This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
File:                     DXL-LIBe1jr8nInpMkrJTTCTmqs.mft (raw, json)
Hash identifier:          BIytEWgCpLC0kwsC+mEtVFrH851knbISAyIUULbWnfk=
Subject key identifier:   86:37:34:D6:69:49:D7:49:B0:12:4F:8A:59:94:06:B8:17:5F:65:6D
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Certificate issuer:       /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial:       019AF051554570B33F53FF81767AC583FED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
Manifest number:          0FC4
Signing time:             Fri 05 Dec 2025 21:00:53 +0000
Manifest this update:     Fri 05 Dec 2025 21:00:53 +0000
Manifest next update:     Sat 06 Dec 2025 21:00:53 +0000
Files and hashes:         1: DXL-LIBe1jr8nInpMkrJTTCTmqs.crl (hash: vJeLkWrmceHf1dtfVLOxpv5YK4W87dNawB/m7glgtmQ=)
                          2: FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa (hash: xxP3anqPTVsDNIot0W1weEkTT3WAnTHsLSQ+pzdPwvs=)
                          3: G2wclPtQ-NTyFu49JfeZRSYyyxY.roa (hash: X+HR6/7YVlIIqv7OyveCmM7668weB9c1FsbPbUXjZ6M=)
                          4: Ng244YNQbxE3TMeamv03jApwIcU.roa (hash: JyhveyeGRjifQQUL2oBTXMpr9SaWtVHTXLlb3SDxmUY=)
                          5: NpWg16tSB0bbGWCf98-f1HysUn0.roa (hash: UHlOnF4x1qLBxz+eemzBJIEm+L3e+yuVLdeMDUxm9Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 17:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:51:55:45:70:b3:3f:53:ff:81:76:7a:c5:83:fe:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
        Validity
            Not Before: Dec  5 21:00:53 2025 GMT
            Not After : Dec  6 21:00:53 2025 GMT
        Subject: CN=863734d66949d749b0124f8a599406b8175f656d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:b1:13:61:96:08:7a:99:b1:ef:89:7e:1c:
                    3e:52:a9:3e:05:a1:39:fd:13:52:0c:66:4d:50:e0:
                    19:8e:8b:1b:88:6f:c7:79:35:df:84:14:18:f8:05:
                    2a:ae:24:b7:a7:0e:a8:88:e9:a3:08:84:b7:51:b7:
                    51:ca:09:3d:79:e2:f4:b6:52:94:ef:0a:06:32:c2:
                    e5:0b:c1:5e:27:de:b3:8e:d6:69:9e:29:05:29:78:
                    4b:4b:f0:9f:a0:49:1d:fe:b5:e0:f0:03:b8:87:8f:
                    cd:ef:a5:0b:24:a8:29:54:26:2b:ef:92:c9:2f:06:
                    9a:dc:91:9d:e4:87:80:c0:68:22:6f:39:13:7b:18:
                    42:85:7b:b5:39:ce:be:50:7c:4f:37:d2:e3:13:af:
                    e1:5e:9a:6a:12:2c:b8:f6:d2:0a:80:c5:c0:3a:96:
                    c0:8e:bc:31:4d:0d:c5:fb:ed:93:56:d9:fb:1f:8e:
                    b0:f4:ab:12:3d:ec:49:8a:70:e0:a2:63:35:dd:85:
                    7d:ac:98:81:bc:2f:91:d5:95:72:a0:3b:58:05:4b:
                    cd:eb:e0:b0:18:dc:35:60:cf:0b:33:0b:c8:a9:d6:
                    85:87:41:fa:0b:fa:4f:54:1c:96:a0:98:9d:4d:5d:
                    40:33:4f:2c:70:89:4e:b2:18:d5:93:31:87:d7:e3:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:37:34:D6:69:49:D7:49:B0:12:4F:8A:59:94:06:B8:17:5F:65:6D
            X509v3 Authority Key Identifier:
                keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:aa:e0:20:ec:64:1f:1d:66:cc:d3:7b:2f:d2:ea:ba:d0:ce:
         12:4a:8d:61:78:0e:24:7f:08:03:37:c1:c3:44:db:e0:14:8a:
         97:da:7b:18:6e:92:7a:f9:78:cd:70:45:5d:44:d1:5b:ae:b6:
         f8:68:0d:b2:4e:c0:96:37:aa:51:3f:40:06:1a:c4:70:e9:4c:
         f5:d2:b0:2d:e2:58:2f:c7:76:85:c4:f1:01:1e:2c:7d:56:eb:
         8e:4d:69:4e:c8:82:55:e9:31:66:14:26:98:8f:e4:84:e4:5c:
         46:f0:3d:5b:97:b1:28:9b:16:38:15:14:b0:ea:af:54:6b:f7:
         b0:4b:a3:3d:43:e1:71:b2:2b:89:6e:a3:24:77:79:d5:1d:94:
         c4:88:a3:9f:e9:04:89:c7:fb:9e:96:00:b5:64:fa:93:8e:13:
         81:6a:d0:9b:02:09:5d:27:43:02:30:fb:c6:d8:be:be:88:97:
         2a:c6:98:8d:87:a6:c8:02:5b:75:e7:7f:07:c4:92:1a:5e:35:
         b1:ef:9a:34:6e:e7:d6:a7:06:cf:7a:4a:76:c6:60:4f:d8:9e:
         71:15:b8:f1:6b:b4:17:a6:0b:d3:95:8b:88:92:a2:57:c6:74:
         c6:be:d2:b7:e0:f9:96:82:ba:a5:b4:71:77:f8:34:d0:6e:2c:
         4e:20:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 23:04:24 2025 by rpki-client