This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          FT1RjjrDwGP3dTTEKJ2JW7Jdw3+kIVkfYsPIDOOqIBA=
Subject key identifier:   00:8E:35:F8:74:11:0A:11:C2:C6:92:DD:AF:5A:21:A4:81:B6:D7:56
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       019AF163F934D46A5E145445D5966B3165B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          07AA
Signing time:             Sat 06 Dec 2025 02:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:51 +0000
Files and hashes:         1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
                          2: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=)
                          3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: WLF3IxOqDZdxNJ0ymUW084Hduj2/8hLDuXc4BvZkaj8=)
                          4: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=)
                          5: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
                          6: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
                          7: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
                          8: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=)
                          9: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
                          10: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
                          11: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
                          12: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
                          13: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
                          14: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
                          15: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
                          16: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
                          17: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
                          18: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
                          19: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:63:f9:34:d4:6a:5e:14:54:45:d5:96:6b:31:65:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Dec  6 02:00:51 2025 GMT
            Not After : Dec  7 02:00:51 2025 GMT
        Subject: CN=008e35f874110a11c2c692ddaf5a21a481b6d756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:dd:83:8e:d9:ab:b2:d2:8e:20:8d:79:2e:
                    24:68:b7:04:2a:b1:db:f1:a8:0d:c0:fb:69:6a:d2:
                    40:11:17:bb:56:1d:81:d3:a1:8b:cd:7d:c6:28:a9:
                    5f:a5:9d:78:5a:dc:20:2e:ec:d5:bc:29:7f:e9:94:
                    a5:e4:12:24:14:6b:86:bb:8d:3c:17:ac:fb:8a:80:
                    78:31:e2:ff:ea:98:35:25:7a:e8:74:e3:2e:71:b7:
                    e8:58:89:d5:c2:8b:42:d4:83:ff:f3:47:c0:fe:7e:
                    bc:d8:7e:3c:fc:b8:b0:02:1f:ab:1e:fe:22:03:3f:
                    32:76:80:66:1d:fa:7f:74:2e:b5:ff:c5:c7:40:ae:
                    66:12:80:2e:40:86:5b:66:5c:9f:88:5d:77:22:fe:
                    3d:57:b2:e6:04:1f:39:7c:b3:9f:1c:8d:d2:13:ab:
                    fd:27:c5:0b:80:e4:96:11:00:ca:50:c9:11:38:57:
                    66:c4:d4:ca:11:a9:84:83:d2:e2:92:68:15:7c:0d:
                    6e:08:53:db:40:94:e9:3b:85:33:43:a7:05:14:aa:
                    5a:2c:d7:26:c6:18:2b:3b:e8:44:fd:7b:e0:42:c7:
                    47:72:ed:e5:6b:a9:ab:ad:7d:e6:0d:31:0d:28:8a:
                    ad:f8:fc:fd:c8:d6:fe:f5:77:16:d5:65:e7:9e:d1:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8E:35:F8:74:11:0A:11:C2:C6:92:DD:AF:5A:21:A4:81:B6:D7:56
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:04:ad:b7:1e:5d:c6:15:e0:60:07:5e:e7:16:a8:15:21:71:
         ca:41:7c:52:e3:ac:23:78:3c:02:c9:c2:cc:bb:0b:ec:55:0f:
         2a:ce:ad:06:73:96:5f:03:78:c8:6e:1b:6c:b8:e2:ff:58:ad:
         85:86:f6:7e:ef:61:e0:6b:a6:71:8b:b0:52:3e:5a:cd:b0:80:
         6e:4c:22:31:84:d1:3b:fd:c7:70:c5:8a:dc:3a:f4:cd:6e:85:
         62:15:f3:cb:8d:da:a3:e0:01:65:96:92:81:6b:10:10:4e:ee:
         e7:c1:6a:e6:eb:8b:52:ac:c3:2f:09:80:41:84:a1:28:dd:42:
         2f:83:bb:46:a0:1d:52:68:21:3a:8a:c3:5a:db:b8:7e:e4:b0:
         50:cf:15:4a:34:ef:0d:02:4a:85:0f:91:53:c7:b6:35:89:6f:
         c3:e3:ac:d2:55:5d:d5:17:fc:0c:16:aa:f0:d1:56:d2:25:10:
         7b:4e:cd:17:6a:eb:98:cd:2e:f8:32:50:fa:42:39:2b:9d:57:
         81:19:01:12:9f:8d:11:ed:4c:01:9c:ff:e1:26:61:6b:55:60:
         ef:f8:1e:fd:c7:c2:f5:b9:76:92:a8:c9:e2:ce:d4:3f:c8:cd:
         cc:af:5e:f6:5e:df:f4:b2:a3:6a:d8:34:fc:91:b3:79:2b:69:
         c3:7d:ad:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:49:14 2025 by rpki-client