This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
File:                     q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json)
Hash identifier:          ZUKc9Lt6q3CrpuaeUBUo0xtyQ3TjRbSMkU029JO0kk8=
Subject key identifier:   35:C4:CF:86:25:CD:13:D2:F7:A2:BA:48:1E:F1:96:AC:42:21:7A:74
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       019AF5E649135EF8B27D19E46E2B6200F1F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
Manifest number:          17B7
Signing time:             Sat 06 Dec 2025 23:01:41 +0000
Manifest this update:     Sat 06 Dec 2025 23:01:41 +0000
Manifest next update:     Sun 07 Dec 2025 23:01:41 +0000
Files and hashes:         1: 3rSRd0RZU7FekSH23KpB4AjQvCA.roa (hash: dHJ5VK5jy4AG5zWMS9JzXCYfEPP9KtWlYIJ17BPZ8p4=)
                          2: 79SKiAPGItgSBiSdHsbiPNmxzdA.roa (hash: bp4Hzk1UysrE74qZJaWtC8IolTv/126MWUfJ4dgAP+w=)
                          3: 8CD_BDNohDu7BFPue0FAVtqeSKE.roa (hash: MBbBcYx0OZxz+xXv93fCUqPEHeogAGDOWRTI0SELjnU=)
                          4: DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa (hash: UyDgyJqrwARZHVBt5A9PQUxwD+TJu3qnXyFQy1aEp9I=)
                          5: FmNEfzs-SRSfbomfiiNIeqQS1sk.roa (hash: DZqchwYxSvfrNSJm9BmQA3cTvM8eHMT7t5woC6TuhyE=)
                          6: Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa (hash: WIh4dCuUbUKwr5ezCX9dxWL5StxMpA6ugd95qMzqKA4=)
                          7: U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa (hash: fqverKbNHsV3jVuR9y0WWha056JePZs0l3+H4zjSxfA=)
                          8: W4bkJ6IHGpMDnc-eERRMgLecaRY.roa (hash: f8DGWIOVKEtO1y7kX/yc0GrbmCyQ2M3bGkc6cPKnJfo=)
                          9: XWgY9IE5WPWEYKpZb_DdJSKgmNk.roa (hash: RjaBA1nT0ZNCp2uF/Bf1faWMk5+nUdGucIKvPd+4FJg=)
                          10: afCUdciEL8e1tl5gYWrtb0HNTsk.roa (hash: 5NoCDBuBZUGC39cg06n8OGy1uzMRcXZWmjT1H17s8qs=)
                          11: eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa (hash: Nuu5BDy0CuOnKoHwa87Nw4BNQ/P69UXEmPo5SaswqxY=)
                          12: ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa (hash: o/eumNvuz+9CmmVOqXWqv98TZutXQn/8mhjgfl+DMUM=)
                          13: jEkIkDjyHf0Y5CHlkh_SAYrLMi8.roa (hash: nK+7va5r0DKn11vhjaj1KeeLmtO5MjFetghK5DI3nyo=)
                          14: k1o7H-5eEgCdvmr2Au7FXonmUIc.roa (hash: cPZnlWd1NF/fLPFMgOLyjHXmXf8GfrHrU0SBnmHDHvY=)
                          15: lSOxZN--Nv76VTwU3O8Fys07u2M.roa (hash: KF0YUVuZrHgrWuxvGjcknBz1cOoRQsrm28h1CM9VPOI=)
                          16: oRojqrF2upd4qpGF9qwuvKkB85M.roa (hash: rI1ZvEDD5nBz4EJV2sl7C1HlZDCYTwKf5IAxKcbibxk=)
                          17: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: HFjmdkk87i/PWu8+0l0CcMJR563gs1J52MRUNUasgTM=)
                          18: rbJzreDbHp60Zc3UJ6AODADth8g.roa (hash: BpjTDuP8RPY+luxryeSysWVMte9pS4i/E17bDx01jBk=)
                          19: rq4z53nTY235oXOYEJGf8J9hSBk.roa (hash: ALoDf8xPedv7a4y1Cobi6nNzEhORdIhw3weFRomPawE=)
                          20: wWbDK40S4dgNgIeoUbg-t_w6Qx0.roa (hash: SQUX4nOmlr/84KlBRvNtQfHH9k/9TOfWpMlz56zCIZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:e6:49:13:5e:f8:b2:7d:19:e4:6e:2b:62:00:f1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Dec  6 23:01:41 2025 GMT
            Not After : Dec  7 23:01:41 2025 GMT
        Subject: CN=35c4cf8625cd13d2f7a2ba481ef196ac42217a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ec:b1:f9:d8:62:b1:18:32:f6:51:3f:59:25:
                    e1:69:89:cc:85:ca:b5:5e:6e:93:54:1b:8f:db:76:
                    3e:9a:c3:a4:f3:f4:9e:6f:c4:81:9d:a2:31:f8:26:
                    40:72:6a:be:42:e3:4c:fc:02:82:d3:6d:f5:4a:1b:
                    db:79:de:f9:dc:8b:8b:70:3b:14:7f:62:ff:7e:af:
                    07:68:4f:88:46:f5:76:da:e4:33:a4:47:83:5a:b8:
                    42:6d:78:57:11:ad:a2:64:dc:f9:e5:9c:21:2f:c2:
                    8c:2c:ea:ea:1d:09:a0:5d:aa:1e:03:b6:0e:f3:0f:
                    cf:b7:c5:bb:b1:1d:41:63:41:57:25:29:f7:47:29:
                    34:7b:5b:77:65:23:aa:21:69:1f:f8:a2:3b:27:88:
                    52:6e:1d:4b:ae:e2:7e:0f:7e:59:7b:67:d4:f3:71:
                    8c:6b:4d:05:0f:7f:08:2b:0d:ba:5d:6d:14:72:e8:
                    0c:e8:6f:b7:16:74:7b:cf:b6:78:4f:6f:6d:24:10:
                    00:08:07:75:41:50:1a:6d:f9:f6:02:bf:9c:69:94:
                    7b:c7:33:c1:9a:20:e8:3e:ed:03:20:48:59:b6:00:
                    d6:68:2a:7d:d2:44:ec:7f:78:09:68:56:46:85:a3:
                    e8:51:f1:fe:4b:80:50:ca:6e:eb:58:6d:e1:a6:c5:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C4:CF:86:25:CD:13:D2:F7:A2:BA:48:1E:F1:96:AC:42:21:7A:74
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0c:88:1a:e4:14:78:77:09:e5:e5:55:92:22:d3:d0:e1:57:
         4e:8e:5e:bd:62:58:c2:6b:5b:56:2f:0a:62:4b:19:ab:dc:4a:
         76:95:ff:10:78:7e:70:22:a6:4a:f5:58:20:03:3d:e2:95:78:
         05:2a:c6:f9:76:0f:5b:3f:0d:01:33:73:f4:ca:6c:a6:98:94:
         ea:02:3e:12:67:8f:7d:d7:9e:07:43:47:25:e7:e4:0a:50:ed:
         1d:6e:3a:2a:25:87:13:35:a0:7d:fb:9b:d4:b8:39:9f:6c:6a:
         06:bc:79:4c:c4:b3:1c:eb:db:e8:f4:1d:41:e8:44:ce:94:9c:
         3b:b4:78:d1:d3:db:19:0e:fe:99:9e:0a:52:cf:aa:bb:4a:bb:
         c9:1d:92:a9:bf:f0:25:e8:7d:cf:6f:4e:9d:ac:e1:11:18:c1:
         7f:b0:95:6d:96:4e:17:6f:cd:cd:05:20:75:32:11:01:73:04:
         e3:e9:21:d5:37:46:a6:bb:ae:45:4b:f2:29:a6:46:9d:2f:c1:
         89:b8:4f:4f:a5:4a:81:86:41:8c:97:30:a9:6a:0e:3c:96:37:
         69:7e:fb:20:65:eb:7e:91:e2:31:b9:d4:e2:55:00:98:86:c6:
         16:a9:0d:6d:db:c8:2d:40:5a:ff:e1:43:76:73:c1:e5:be:2a:
         09:90:27:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:42:11 2025 by rpki-client