This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
File:                     CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json)
Hash identifier:          I+26ixsj/2YrS1rUZ8o9qJ0C2TEuGvB7Qdpuy6Vg6YI=
Subject key identifier:   E1:3E:2F:F3:22:FA:35:D4:52:51:DA:C3:F9:80:F3:BC:E4:EC:12:5B
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Certificate issuer:       /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial:       019AF3F7AB23E7FD4411910F831BB11292A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
Manifest number:          110D
Signing time:             Sat 06 Dec 2025 14:01:25 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:25 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:25 +0000
Files and hashes:         1: 5dCYwgA9XnsPyTZF0PH2sEFIENQ.roa (hash: HeN6VLa+RLAMtmcxH1afx2NR8Pkm/Q2bNQH+mpmkM84=)
                          2: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (hash: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=)
                          3: 8Iq82OAVfdAmtA73eRoKV8Dt5yo.roa (hash: aujtRiFKGUSGs6JLSKvAIV7CEwLeuy59to5pukeZQ/Q=)
                          4: B5NGdVBBF38v7I807spD9rlndCk.roa (hash: Ij2UQybHDi9rCMOEdxuL3uK0WnnQkl2pfO/6vc3aPyM=)
                          5: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: 8byRd8hpn7X4+hiEVE6C+qPiwGM+j2LE4zmAmms5/Dc=)
                          6: D5MvDrzK0eKeBhQPT5E-qcyDegE.roa (hash: ZZ3rGXDkZjhVdVSt+mJABSAAxbotcysbVgd0Yw1KZd4=)
                          7: GWboZrvlBziZoBcX3EIZ1oPONJw.roa (hash: AivjmWkJZRMdojRH4kleqZQJ33BcMzsWC3Fh1Qo8D3Q=)
                          8: JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa (hash: xyI4i/7FZY7J0bkn5v2Hrfk5UEeVMBFfBsSKz6DAPY0=)
                          9: L2H6UwduWaJxFicdgN2P7eBtiHA.roa (hash: P4+4JbqGYS4bGYqfrHMMZckY8WsOqty8P+Ix09bzckQ=)
                          10: SRcQTsQI-tcWDkKInxMrE24Ysok.roa (hash: Ahr9YcByWBXusMBM+n1pwDVQOVjVHUrt6dCBioyhQio=)
                          11: SqIYQtH-MyTecrJ8-T-TD9dilA8.roa (hash: p2IOkyfQBQfAepmjkkBl9kWUTrpqgo3iCz4cUJ7c12w=)
                          12: T1gh1hk6ej12g4Ihw5JL9jevaLA.roa (hash: S9ngvgv1d+3Twe9rVRGrD4AR8LO9wBk9cDUOi8GIi4o=)
                          13: THvQYIa2SprhVvWK5-tWknfJY9w.roa (hash: 5zmsJFBP7NnBZaNurwDsUUuS1oMZV7G7pUdzHmeMsEI=)
                          14: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (hash: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=)
                          15: cBFi45ZytFKgnNo2imsLe1_V7q8.roa (hash: r9FtBlSO2l8QxP7DU1HrwjHWsN6WkSKa/BKGiXhnmRk=)
                          16: chc7NZYTY8TAAm4omvxtyabyq7Y.roa (hash: D4ml84hX/IF5k6NvrzKJg2mEZ4TzfgqpdYCT4BEMOzQ=)
                          17: ehIHn3jAZtRRkA33Nc1pYTHjTDg.roa (hash: bDhk4ct8DwYt2TZGQPJBM72H8dn80wWF1VZJAu/dGpI=)
                          18: hhzSm6GjX7s3vRc-UjvW8KahBO0.roa (hash: Ee9hXcXaMVLm37/p4g8p7BURdDDaz2FT+WhXrMvmGFM=)
                          19: jCupyTailD4J3l_LQLBvtP05gjk.roa (hash: D5HBTRbrPgt5UiMToMLoELxSS8TE8kgjWsHI9+xY4kE=)
                          20: rPciKNxouTUmkCLDkFKKyn388Cc.roa (hash: zI+gdKXH7CP5oPaL5HXMew7Kewt2hB10+HNYNloE0UY=)
                          21: tY0RTrnwdeHFozdlTByKvXK-HOE.roa (hash: Sxd1viKUAgFQojN/S49L+nnSyHy1YvWaHrdPVirkqCU=)
                          22: vel8G0_GwQFflB8Mgko4kMTZKps.roa (hash: rEt+VHHycH8jAHwOJN7GUU5Y5p8vUpqH1HAPUwtitdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:ab:23:e7:fd:44:11:91:0f:83:1b:b1:12:92:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
        Validity
            Not Before: Dec  6 14:01:25 2025 GMT
            Not After : Dec  7 14:01:25 2025 GMT
        Subject: CN=e13e2ff322fa35d45251dac3f980f3bce4ec125b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:58:41:db:f8:1c:2e:f5:a4:57:ba:d6:65:
                    04:68:06:50:8c:e3:3c:d4:6d:04:02:0b:74:47:ad:
                    ab:e5:6b:12:77:3b:1a:2d:52:fe:98:6f:d1:8d:94:
                    e3:bf:d1:24:fc:4c:a3:4f:7e:94:17:d5:5c:cd:bb:
                    9a:61:4b:3e:67:43:08:0e:d1:f6:80:a1:c8:d8:a3:
                    66:34:66:7a:f9:5d:28:b8:6a:0c:0c:55:6f:9c:2c:
                    06:76:ba:bb:a0:47:3a:78:e8:f3:eb:8c:e3:c8:f4:
                    d4:ad:04:fb:8d:a5:b1:75:38:3d:bf:e8:49:11:83:
                    0f:fb:9e:33:41:68:ce:bd:17:6f:17:85:a8:28:b8:
                    04:7f:3d:64:15:8c:86:2b:27:fd:ef:a1:95:22:a1:
                    71:25:1c:2e:2a:8e:73:3c:25:4c:a7:07:8e:0e:48:
                    d1:45:75:a2:6c:56:37:c6:d7:c7:ed:08:de:6c:40:
                    b6:05:05:74:be:5a:ba:0d:0e:75:ad:6e:cc:bc:e4:
                    14:7a:3d:d4:43:98:27:2e:24:45:53:d4:55:75:f3:
                    a9:b8:47:8a:e9:3d:ef:a1:8d:1a:5f:4a:41:67:ff:
                    21:83:e2:69:c5:ce:dc:6b:c9:32:e3:66:e5:67:8f:
                    6a:c5:85:ca:21:a8:92:6f:96:36:22:75:a3:68:0b:
                    e1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3E:2F:F3:22:FA:35:D4:52:51:DA:C3:F9:80:F3:BC:E4:EC:12:5B
            X509v3 Authority Key Identifier:
                keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6f:f9:17:a8:be:a3:86:d3:07:9b:1b:6e:84:81:64:27:04:
         be:5c:ef:81:e9:a6:42:9e:df:da:5d:6f:dd:7e:43:a3:70:39:
         4f:b2:e0:56:0d:a7:35:a1:6b:91:a0:22:10:60:54:f9:04:85:
         39:a0:8b:53:f0:40:b5:b6:71:fc:48:61:63:6b:9a:f7:d2:ad:
         be:36:89:e8:3c:f1:f9:e6:e7:8d:7e:ab:69:77:06:e3:56:26:
         5f:3b:c5:15:9f:ae:9b:ce:0d:a9:cf:6e:22:43:ba:a9:fb:f0:
         64:26:94:08:ad:0d:32:88:1b:5c:25:73:0a:7b:20:7f:69:b4:
         78:1f:a7:5e:7d:33:fc:8a:15:ad:c7:91:54:de:dc:9f:7e:19:
         ae:3a:42:f2:5d:91:e1:2c:ae:90:fe:07:2b:18:e0:8f:52:37:
         99:4d:42:9d:07:4c:78:f8:18:ba:88:aa:22:38:86:e6:5a:c8:
         21:c4:96:44:0f:26:ef:a1:a1:cf:7e:f0:1d:db:3b:d0:bb:2c:
         76:0b:75:fa:84:ef:ff:17:96:e6:93:44:ee:cf:55:c6:4e:34:
         04:24:3c:5c:e0:0e:9e:e0:c6:5a:00:d0:8e:e5:6f:3e:72:89:
         99:8d:e0:b0:79:93:bf:a0:95:30:50:e9:07:ae:6b:73:ef:76:
         67:3f:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:28:56 2025 by rpki-client