This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
File:                     fHcuHibmwj9ArWZoyF_pUNoQY_w.mft (raw, json)
Hash identifier:          nIQWPDDet6/B84CXhFhMUTFOSSp2XuXA3IK+yK7UycU=
Subject key identifier:   1A:44:26:AD:1E:41:BE:B7:86:37:87:9F:7E:91:F6:9C:DC:FD:DB:D9
Authority key identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
Certificate issuer:       /CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Certificate serial:       019AF2AD4CFD8ECF5838C012098F0B2C0D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
Manifest number:          0BE3
Signing time:             Sat 06 Dec 2025 08:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:34 +0000
Files and hashes:         1: WuFy1APBIwy6JKAVQJctFZaszaA.roa (hash: O9UzF8bkJnuYItljusBcrOHzHYIIrCdeMJv6mHxJFNI=)
                          2: fHcuHibmwj9ArWZoyF_pUNoQY_w.crl (hash: erWUX6QOfb7SQCUNXWhcrAhhmC2kRxnXAMcdPrvLglk=)
                          3: hAeo3-fsoXXxktFSXGJREiwOKiQ.roa (hash: yM5JEjdbG/f4XH2hveChqybWEFcsYH1LdaHT9UmPcb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:4c:fd:8e:cf:58:38:c0:12:09:8f:0b:2c:0d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
        Validity
            Not Before: Dec  6 08:00:34 2025 GMT
            Not After : Dec  7 08:00:34 2025 GMT
        Subject: CN=1a4426ad1e41beb78637879f7e91f69cdcfddbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:9e:86:79:cb:f8:d9:a6:74:3d:1c:c7:1e:
                    52:f0:e7:27:79:67:f9:94:95:c2:01:0d:2f:0e:42:
                    60:b3:f2:98:75:e4:4c:92:e6:d5:29:b8:41:b4:22:
                    07:61:f0:69:c0:37:0f:85:8d:27:75:f4:1b:36:95:
                    89:46:47:32:26:66:42:06:4a:c6:b3:a5:f1:06:fa:
                    bc:5a:56:ed:ba:0a:d9:d4:2a:38:5f:8e:1a:12:a3:
                    46:b0:58:0b:74:80:95:65:72:73:ce:8e:f6:82:59:
                    06:e6:b3:9b:a8:89:a7:c7:3c:45:0d:68:e9:05:d7:
                    33:f2:e1:58:69:08:27:ad:94:85:f2:96:36:05:35:
                    27:d4:20:ab:e6:24:ca:77:0f:c9:af:67:8c:f1:d6:
                    c6:3f:a3:c5:d8:f7:ef:66:a0:9e:ff:fd:72:ae:50:
                    eb:07:29:0c:79:08:6c:46:6b:58:bd:7f:ee:78:1e:
                    dc:40:f8:72:1a:c0:a6:a9:4c:60:6f:5b:b2:66:25:
                    f5:8e:37:31:03:70:9c:e4:a8:91:85:76:20:5d:4f:
                    83:91:93:5b:1b:74:40:6a:f0:16:bb:10:8f:e0:fc:
                    0d:d1:f5:2d:bb:6d:46:47:56:44:40:7f:8b:ef:e1:
                    90:7e:e1:2a:b8:6f:10:0f:3d:67:64:3b:f4:08:68:
                    09:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:44:26:AD:1E:41:BE:B7:86:37:87:9F:7E:91:F6:9C:DC:FD:DB:D9
            X509v3 Authority Key Identifier:
                keyid:7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:25:95:0c:1f:8c:cc:43:87:3e:d8:f8:22:2c:a4:44:fa:d9:
         a6:88:0c:6a:52:e6:c1:ea:31:fa:ce:ed:8f:a1:3c:f4:b7:b0:
         a2:62:9c:58:e5:49:3b:b6:92:2c:a7:33:06:24:24:d8:2a:83:
         a7:03:5e:93:f9:c7:23:d3:e1:79:01:23:5c:53:d0:cd:23:c7:
         73:30:3d:e3:d0:ae:10:d0:2f:6f:07:7b:97:c0:d7:5e:a0:34:
         79:f8:90:01:ef:63:04:11:74:62:f2:2f:90:76:c1:d2:b1:99:
         c0:64:2d:7a:b0:c1:ce:0c:17:61:ab:ae:e2:50:02:26:eb:82:
         68:94:74:ff:1a:fa:46:fa:d3:7f:7c:56:65:aa:c4:8b:47:d7:
         b1:b2:a6:06:dd:1c:b8:8f:84:68:36:39:3a:3d:77:f0:78:0c:
         49:3f:37:28:c8:52:64:e8:f4:14:51:ae:20:08:23:2a:f5:81:
         e2:ad:1c:cb:7c:84:24:57:8e:58:08:a8:25:6d:22:5c:0f:8f:
         f3:d4:40:04:ab:7d:40:e1:61:e0:2d:7d:69:2d:d8:f8:fa:4e:
         cc:22:79:00:4e:77:26:6b:d6:8a:73:b5:f0:37:3d:ee:d7:af:
         52:36:dc:5b:1c:68:19:4e:d4:2c:26:a3:c7:c3:2a:9d:ee:68:
         17:6a:89:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrUz9js9YOMASCY8LLA0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNzcyZTFlMjZlNmMyM2Y0MGFkNjY2OGM4NWZlOTUwZGEx
MDYzZmMwHhcNMjUxMjA2MDgwMDM0WhcNMjUxMjA3MDgwMDM0WjAzMTEwLwYDVQQD
EygxYTQ0MjZhZDFlNDFiZWI3ODYzNzg3OWY3ZTkxZjY5Y2RjZmRkYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXuehnnL+NmmdD0cxx5S8OcneWf5
lJXCAQ0vDkJgs/KYdeRMkubVKbhBtCIHYfBpwDcPhY0ndfQbNpWJRkcyJmZCBkrG
s6XxBvq8WlbtugrZ1Co4X44aEqNGsFgLdICVZXJzzo72glkG5rObqImnxzxFDWjp
Bdcz8uFYaQgnrZSF8pY2BTUn1CCr5iTKdw/Jr2eM8dbGP6PF2PfvZqCe//1yrlDr
BykMeQhsRmtYvX/ueB7cQPhyGsCmqUxgb1uyZiX1jjcxA3Cc5KiRhXYgXU+DkZNb
G3RAavAWuxCP4PwN0fUtu21GR1ZEQH+L7+GQfuEquG8QDz1nZDv0CGgJUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpEJq0eQb63hjeHn36R9pzc/dvZMB8GA1UdIwQY
MBaAFHx3Lh4m5sI/QK1maMhf6VDaEGP8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkhjdUhpYm13ajlBcldab3lGX3BVTm9RWV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wMzczMWQtNGFiMC00OTgxLThhM2Et
MjNjNDdlOTUzNWU3LzEvZkhjdUhpYm13ajlBcldab3lGX3BVTm9RWV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wMzczMWQtNGFiMC00OTgxLThhM2EtMjNjNDdlOTUzNWU3
LzEvZkhjdUhpYm13ajlBcldab3lGX3BVTm9RWV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSWVDB+M
zEOHPtj4IiykRPrZpogMalLmweox+s7tj6E89LewomKcWOVJO7aSLKczBiQk2CqD
pwNek/nHI9PheQEjXFPQzSPHczA949CuENAvbwd7l8DXXqA0efiQAe9jBBF0YvIv
kHbB0rGZwGQterDBzgwXYauu4lACJuuCaJR0/xr6RvrTf3xWZarEi0fXsbKmBt0c
uI+EaDY5Oj138HgMST83KMhSZOj0FFGuIAgjKvWB4q0cy3yEJFeOWAioJW0iXA+P
89RABKt9QOFh4C19aS3Y+PpOzCJ5AE53JmvWinO18Dc97tevUjbcWxxoGU7ULCaj
x8Mqne5oF2qJ5w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:03:03 2025 by rpki-client