This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File:                     fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier:          mz62TV9A+DJCbP7Vtf63mVcc8dzUfsrg/wx3ZUFfBFk=
Subject key identifier:   DB:9B:E4:72:A5:41:F9:63:C4:A4:F5:33:01:C6:10:F6:C9:47:4B:10
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer:       /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial:       019AF49C01F78C5AC93C262D0F587BBF44FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number:          119F
Signing time:             Sat 06 Dec 2025 17:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 17:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 17:00:56 +0000
Files and hashes:         1: Bb4Upmts5_u6jsKp_pTK9JEbd5w.roa (hash: /xAZrEK6lSJ0oZp7dB09JdfrnnnAZq0xrYuyvDE06Ps=)
                          2: L9AVUKjVgjcjBjCh3XKgvGTA1hk.roa (hash: MRdftqqKSbxUqqyJAk4X82kFe7zRmWPvMYuMjvwKsdI=)
                          3: QV4GiX-_NmB8bXeYFpiPeoYvPgs.roa (hash: ExzZIsYL5CpNKY2xKGueRJzqSweDgaHE92K03gK5p6M=)
                          4: T3OhLBOAw7e0wv44p_23R0s8qHo.roa (hash: 8DuBuaHSGCknynomXt614XNhRxVs83fH+JHNcKSNBiQ=)
                          5: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: kZZCBSk5uhMPOUkBalmpPSc0dIDALBtYAQrDCBMgf9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9c:01:f7:8c:5a:c9:3c:26:2d:0f:58:7b:bf:44:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
        Validity
            Not Before: Dec  6 17:00:56 2025 GMT
            Not After : Dec  7 17:00:56 2025 GMT
        Subject: CN=db9be472a541f963c4a4f53301c610f6c9474b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:49:e9:33:b8:c7:86:82:6b:a1:5a:5a:36:
                    a6:99:e9:96:97:42:5a:ee:42:d7:07:0e:9a:5d:9b:
                    e5:75:e1:7d:5c:0e:b9:4b:f6:7d:0c:ea:ee:df:aa:
                    b2:e0:9a:61:0f:6c:2d:8c:9a:7c:06:0d:bf:65:65:
                    9a:0a:22:5e:74:0c:ed:0e:44:93:c4:0b:c9:1d:63:
                    7f:b7:4f:51:72:ff:62:ea:4d:cb:84:ba:31:e6:a7:
                    01:61:51:17:24:dd:f7:18:cd:8b:05:48:ba:d9:9e:
                    e5:86:b8:89:9f:54:aa:85:b4:5b:5c:62:96:b8:53:
                    ad:7f:02:b4:b5:66:f3:cf:68:49:6a:81:6f:ff:9f:
                    00:ab:2d:b8:30:0a:ad:15:15:51:f2:6b:f5:05:90:
                    31:e2:15:93:07:db:ad:4f:01:64:26:ea:a7:d5:71:
                    14:d8:33:b1:1c:a3:77:cd:7a:36:e3:5e:b2:27:a6:
                    5f:1b:21:26:60:ce:70:bb:e0:61:d8:92:39:08:2d:
                    c4:c7:1e:5b:6c:6c:b9:89:4e:2a:58:bf:3f:0a:df:
                    6d:9e:57:0c:6d:ff:b3:ba:82:51:6b:b1:92:e0:44:
                    52:b3:c0:24:36:da:08:ba:65:35:69:24:64:80:c2:
                    09:ce:f7:2c:42:9c:00:8a:44:8c:0e:92:17:5b:fd:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9B:E4:72:A5:41:F9:63:C4:A4:F5:33:01:C6:10:F6:C9:47:4B:10
            X509v3 Authority Key Identifier:
                keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:64:3e:c7:84:c7:cf:c2:b3:7c:78:76:bb:4f:d4:8f:54:6c:
         45:a9:4e:c0:7e:ea:49:12:2c:c4:40:2a:70:e9:cd:4e:0d:f8:
         1c:78:19:0a:a0:ec:ae:15:66:15:a7:34:59:7d:47:3b:94:dc:
         a6:3b:8c:4f:49:e5:3d:79:10:71:11:2f:3d:7d:60:2f:bc:b5:
         d9:36:e4:ff:84:9d:e0:7a:1c:21:d8:bc:30:1d:a2:8d:d3:ee:
         23:82:ce:71:0c:bf:3e:f0:09:c1:fd:d8:70:df:35:8d:d2:80:
         a8:0a:31:85:02:c1:f5:aa:bf:67:77:e2:3e:17:a4:e9:8c:23:
         53:8c:67:d7:f9:6c:09:e0:ec:2b:02:83:39:19:13:28:30:c6:
         2a:33:b9:0d:b1:91:65:aa:31:54:dd:c4:2f:1f:cd:99:7b:02:
         81:65:75:f6:be:63:ba:e1:93:e1:ae:03:5f:c5:76:5c:59:b7:
         35:b5:e8:ad:3a:9e:d1:08:4e:50:44:48:fc:ae:e1:3e:8a:68:
         29:6c:ce:f4:76:fd:64:97:00:18:0e:a2:f3:43:24:31:20:2c:
         3a:25:cf:d7:51:fe:9d:28:6e:51:be:7e:2c:9f:10:2a:e1:ed:
         81:22:2d:e6:12:b7:7a:6c:39:e1:32:15:f3:f5:de:a0:81:88:
         87:f1:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:49:04 2025 by rpki-client