This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          JNfILn1dCyWNSdcwObC6vWjcLxtNzqzPNbLLzXNN+k4=
Subject key identifier:   05:DD:1D:DA:54:3B:52:CB:18:50:B0:91:3B:F2:E3:2A:27:DF:9B:E8
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       019AF3C0A1DAA1632954107E68A7F167D6FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          0D73
Signing time:             Sat 06 Dec 2025 13:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:18 +0000
Files and hashes:         1: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (hash: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=)
                          2: 2ReKdgaYtIp3NshswWa0Ynp0WRg.roa (hash: mQx2YD8epmmqsl3MP9UUukVpCGzOBVTsrzitNDkbPKs=)
                          3: 30HBNFGj_StP7OnHCFYamttMRRo.roa (hash: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=)
                          4: 5JotAZkNsZmdy-emIgo1Usa9KiQ.roa (hash: KxNBmCau0tbWKOvKkyRjqvgSzYN9kgOnNbVL/mkB+N4=)
                          5: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (hash: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=)
                          6: 8qrXy8Q6IOvmRFa2BdiyfUkrMzE.roa (hash: qRXi9zsrTMdGbyvne1sTEgP/YtX/quprNa5rw9UyfMw=)
                          7: 9dBG9JuRDTu6Pezri5X9qjGglbU.roa (hash: +cmNANqYW5/TEslGANWHU/0YCKjGJgRnyw8zEhIdvRo=)
                          8: 9xcEatshauEO3IQR_Wu414zl24Y.roa (hash: fKSjlkQxueZV9jBeE970HxiT/qHpLp4twJArvl1NDVg=)
                          9: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (hash: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=)
                          10: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (hash: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=)
                          11: JBJDitDPQDp7uau__zLA0UwhCgw.roa (hash: R106/g5VQisRMQ9a+37PX+GheT0rDv2YD6EjIhwfsDo=)
                          12: LFMXcJ3OWByQXVfJAqZ7_ocSupA.roa (hash: Up4ZD4PUB4O4YaDGDS3M7+WCfTXGSLwStZaxdawLRGY=)
                          13: LnB1q1PM_kJ4XevQHSSwoAwFcTY.roa (hash: e7swdzDOe/Y/3x1bZCYwD/+li1TB00/HX6iaal7aLeI=)
                          14: MKk2eIZdBEHoejBBXOnExSwoMxY.roa (hash: a46f0IAxws6EBAs2zTmMvZ2jH6RBYNwGRDtcrPOSWm4=)
                          15: OsT-YBp3DAavsitz7NLsTwnK23M.roa (hash: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=)
                          16: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (hash: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=)
                          17: SrZ4RZPbkkulLRjDnKeeMWYxwzY.roa (hash: xB6TzyhgS5V679nPp3RIvv2qtymA4YPYZ/DhJiBNbCg=)
                          18: UKaRBf7raXAB65UumI4EA2EWZqM.roa (hash: 1Uq1ZdFBb9LIO9QqzDwwuSeOXeS0ihELz/teT1S+g+g=)
                          19: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (hash: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=)
                          20: YPVSkLDiWHzeuV_smRTrO2e6AgU.roa (hash: +1W/Hbl4uhL2Lv9y3DsFwhs/x9rhWXoW9vVhrNvRIik=)
                          21: _LaL2NGVikd-BXS-ihRrP5NY6ik.roa (hash: 8tMeMGtCDzB7YrSEIzydRyBsTv0sIFfm9Cd8vLZYHTU=)
                          22: _uuRs1q0kzzxOE8VMZdcXbaVR-c.roa (hash: nDyUFHiWf+ewggFbVwk2c6PxPQ54RKuKRQAD1V+EJys=)
                          23: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (hash: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=)
                          24: eO1Hg2bQ0LWJz736BXYL29sRTxI.roa (hash: HcMHeiosVQ+4/TAZPJOqS1U+rgX5YSFqAZBpZptf6lI=)
                          25: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: i2BI6HTUMX+aOPyZ98UmyD1BXlVTLqSjTgUXzIE3gmE=)
                          26: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (hash: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=)
                          27: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (hash: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=)
                          28: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (hash: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=)
                          29: s649jiXFkCJpu3sQ9wPlOGSgSkA.roa (hash: /65JftPkJbj96qvwBEvTKbcXlXWX7OGD8m1xhpXjm1w=)
                          30: sHKnbDWYF8v5U1MKqrGRJFJuELo.roa (hash: qVQJCzy3Z998XHa+C8cs8vimL83JWc3p3pyIfEzepNY=)
                          31: tNQHVbwfibzVK7c351AZ9f-onjU.roa (hash: 1fVQ9lETxiE2tUgAWaLP3sly8RCYpr3iz/wk181/7cM=)
                          32: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (hash: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=)
                          33: vCDztrlrNrPt9fo6YouxSjnnFVQ.roa (hash: C9gjTPImSV8XGrjP1z+30zoQvLbM1GI48tOhez4Na0Q=)
                          34: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (hash: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=)
                          35: wIwLqinns0huK5c5I3YcfTxRkzU.roa (hash: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=)
                          36: wOgDZdkiW7CNnk2a42GfpRveLMM.roa (hash: fZK2xuA5OS6VVpu9Qqe8Cfg/Fx5ihhnU//91+adop+w=)
                          37: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (hash: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=)
                          38: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (hash: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:a1:da:a1:63:29:54:10:7e:68:a7:f1:67:d6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Dec  6 13:01:18 2025 GMT
            Not After : Dec  7 13:01:18 2025 GMT
        Subject: CN=05dd1dda543b52cb1850b0913bf2e32a27df9be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:09:54:10:c6:de:0e:84:24:26:1a:45:66:a7:
                    87:27:05:d7:8d:a7:da:77:12:93:dd:ca:9d:b1:96:
                    0b:65:68:a5:c9:28:6d:44:7b:9c:56:c9:0a:6c:99:
                    85:94:70:db:39:1d:f0:29:8d:17:76:5c:8f:b5:b6:
                    02:47:3a:85:12:89:cb:7e:25:e7:ba:26:0a:63:07:
                    76:3e:25:3e:11:25:92:fc:00:a0:a6:30:b2:61:3f:
                    a0:7f:58:89:01:42:0f:d0:65:8e:d1:78:b1:67:06:
                    2b:06:a3:23:c8:65:fb:cf:ff:df:e0:d4:e2:25:04:
                    2d:36:ab:f2:cd:46:99:aa:c2:bc:49:3b:ec:52:64:
                    5a:84:81:15:9e:0a:88:9d:f3:44:e1:72:63:80:d4:
                    86:8e:3b:4b:bc:b0:b1:ce:de:84:ae:33:f5:da:e0:
                    7b:b7:57:f0:fc:b1:91:69:0c:40:18:a4:9f:3e:1c:
                    0e:9d:b5:f6:b8:41:a9:79:41:af:5d:9c:e8:f7:28:
                    e0:5a:f1:66:9b:11:f7:57:b8:62:81:3d:c0:79:92:
                    f8:a3:2d:50:35:98:b3:0a:75:8c:c9:42:62:7d:ec:
                    56:9e:2b:b1:b5:39:df:2e:f8:00:43:2d:1b:1a:ae:
                    bf:03:d7:8a:46:83:73:3a:7d:af:ba:5f:9f:95:f5:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DD:1D:DA:54:3B:52:CB:18:50:B0:91:3B:F2:E3:2A:27:DF:9B:E8
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:72:f7:60:72:2b:ba:6f:20:8a:f9:31:78:8f:bc:b1:24:b6:
         5d:ef:28:23:74:6c:c4:af:38:19:48:e7:b3:59:37:87:10:20:
         09:77:c1:2c:6f:6c:5d:e6:c6:08:84:41:28:b2:ac:b6:0b:06:
         7a:66:fe:1a:e7:a6:e2:cf:d3:a5:be:cc:96:f7:2b:37:94:ec:
         47:ae:16:ea:04:ae:40:d6:4e:ec:70:0f:d0:c8:a5:b5:e1:02:
         a1:b4:81:5f:46:98:96:8d:c2:26:8c:31:39:99:22:9a:88:98:
         55:32:ac:5b:6c:a5:50:65:56:76:89:4f:3c:0d:6d:3e:9c:e1:
         e2:fd:b2:b8:9c:8f:06:cd:76:c6:76:e2:ea:08:24:b6:a9:aa:
         8d:87:23:e6:74:dd:59:6f:2f:a4:67:1e:60:16:4b:71:92:27:
         bd:70:94:6b:a5:1b:b4:0c:49:b4:b5:e9:51:a8:76:48:74:5e:
         40:72:e1:94:26:cf:e3:18:21:f9:67:b5:66:67:d2:ed:ab:1c:
         d1:0c:1f:7a:bd:86:a0:d0:3e:50:b4:a7:13:ef:91:3f:fc:6c:
         50:a8:09:5b:6b:a4:b8:48:6a:e1:4f:f8:d6:67:d2:7d:6d:6a:
         e6:5e:1c:d5:ff:42:bf:fd:41:a6:91:90:0a:6d:fc:e1:f3:2d:
         bb:ed:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:32:38 2025 by rpki-client