This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier:          p24SpPC9fWTtcFaH7CX30SkEK0cBnccZ//TcqUW5zZQ=
Subject key identifier:   7C:B4:CE:37:DA:B0:E4:F5:40:57:84:A7:C8:CD:FD:E3:FC:AF:75:31
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       019B3DFE522F4BC055B2B38F5AF03664CDF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number:          1132
Signing time:             Sat 20 Dec 2025 23:00:35 +0000
Manifest this update:     Sat 20 Dec 2025 23:00:35 +0000
Manifest next update:     Sun 21 Dec 2025 23:00:35 +0000
Files and hashes:         1: 2k7DoYw_fUEI-IRw1yMkv6L8kgY.roa (hash: CzU19QUyTNNv7cv2M1H3GPMiR5txRGI7L/Dpax8ycto=)
                          2: 80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa (hash: HUfy0YrzHxyEQF6ktaZjTGRUd7aNFhWvpFLfpeZ7xkc=)
                          3: 99A4IVtXIE35BjjiP_h5rUS3ws0.roa (hash: SCifrn/pmyL7YkH7a1VgF0+SEiaOrC6qaKgWxIHoy/k=)
                          4: FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa (hash: Vb1pyOLHyXJ0GmUgGbGVYVs6jxiUud7ztRRHO3n5g/A=)
                          5: GbfU3sLMppEtdewqDLMaWBubw0E.roa (hash: 7p63Th7UDDf6mzZdRjRGDgkafLbUbj5kgBwLK7PNoZ0=)
                          6: ORedMLYnb0LVXOgGX5x6fgTqghE.roa (hash: 2UNSCAjN9jMQBA4CHydqKx1nKHdJbnZ1QjDJUllLh5w=)
                          7: TvWiGITQL6TnbZlCP18LK1XHyq0.roa (hash: ECY0NKVBp1G1uivHtWe1d/7Az9PaMkOqJpUteCitqFE=)
                          8: Uc3CdKcVAOMWOb5D1jZpL5FcqO4.roa (hash: a+cNO7NeGK0+Kekgy2ApSwORgdGKnbPR+XAAnpzOBb8=)
                          9: WVyEjuo3Pcswg76TNVE71cRw5Qc.roa (hash: JRWUHipuHwDMuj4Bw6dq/IvRe2t2Vulvh7gOCgXk2cU=)
                          10: YmXp0kLagMnJFegcO08eA034lyA.roa (hash: HE2edC4wON3Wujsq1suNKRRMgCVpU6jt5hawUs/NQb0=)
                          11: cqEZPfiDuRq1a3OKI0xyzSj-ORc.roa (hash: HZLlwTwqVGDVRhnQhZwHiZITP6bwZxdPXUhaAFygvWw=)
                          12: gm4tKAhXjneey7S0f4JZDHBQxoQ.roa (hash: Ad3Dm+i+7NeJyTuFmvpaF4c2E01O5Jx7QQ62ewCSDiY=)
                          13: hI2E3ZjYmgtrm9OV5uV8KVFZFFc.roa (hash: tE6Wa1tgj3Aoh1FeZXyjGFAoSLL+sDQ+OfIFAkY7L40=)
                          14: hoJCPHI3kMFvNyJJekf8HSd0pa8.roa (hash: N89cvCwlx15A0MnySLkXdi8r2pYx7GPiu1HNTh+VXJI=)
                          15: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: 9UNFD03qTARp/G2ReywNFCMhRvwiABSqrUgjlanDBKo=)
                          16: l06Jo4wcn9UZNl3jwjiavlx-v4M.roa (hash: +evzu72ciOeStTyT4XPgCsvTMWGGffJYcUeps8zXWZk=)
                          17: nwzUhf9TgBuwLQrQ1UYv26CrJIA.roa (hash: elr0dQBhD70lY5vUB09Z5pfoDsLtushbNHe4ZzT4VT4=)
                          18: qW05wAjwRLWGqRlzcNxJTSPBRpE.roa (hash: 642SRGn6Z467IpVUdTC0I7NjDwrjuS9AcAXZkWNP6fQ=)
                          19: rf7jWc7ttmZWX3mJWpgkLpvcgqs.roa (hash: YZQ7aq3dLHw4G1byXvwZsPXvgsmcNqlGGiJCIat2I7w=)
                          20: t-rsVL4BJwEwBBoHBVhIML92hRs.roa (hash: ejUp8ew1AaALCNdiAT72D3nSXem/ndlDi+OAao2nEnA=)
                          21: ti-qGCmysd4PNgZOBUwDUY8Iluk.roa (hash: Fz4esdv4UKiDsnoNXnH6zVCbGFtLlWDlHFrg5xjFGG8=)
                          22: ucH7IeIWTX6RVcP_anDxrMhkplo.roa (hash: cBNoIGHr8LbNGj9a6kRhTTmCpwzcmwsWD4LP8P5es7w=)
                          23: vD4d6-Ufm0fFISjlc8rxFlQwwWc.roa (hash: Uumg8s4o+wVYm27hvDEXKDjNoX6wIGo/XZKnaH3fl/4=)
                          24: yMwlMMuf6AhxELQISsW6Wy_I6Vg.roa (hash: g4eIZppKVsYn9i4uTmCGcx2yG0hOtyeUq+t1P+63Lok=)
                          25: ylAbJ59-6F4ZAbwoLXiKbYBu2XA.roa (hash: IDkXWTS84Fvv3D5U1LadiDGtpmPn3EbQp1U5eFRNYhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:fe:52:2f:4b:c0:55:b2:b3:8f:5a:f0:36:64:cd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Dec 20 23:00:35 2025 GMT
            Not After : Dec 21 23:00:35 2025 GMT
        Subject: CN=7cb4ce37dab0e4f5405784a7c8cdfde3fcaf7531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:71:2f:0a:55:ea:97:b0:3b:48:10:4f:d6:
                    1a:13:2b:14:5c:5e:b3:1e:82:8e:c6:df:8d:15:54:
                    23:d2:c0:ad:fe:82:4d:55:4f:72:39:5a:fb:6e:f4:
                    2f:6e:33:ec:9f:ee:ed:25:57:97:68:40:5a:18:f7:
                    16:13:bb:8e:6c:75:ff:fd:87:df:09:f7:79:84:3c:
                    93:b6:21:78:9a:6a:7d:b2:94:b7:9f:8c:6e:06:bc:
                    27:99:f5:f3:bd:73:ed:fb:d9:08:a6:b4:4e:21:d8:
                    93:be:b7:c5:20:15:6c:95:17:f9:53:c8:3d:f1:92:
                    19:29:dd:e9:52:0a:9d:f4:40:cc:98:d0:df:59:0b:
                    21:75:f9:f6:db:1c:80:75:3e:e2:5d:cb:e6:ae:29:
                    11:bd:d5:e4:75:7a:6a:41:92:95:cd:92:e4:b9:16:
                    a7:ce:c9:46:b1:a6:35:0b:66:57:82:3d:47:f2:1c:
                    35:60:c9:49:eb:ae:67:97:bb:0f:8a:f1:85:35:af:
                    b4:21:8a:8f:17:4e:8e:3f:e9:31:04:ad:53:63:2f:
                    14:91:06:07:52:f4:33:50:e9:74:02:31:52:72:f9:
                    ce:10:5d:23:bc:5d:19:2d:47:9e:7f:24:2c:a3:16:
                    03:db:e4:46:a6:43:26:4e:9a:d9:2a:62:11:b4:32:
                    9c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:CE:37:DA:B0:E4:F5:40:57:84:A7:C8:CD:FD:E3:FC:AF:75:31
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d0:fe:85:7f:ed:21:5e:8c:e0:8c:19:28:6a:4b:1e:0b:bb:
         68:b3:16:1c:74:00:25:16:92:ec:2b:4d:c3:20:61:3c:b6:cc:
         df:79:4f:f0:76:ef:fe:61:1c:14:9b:35:b7:48:ae:0f:e2:2c:
         9d:b9:70:ec:c9:0d:fa:c2:e7:56:e9:7d:8e:46:12:d5:5c:0e:
         2e:25:b1:4a:10:e8:30:43:2a:a1:67:c4:f0:e9:71:9a:ea:c5:
         f2:e5:2f:30:e9:ea:88:ba:91:b8:45:69:85:0c:92:e5:f9:84:
         24:8c:df:3f:3e:63:9c:2c:b7:4f:1e:a4:bb:56:4d:cd:82:23:
         d3:c2:e2:bc:90:d6:8b:b4:f5:db:5c:ba:a6:60:06:c3:e1:e3:
         3c:7f:1e:1c:cf:21:31:10:87:93:6e:06:3e:b3:8d:ac:a4:f7:
         2e:66:fe:a3:ed:a1:9a:12:60:4e:25:de:11:ba:ed:f4:8d:00:
         13:84:7b:9d:0a:a4:ff:b2:30:33:03:7e:31:23:5a:22:f0:ae:
         cf:f6:3e:cb:ed:ab:1a:e4:be:ce:0d:3f:5e:e7:a2:75:9a:74:
         1c:a8:27:1d:7a:92:3b:9e:6e:59:91:37:39:a8:74:74:05:8e:
         f1:fb:89:42:9d:28:f8:81:c4:9c:f7:a4:9f:ad:ea:46:9a:3b:
         bb:12:b2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:56:15 2025 by rpki-client