This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
File:                     nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json)
Hash identifier:          /NS8IdjP9XFIcwWIt+lqfoBQnmVhPMcb6BI5SG/Jtpk=
Subject key identifier:   6C:0E:7B:70:86:FA:FE:56:F0:A0:83:E5:FC:DA:72:6C:13:6E:F6:92
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Certificate issuer:       /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial:       019AF42DC9DB72961E8CDFB2D511EE5DDAC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
Manifest number:          0B7E
Signing time:             Sat 06 Dec 2025 15:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:32 +0000
Files and hashes:         1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=)
                          2: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=)
                          3: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=)
                          4: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=)
                          5: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=)
                          6: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=)
                          7: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=)
                          8: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=)
                          9: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=)
                          10: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=)
                          11: cY4oD3aJCA3hPJ-HG5yOe86pth0.roa (hash: 6XtYpPP1NejHMwoPGzkgvVeeFIxmxEEEbrl1v95CK6c=)
                          12: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=)
                          13: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=)
                          14: f8sPYD1_ERQWqtoiJ9r8nmuqohM.roa (hash: PlyFIyn6Ktx6v1YDTiEOpjCU7XEpYkgWQS4fgop/Yp0=)
                          15: hAltwAar8cruPnrUggNtE-ckX2E.roa (hash: L6YarcwAfqpMI8vHdXzsk7yBc6dzjR+YnQY4CVhZuBE=)
                          16: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: wv0qthYF2WKHlObjZV0CMnLvOXSO4HHqHUxmhZwnLrc=)
                          17: rCpV33sYtGVJt5YUfEHIV76lYwM.roa (hash: WOOfDrHmClUASPz1AvvDv7s8UiSaGZ142B0UsKi/kcM=)
                          18: tLYzkh1BF-tCSd6mxGxyzygsbR4.roa (hash: h8GnmhIYy53LscGvoe8iZQsO+S2ED0tqpDH/o5FtGHA=)
                          19: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2d:c9:db:72:96:1e:8c:df:b2:d5:11:ee:5d:da:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
        Validity
            Not Before: Dec  6 15:00:32 2025 GMT
            Not After : Dec  7 15:00:32 2025 GMT
        Subject: CN=6c0e7b7086fafe56f0a083e5fcda726c136ef692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a9:a7:e2:7e:a8:c3:5e:6c:aa:e3:86:98:30:
                    12:38:1c:3b:f4:9d:bc:0f:33:e2:68:5d:7c:d5:d1:
                    e1:94:72:0a:6a:c6:2b:76:27:15:cf:8b:7e:41:4b:
                    89:1c:29:ca:02:29:90:bf:15:c9:ca:bd:78:b0:8c:
                    1c:fb:25:00:01:41:e9:e5:f3:20:8e:66:dc:e3:10:
                    5e:46:c8:b7:71:3b:ef:40:34:cf:3d:24:96:89:a9:
                    b9:54:99:e7:0f:da:e0:02:f9:4a:dc:85:9a:e4:4a:
                    0e:33:ec:a4:49:74:80:a2:5b:1b:18:45:83:68:8d:
                    6c:7c:4f:3e:c8:60:a7:62:d1:20:28:09:54:7e:71:
                    41:16:97:37:5d:c7:a3:32:b0:ac:cf:d0:96:0d:13:
                    23:fc:ae:09:88:a1:51:5b:ff:27:28:8e:69:26:e9:
                    2d:ad:18:ca:64:9f:3e:43:d9:2b:ae:23:78:a3:07:
                    f3:a1:54:f1:3e:ff:0e:8a:78:23:cb:37:f4:57:9f:
                    48:59:f7:74:bb:01:0c:a2:f5:b0:89:fc:e2:22:4f:
                    c7:f8:a9:c1:de:b1:1b:66:0b:06:41:bb:e9:19:f5:
                    f7:2f:f5:c5:8d:d4:1a:4f:0c:a2:4e:8e:71:d5:3d:
                    67:32:29:27:ec:eb:c5:bc:19:fc:d4:1d:bc:e9:f7:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0E:7B:70:86:FA:FE:56:F0:A0:83:E5:FC:DA:72:6C:13:6E:F6:92
            X509v3 Authority Key Identifier:
                keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:65:a3:b3:98:dd:08:cc:d9:bb:70:82:95:8c:30:94:2f:2c:
         25:c2:f2:46:f8:23:64:0d:cc:99:a7:3e:72:22:db:4f:66:08:
         97:af:ec:16:d6:0d:6f:d4:67:e2:6f:70:21:a0:a7:27:83:b1:
         46:51:ae:3e:29:d6:17:72:e1:e2:ff:ff:d6:63:ab:31:94:24:
         de:c4:8b:ce:c8:e7:9b:6a:a7:2e:74:f1:95:29:15:4a:58:e3:
         e7:ea:b1:79:90:65:75:a1:1b:93:9d:6e:fb:10:a0:7a:66:3a:
         88:50:cd:6c:ec:33:d4:61:56:8e:a2:37:39:2d:c5:bc:d3:7b:
         5b:06:41:4c:6e:ef:77:87:3e:89:b7:f3:34:4e:4b:b8:13:bd:
         56:57:1e:9d:95:0b:f8:d6:ca:9d:d2:77:ec:09:13:7e:5e:8d:
         2d:f9:61:31:bb:64:ae:17:83:47:38:c9:32:78:9d:ae:03:82:
         09:b6:db:b4:c9:93:d4:ad:d1:0f:8c:6f:ce:12:c0:54:c3:40:
         ab:e2:e6:96:81:e9:71:21:03:a3:d7:7a:ae:f6:3e:c1:94:11:
         fd:00:e8:f8:15:ed:99:db:0e:2b:ba:c0:10:91:0a:00:7a:1d:
         63:d3:ad:e1:c1:0f:6f:a6:9e:bd:f0:10:2b:e8:fc:75:a0:84:
         55:96:ce:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:16:07 2025 by rpki-client