This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier:          0L3LNcu0lt0kCPdpwb0w4IuX6qkK4bot3dDR/v2hXwk=
Subject key identifier:   4F:AC:71:D9:1A:8C:0E:65:AA:52:FE:92:4B:B5:6E:F7:CF:87:A5:FC
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       019AF2AD6E0E7A846A53C2BD9C8CD5B642D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number:          110B
Signing time:             Sat 06 Dec 2025 08:00:43 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:43 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:43 +0000
Files and hashes:         1: 2k7DoYw_fUEI-IRw1yMkv6L8kgY.roa (hash: CzU19QUyTNNv7cv2M1H3GPMiR5txRGI7L/Dpax8ycto=)
                          2: 80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa (hash: HUfy0YrzHxyEQF6ktaZjTGRUd7aNFhWvpFLfpeZ7xkc=)
                          3: 99A4IVtXIE35BjjiP_h5rUS3ws0.roa (hash: SCifrn/pmyL7YkH7a1VgF0+SEiaOrC6qaKgWxIHoy/k=)
                          4: FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa (hash: Vb1pyOLHyXJ0GmUgGbGVYVs6jxiUud7ztRRHO3n5g/A=)
                          5: GbfU3sLMppEtdewqDLMaWBubw0E.roa (hash: 7p63Th7UDDf6mzZdRjRGDgkafLbUbj5kgBwLK7PNoZ0=)
                          6: ORedMLYnb0LVXOgGX5x6fgTqghE.roa (hash: 2UNSCAjN9jMQBA4CHydqKx1nKHdJbnZ1QjDJUllLh5w=)
                          7: TvWiGITQL6TnbZlCP18LK1XHyq0.roa (hash: ECY0NKVBp1G1uivHtWe1d/7Az9PaMkOqJpUteCitqFE=)
                          8: Uc3CdKcVAOMWOb5D1jZpL5FcqO4.roa (hash: a+cNO7NeGK0+Kekgy2ApSwORgdGKnbPR+XAAnpzOBb8=)
                          9: WVyEjuo3Pcswg76TNVE71cRw5Qc.roa (hash: JRWUHipuHwDMuj4Bw6dq/IvRe2t2Vulvh7gOCgXk2cU=)
                          10: YmXp0kLagMnJFegcO08eA034lyA.roa (hash: HE2edC4wON3Wujsq1suNKRRMgCVpU6jt5hawUs/NQb0=)
                          11: cqEZPfiDuRq1a3OKI0xyzSj-ORc.roa (hash: HZLlwTwqVGDVRhnQhZwHiZITP6bwZxdPXUhaAFygvWw=)
                          12: gm4tKAhXjneey7S0f4JZDHBQxoQ.roa (hash: Ad3Dm+i+7NeJyTuFmvpaF4c2E01O5Jx7QQ62ewCSDiY=)
                          13: hI2E3ZjYmgtrm9OV5uV8KVFZFFc.roa (hash: tE6Wa1tgj3Aoh1FeZXyjGFAoSLL+sDQ+OfIFAkY7L40=)
                          14: hoJCPHI3kMFvNyJJekf8HSd0pa8.roa (hash: N89cvCwlx15A0MnySLkXdi8r2pYx7GPiu1HNTh+VXJI=)
                          15: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: p1wO7Ia40XJfX6cQLryWDFQOSCRWtEXWJJyowpSB5f4=)
                          16: l06Jo4wcn9UZNl3jwjiavlx-v4M.roa (hash: +evzu72ciOeStTyT4XPgCsvTMWGGffJYcUeps8zXWZk=)
                          17: nwzUhf9TgBuwLQrQ1UYv26CrJIA.roa (hash: elr0dQBhD70lY5vUB09Z5pfoDsLtushbNHe4ZzT4VT4=)
                          18: qW05wAjwRLWGqRlzcNxJTSPBRpE.roa (hash: 642SRGn6Z467IpVUdTC0I7NjDwrjuS9AcAXZkWNP6fQ=)
                          19: rf7jWc7ttmZWX3mJWpgkLpvcgqs.roa (hash: YZQ7aq3dLHw4G1byXvwZsPXvgsmcNqlGGiJCIat2I7w=)
                          20: t-rsVL4BJwEwBBoHBVhIML92hRs.roa (hash: ejUp8ew1AaALCNdiAT72D3nSXem/ndlDi+OAao2nEnA=)
                          21: ti-qGCmysd4PNgZOBUwDUY8Iluk.roa (hash: Fz4esdv4UKiDsnoNXnH6zVCbGFtLlWDlHFrg5xjFGG8=)
                          22: ucH7IeIWTX6RVcP_anDxrMhkplo.roa (hash: cBNoIGHr8LbNGj9a6kRhTTmCpwzcmwsWD4LP8P5es7w=)
                          23: vD4d6-Ufm0fFISjlc8rxFlQwwWc.roa (hash: Uumg8s4o+wVYm27hvDEXKDjNoX6wIGo/XZKnaH3fl/4=)
                          24: yMwlMMuf6AhxELQISsW6Wy_I6Vg.roa (hash: g4eIZppKVsYn9i4uTmCGcx2yG0hOtyeUq+t1P+63Lok=)
                          25: ylAbJ59-6F4ZAbwoLXiKbYBu2XA.roa (hash: IDkXWTS84Fvv3D5U1LadiDGtpmPn3EbQp1U5eFRNYhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:6e:0e:7a:84:6a:53:c2:bd:9c:8c:d5:b6:42:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Dec  6 08:00:43 2025 GMT
            Not After : Dec  7 08:00:43 2025 GMT
        Subject: CN=4fac71d91a8c0e65aa52fe924bb56ef7cf87a5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:37:3a:5e:1a:05:2e:1a:98:f3:67:3e:81:
                    39:c2:37:4a:2a:47:d4:da:9b:f3:b2:6a:b8:5c:08:
                    0d:17:9c:28:fd:a9:aa:46:88:be:85:1f:27:c4:ab:
                    d4:81:bc:8f:c5:9d:99:31:3a:7a:f9:43:09:cc:02:
                    bc:d7:85:09:37:a0:8f:d1:fa:8d:00:e6:01:a7:9d:
                    be:8d:89:35:c0:55:d1:ac:65:b3:db:78:b8:d8:28:
                    3c:96:21:e0:8f:17:f7:34:84:94:95:6b:c2:47:11:
                    f9:ab:96:b9:c9:ea:9a:b3:96:71:2c:2c:cf:d5:b0:
                    44:93:ac:ef:81:0f:4e:e3:5e:63:a6:c5:d2:aa:a1:
                    75:31:84:f4:32:38:2f:93:db:7b:56:08:d5:be:2c:
                    bc:aa:6a:45:bb:c4:0c:9e:6a:49:b3:55:27:13:41:
                    1e:27:6f:8a:0a:53:92:15:3c:5a:66:d3:51:36:bb:
                    86:a8:e3:7c:7f:d0:8d:ff:d1:00:5a:12:15:30:35:
                    82:c4:d9:b9:ac:35:46:ea:43:fd:c9:92:ec:d4:4d:
                    9d:a8:ae:ef:6e:3d:56:7b:83:0f:16:ac:ea:b1:ec:
                    6d:0e:61:68:3a:39:3a:aa:17:7f:8a:a7:60:65:70:
                    8e:ed:cd:c9:5c:b9:b8:a0:d7:21:58:a9:21:91:9a:
                    58:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AC:71:D9:1A:8C:0E:65:AA:52:FE:92:4B:B5:6E:F7:CF:87:A5:FC
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:60:6f:d5:c3:41:a7:c4:dd:37:1c:8e:5e:03:d0:25:96:88:
         e5:53:a4:4c:53:2b:00:bb:4f:19:29:88:7a:ee:66:d3:8a:ad:
         ad:bd:81:72:29:3d:fe:3d:d2:fd:98:5c:b5:e3:db:31:0d:f0:
         0a:46:3c:4d:b8:52:3f:74:23:6d:da:ba:e5:06:11:67:1b:65:
         45:07:ac:6b:f6:ab:8c:35:7b:d3:a8:a1:ff:bb:40:5c:b0:cd:
         62:6a:cc:7d:89:5b:0f:50:c2:3d:2f:55:c9:ed:1f:32:13:b3:
         bc:d0:0d:69:5e:64:5c:4c:55:b6:27:18:13:b3:63:c1:97:f9:
         96:32:92:97:bd:ab:25:14:e3:21:e7:5f:d2:87:68:8c:b5:d3:
         b4:30:b3:04:de:2e:cf:6d:3e:e1:79:f4:af:da:16:85:d5:50:
         43:2c:b0:6d:10:6a:1f:a1:3b:be:3b:1a:91:bc:a2:6d:8a:9c:
         d8:ed:4a:53:18:8d:49:42:e1:a1:43:2f:b0:17:c5:00:a7:9e:
         34:8a:e8:ed:38:ee:18:68:18:83:45:a0:36:1c:68:34:b4:3e:
         64:0c:5c:5e:a8:02:b0:c6:4c:a1:c2:93:f6:5b:47:a7:d9:73:
         cf:06:e5:59:a6:c1:ce:bb:e2:9a:3c:d6:8d:56:7d:ff:e7:e0:
         09:88:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:41:03 2025 by rpki-client