This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
File:                     SeUWlMTUa0_MAvrnHl25QqcQjkc.mft (raw, json)
Hash identifier:          JsecxXnL06sVcWz1M9y88ytY71fJ0ETdWh2rpV5/4y0=
Subject key identifier:   AB:A7:FB:F1:89:E7:0B:A0:16:C5:90:BA:70:58:EA:56:2E:7F:6E:5D
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       019AF2E42BD934F0AF0F2239159B4201BF51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
Manifest number:          0DE7
Signing time:             Sat 06 Dec 2025 09:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:30 +0000
Files and hashes:         1: 0eN4pH_on569vbDLjuSVE9zmHHw.roa (hash: dHpk6je1m5+26RS3yPbZDOTqYyKENNbH5mJtTi57qyU=)
                          2: 3swNa_xzTgP8AkYyLBBIrCVQ52s.roa (hash: VNJUFw+Fdi5x2QiAhG7d0Y2q6bY9iIUHwJCHJkGc3H0=)
                          3: 68q7-A89urBUWGG1aC6CDlwS3mM.roa (hash: agbGq90atuQBWvGBXe6tSJLeM9dAZJKteJWVIDcdPHY=)
                          4: 9SnkD6X0ObnnXzhsQAfU50wq92M.roa (hash: YB0Si3z91yhXo2AwK4adljOM6Q3ovpqDkxIzPkthN04=)
                          5: C-MSWSvm3OTDVE2duSkWpMXE84E.roa (hash: jsquoK9AtIVVBU3de8ie3Hiws/uN+v3GJ1XNGw6m0Ug=)
                          6: DBnA1ZT38CocWqz4lECcDH92nSA.roa (hash: cTbJr5qdO8Ge9Q+ojcd0Ziv6ZIxinGPDSjvfRqcRuH4=)
                          7: E1EO9upkpndaiy50em5ro_t9uCQ.roa (hash: W53zyPHzL2qgdBx33fZuYZhZ3vGH4VL/6IR6RK22H0I=)
                          8: F5FaMdQw0MwW_Giq48Id-E6jckU.roa (hash: ycVnq2WGmWZbnOTWd7xSopOSJK6+V+w/gf05ZEHAXvs=)
                          9: Ixo-8S6WASdYlQuTP_CIvr2em9k.roa (hash: YCf8Yjw51Gv33rYMLc2UroCapc3q1dzvlDUUEZ59hVg=)
                          10: KpADruS1t-FrRBApnlZPFJY044I.roa (hash: FblHHhnY1K4Tn2oDFypjs57NiKHIKxo90JdaB5VDVf0=)
                          11: OsTSkCOxPbkeHMOmTXfsLMS7woc.roa (hash: h+L9av8bXXKsaSR0XEI7iXB1ecuqXKwYJToOJUYyey4=)
                          12: SeUWlMTUa0_MAvrnHl25QqcQjkc.crl (hash: LMJSUOb+T1ejjwTpU2x6Hq3HyAzMu3uA/9wskvQvq7A=)
                          13: SqbLsMut2L9xDSC2SD34PpCt2Uk.roa (hash: wgKwkfj11T9F7d4o0ip1KisIV9MHG61CxHpRs/9XSIY=)
                          14: UNbSCVknEzloxl6RzSrT2hvahlA.roa (hash: 2isaRD3NquVeN9o7LwIF82XNJFZ+UFl0v5L31W0RR3E=)
                          15: UtsKYaswyHuE02j4W0pIwBksKks.roa (hash: lnWCCnMCWE2GH801EFlDSMJ7rs6Gz0jAkG4Ic8Ylwvk=)
                          16: _AnCIflcegi1TG_Bv_AnfepaFiw.roa (hash: PoWkT5w8reeyRG+Mi9so0rpgs+gcKWwDhCVDFV2nfrQ=)
                          17: _oksDFSuMnMqsIgD2xIpQMBMthw.roa (hash: ea23MjnNhyR9HJDD5DM69trVWqfIriV9YcmUWE06hcg=)
                          18: b1fIABSYNIk_wfTaWhK1GpZPKt8.roa (hash: U82kIgLxTvdUQdNHSx7mK2pMDucJCtaoNPC8koSclMk=)
                          19: dqdCGJIarF_fA_bp2OJUuyDhlUg.roa (hash: Fif7RHAQgWJkfwYtkxdDWVHz+hTK4+EvnpSylmo25qI=)
                          20: jKLif-TMdnx4gdmFScothAJ_J_U.roa (hash: z4kaspEVbDiBr+9rZCZXxVGjU31c7C+HRYCRX/q4eCY=)
                          21: jLDEnrnVXx_a1P4WIX-rO9Pvx3w.roa (hash: CIN0Yhj4MQrkUgKXcPNi03Gv1QWAOMr6+p6QpjP/y4A=)
                          22: m-g_tm-dDlPdk0elvgbebHGNY8I.roa (hash: 34AI0Bk8uDAgPTJzmwveFc3JyDgenHOyuvbkfx2CWHI=)
                          23: mGfyRjDRuTgx9y2ssaKRC9CnTI4.roa (hash: 2UqU980bJXZLE+Qc5pA1Y2aKIB/zyZpSy3xDygargsU=)
                          24: s4354gOCfSz1KMeZJxCIXfEOiQY.roa (hash: gdWXX/J2UNkRytcmf78K4qBgH12Ae/neYo3Sp8Sub80=)
                          25: ymOsubW8FFYID65CyovGJyOmTdU.roa (hash: qcmX31FhXzohNfXXRXUcobcVR4N+Nk3oDKd3trafmVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:2b:d9:34:f0:af:0f:22:39:15:9b:42:01:bf:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Dec  6 09:00:30 2025 GMT
            Not After : Dec  7 09:00:30 2025 GMT
        Subject: CN=aba7fbf189e70ba016c590ba7058ea562e7f6e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:ed:da:d5:57:a8:75:e9:1f:d2:2a:0b:39:
                    31:33:fa:70:df:ed:c0:00:a6:38:50:29:87:0e:5d:
                    95:5e:39:b0:64:d7:33:57:aa:80:9b:fc:7f:2e:24:
                    f7:33:0f:91:bf:a1:cf:5f:6a:bb:30:d4:ed:48:b4:
                    b2:59:93:1f:76:db:57:b7:9b:e5:19:03:9d:6b:d8:
                    9a:ad:b7:56:14:0e:fd:d5:78:d4:07:f2:ef:91:8c:
                    10:9e:4f:df:1f:d9:22:6b:fc:8e:2b:81:47:8d:f5:
                    e9:b3:89:fb:57:4b:9e:18:dc:a8:64:bf:ee:b8:eb:
                    da:33:0d:9e:44:83:5a:d0:25:1e:6c:0e:e7:9e:9b:
                    8f:a1:d9:54:dd:31:b6:26:71:d3:c0:34:b6:00:37:
                    de:75:7f:5c:e3:ab:cd:1a:bc:ae:aa:99:60:cf:85:
                    de:67:7c:74:e1:12:07:2e:a6:33:bf:d8:2c:4d:c1:
                    36:27:9b:f0:14:9c:3e:47:82:58:e6:e4:4f:af:96:
                    b4:94:7a:d3:73:4e:ae:89:35:b4:75:f4:e1:3d:ef:
                    5f:f0:3f:02:a2:99:9b:e9:f7:2b:1a:84:b8:7e:ce:
                    89:c9:69:c1:5e:80:7c:84:c5:d4:73:be:ca:6d:a9:
                    34:bd:b4:91:75:ca:af:78:7d:50:3b:cc:0a:ed:fd:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A7:FB:F1:89:E7:0B:A0:16:C5:90:BA:70:58:EA:56:2E:7F:6E:5D
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ed:6b:01:2b:d8:d1:3d:62:5c:c3:d2:31:a5:98:e3:7b:f3:
         88:67:37:25:a9:c8:8f:11:57:d3:8d:51:74:b7:19:23:84:da:
         bd:15:eb:01:c3:cf:61:db:6e:ce:17:03:59:6e:2e:1f:f3:48:
         6a:3d:6f:4c:fe:04:9d:de:a8:0c:64:e9:5f:e2:dd:a6:ef:ae:
         51:30:a6:27:f4:00:a8:71:52:d3:a5:53:9e:ad:2f:27:0f:2d:
         3d:42:9c:ef:42:68:cd:82:7e:ca:67:22:30:05:32:60:6d:7c:
         e3:3d:c8:60:4c:74:20:96:ac:88:ae:30:7d:34:4b:7a:8d:34:
         3a:32:c5:a5:cb:8d:00:a1:1c:01:b1:cc:5d:58:ba:0c:82:07:
         ab:e4:d8:a1:90:ca:26:0d:21:33:62:de:41:c8:78:ae:21:da:
         6c:5d:86:1a:de:dc:27:4b:ad:aa:0c:92:12:e8:f9:38:2c:0b:
         67:8c:cd:68:0b:60:d4:b4:60:3a:86:7c:b9:43:ac:2f:68:71:
         6b:9b:1a:a2:aa:0e:99:3d:5e:82:51:be:a4:9b:52:d6:e1:5a:
         db:88:3b:44:e3:a2:8b:26:0d:a6:9e:d9:57:18:95:3d:61:2c:
         47:da:ca:49:86:45:78:93:00:28:ef:da:88:9f:59:1e:ce:61:
         00:81:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:41 2025 by rpki-client