This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          PBMEQP52xm1EvoUGBNSBCYl2FPWeEClkYfkzFK5ZAOc=
Subject key identifier:   70:9C:13:9B:DE:B1:5A:CC:1F:5A:1F:76:4E:50:1E:28:7F:C4:4D:C8
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       019AF088A289E7BF606913F8F51FAA5864FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          147D
Signing time:             Fri 05 Dec 2025 22:01:17 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:17 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:17 +0000
Files and hashes:         1: 2d8VX1yVh54mGYkeHaHmzVPzhZo.roa (hash: cYGvSwaRPDVvS+Yq5KxRkZ+234/mFxXJD0RJHeKEEjQ=)
                          2: 6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa (hash: BNLbnygG2YLNyjdpzyEOdm3sS9fiwqBzh1UyiyyKi+o=)
                          3: 7YhCJ28wSxD6190KY3LsL2-jFBY.roa (hash: TdMkcxbj/5amzDjgSgCV0/mP+NRcoQOnkj8hBKpX/xs=)
                          4: 7nwFZllPHib0qlQvTuec2CA4CFE.roa (hash: 6iCLCKodfg6yz/qGnLZGO0jH9QdQIo9q7VMD+L1L/38=)
                          5: DqWqWWUy5sm-gqrVg_icW_4BBuU.roa (hash: udwxBi6VLqH0wpPYZM7DDUViOUA0C7+6x2kGIlrfz08=)
                          6: OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa (hash: rkSh/s+q1SivKdqDxSkXS4YbyDK7MKYmwkQaMtbR9jk=)
                          7: VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa (hash: 26f1YQomtY0BiRJWIfpK3wiyYZ05du1tDa7jK3YouIs=)
                          8: WhRk9kZEyJiPe99DKK0ZIY2m2Yw.roa (hash: dZkGuR4JSyQqOAbFZVSVkGM0gVjd0Muk/GHy9vCkvbU=)
                          9: ZpHETbs_mb628Vvkity4w2NrOCU.roa (hash: urkAaKxvlWEgwM0Yu9Kvm1a0uJN5W0lCOvwAiki7CTA=)
                          10: awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa (hash: 4BEd/kp3Xtbyx7WAgm3K/LeKVYfnYxJ84p9PC0RKbvE=)
                          11: e4ZdNT0b2vxOvlJIV_lJM64Zyro.roa (hash: 7puUfcu0W3Urnah55eUUcVEFPOq9IEAVasFR/gSe8IQ=)
                          12: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: 3vOTdP38erN4hmvAWxc3ln7sB49FeRHWdehAKp8Ulng=)
                          13: njGgKFMMQYCCOcUQU9FLXyns41E.roa (hash: mOXzfRSGU/yibvLqtvjYzBQ5Qk8Adr7qWGYN92JzeoI=)
                          14: oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa (hash: OT0X0o4GJQ8rzCrOkZIscdAmjhqqaxADA5FmAXxEAv8=)
                          15: rtNgU16vRfGlfgaBLeA-LVfZYfk.roa (hash: 7272BB0beEnCZnBZky8uGVsVo4pWm3st4EyVIbuSPv4=)
                          16: sJY5TLcMj31ewK9GbQlhZPgo3bo.roa (hash: whJtUyjGYNm5NN1NGfkIMGWBSnbpfKeUHyqGZYB1kB8=)
                          17: uxodH0SAIfY7QfL1CFY1zsVKTTU.roa (hash: MFYf6i70IowcUu2vDq3Z87sRlyhGfcm0kqBV+8MGNH8=)
                          18: zM4hFOeWneXhfMX60yWm7dJXOqc.roa (hash: GFt3zcUn//9D4z2GQsOUfTRTmxcTyGZcc8EgQft8j9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:a2:89:e7:bf:60:69:13:f8:f5:1f:aa:58:64:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Dec  5 22:01:17 2025 GMT
            Not After : Dec  6 22:01:17 2025 GMT
        Subject: CN=709c139bdeb15acc1f5a1f764e501e287fc44dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:96:32:c1:be:0e:38:f6:a6:3e:f1:ad:23:
                    90:9a:22:68:e1:c9:e5:82:d6:fc:21:7f:21:25:b2:
                    18:10:ee:86:26:b9:46:57:1e:5f:0a:04:62:3b:01:
                    32:e4:e5:dd:ce:35:d0:2a:f0:3c:36:88:0d:7f:5f:
                    dc:83:35:bc:cd:4e:e8:f6:ea:05:40:d2:32:1f:bd:
                    8d:75:9c:a8:df:48:3c:39:92:7f:73:dd:63:1e:a5:
                    c3:95:bd:51:15:2f:a3:e5:be:6a:6d:e5:8b:19:83:
                    30:fe:fe:a3:31:aa:bb:e8:33:bc:58:38:0e:43:8a:
                    70:26:06:2d:77:60:72:a9:b2:df:f4:31:c1:c6:e5:
                    1b:dd:d3:47:57:8a:89:e3:2d:cd:fe:ae:12:ec:c4:
                    c2:3a:51:c5:54:38:b6:d7:33:72:46:5e:1d:b4:54:
                    6b:28:32:b0:e1:55:d2:6d:22:c8:ce:3b:4b:89:76:
                    9f:58:49:63:0f:8f:63:09:88:88:52:17:43:4f:75:
                    ac:38:da:73:9a:7f:87:b6:b7:fa:63:f9:7e:70:d4:
                    8f:ad:0c:e8:0d:96:96:d7:d3:68:1e:96:a6:4a:65:
                    53:bc:cd:ad:5e:b0:9f:36:c9:a3:70:ee:83:1d:16:
                    a9:db:33:eb:47:d7:d6:f7:03:ad:7d:35:71:02:ab:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9C:13:9B:DE:B1:5A:CC:1F:5A:1F:76:4E:50:1E:28:7F:C4:4D:C8
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c6:99:2d:0d:93:23:c1:75:72:94:9f:c3:c9:b4:57:1f:3f:
         fc:1c:33:7c:e2:43:1a:c1:b6:e3:32:df:a0:ca:3b:bc:6b:36:
         8c:5f:c9:e7:47:05:f4:1a:14:5d:0d:4f:79:ee:0c:f1:21:42:
         44:0b:ed:eb:f3:9d:9e:29:88:b4:0d:1c:cd:5b:12:a3:18:f1:
         e6:b2:80:48:1d:11:10:7f:3f:bf:70:37:dd:c1:ea:a3:e5:6f:
         26:ff:39:fa:bf:90:69:3c:c4:5f:1d:a7:ab:4f:18:32:42:ab:
         b9:42:1b:fc:5c:ad:a9:7f:b9:80:ec:aa:a5:da:e4:70:60:72:
         69:1f:3b:28:0a:59:22:a8:c9:8e:2b:6f:f5:08:83:6f:1d:9c:
         2d:65:19:bc:d2:bf:36:24:67:03:69:13:6d:ef:28:e0:31:82:
         66:4e:45:15:e3:15:60:83:a8:a3:92:a9:1c:a3:9e:60:c1:bb:
         ba:5c:05:25:7f:c6:be:ad:cf:3c:2a:41:9f:67:0f:d1:ea:7a:
         95:12:2b:1c:d2:2a:46:73:1a:30:da:95:db:e7:7a:21:e5:c3:
         c0:2c:e0:f8:9d:13:1d:e8:04:d3:5e:75:1d:f6:19:70:92:42:
         53:ed:28:74:38:1a:de:7b:5a:82:35:fc:9c:49:b9:1d:da:0d:
         18:6a:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:58:29 2025 by rpki-client