This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File:                     IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier:          2xw1b2O+6Jm+cGihbo6TA4gJdGkM3QLARRXE0s9WeTQ=
Subject key identifier:   86:87:18:F6:10:9D:49:BC:57:6D:7D:AB:B8:D9:99:AB:23:84:71:7B
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer:       /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial:       019AF1D1B931DABAFEDF6C989F7205A3FE5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number:          0814
Signing time:             Sat 06 Dec 2025 04:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:44 +0000
Files and hashes:         1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
                          2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: HkzkbXmn0g+q0qzrOGAbkyohVkSj4dzlTZ2AyzQQVbE=)
                          3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:b9:31:da:ba:fe:df:6c:98:9f:72:05:a3:fe:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
        Validity
            Not Before: Dec  6 04:00:44 2025 GMT
            Not After : Dec  7 04:00:44 2025 GMT
        Subject: CN=868718f6109d49bc576d7dabb8d999ab2384717b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:db:2d:b4:5f:28:c5:36:4c:a2:f2:67:71:
                    e9:2b:79:3f:f9:19:5c:6c:7f:77:f9:46:12:70:f4:
                    9b:0b:37:c2:fa:b4:91:ba:2f:b6:50:7a:25:80:1b:
                    66:9f:97:3b:af:1f:5c:9d:c0:a1:fb:31:85:ea:21:
                    68:94:94:d6:31:7b:2b:9d:0c:36:0f:b5:79:45:dd:
                    8a:aa:cd:e4:16:eb:ac:25:80:5f:76:53:44:75:64:
                    91:e5:93:cb:75:3d:5c:77:f1:79:00:fd:3f:95:55:
                    5c:15:43:48:2b:ca:24:42:26:b2:ff:10:ac:8b:56:
                    61:59:4e:1d:a4:9f:0b:82:0c:a1:4f:fc:db:67:8a:
                    c2:ee:c8:70:36:89:38:ef:b5:59:d2:9c:d4:64:8f:
                    f6:78:7b:bf:52:ce:c6:00:a3:4f:dc:ec:17:8e:5f:
                    26:a7:1c:dd:07:74:58:54:e8:9b:57:06:2b:0d:b3:
                    08:08:1c:d8:37:6e:cf:d5:53:e3:b2:f9:da:d4:46:
                    fb:f1:b0:2b:45:c9:b0:15:d4:df:bc:db:59:84:99:
                    fc:55:27:7f:3f:a6:6e:99:92:f2:ba:55:e8:bb:9f:
                    67:44:9c:98:8e:a6:35:60:e5:62:92:39:1b:af:a8:
                    00:0b:95:55:af:ff:5a:ca:f0:8a:e0:70:a2:0e:c5:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:87:18:F6:10:9D:49:BC:57:6D:7D:AB:B8:D9:99:AB:23:84:71:7B
            X509v3 Authority Key Identifier:
                keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e1:17:1b:76:91:17:57:27:fd:ae:a1:ec:c6:b2:bb:a1:40:
         98:17:94:5d:93:11:37:16:ab:b8:ec:a8:a2:bd:2d:97:c7:02:
         ef:f8:62:99:2d:1c:1b:d1:f1:e3:96:e6:3c:09:da:1d:c1:8e:
         9c:1a:58:56:26:44:17:77:90:de:da:17:d0:da:dc:df:83:2b:
         08:14:93:e0:56:4a:ad:65:41:53:69:b1:28:86:e2:ce:65:35:
         9b:89:9e:39:f4:de:db:35:c3:81:9b:60:a6:ff:6b:c1:85:7a:
         6b:a0:d2:aa:72:36:19:16:85:1b:2b:7c:6f:7b:13:b7:b4:a5:
         e2:f0:02:3b:21:30:71:18:fa:f7:88:4a:aa:ac:e5:71:55:41:
         05:79:df:e4:5b:22:91:d6:91:c8:72:22:e6:a3:73:b8:27:4c:
         a6:99:93:33:8a:06:2e:fc:0e:ab:ef:a2:96:b0:fc:fa:f7:20:
         6f:0f:b7:98:73:c8:68:a3:aa:e3:07:c6:3e:b3:58:c0:13:36:
         3c:87:07:0a:0f:7e:a5:4d:ea:8f:d2:d0:23:7f:0f:ca:cd:a3:
         ec:19:b1:45:d2:d7:38:fc:1a:47:b3:4f:fd:76:a8:fd:30:ba:
         4a:47:e2:91:0d:fe:45:ad:4a:04:8b:31:68:04:7f:0b:8d:ae:
         1d:db:4a:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0bkx2rr+32yYn3IFo/5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMTFmMDQwM2U5NzQ2NWEwMWRkMTQ1YmMxNTA3YmU1NjU3
MTBkNGUwHhcNMjUxMjA2MDQwMDQ0WhcNMjUxMjA3MDQwMDQ0WjAzMTEwLwYDVQQD
Eyg4Njg3MThmNjEwOWQ0OWJjNTc2ZDdkYWJiOGQ5OTlhYjIzODQ3MTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg77bLbRfKMU2TKLyZ3HpK3k/+Rlc
bH93+UYScPSbCzfC+rSRui+2UHolgBtmn5c7rx9cncCh+zGF6iFolJTWMXsrnQw2
D7V5Rd2Kqs3kFuusJYBfdlNEdWSR5ZPLdT1cd/F5AP0/lVVcFUNIK8okQiay/xCs
i1ZhWU4dpJ8LggyhT/zbZ4rC7shwNok477VZ0pzUZI/2eHu/Us7GAKNP3OwXjl8m
pxzdB3RYVOibVwYrDbMICBzYN27P1VPjsvna1Eb78bArRcmwFdTfvNtZhJn8VSd/
P6ZumZLyulXou59nRJyYjqY1YOVikjkbr6gAC5VVr/9ayvCK4HCiDsWyMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaHGPYQnUm8V219q7jZmasjhHF7MB8GA1UdIwQY
MBaAFCIR8EA+l0ZaAd0UW8FQe+VlcQ1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NWI0MGQtZTkwMC00ZDlmLWFmMDUt
MzE2YzdhOWNkNmI2LzEvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NWI0MGQtZTkwMC00ZDlmLWFmMDUtMzE2YzdhOWNkNmI2
LzEvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguEXG3aR
F1cn/a6h7Mayu6FAmBeUXZMRNxaruOyoor0tl8cC7/himS0cG9Hx45bmPAnaHcGO
nBpYViZEF3eQ3toX0Nrc34MrCBST4FZKrWVBU2mxKIbizmU1m4meOfTe2zXDgZtg
pv9rwYV6a6DSqnI2GRaFGyt8b3sTt7Sl4vACOyEwcRj694hKqqzlcVVBBXnf5Fsi
kdaRyHIi5qNzuCdMppmTM4oGLvwOq++ilrD8+vcgbw+3mHPIaKOq4wfGPrNYwBM2
PIcHCg9+pU3qj9LQI38Pys2j7BmxRdLXOPwaR7NP/Xao/TC6SkfikQ3+Ra1KBIsx
aAR/C42uHdtKfw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:12:41 2025 by rpki-client