This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          eUU5+31cxLY/BwlVZJ/mV+KCkEwgRi+jk5eeoDYMols=
Subject key identifier:   4D:5F:AF:FC:7D:90:9C:43:25:37:C6:86:8D:A7:A6:4C:ED:07:55:B8
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       019B329F0A3C79AA115ADEDDD58F6D3EDB80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          07CC
Signing time:             Thu 18 Dec 2025 18:00:42 +0000
Manifest this update:     Thu 18 Dec 2025 18:00:42 +0000
Manifest next update:     Fri 19 Dec 2025 18:00:42 +0000
Files and hashes:         1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
                          2: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: HP/kXem36p8TiG60bWT31CW41uLWCIDvmJgzpBE3ypg=)
                          3: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
                          4: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
                          5: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
                          6: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=)
                          7: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
                          8: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
                          9: VF42FFFSDFUPQMsneswm2EH8Ez0.roa (hash: C9X9/mSo4i8MENtT8NUV24GkE0YJ8XgMU5LZdXbGwEM=)
                          10: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
                          11: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
                          12: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
                          13: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
                          14: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
                          15: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
                          16: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
                          17: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
                          18: rCBvEBQWjN8QJGM2FmJTOe7QYWA.roa (hash: DfQCYLVTLDHaPYwEZnod4am8uTWdLzt8ct4fU6v77+k=)
                          19: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:9f:0a:3c:79:aa:11:5a:de:dd:d5:8f:6d:3e:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Dec 18 18:00:42 2025 GMT
            Not After : Dec 19 18:00:42 2025 GMT
        Subject: CN=4d5faffc7d909c432537c6868da7a64ced0755b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:50:78:40:7a:51:7e:39:f5:5b:98:84:a0:
                    2f:a7:2e:b3:2e:ff:80:e2:04:cf:ee:d0:d1:7e:c2:
                    5e:fe:a6:bc:3b:4a:16:44:ff:62:8d:d1:f5:f8:b2:
                    c8:08:26:82:7e:94:ad:c8:3d:af:b3:92:06:11:b2:
                    4e:73:46:c5:c8:0b:d1:b8:97:9a:b8:46:b0:35:d5:
                    74:85:96:56:87:6c:81:92:01:ca:01:e2:5f:aa:da:
                    29:e5:58:4d:0d:fc:11:65:ce:f1:f1:15:4b:6d:35:
                    38:76:a0:9c:4b:04:70:fe:19:fa:ca:c7:37:3f:62:
                    c9:6e:1b:c2:e5:a2:56:bb:87:7a:14:3a:df:ec:06:
                    09:a6:cd:b5:e5:2b:29:da:de:c8:ff:8c:cd:f8:9f:
                    90:f6:c2:41:5f:94:2c:47:c5:7c:33:5f:ff:b1:36:
                    21:02:0a:7a:f1:4f:4d:96:f2:96:41:93:72:84:f2:
                    f0:b1:63:70:35:6b:3a:ea:c4:35:96:dd:e4:c9:4d:
                    a1:bc:b7:90:4c:2c:73:1f:90:20:fe:c8:19:ff:e7:
                    bb:3c:85:8f:55:be:29:7a:b7:a3:f9:4c:68:7f:b0:
                    8d:a9:c1:08:bf:d2:e9:ff:45:8d:26:a4:4a:5d:fa:
                    f3:3a:9d:bf:41:9a:ef:d2:62:e3:6b:a1:bd:fc:a3:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5F:AF:FC:7D:90:9C:43:25:37:C6:86:8D:A7:A6:4C:ED:07:55:B8
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:af:12:9e:64:c9:37:51:be:36:98:c3:d3:1b:46:e2:25:
         94:79:bd:9d:f0:2e:66:1c:e0:8b:bc:cd:38:7b:e7:9d:d8:e6:
         09:61:cd:8f:d2:dc:71:12:c8:e4:3d:47:e4:7f:98:f5:1f:71:
         18:82:03:23:72:7d:43:36:e9:3b:28:b1:0f:63:34:1c:d3:bd:
         2a:38:71:5b:05:53:8e:00:eb:31:d6:a4:f5:3b:1e:b6:35:6e:
         32:0c:34:8c:9a:c0:f1:a3:38:d3:f0:5c:bc:2d:23:ae:bf:bc:
         70:b2:32:ca:a6:a0:0f:a8:b8:a0:d9:fa:4f:5b:88:0e:9f:18:
         5c:c7:b1:cc:0e:b2:bc:88:f8:7f:ca:df:25:42:37:7d:de:8e:
         2f:d0:6c:0b:d8:22:8c:0c:e1:7f:4a:f3:a6:75:2f:75:93:58:
         82:d8:83:4b:51:34:59:22:a0:af:69:17:2c:b4:6e:64:c5:c6:
         8b:8e:fc:bf:fb:47:51:d1:05:28:7c:c4:2e:bf:6f:c7:72:e8:
         f8:5c:ef:eb:7c:11:9b:f3:41:26:97:83:9f:14:47:7f:6a:10:
         89:c4:d2:e7:6e:f1:6c:1e:09:13:b5:85:fd:ed:ea:d7:00:0f:
         85:e6:98:83:8e:79:19:e9:06:58:7a:73:5c:cd:46:2e:e0:d6:
         e5:6a:be:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:44:07 2025 by rpki-client