This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File:                     HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier:          yFNwyvmZbrfhic+0ZUBsJRE9GdOwac1AHmaOnlvqZwg=
Subject key identifier:   D4:35:80:DD:BC:1C:FC:11:EC:57:07:7B:E1:1F:D8:6B:D7:E6:E1:0D
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer:       /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial:       019B2BF87E48F90F0C3B27B0314FBE693786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number:          1514
Signing time:             Wed 17 Dec 2025 11:01:04 +0000
Manifest this update:     Wed 17 Dec 2025 11:01:04 +0000
Manifest next update:     Thu 18 Dec 2025 11:01:04 +0000
Files and hashes:         1: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: VmNtSbv7z5VGzVZMclIIfLj/mrX/retiKN9ARaYSsOM=)
                          2: efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa (hash: Ks2lZAvTiIXOJHL4XOxVW69lFz0D0Ra18E8s7zHIoZo=)
                          3: xFzbq7zegADAXEC3JlJ8gW_VXDA.roa (hash: NRYhSLCd0Q4zIkCT1UgOQ1E2p+RPP3+6wGhkQgIto+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:f8:7e:48:f9:0f:0c:3b:27:b0:31:4f:be:69:37:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
        Validity
            Not Before: Dec 17 11:01:04 2025 GMT
            Not After : Dec 18 11:01:04 2025 GMT
        Subject: CN=d43580ddbc1cfc11ec57077be11fd86bd7e6e10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:cd:e4:9d:18:80:ea:65:b5:26:1a:06:11:
                    ea:8b:b8:03:5b:b3:b6:52:a0:31:b0:2f:71:1d:a9:
                    a3:21:f3:34:28:8f:c9:2b:06:68:c6:01:c9:81:93:
                    83:9d:2f:ea:f7:76:22:15:e0:74:89:c0:05:93:41:
                    b9:11:e9:80:4a:12:93:89:9b:17:cf:76:bb:09:6f:
                    ed:29:b5:3d:a4:72:50:c1:da:af:25:5e:d3:e9:3a:
                    63:cc:03:d9:76:c5:ef:ce:d1:69:f9:87:f3:19:f9:
                    17:b0:0a:fe:65:e6:26:5c:fa:d4:2e:27:b9:be:0b:
                    60:66:62:e5:3d:61:e3:56:5c:6b:97:5e:51:61:e2:
                    b8:b3:7e:bc:3a:1c:9e:a8:b2:29:11:dc:5e:38:06:
                    c3:a0:c9:52:5b:66:86:be:3b:e0:92:14:7b:27:fd:
                    b7:c6:b5:3a:fe:8f:59:9c:c4:5a:cd:a9:ac:5d:2c:
                    10:75:eb:ee:ba:1d:85:a5:fd:06:e6:78:db:bd:73:
                    70:b9:db:4c:89:f8:ef:aa:ad:13:d2:56:c9:bc:77:
                    6c:ff:af:5c:34:b0:d9:ae:c7:c2:8a:30:bb:e7:9e:
                    f6:7d:31:bd:0b:b2:23:13:2b:49:31:37:43:76:1f:
                    85:44:1b:78:13:d7:7b:ae:a9:46:c1:0e:94:6f:1d:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:35:80:DD:BC:1C:FC:11:EC:57:07:7B:E1:1F:D8:6B:D7:E6:E1:0D
            X509v3 Authority Key Identifier:
                keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3d:ce:4f:29:df:d5:60:1e:35:e2:9b:19:4b:a0:67:68:04:
         1b:72:65:a1:7e:e8:d9:1b:80:39:47:c9:9c:89:f2:c4:d4:43:
         45:b2:11:f9:a6:a2:0a:43:0d:4b:74:b0:71:7f:c2:df:1a:be:
         aa:d9:8b:d8:7c:b6:e4:66:38:80:3c:5b:4e:f3:c4:53:4d:a8:
         05:d7:a3:1b:40:df:2e:55:d6:41:17:90:8c:e9:b7:1e:89:bd:
         e6:c4:04:06:d4:52:36:9b:d3:f0:22:e9:8a:8d:3d:4d:8d:b1:
         2f:6e:9c:29:0c:8f:d1:bf:31:8d:97:ba:3d:5a:73:99:11:28:
         11:a6:80:86:fb:94:cf:8a:c7:38:97:d7:79:f0:03:b8:88:5d:
         af:a4:8b:19:eb:89:08:02:eb:c0:79:c8:1d:02:0c:32:e3:b2:
         b3:1d:12:7d:dc:f1:d5:36:1f:85:c8:c2:fe:bb:bd:5f:a6:36:
         fb:39:7b:f1:7d:ce:fa:6c:2d:6f:5c:23:c9:34:46:91:6d:0e:
         08:a9:e4:2a:3a:59:5a:e9:96:f7:73:f4:78:c1:67:d5:4d:a4:
         79:79:08:d7:2c:39:b8:4b:eb:de:fd:4a:61:47:48:5d:24:e2:
         15:4a:38:8a:8f:05:ff:f7:0a:27:0e:44:3f:2b:eb:30:ef:1d:
         90:cb:fb:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsr+H5I+Q8MOyewMU++aTeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMGM0N2JhNzk5YTA2MDczMzM4M2I4YTRkYjM2ZTg0YjYy
ZDMxNWQwHhcNMjUxMjE3MTEwMTA0WhcNMjUxMjE4MTEwMTA0WjAzMTEwLwYDVQQD
EyhkNDM1ODBkZGJjMWNmYzExZWM1NzA3N2JlMTFmZDg2YmQ3ZTZlMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFnN5J0YgOpltSYaBhHqi7gDW7O2
UqAxsC9xHamjIfM0KI/JKwZoxgHJgZODnS/q93YiFeB0icAFk0G5EemAShKTiZsX
z3a7CW/tKbU9pHJQwdqvJV7T6TpjzAPZdsXvztFp+YfzGfkXsAr+ZeYmXPrULie5
vgtgZmLlPWHjVlxrl15RYeK4s368OhyeqLIpEdxeOAbDoMlSW2aGvjvgkhR7J/23
xrU6/o9ZnMRazamsXSwQdevuuh2Fpf0G5njbvXNwudtMifjvqq0T0lbJvHds/69c
NLDZrsfCijC75572fTG9C7IjEytJMTdDdh+FRBt4E9d7rqlGwQ6Ubx1VjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ1gN28HPwR7FcHe+Ef2GvX5uENMB8GA1UdIwQY
MBaAFB4MR7p5mgYHMzg7ik2zboS2LTFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGd4SHVubWFCZ2N6T0R1S1RiTnVoTFl0TVYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lN2ZlNWEtYjYyNi00YTMyLWExY2Mt
YTMyN2I4YjU2ZWQ2LzEvSGd4SHVubWFCZ2N6T0R1S1RiTnVoTFl0TVYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lN2ZlNWEtYjYyNi00YTMyLWExY2MtYTMyN2I4YjU2ZWQ2
LzEvSGd4SHVubWFCZ2N6T0R1S1RiTnVoTFl0TVYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALD3OTynf
1WAeNeKbGUugZ2gEG3JloX7o2RuAOUfJnInyxNRDRbIR+aaiCkMNS3SwcX/C3xq+
qtmL2Hy25GY4gDxbTvPEU02oBdejG0DfLlXWQReQjOm3Hom95sQEBtRSNpvT8CLp
io09TY2xL26cKQyP0b8xjZe6PVpzmREoEaaAhvuUz4rHOJfXefADuIhdr6SLGeuJ
CALrwHnIHQIMMuOysx0Sfdzx1TYfhcjC/ru9X6Y2+zl78X3O+mwtb1wjyTRGkW0O
CKnkKjpZWumW93P0eMFn1U2keXkI1yw5uEvr3v1KYUdIXSTiFUo4io8F//cKJw5E
PyvrMO8dkMv7wQ==
-----END CERTIFICATE-----
Generated at Wed Dec 17 15:28:40 2025 by rpki-client