This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
File:                     BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json)
Hash identifier:          tS630655J3LtFjm/5tFKfzXvyhQUjlNmk1DOHUs8+Y0=
Subject key identifier:   57:A5:6D:1B:C0:D2:24:09:95:08:65:6C:F8:66:39:58:14:FD:31:5B
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       019AF16469AA9B4162E3213D53FB1AB3D1A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
Manifest number:          037A
Signing time:             Sat 06 Dec 2025 02:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:20 +0000
Files and hashes:         1: 1EwZ1bZic_jqiX7W5UwQyn8Bgyo.roa (hash: Vg6OC/7w8cP7V5moLCtSw7RIkRKWW/diliXF+ajxpxA=)
                          2: 6SPF9wUKHrZ6dX8XvKxjnVR5gSs.roa (hash: fkqYDZXkVkcORjtoFgL9LCKCeNFqQJ4NJn9PSDeEfBQ=)
                          3: 8-yw9B2nPkCfG0ri-05wxbzK95I.roa (hash: D9ViM4Gvio4pjQlbZ1UG+yr83bOB/c4pGt/sWMwpAIo=)
                          4: 8h_JebN18U-DQLa7g_VNQTnzmD4.roa (hash: qaZfGE5JnXlAKOoOZ4NfG/E3st+EoiejWrngTgnqPGg=)
                          5: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: k/Z97wvMVvkSq8+617TU654iXXABGRd2W5tUiPpmGWg=)
                          6: ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa (hash: dRJ7Xfhd2IktdnYweUcsqpbKflQdcxF/jmr99tlC1i0=)
                          7: CNtM8zejZ349bsOx94QsI819vZU.roa (hash: xxnS1MVGHtYdDD2abmYeFD2yf6kRsOETWylSJhltDEE=)
                          8: ExusXckLrxsZNqKlfCaNi76wyn8.roa (hash: 958U6++7iG9JMRvtU0OfoU8TdGPIQhNtWPh5XYFfc1E=)
                          9: KBH5_k1ABLmKeJO7l-34IXPXqRs.roa (hash: P/JtMtW3yU+sxA5fXStKTboD+4DMtOGbsll537HWOk4=)
                          10: O88pJYUrrqVOidkJjEP-5_wS7ww.roa (hash: cvcdBAMQsvb0r0SAZ093g5qXRau0yzmBdmsOPLmPc+M=)
                          11: OY-GIx9hD1F4OFf4n-y0JK1ANZg.roa (hash: PbCMLXyHRgfKX4P/i6p6IrPplONleRWnbtsOIMdtbRA=)
                          12: PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa (hash: cKqK7iISq+hHAlg/ZJ1m7UofToF0VF0S/PulOyt8vLw=)
                          13: T-WQUbMA2opCoWmz9iIpBVDop7w.roa (hash: LxZzYTsPv2oZVsXtK1M9TpzKZjJLXQwZ4LXrHPlJD7Y=)
                          14: V6Fx8HKW5vYtwoUl9-FGq139rH4.roa (hash: VbwVmnD3kf6YOoUlp8nFzAYfvI3kHMT1G3evyq8grxI=)
                          15: ZAO9zOgwcnH7CVr3zg-zAmkFmEU.roa (hash: jzMcOQPGwbHcpf5AaSFTbx4J1lBs/EwoqM2RnhLe/64=)
                          16: a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa (hash: AjkSxRf4m/hDIVmcEg8Nz3dPC++vr47UARhugAtRJG4=)
                          17: bfi17XKfoQv_Pklhy_iWS-yvXWo.roa (hash: 05HfZ+6uBWn/eosoqV+13/r9i72s/MRFf2Ny+SGpO7c=)
                          18: bkj_9Heh0C9FpUqLrf65_9tMX1o.roa (hash: bkX0VT2UTOwEY8RRSJ6fL2Rs1tekiUyjrTzbnadeNds=)
                          19: boJmz216E2pVUR2unuNVUplfhyM.roa (hash: i+zLjdL9F/qjZdj6l1k7yZCeKyy95BgZFZ1ZAYbGuBs=)
                          20: f2D3UV4sYjo4Otohoy79vFEF0Ag.roa (hash: KRgW361Frr8F6yZbGVOnQ7xVzqdchF195Wcn12RxysE=)
                          21: fZcssnMM-oyAkfiWcEwQiIqtu5U.roa (hash: 9OgIxc3uOeDLvKMHACKvgXGx2POImcau/RInqulO5p0=)
                          22: fgixHbZKg25jUYMjY4avGf_2zgc.roa (hash: a1WxWLaFd4etV2MRrIUVy/vhRQGZaTvT5ScFogrxkhA=)
                          23: gZPpaGdB-IQFDiAnlSFV-CdGFAk.roa (hash: 1uQ18FR87Qkggs6mA4a4E9yey6Lcw5DNg+4ly1If6Z0=)
                          24: gicegBW5Q1xikkf_SLe1-6lH06U.roa (hash: pqN+I3n4dBN3SZnpQPA/6vzrG5l7HojgVKb3SXvaH9M=)
                          25: iuwR3gymafKwUArlmGbUUJNbSa8.roa (hash: EtXzdV3cLqZcZzSgtMiBpL5x/7d8YbZUcgnJOjOuNu0=)
                          26: kNKW14Dxh4X2xbIOHRvhO-4tzcE.roa (hash: ENDHKI6G3Ef3eUled5c74JZlLpucyibX5X1QKlCy8/E=)
                          27: kP1MLzfrQwWk1GVdDlBjhCK5JJM.roa (hash: +NDOnTtKyng4Xa7G5fvhPU29tORd7PYP5BmWYtRjBxk=)
                          28: llN7jJXePxeXTl7APnYUp7xC37Q.roa (hash: IBZyJ8kvFwokvb7fKL9lzrLA5B2sf8H1vS1u/kDxkLo=)
                          29: mN1SF0jqXFbA77Cv4kSAFM7eMrI.roa (hash: bd+gRbyeXkhCADuawPp6Y7Zl70oz5JVqv5T2uQOkFmM=)
                          30: nE08znyGEROzN-ZPpvH871B_YXc.roa (hash: rvo0J7csjKxABmc7ZJ4UjX/IGGVkIizjnr+3tXbkjRg=)
                          31: uSds6b4A3ugi6DIsYb_3dWNiNEs.roa (hash: yRT8HJyCOSty+M33PAxjUyOR0ZiSFhtIqLi0qhNHK+g=)
                          32: vZmH2bvHl1nSGW5nMPLYnxBlkRU.roa (hash: JOoXAeAAIZEiWY0Rg+/OZMN4l51Mdx07GGAUcyh78VU=)
                          33: x_kmwuaD2Uv2HFLODCKAcngkZmI.roa (hash: YzInZ8+3078RATQFSI7n9ucYtfrzyFiROEAN+YuWwao=)
                          34: yA3UMDG2NorD0yXtnnE6FrjVIhg.roa (hash: JySOvmeafpb1h5Z9vGr3Dw7i3K7yP3Q/urfaVB0miMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:69:aa:9b:41:62:e3:21:3d:53:fb:1a:b3:d1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: Dec  6 02:01:20 2025 GMT
            Not After : Dec  7 02:01:20 2025 GMT
        Subject: CN=57a56d1bc0d224099508656cf866395814fd315b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:5f:96:89:53:72:38:b0:a7:e5:eb:dc:c7:
                    1c:84:0e:19:35:5c:cd:64:da:3d:23:46:de:91:11:
                    96:16:2a:30:d4:4e:2e:bf:ca:22:6b:4c:09:26:85:
                    28:71:f5:91:8f:0c:72:92:2f:96:fd:75:c9:34:7b:
                    be:b1:c4:96:1a:7e:2f:bd:c9:9b:33:7c:0f:7d:dd:
                    50:d6:26:84:01:b2:8f:88:06:f6:2f:74:a2:ca:a4:
                    dd:9c:05:34:08:e5:1f:de:81:0f:e6:b2:89:ca:e1:
                    6f:60:08:22:96:c0:87:ed:13:a6:68:af:2f:33:9c:
                    8b:7e:b9:e8:60:f7:7f:76:a8:14:64:d2:a8:0e:95:
                    96:37:ef:36:e9:e2:9f:bc:2c:22:14:d5:87:ae:78:
                    8c:5d:34:3c:e4:61:1b:82:19:0f:7e:02:a1:fe:b6:
                    21:67:32:b4:85:39:39:33:15:35:44:82:d9:2c:5d:
                    ab:fa:22:21:5b:f9:b8:f3:32:b9:c0:c0:1b:21:f8:
                    06:ba:c9:d1:4a:17:8c:b5:cd:68:42:ba:91:ee:c3:
                    1c:49:ab:e5:ca:49:bf:d3:00:32:00:dc:03:f2:28:
                    4f:24:24:f9:e4:29:0b:53:ba:1f:ef:ed:0e:09:8e:
                    02:29:e8:7b:f7:0d:a2:66:f1:6e:7b:f7:0b:ce:dc:
                    ae:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A5:6D:1B:C0:D2:24:09:95:08:65:6C:F8:66:39:58:14:FD:31:5B
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:31:21:02:9e:40:22:93:c4:79:2b:8f:6e:79:ee:6c:02:b4:
         23:53:25:63:11:ad:ab:98:17:15:e2:f5:98:d2:29:de:11:40:
         b2:2c:45:ec:05:bc:e4:b7:ad:15:30:e4:29:0d:a8:35:96:b0:
         4d:f5:e5:05:9e:7e:06:54:13:16:2a:6c:d1:5f:e9:f2:b0:95:
         f1:44:b3:a1:3d:d6:33:09:0d:14:a6:be:63:6b:e2:a2:aa:65:
         89:29:41:b1:95:61:0a:93:1c:c0:61:d4:c7:f6:8f:b5:6e:5e:
         af:aa:7d:00:ff:a0:a7:20:f9:7a:bc:21:24:02:93:6b:fb:9a:
         06:dc:4a:32:a1:47:f7:b2:c3:6d:0c:38:eb:74:f0:d2:90:31:
         3f:df:ae:74:6c:e6:56:7b:ce:26:2f:11:2d:f5:66:95:d8:16:
         62:a9:af:65:2a:c7:1f:c1:c5:3b:99:99:88:f5:b7:14:73:20:
         b4:62:37:fd:2e:18:f3:f8:32:b3:e8:01:91:02:f4:81:1f:49:
         a5:0c:5d:33:ac:5a:1c:89:65:2d:32:bf:bc:0f:c4:56:0e:00:
         55:b7:38:e3:bc:f0:73:c7:c5:6f:36:73:cf:bd:d8:47:c5:2f:
         13:7e:d1:e1:46:ed:a7:45:ee:c3:fd:01:f9:69:fc:e0:48:01:
         4b:aa:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:57:30 2025 by rpki-client