This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
File:                     dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json)
Hash identifier:          l2maYACU86OKt4FU27+Siv0qwPySMZSMYI2Kq4GavZk=
Subject key identifier:   AE:7B:7B:38:58:36:A4:49:B8:A5:39:09:14:4D:83:8A:7A:4C:96:85
Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
Certificate issuer:       /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Certificate serial:       019B27E4FC636E6665B2E37BD2E80E0E703C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
Manifest number:          27
Signing time:             Tue 16 Dec 2025 16:01:16 +0000
Manifest this update:     Tue 16 Dec 2025 16:01:16 +0000
Manifest next update:     Wed 17 Dec 2025 16:01:16 +0000
Files and hashes:         1: cA6lNEEcIDbZuEOTgnHTiqfxfx4.roa (hash: 8f71F0XboBesdGjMZ637fgl0ngKhSWlMfo5XT1YncCs=)
                          2: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: xF46U+eoNejTeU0jyqoT8li45QcScV5cl6rCOKi1e6k=)
                          3: zXGgJ8ssCd1Pph38Z1ItWHwU6EA.roa (hash: P8aEqGdzKsgNRTrQcaeiKThPpzfIrclMSZ/T32RFslc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:e4:fc:63:6e:66:65:b2:e3:7b:d2:e8:0e:0e:70:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
        Validity
            Not Before: Dec 16 16:01:16 2025 GMT
            Not After : Dec 17 16:01:16 2025 GMT
        Subject: CN=ae7b7b385836a449b8a53909144d838a7a4c9685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:8b:68:c7:92:0e:9e:cb:da:4f:d3:70:55:
                    43:fa:f2:36:b0:46:b3:ad:04:b2:f1:7f:7e:40:98:
                    f5:eb:c8:5d:6f:18:0f:7a:3e:a4:65:6f:de:86:45:
                    1d:a5:2c:7b:ca:42:40:f0:25:18:49:39:72:af:df:
                    48:cc:38:a0:6c:82:3f:3f:6c:a1:1e:17:bc:f1:09:
                    66:52:48:97:79:15:9c:1e:d3:36:8a:f5:e8:79:57:
                    52:31:99:e7:25:af:c0:72:49:5c:d5:68:fc:0d:47:
                    d5:c7:f6:a4:ab:2f:14:2f:9f:89:00:9b:c0:41:50:
                    c8:7f:f8:fb:76:86:d0:91:52:12:cb:11:18:47:b3:
                    d6:4c:02:e9:52:d7:f1:15:b1:e9:8f:12:82:04:ed:
                    b8:96:56:59:dc:22:9a:b6:04:5f:49:ac:30:1a:31:
                    a3:8a:fd:13:56:aa:3d:42:aa:b3:51:2a:b9:fc:79:
                    f2:c5:2c:68:ed:31:d6:29:86:1a:65:64:cc:ac:d3:
                    45:ec:44:58:1b:03:f9:d7:f9:b8:2f:4a:63:d0:ea:
                    d6:39:45:23:85:03:a1:f4:f6:28:ce:1f:93:ce:88:
                    0a:ed:ab:14:f4:4c:91:a5:11:1e:f3:e0:c4:fe:35:
                    dc:f4:19:a7:19:36:cf:1f:3e:f8:44:28:1b:77:c1:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7B:7B:38:58:36:A4:49:B8:A5:39:09:14:4D:83:8A:7A:4C:96:85
            X509v3 Authority Key Identifier:
                keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:35:22:c7:cc:c2:a8:a5:94:ce:e0:59:34:dc:18:f5:48:0d:
         1f:15:98:49:0d:6b:7d:b7:53:27:b2:d2:85:9f:43:2c:a1:a3:
         0a:6a:b9:cd:e3:bd:92:52:9a:92:d9:43:fc:84:1f:23:ef:8a:
         b4:ad:98:14:ba:4a:40:e7:cb:7b:fb:b3:f9:00:24:f7:c1:fb:
         cd:7e:0c:6c:94:27:27:6e:1d:83:3a:b6:30:15:cd:71:ea:83:
         e9:6f:62:88:a1:d4:60:0a:ac:dd:0d:28:ec:c2:a7:12:32:b5:
         28:44:d3:8d:fd:d9:24:19:77:29:e1:2f:90:c6:e5:9b:fc:e5:
         4a:33:0b:45:27:12:02:cd:03:64:3b:61:6b:62:b6:bd:66:54:
         45:f5:5e:d3:28:ac:e5:0f:d9:45:ca:d2:e1:ac:e4:dd:e7:b3:
         95:8a:8d:cb:7b:c2:08:c7:0f:1d:e5:52:16:fe:ad:da:50:b3:
         cf:92:8d:ab:7c:99:82:be:85:99:01:68:74:3f:62:d0:2b:fd:
         39:ac:42:cf:43:87:32:48:a0:36:3a:6a:4d:95:f0:c2:40:27:
         8b:8e:a1:e8:e9:18:5a:75:92:21:c1:40:56:1c:26:11:d6:59:
         4a:19:b7:b3:fd:52:5a:bf:ab:46:1a:f9:72:b0:e9:b1:94:25:
         81:ca:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:59:11 2025 by rpki-client