This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          N/nRfKyobyoaNUexW+4xoMiLDovWt5xAWgYvbj0OvCE=
Subject key identifier:   48:DB:1C:5A:C1:5B:85:5A:F1:C4:FB:86:18:C7:8F:00:F8:CD:53:D2
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       019B330CD708FF2BE3E5FCBFB5015A8A76CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          1826
Signing time:             Thu 18 Dec 2025 20:00:38 +0000
Manifest this update:     Thu 18 Dec 2025 20:00:38 +0000
Manifest next update:     Fri 19 Dec 2025 20:00:38 +0000
Files and hashes:         1: 0a-KrfdskF1P1eak9gMq_rpHwLQ.roa (hash: 1r6R/eLHp6yqNJSUm5rRHogfjj+timL04ipzPj2uofE=)
                          2: 1-z0xCJwtZ7oNjVyEZRiUl707L_U.roa (hash: kH96KZu4zVwqWimn8lprbltf+L6jN14xGOOzu5+uka8=)
                          3: 3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa (hash: mYOTUrTGScHJ9ebv2B+CxOPHDS6vmmMB/iTWFsSubac=)
                          4: 6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa (hash: BFQuhQiCrduZkmNzpLq32WMBJG9sF3KBeOMWP2TxRSA=)
                          5: 7u1Blyj85lQdSI7b3-WT3ZmaHdg.roa (hash: xMh27Cx8ipxByZZtvbx9Tmr6gp45CwYoP9Q+q3hAIIU=)
                          6: 9ESkLgmI35QN5TpIx_GPZS8Vxio.roa (hash: hdpw919IzbN2ZFHFKuU/1SNfD9sbyLis5zeOuTdE5D4=)
                          7: D_JL9OsKWnsajKF-cPVLgLD_1wc.roa (hash: REalXdL8VCnc028uNWQcdp2hzuzbMKXOBDjPVpWw3KQ=)
                          8: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: 0o23xWMsOGfZf4aYIvPBM5U+vXRJLhuJWtmuWhLbeKU=)
                          9: FkoVs9alAq-3FoG992pkYSUKr3Y.roa (hash: sx+i4OxChrrhXHBf2JXaRrGO+hup07wWov4ICIEFX+k=)
                          10: H-U5YM7OxyfsfjgsM7to7P1NwM0.roa (hash: 2vIH9XCJ2lZbK1YabUyyI/Z+1og3gXA5g4nPkooF7gQ=)
                          11: NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa (hash: 1fbP+50M9LhkCXd17Y2+Euhe18E6Q+JHRhqDIhYbeMs=)
                          12: NauuGUSZn-SgPXuLy6E5pAV66N0.roa (hash: dn6a8tKxIadhVZxQhBzsKgyugbJ2THkUTfOT2uFIVqs=)
                          13: PyyzXUdlmoA9Bk7oa0uF75YdupI.roa (hash: KrKiurvSNPj8UgpNpGVtpzLAre3QiNcGoEwUhT8E1Zw=)
                          14: RUuJxYZLJmTxpMuUp70ngA__yIM.roa (hash: MFsbsiZMFacC+0KJFg0Y0/Du2X2dNa19f6lGoOE+sao=)
                          15: WGVFdHdOhrZ6oEGNKaADeEDXEkc.roa (hash: upyn2YAU1bBK3yksfLZUYvn/2Yyr6nO1tneR3QTm/D0=)
                          16: WNxwGRqjvkzEEIFtJUKhx8EpDnA.roa (hash: NuJcsLFQveWA7JrekR32MafYf69Fr1QL8arEGvczy7k=)
                          17: WdrQA2XxuRSob5fch_vmulfj1p4.roa (hash: eriXlUX2rEIxDuWxy0Sj12+EAh+KHElo42nsQ2xL4P8=)
                          18: YshAp7kvzSEqzUAJqYQaXPlimXM.roa (hash: 9wAijCHBf70P9HVKz7vJxcgO3NSgfGywCSLu5rKQFcc=)
                          19: bG0R8O-R3Gzh0U19uKXnEyungVE.roa (hash: dC3LmhKrxouomOcuKMc4Z6ErO4Vx6yc4Z+n6WdgjiyA=)
                          20: cw8wUzU2TjbQeXA5X-DXO7r3EcI.roa (hash: 7PvrSwK3soO30XY3QyWZvOj/XNBSpT3NFfjGHR5XhH8=)
                          21: dJhnxNzwfdHlneQSztyV2rQUNh8.roa (hash: mBXD3iXgLpyd3hmkrgIDXjTXmIhHa5rAOzsMx5futIk=)
                          22: dcujdY7nZpLDRD7umvphEez-qpw.roa (hash: DCDyLYPDKXFLZDtPjhfGEgVVy0YwKX5izGR8g7lqUrY=)
                          23: k4MrRgP2JyDnz4jNtYGvOfJmM90.roa (hash: iVSrxybp0cpHKOO6q2VzRaa9ybTUXxsDiq5lZ4StBxw=)
                          24: nuWEXz5iouFYw69x7pHB9Q_otls.roa (hash: Umr2jfHGMWfjhuAzoJGL6f5R4bWkeW3ijsBAOIiH6+U=)
                          25: p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa (hash: BJrzKoW9PKHRZxoa3GctY7R2lGv3C7NaVaECKpXws6k=)
                          26: pHrarVnk95oQe2hI0xpt7DgCX4I.roa (hash: sJ3eEhOn7jQjhfcoZ42EdbEeYJY/zzcWxgg/rji7kDE=)
                          27: pxErwoucWB8yQbaQqe1v45Sxb10.roa (hash: 8JG+D2s4aIAKcUNnH/GZ789KXpymk/hO3QsT835m9zk=)
                          28: tkv4eB640kj-LoRn67cojbzMAxA.roa (hash: 1XWkZeOPHz0G+f5HoG2RieKKed9lLcxprXcsbhFEyOk=)
                          29: ul3uv5hec5ukIf7FCGeau4nCEHc.roa (hash: pc0UTa1zNFc4D1XbCiXp6Zxm7lOslpwK+C/ygH0+nGg=)
                          30: ys8EEYV9duz4vQMnV4A63KTELEI.roa (hash: Mzw/QCxXFE0BItwPGjx2i5l7tZTi3Kn7VnGnniz1APM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:0c:d7:08:ff:2b:e3:e5:fc:bf:b5:01:5a:8a:76:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Dec 18 20:00:38 2025 GMT
            Not After : Dec 19 20:00:38 2025 GMT
        Subject: CN=48db1c5ac15b855af1c4fb8618c78f00f8cd53d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:73:5d:1d:d4:f9:3b:3a:b3:ac:a7:7b:98:
                    64:49:d7:a1:8d:58:4a:26:b9:1b:b3:c8:a7:6f:6a:
                    3a:a4:b9:50:b6:cc:38:7a:ee:e0:7b:70:cc:ef:46:
                    01:8a:fb:c2:40:c9:41:0c:74:e2:49:7c:62:fb:d5:
                    55:21:60:65:e1:6c:f1:82:66:61:f1:c3:45:30:41:
                    5c:75:bb:41:bc:d8:8b:3f:80:d0:26:6c:ba:79:4c:
                    dd:fa:d0:c5:4a:5c:3c:3b:09:c2:26:9d:14:ad:fd:
                    b5:83:28:1f:e9:26:46:d2:14:bf:9b:8e:ef:ae:b7:
                    1e:c2:a9:b0:b9:fc:d1:4d:e4:43:a3:df:af:23:e0:
                    56:42:68:61:a9:4f:25:a9:98:c1:9c:41:6b:f5:1c:
                    0d:77:e5:d7:da:53:30:8b:ee:77:dd:ed:b8:1d:06:
                    1c:07:99:a1:2e:5e:64:5e:58:26:cf:60:eb:67:c7:
                    98:19:d3:5b:ff:d3:77:98:13:0b:45:ba:aa:62:9c:
                    a9:1e:11:87:f7:20:6c:bd:fc:a0:71:e9:42:c7:37:
                    27:b4:92:ee:00:8d:d9:c8:f1:30:68:0a:47:b0:0d:
                    06:e8:4b:e3:86:07:4f:a7:58:0d:2d:1d:75:f3:c8:
                    b2:17:7d:1b:be:fb:5c:28:d4:be:7a:15:75:d8:64:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DB:1C:5A:C1:5B:85:5A:F1:C4:FB:86:18:C7:8F:00:F8:CD:53:D2
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:3d:c7:bf:fc:45:d1:7b:d5:d3:b7:5a:4f:04:8e:ce:af:c9:
         cd:d7:68:a3:99:e1:74:b8:ba:32:ec:f5:93:06:8b:e1:40:0b:
         c9:8b:66:4b:34:a6:f2:73:a3:10:24:58:23:90:02:62:7a:0e:
         4f:8f:3d:45:1b:e4:07:e1:c5:64:eb:5e:e9:6b:e7:04:28:9d:
         56:1f:7f:8f:9d:e1:43:f7:5e:95:4a:9f:f6:b6:ef:73:6f:3a:
         a1:4b:f0:34:39:32:74:0d:6f:9c:5b:3f:ee:e2:d9:cf:51:82:
         5d:38:dd:99:b9:4a:99:f8:be:d4:ed:f4:8e:f5:ad:e9:e0:6b:
         ed:fd:9e:38:76:8f:6e:50:a7:2f:25:73:cb:65:4a:42:28:a5:
         ea:64:a2:79:ee:9b:7a:bb:5a:ab:14:6b:d3:36:4b:75:08:ce:
         ab:d8:36:fa:9f:82:fc:ed:c0:37:49:d6:c4:e3:c4:a7:c5:81:
         f2:39:da:9a:ac:77:e1:8a:7e:9c:f5:3c:57:a2:73:fd:76:aa:
         d3:0d:14:fd:9d:bf:90:69:42:33:be:9d:66:54:83:66:59:be:
         f4:e6:d4:e7:9d:cc:57:38:87:1f:b3:93:b3:2d:45:01:f4:5f:
         05:2b:21:6e:ff:14:79:26:98:f6:35:8a:9b:ee:ab:52:b9:d3:
         8e:09:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:47:51 2025 by rpki-client