:fd:27:19:7a:f0:e0:d0:ad:91:52:06:96:35:64:
                    8a:a3:30:a3:6f:e3:41:3f:f7:90:30:63:d1:ff:e7:
                    10:5a:fb:a5:d1:0f:44:b9:e7:c5:51:4d:30:9a:34:
                    0f:f9:9e:d9:7e:ea:93:50:fb:00:c7:76:20:ed:80:
                    3c:4c:cb:38:82:a6:22:17:21:d0:96:cb:a4:a9:01:
                    4f:ef:e4:bb:b5:2d:4c:9e:ba:79:95:64:c2:02:f3:
                    36:de:3a:b0:8b:c5:d2:2a:b8:08:2b:ff:ec:7d:03:
                    05:10:6d:20:16:c3:92:40:25:16:81:c5:73:94:73:
                    4e:38:79:a2:86:fc:cc:ec:a9:99:b6:79:02:78:8c:
                    b7:a7:19:8d:74:e1:04:08:54:84:75:de:08:3e:43:
                    b3:3b:46:66:6b:59:bd:cc:8f:2b:73:e6:16:4d:0b:
                    d5:0f:08:34:04:e6:32:1b:a5:93:c4:a6:58:a8:4a:
                    d0:ca:1b:96:c0:7a:8f:a2:93:92:bf:fd:d7:5a:df:
                    f3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:60:91:E9:8B:B6:21:2A:F8:26:42:9E:36:73:81:D1:C9:08:B4:47
            X509v3 Authority Key Identifier:
                keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c7:24:3e:0c:f5:7d:c9:00:e2:08:81:51:b1:e5:75:31:79:
         08:e7:b4:f0:eb:85:46:64:84:be:84:f8:d1:c5:05:d8:7a:da:
         c0:ab:b6:05:f5:af:3f:89:34:01:5f:18:82:1a:57:cf:35:1d:
         44:26:a1:9c:3b:9f:d6:c0:4f:0b:ae:82:e0:9c:b8:8e:d3:d6:
         2c:c3:90:10:74:11:df:ce:9f:fb:42:5a:2d:a9:37:71:4d:6f:
         24:e8:50:87:94:f0:47:15:75:98:01:cb:f4:24:50:41:08:f4:
         1d:35:56:5e:16:b8:3e:a3:c4:ea:03:d1:df:3a:db:a2:4e:1b:
         37:4e:01:c9:41:66:a9:94:bf:0f:b4:12:8f:ee:a1:d8:4c:26:
         1d:ba:6f:2e:aa:30:40:b4:df:62:8b:ff:53:f8:6d:ed:51:c5:
         88:49:83:7a:69:5e:f9:2d:c0:18:fb:16:3b:cd:08:46:f8:f3:
         73:d0:ff:d9:77:0b:8b:8e:1b:60:d2:86:7e:77:68:69:50:9c:
         14:66:da:56:38:09:aa:8f:f3:d5:cd:a7:90:6f:95:eb:69:5b:
         59:32:e0:fa:48:7d:8c:aa:f3:0c:f2:ca:62:95:ad:79:a6:99:
         77:e2:b1:0f:37:68:0d:ba:96:1d:7c:dc:24:8c:4e:72:a5:1d:
         4d:6c:57:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:01:34 2025 by rpki-client