This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
File:                     b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json)
Hash identifier:          g5ss+AcBDL2vmWK3pHehfELASVNeD8f9EgzEBC0eKs0=
Subject key identifier:   D3:4B:0B:DA:2D:E9:0E:E4:E8:7D:B4:C8:DF:CB:8E:89:C2:51:FD:78
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Certificate issuer:       /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial:       019B2EF9AEF466CD303A23C25EF0410FFA76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
Manifest number:          0F01
Signing time:             Thu 18 Dec 2025 01:01:13 +0000
Manifest this update:     Thu 18 Dec 2025 01:01:13 +0000
Manifest next update:     Fri 19 Dec 2025 01:01:13 +0000
Files and hashes:         1: 4gI_4-IO4A-DLjbwey2IpOI1Gac.roa (hash: mQ7omWDIQV8V9vzwSyRnlClYxhElWnlIxHJNMRFaihs=)
                          2: 4vux7awz3E36tFDHIazA7-jkwq4.roa (hash: wB2NxL5iO7Z/8XbFdlxXumlf3zZuQEhQW8UuOP6HgoY=)
                          3: 6sCOzHkQ-muwDrkw5pOHoUfXNBk.roa (hash: 7FwYeaXkfgVbCXFiUge2n1VEhJxyS2ClQiqjC+nu4kY=)
                          4: F0suYji7pyda6Pgm_yX79A_qaTE.roa (hash: XG7UorX0bbwleiT45k2X3jyWBSNu43oe/Y2K8gmt6hs=)
                          5: OM9sp83gq8JLzkuTWdaZtycRFbg.roa (hash: 6zlXFie+AwK2F8W6WJu8AHXI3dxTSD6r6hI+SWEgdaY=)
                          6: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (hash: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=)
                          7: REOoP6Y8-wsgon83LmwFQJMZALc.roa (hash: A4lQGU6MhGm6OdwWVbHE5BG8fr09wGeJM7NnUUCETR0=)
                          8: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (hash: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=)
                          9: VJ56WuOhxsUse2Wjh194KIfDmWo.roa (hash: bUKkm23vexWNMu4lKi52LXPYZkbmuyNIcxiAB5ddWRg=)
                          10: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: h/fg8DetoP7lRGWyqFTcHfeL+ZoeAkHbiDhj63Fcfh4=)
                          11: dgaS6fn3OpV72cEYNy7VeVSk2tE.roa (hash: t9/MBst/MC7EkBAyzHdTuY3YBMIxG+Elxy81Bz6kYyc=)
                          12: fzvvk5bzP10N2OQNounBbEQbNsE.roa (hash: RKFAzkj15rOGrQMxeuqq2cZQnvwnI2ibWU1wR/fhdrE=)
                          13: od1ADzeqOn5bVC20zBnBeUVSNKw.roa (hash: VVSLdqnSFTyWUJsI+ZA3ZZGNebOqLFzR1C2rEUolb/0=)
                          14: ps-zGnTGe4PKACLSOfDDMQx9t_M.roa (hash: xpFFfF+DS0D5TdCkxuXovC0W/qhotMUgVNP3M/NZPEQ=)
                          15: z0Qvo_o1aarIKR-qrgaRYpvfwjc.roa (hash: RiWOkvqrTFK0brETv9UpsQbvKc3QbmQ0OasKxFLAePE=)
                          16: zLs5eIQla7JvuOsDIVylY_LlW9Y.roa (hash: EWXm1Aj94qBaUfmc96DwvRvWK77ZtmJaOaVeqhh7Bw8=)
                          17: zWw8lAKfrFF4RG-Mj_n5dY-0UOY.roa (hash: DKYofoTdihA+aTa5YdADLPg4Qah6RWaucr279EDCxes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:f9:ae:f4:66:cd:30:3a:23:c2:5e:f0:41:0f:fa:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
        Validity
            Not Before: Dec 18 01:01:13 2025 GMT
            Not After : Dec 19 01:01:13 2025 GMT
        Subject: CN=d34b0bda2de90ee4e87db4c8dfcb8e89c251fd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:59:57:3d:8f:34:6a:ab:de:66:70:25:28:
                    a0:02:b4:58:be:0f:61:1a:fc:26:82:84:85:a6:cc:
                    d2:6c:a6:1e:3e:9f:b6:dc:34:5c:51:a6:b8:ed:99:
                    ec:7b:c8:1a:4e:0b:27:8f:7d:af:c2:e6:ed:3b:31:
                    9e:34:7d:89:72:9d:58:e8:40:2b:a0:de:34:50:02:
                    da:b6:88:d3:92:c4:12:b5:51:2e:c5:40:59:66:5a:
                    f7:47:3c:d2:78:70:d7:a2:d0:ad:1b:27:49:7b:5a:
                    df:4c:c9:bb:82:20:f6:59:50:f6:74:05:8e:b7:e1:
                    c1:b8:03:97:e6:d8:d9:a1:7f:ac:e6:3e:2f:7d:e6:
                    59:f9:3b:62:65:dd:03:73:9f:3e:84:22:7f:22:4a:
                    02:0e:a3:1d:d1:e2:a6:d1:c6:f9:0d:ff:65:5b:73:
                    50:13:f1:70:06:45:81:c2:92:6f:e3:29:b3:0e:9a:
                    2e:a1:96:86:c9:6f:e2:8c:d9:83:c4:b4:0e:59:bc:
                    39:76:52:51:5f:3f:66:38:ca:26:2c:35:f4:47:fb:
                    16:54:e5:34:66:24:c6:00:d7:8c:d2:da:8c:d3:68:
                    65:08:84:a6:5a:b8:f6:d2:7e:b5:0f:71:51:03:35:
                    c3:c8:af:ce:48:48:41:03:f1:d2:5d:c8:cf:c0:1f:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4B:0B:DA:2D:E9:0E:E4:E8:7D:B4:C8:DF:CB:8E:89:C2:51:FD:78
            X509v3 Authority Key Identifier:
                keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0b:85:d4:cc:42:8f:ed:8f:a3:1b:5a:25:23:24:d1:66:50:
         ba:6c:f5:bc:9c:1f:9f:24:a5:f9:61:34:30:a5:2f:64:2d:49:
         e8:14:68:ed:97:20:c9:a7:20:04:9a:e4:a3:5f:69:06:b7:ae:
         dc:1d:32:b7:db:19:c6:78:79:06:5e:6c:74:d4:ad:6f:13:e4:
         dd:23:bf:33:e5:71:76:5a:8b:3f:b1:30:ca:58:99:de:77:75:
         97:de:01:07:f9:59:56:3c:b1:b7:d1:da:70:cd:7c:4c:37:b3:
         65:4b:75:f8:5a:bf:0d:c6:f2:5f:4d:28:6b:40:d6:88:30:b3:
         7f:23:b5:51:41:4c:24:59:0a:ab:86:9c:be:05:4a:1d:1f:54:
         72:61:d6:63:02:1f:0d:03:71:fa:4d:5d:42:27:a4:2f:00:b9:
         34:3c:41:c3:8d:bd:29:16:db:12:d4:56:ba:8e:fd:a1:2f:38:
         3a:64:3a:d3:3d:47:6b:db:3a:d5:59:61:0b:1a:e5:53:53:d5:
         47:b7:64:20:91:b5:eb:34:1f:2d:11:4a:9d:3d:2b:38:12:78:
         24:a1:56:c7:6d:84:c0:4d:5c:78:54:85:9d:6b:c2:ab:cb:ee:
         79:5b:8f:52:55:16:e4:89:5b:5d:11:18:56:23:fd:07:3e:92:
         d9:99:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:58:39 2025 by rpki-client