This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
File:                     DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json)
Hash identifier:          vldhQyfV+SY1Qgf8j8zH0Ajd022w0jWNi3TMcibOhX0=
Subject key identifier:   70:9A:59:42:37:2A:85:02:7C:FE:B9:B9:BA:47:AD:0E:E0:72:19:DF
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Certificate issuer:       /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial:       019B194D2AF7A15151AD3CD26F3C9D907290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
Manifest number:          1598
Signing time:             Sat 13 Dec 2025 20:00:46 +0000
Manifest this update:     Sat 13 Dec 2025 20:00:46 +0000
Manifest next update:     Sun 14 Dec 2025 20:00:46 +0000
Files and hashes:         1: 1-FSCARn17wWw6WjvMiMGNYzthco.roa (hash: WzPC2hd+hE5fhExQNNOD10aWRIj2XENdQ2evH7suYjY=)
                          2: 4WOK2Pkd3dOOIoNGjpiLFe8OKCI.roa (hash: 9LRN3dhEIGXRSt5kx+/0cte7If5ewtrmgKSLFoQCoRA=)
                          3: 7dm2l1emuaQpmK9Uo9mD1q_wbNs.roa (hash: j/PlTPWJXoAbzz7GDCcNEwPNZni/IbWZSAVFS2c7T/A=)
                          4: ClaCd2e1JdZOhJRRG0V2gzofoUQ.roa (hash: R5pOTkBAAT7TRu9QQOKBqiaak7g3rRzRJ3OAgIJQHig=)
                          5: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: wpU+sONZE3BAwBsu1zJKKFOVXG1jsPYpz8/r3uVW+Dg=)
                          6: FomQAsyPJRMx9g-hhlkT7M04pr0.roa (hash: ikv4aeMhl3lapNnx+Yj6ImgDMiSl/VYapyC2LeBgopY=)
                          7: GvjwQJC9DdP7_qbPkN-koM22ONc.roa (hash: V1Pprk+ac1UgNd3D2gH6NUqG9FbJK9dkkFlOqw7KkJ0=)
                          8: _hNjOcARC5ny-TPLISrm1ofTPfM.roa (hash: USSWK8fGx8ZYhYqn9tdxp5t4H5mEj6fREHx4NuHsuIs=)
                          9: _mbTkWs_huXNRXoAZz6RgcHa1ac.roa (hash: Gtnl2zq6+nya1Z5zQfHNFtNMNJ5L0SVArl4/D3Vch3Q=)
                          10: f9ZO97gOWJUut8XaLFuUGxsZrIY.roa (hash: 6tq23TLuISKAQugLOcVCTXKPxD4H8WtHoGjZUKQXbNY=)
                          11: jQZKVERr6IsuKjwneXwFmgJpk2I.roa (hash: z5yWP8S8+JeM0SJY/JZUzt2VIDmGrC9iF7BnyXzu76M=)
                          12: uK4jYuIjXRxmokmRlrSKaQwPABQ.roa (hash: DVqai1d09pTUvwTnoOvvA1GPX4PUfKbgl10Z2BpQ3EA=)
                          13: u_qHWW7Hs6TG9DcD4BT0NhbWLvI.roa (hash: yQWdgUPHoOST9WB6Rg3EXAASM0wMNoAjl/d3+4N9/4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:4d:2a:f7:a1:51:51:ad:3c:d2:6f:3c:9d:90:72:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
        Validity
            Not Before: Dec 13 20:00:46 2025 GMT
            Not After : Dec 14 20:00:46 2025 GMT
        Subject: CN=709a5942372a85027cfeb9b9ba47ad0ee07219df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:f7:5c:49:06:ca:70:a1:07:35:76:9d:a9:
                    3e:6c:85:78:10:df:4b:e9:5d:b0:df:f0:7c:6f:f2:
                    32:95:42:8d:1e:95:e0:cd:0b:bd:64:b8:9c:33:93:
                    61:77:75:e0:fc:28:ea:f9:98:71:49:37:0e:16:b2:
                    a5:0f:02:fe:1b:31:83:b0:52:4e:50:fa:68:81:0f:
                    0c:73:6e:e1:ed:7a:65:ea:44:af:5a:8f:46:fc:a7:
                    3a:82:c4:32:cf:7b:e2:7b:57:d0:6e:55:38:9b:76:
                    69:ee:87:53:fb:73:58:a2:52:d0:99:67:b7:42:12:
                    40:72:9d:62:c2:76:0f:d7:bd:06:55:2e:72:23:ef:
                    8b:a8:cb:f5:3d:c0:ff:28:1a:b3:c4:37:fa:10:ce:
                    22:7e:70:05:0e:c0:44:45:98:77:bf:9a:57:4f:52:
                    00:2d:8e:da:e3:e6:0a:83:fb:94:0f:51:d6:ed:f2:
                    06:af:c0:b8:25:36:45:93:ed:37:34:44:ef:0a:6a:
                    9a:d7:0f:a1:56:8a:51:4a:26:8e:a4:85:b7:a1:c7:
                    7f:f6:74:fc:e9:48:f0:e4:15:0b:71:1a:36:b8:b5:
                    36:25:4e:33:f6:de:f8:bf:4d:2c:e0:31:b5:8f:6f:
                    ca:89:32:49:1c:7a:83:c1:7d:fe:ad:c3:4e:64:42:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9A:59:42:37:2A:85:02:7C:FE:B9:B9:BA:47:AD:0E:E0:72:19:DF
            X509v3 Authority Key Identifier:
                keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:cb:93:51:da:08:39:4f:07:2a:3f:c8:e7:ca:e3:16:78:88:
         a6:75:61:41:59:ac:12:cd:12:0a:b2:3c:b5:48:be:20:d0:fd:
         8d:b7:eb:d9:c0:0c:e5:be:32:7b:89:e2:47:c0:2d:d7:e3:14:
         a6:29:28:30:72:d7:0b:5c:c8:34:38:01:ee:fb:9e:13:37:1b:
         f8:0b:e7:d6:06:af:68:5a:56:69:b3:65:1d:97:84:13:e2:62:
         1f:b4:2f:c6:9b:c0:4c:3c:49:39:ea:8f:e4:44:97:b7:17:31:
         22:0e:29:a5:fa:39:d6:5c:23:dd:7d:e1:bb:5f:4e:24:64:a8:
         50:c2:20:ce:3d:2c:bd:5e:e7:f5:6b:aa:dd:06:da:ed:0b:c1:
         2e:6e:d6:66:35:8a:58:f1:34:ad:7d:97:f5:11:88:51:7a:2a:
         bf:6c:94:b4:39:74:9b:db:5b:7c:ea:41:f7:7d:6c:9c:15:0d:
         23:33:a4:6d:3d:ac:15:e0:5b:99:6d:1a:32:9c:80:13:78:e8:
         cb:23:af:4c:9f:64:15:07:20:18:67:b4:b7:39:8e:fc:0b:85:
         3e:84:92:55:fb:c8:9d:dc:42:05:ff:0e:86:e0:21:1f:92:53:
         a8:51:3e:23:6d:4a:9e:49:11:50:e0:a4:5a:c9:69:da:e5:7e:
         fb:cb:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:24:57 2025 by rpki-client