This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
File:                     DXL-LIBe1jr8nInpMkrJTTCTmqs.mft (raw, json)
Hash identifier:          4cdtuaHFXu/X63li7gX9oivSLt161CBKY6TRq2gETU4=
Subject key identifier:   D4:53:7C:3F:22:BB:89:D5:C9:A5:BF:64:D1:25:1E:64:20:9B:CA:90
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Certificate issuer:       /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial:       019B2EF90B8A75EA9F3D7AA11DAC63C92F5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
Manifest number:          0FE5
Signing time:             Thu 18 Dec 2025 01:00:31 +0000
Manifest this update:     Thu 18 Dec 2025 01:00:31 +0000
Manifest next update:     Fri 19 Dec 2025 01:00:31 +0000
Files and hashes:         1: DXL-LIBe1jr8nInpMkrJTTCTmqs.crl (hash: o4EFV2c0utggWEvzl4NDu0YkVLPIs4Zdt4UyCpqlIFs=)
                          2: FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa (hash: xxP3anqPTVsDNIot0W1weEkTT3WAnTHsLSQ+pzdPwvs=)
                          3: Ng244YNQbxE3TMeamv03jApwIcU.roa (hash: JyhveyeGRjifQQUL2oBTXMpr9SaWtVHTXLlb3SDxmUY=)
                          4: NpWg16tSB0bbGWCf98-f1HysUn0.roa (hash: UHlOnF4x1qLBxz+eemzBJIEm+L3e+yuVLdeMDUxm9Ec=)
                          5: mw0FVkh57HvrvYijabbc70mXZ4U.roa (hash: N/qzJemIzoVOCRnJfy7+YV4DilrTD55dUCMYHxmt84c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:f9:0b:8a:75:ea:9f:3d:7a:a1:1d:ac:63:c9:2f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
        Validity
            Not Before: Dec 18 01:00:31 2025 GMT
            Not After : Dec 19 01:00:31 2025 GMT
        Subject: CN=d4537c3f22bb89d5c9a5bf64d1251e64209bca90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:47:23:f3:6d:2e:2d:a1:b9:ef:52:88:a8:
                    4b:2c:e4:1a:8c:41:8e:25:e0:2b:db:9e:64:dc:2a:
                    b3:f5:45:7e:0e:89:d8:b8:ad:60:c5:5b:ba:3d:d4:
                    d4:f8:e3:28:4d:12:be:2a:fd:90:f0:b4:63:a6:0e:
                    3e:14:c9:54:0f:9e:99:4d:5d:e5:da:cf:71:70:5f:
                    2a:d6:54:a3:01:10:a6:c2:aa:e7:16:f5:ff:d8:cd:
                    85:9e:0c:69:fb:fd:94:00:37:74:9c:45:59:ae:49:
                    f3:fa:d5:08:4f:b1:e7:3b:0d:23:24:d7:f7:42:d9:
                    2f:c6:f0:9d:d9:a8:d0:6b:c9:48:b6:87:5c:06:1c:
                    8a:f6:ed:40:7c:df:f5:a2:01:f4:4f:ff:44:52:30:
                    5f:3b:41:27:e8:aa:97:69:01:39:60:2d:e7:46:65:
                    12:ff:4e:49:40:f1:91:fb:fb:f6:b5:a5:d1:6f:fe:
                    b4:2e:66:25:33:bd:59:39:11:d5:c4:9f:46:4c:cb:
                    68:9a:77:0b:26:62:5c:8b:9a:cd:a5:7e:58:59:c6:
                    51:28:5d:58:c0:3c:8c:68:6d:b5:b3:bb:b6:3a:86:
                    7f:ae:58:f8:c3:7d:c7:48:2f:98:56:75:a4:19:38:
                    11:e3:4a:ea:99:91:68:f3:21:17:c2:6f:2f:30:55:
                    09:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:53:7C:3F:22:BB:89:D5:C9:A5:BF:64:D1:25:1E:64:20:9B:CA:90
            X509v3 Authority Key Identifier:
                keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:2e:32:20:dc:9a:12:ef:84:05:f4:60:33:4e:99:69:28:
         c9:bb:a0:5f:91:02:d7:2e:02:ee:66:a9:b0:5a:f1:c0:d3:8b:
         8b:20:58:e5:4e:61:f2:0b:9c:53:d4:5b:4c:e9:55:61:86:79:
         38:49:55:b3:c4:8d:cd:66:74:4a:eb:6e:87:0c:6e:b3:41:cb:
         60:41:ef:cb:4d:1a:8c:c1:e6:2a:2f:ce:24:6f:6c:32:6d:f5:
         f0:4c:18:9f:90:a9:a5:57:f9:72:d3:4e:80:27:a9:76:fe:1b:
         4b:c4:48:1d:65:b3:25:aa:a0:5f:58:fe:d0:d0:03:63:9b:4d:
         5d:52:28:49:fb:6e:81:71:ff:80:4c:83:2a:10:da:4d:8f:91:
         59:b8:31:bf:20:86:b7:3d:99:ad:3d:aa:6c:55:28:42:01:10:
         22:7b:be:0e:60:ee:33:85:b2:6e:87:eb:de:ae:c8:3c:50:da:
         47:6e:88:8d:5c:21:f0:92:0b:be:7b:81:0e:6c:7c:e0:e4:d3:
         fc:ef:19:6b:62:3e:d1:89:9e:3f:00:f2:b1:6d:ad:4a:cd:e2:
         ec:3c:02:6c:b1:a2:0a:1f:0a:18:46:37:f3:55:05:a2:7a:0d:
         52:d1:d8:de:c8:67:fa:37:9d:05:6e:fb:24:7c:1e:ee:e1:bc:
         9f:7c:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:02:28 2025 by rpki-client