This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File:                     HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier:          qrfBTQkHt9YUooqvwuC7BBNl1uubymbwuPQwUR6ESnI=
Subject key identifier:   86:33:11:2D:8F:9A:0E:27:82:D5:7D:05:10:AF:85:0E:C5:26:33:D9
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer:       /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial:       019AF3C0B0F8B87244E49445F25DF3D080C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number:          0C61
Signing time:             Sat 06 Dec 2025 13:01:22 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:22 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:22 +0000
Files and hashes:         1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=)
                          2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: rx9Pot+IMg9vCVcT8fy+L0E3xmwxQINPUiYmUp7Mxec=)
                          3: Y5GCtBSidhvcw_3SSYUfDvMbzug.roa (hash: jacf0Q1rEeNMWmSXZkId8BlqjNp4I0/crgw/+VHO0/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:b0:f8:b8:72:44:e4:94:45:f2:5d:f3:d0:80:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
        Validity
            Not Before: Dec  6 13:01:22 2025 GMT
            Not After : Dec  7 13:01:22 2025 GMT
        Subject: CN=8633112d8f9a0e2782d57d0510af850ec52633d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:35:4d:d3:43:90:d6:98:f6:0c:dc:64:7e:
                    46:6d:50:bc:35:c2:01:f5:c0:06:f2:81:03:70:e5:
                    45:8f:fe:d2:f7:f8:33:f3:c8:ea:16:ee:59:8a:73:
                    7c:5a:57:cd:da:6d:0d:d4:6d:a4:19:df:1d:36:e6:
                    ef:f3:0e:99:80:5e:58:a5:ce:79:05:7d:21:42:97:
                    86:49:29:df:53:8e:77:b6:da:d6:11:c1:e6:20:17:
                    51:ee:bc:15:49:e4:34:91:4d:7e:62:5f:b4:e8:78:
                    da:d8:e9:d6:e6:2b:57:85:85:6f:ed:04:5c:41:ce:
                    12:10:33:5f:bb:b4:05:f9:7a:ad:55:9a:1c:47:d4:
                    ad:e9:9c:de:97:08:0a:e6:b0:41:ef:45:ae:62:c4:
                    c4:17:88:f9:62:66:a8:3d:60:a3:89:2e:0a:2a:51:
                    93:ad:35:67:36:95:41:49:64:32:90:35:43:3e:df:
                    75:ee:81:61:4f:74:ef:e5:7a:b8:b2:c7:89:e4:58:
                    77:9b:3b:25:a0:21:f7:f9:7b:a2:52:b5:a7:d7:ad:
                    9e:d0:fd:56:cb:7b:1b:cc:57:4a:5d:79:97:f4:63:
                    fe:26:3c:2a:72:23:f4:39:9e:af:c3:88:2b:61:87:
                    00:82:3b:03:4c:35:5a:19:d2:24:14:e5:85:44:f4:
                    42:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:33:11:2D:8F:9A:0E:27:82:D5:7D:05:10:AF:85:0E:C5:26:33:D9
            X509v3 Authority Key Identifier:
                keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:98:14:15:57:47:40:8b:a3:58:68:a3:38:0b:fb:49:ca:a6:
         36:2a:34:e7:a9:36:4c:c0:53:22:35:2a:a5:d4:15:b8:0b:b4:
         66:1f:b8:78:61:55:27:2b:43:7b:5b:40:09:58:00:04:3e:4c:
         8e:ba:f0:d0:70:87:03:da:ff:a4:01:49:d7:b0:cf:02:4c:9d:
         f9:86:cf:5c:f1:11:1a:3c:fe:64:a4:bc:c7:71:15:2a:fd:54:
         4b:4f:36:15:b8:74:80:98:a7:27:0b:2a:1f:38:02:a4:6f:b2:
         47:04:6c:0b:82:31:1e:56:b6:15:bb:19:f0:36:57:39:65:ed:
         08:01:04:6d:85:c5:2e:29:eb:08:a5:79:36:7f:5f:65:b8:2f:
         b4:6b:25:d7:aa:18:b4:7c:a4:3c:d5:56:e8:ac:9e:51:72:b5:
         92:fd:6d:f4:cc:23:11:3b:a7:77:67:df:bc:32:c4:18:3e:29:
         da:08:01:db:11:3b:45:17:71:77:38:70:6d:b8:0b:eb:fb:eb:
         ff:58:48:97:41:d3:86:b3:e6:ee:92:af:4c:61:4a:7f:94:ca:
         99:df:00:dc:40:c9:f3:95:85:8f:bb:7e:53:d2:36:c4:50:fa:
         a6:dc:de:8f:61:1e:1c:94:68:23:2e:a8:2b:61:43:34:ed:d1:
         ce:fe:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:38:51 2025 by rpki-client