This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File:                     0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier:          ZjHj7J5cIOBCCUi8Y+Um8e8hCg2gyWC0/9ndFYC5Zvk=
Subject key identifier:   1A:72:E4:F9:3D:50:C6:D9:6C:90:B0:53:AB:1B:15:F4:23:6F:6A:8C
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer:       /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial:       019B19BC1F8B80A1F579706D831E6AC76479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number:          1776
Signing time:             Sat 13 Dec 2025 22:01:57 +0000
Manifest this update:     Sat 13 Dec 2025 22:01:57 +0000
Manifest next update:     Sun 14 Dec 2025 22:01:57 +0000
Files and hashes:         1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: 9kxghz81O78wosB8sTyx1TdaXHk7QvJg9gK8NDg9+xY=)
                          2: TOONOy5Q_RT0Xdkv1KFKuSIfrvU.roa (hash: TXGZC4gRCS30Z/KLMEQnuIwYUvM4xeHM8tIdbYo8vlk=)
                          3: XHMaLFAePq5JA6OnHRNtHIpFVio.roa (hash: D2PLJ8qBf8PPcZXfN8bgCyLTx+3FXCbn/4NCY4tEha8=)
                          4: uruDYSjJsQHtgQsmkfxJYvrLAmA.roa (hash: ugK90f7lpLYbl+ftnhcqa/fEdcHq1apLzUka+OcYLBc=)
                          5: xhEX51qp0YGYG_1Xjcz1FIDptho.roa (hash: S68nwmQ0GGVwMdWpSzCa8wmg/ndTObvviSDOIpAfn2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:bc:1f:8b:80:a1:f5:79:70:6d:83:1e:6a:c7:64:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
        Validity
            Not Before: Dec 13 22:01:57 2025 GMT
            Not After : Dec 14 22:01:57 2025 GMT
        Subject: CN=1a72e4f93d50c6d96c90b053ab1b15f4236f6a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:59:54:98:d7:ce:e3:3b:f6:31:e0:a3:30:
                    75:10:6d:40:ff:47:2f:92:78:d2:de:d2:1c:a6:f6:
                    9f:ac:ec:a6:c4:8b:2c:b0:f7:66:23:2f:b2:eb:8a:
                    61:23:34:e4:0a:89:3a:bf:5f:ba:1a:d6:98:8c:99:
                    45:10:a9:14:7a:fd:bb:b3:ef:88:ab:62:59:4a:99:
                    cc:61:4f:f8:30:e0:e1:0d:bf:f9:ad:15:1a:28:37:
                    42:09:7b:44:a8:13:fa:ae:09:6e:ad:12:b6:13:e3:
                    99:f4:38:c2:e4:cf:41:a6:e6:16:03:ba:f8:2e:9e:
                    ab:e3:2f:38:46:d7:f2:10:38:e2:c1:c5:52:26:ec:
                    67:c8:20:25:0b:e5:65:28:1e:15:eb:40:0e:6f:da:
                    5b:f3:b1:89:1c:22:37:94:26:2e:ed:1a:7e:22:4d:
                    12:84:dd:2c:b1:01:f5:4d:be:dc:75:e1:c2:2a:c1:
                    f8:cb:42:53:75:45:e8:7f:3d:84:53:50:bb:ff:fe:
                    9b:22:8b:86:f2:86:17:fe:ab:e6:6c:b9:c9:27:a9:
                    f2:bd:3d:7e:3e:12:30:63:3a:1c:a9:b9:21:d2:a6:
                    e4:52:8a:8c:1e:47:1a:84:a1:3d:e0:2b:9b:2b:75:
                    1f:2d:73:6a:d1:44:57:1a:0c:e9:02:f2:b9:bf:fd:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:E4:F9:3D:50:C6:D9:6C:90:B0:53:AB:1B:15:F4:23:6F:6A:8C
            X509v3 Authority Key Identifier:
                keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fc:b2:23:a3:33:1b:5e:8c:02:36:4c:8b:5c:3f:07:13:68:
         12:31:42:fc:d9:57:15:60:07:53:68:e8:ae:58:74:ea:7d:d0:
         5c:c9:31:91:14:fe:fa:ba:95:61:d3:a2:86:23:4f:5c:ad:91:
         4a:fd:f5:bf:95:b9:92:4a:30:b5:20:b5:ac:8a:e5:69:d8:67:
         48:c7:36:74:3a:ac:d3:87:11:67:fc:ed:41:b9:df:91:56:b6:
         5c:10:5e:f9:c3:b9:05:a3:4f:f2:47:ce:4c:bc:3f:aa:dc:64:
         b7:f5:89:af:5d:16:42:32:8d:19:5b:72:4a:5d:75:a5:1b:1d:
         67:c9:6d:41:e1:de:33:a8:c2:90:66:c6:7a:4d:1d:4d:e9:c0:
         01:f1:fe:3e:f1:f1:5c:4b:30:a8:9e:ee:43:92:0b:4f:7e:05:
         5c:53:29:45:02:5f:17:e2:70:b4:48:73:08:61:36:7b:00:4d:
         27:f9:6a:9a:86:cb:87:e6:6b:fd:8f:cc:f4:6d:9f:32:21:8f:
         b6:7a:c9:b1:ca:5e:c4:22:cc:24:ba:37:e9:82:5a:77:9c:c1:
         e2:21:94:4a:f8:9c:a2:6d:d2:39:eb:d7:40:77:63:b6:d9:1a:
         7a:6e:6d:84:d5:3f:35:ea:40:1f:d0:4d:31:f0:f0:3b:65:26:
         4f:56:7f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 00:03:31 2025 by rpki-client