This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
File:                     Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json)
Hash identifier:          jO/GgYcFvDA97u1m8JBW3b3uGZh11LfEPISsNS5uOFE=
Subject key identifier:   FE:2B:2F:6B:1F:07:D6:68:34:1B:6C:71:2F:54:B8:FA:59:80:B4:78
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Certificate issuer:       /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial:       019B281B4B30665D8198BCBFC0AA8A7274BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
Manifest number:          0B98
Signing time:             Tue 16 Dec 2025 17:00:35 +0000
Manifest this update:     Tue 16 Dec 2025 17:00:35 +0000
Manifest next update:     Wed 17 Dec 2025 17:00:35 +0000
Files and hashes:         1: 1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa (hash: ThozvqbE39I99NwlKLMA8FultirTXMcz2Kd4yrw2ZKw=)
                          2: 2JQiF-KuxisBuWKzCCYjlMYezbU.roa (hash: SXSN+jTHRj/1XPCNhGNyMfhXX6aenkr84XXZn44oBus=)
                          3: 2wuDk6nFqqGYiaSC6iucrRXcbQk.roa (hash: 79MFBQJOifCFih1gwOm9utzcHryDlN0MlgfAlM0KB/E=)
                          4: 64__ti8-v70UmOgEukqaYVnNiPA.roa (hash: VerqmgWX+ipN/DN9t0GnBufDYhut1qzOjx4DnJxcXoE=)
                          5: 8VGto6-m3ZhEtMlMk4okhMSijsU.roa (hash: SKlBiSxKydLy7D3Ilb/NXQqcAfFABqE3nA6lfv3eM7w=)
                          6: ABJisPvnQcjHBVgXGi4ydoloSZE.roa (hash: RVwFroWgpI+Qhh+kSCs8kXZIQCp91O1HkIX07p2fRcU=)
                          7: Dd0lNs2hky54dQAv3vPisZjCFp4.roa (hash: NVL0LmaHqGXfi7RWJ5Z26iREn6xhTna8KN7jsCj7oR4=)
                          8: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: lvz2xtS1apDEU2/ihX24UjbY1FM+Tfe+T8KR+28t09Q=)
                          9: MtXcqoleDqMSyVWGFxd3850uGF8.roa (hash: 5zTGwHssmIeS5Ukj/HGoA7Wxq1gUaItGj34ri17+IlA=)
                          10: Q6bkyyQLjY5spQCrn9goEf71pPU.roa (hash: 9lviglTOByJ8RQWmZ8UPa2cM7z/LltLd8urB8JmBNnE=)
                          11: U93bZjAVh1P1joBT40YtFgkj33U.roa (hash: zo9QHI0N0+rtiU9CTdPl68EA0JwhDa16Oocr2Zm0PWg=)
                          12: Uaif5mluHcrJUGbfFQOQv5aGmqo.roa (hash: 4GcANOdK85GtkfgKCJ6D/Bc//mwXx0P/TVTNMp8rznY=)
                          13: diYtHkbWhD5oCZMkqf9gfGkO_S0.roa (hash: mAM70Fu/V+UYJ6UW5MauFuojQwzYrrWiK8CdKSQ5gBA=)
                          14: jyDBS4SlMdZTmgBvwq4TdZHy1_k.roa (hash: LeAOH2iyHYZi5p/Iq7kAMVJlSvm2ZJXwY56cgcvgz+I=)
                          15: wQmIukKER1i2VgSfKkNt8Tv2TII.roa (hash: DpzLTx/qXAbnfH+ej2Fwp80KfukeDoQIFE/iVUll7ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:1b:4b:30:66:5d:81:98:bc:bf:c0:aa:8a:72:74:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
        Validity
            Not Before: Dec 16 17:00:35 2025 GMT
            Not After : Dec 17 17:00:35 2025 GMT
        Subject: CN=fe2b2f6b1f07d668341b6c712f54b8fa5980b478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:0a:75:1e:92:21:99:9d:3d:06:bb:d1:d7:
                    8a:e3:25:6b:3e:42:d8:3e:47:52:c9:d6:8b:21:55:
                    5e:01:38:1a:88:aa:4b:2c:76:9e:31:c3:02:a0:a6:
                    92:f3:57:56:6b:dd:3b:69:c4:72:ed:eb:e0:c1:74:
                    75:27:a1:eb:96:a9:e6:52:4d:13:cb:b2:3d:ad:19:
                    35:18:d7:bc:e4:db:1b:84:41:07:38:de:68:39:85:
                    43:e8:7e:4c:a3:ef:65:d8:2a:ea:b8:56:27:09:87:
                    30:69:81:06:02:2c:33:71:65:d5:20:ff:09:c9:6a:
                    55:57:54:57:65:b8:35:80:9a:1d:cb:88:27:09:33:
                    71:c9:5a:03:dc:d5:7e:a5:7c:2b:d6:00:e9:11:3a:
                    b7:ce:64:9d:5f:95:c8:14:5d:9b:b0:3d:34:ff:08:
                    94:42:01:92:35:fa:59:d9:1f:32:23:00:6b:e7:30:
                    41:cd:02:1a:d7:d1:40:ca:93:fa:da:ac:88:ac:4b:
                    8b:d2:c4:50:5e:7b:9d:a2:a2:e6:72:6a:97:80:e1:
                    30:3a:6c:17:4b:e8:ab:71:01:c1:22:9f:d8:e0:43:
                    33:a0:25:f3:e4:ee:8f:18:2f:0c:59:0f:75:00:68:
                    85:f4:49:aa:8d:ed:a1:cb:5b:6a:9e:60:ac:0d:a9:
                    9f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2B:2F:6B:1F:07:D6:68:34:1B:6C:71:2F:54:B8:FA:59:80:B4:78
            X509v3 Authority Key Identifier:
                keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:34:99:0e:06:09:df:ee:b2:26:d2:b7:24:d8:a3:b5:e9:af:
         62:17:ba:cb:75:1f:54:02:6b:42:d2:e1:cc:45:b5:8d:83:ed:
         1c:37:b9:67:36:55:33:5d:b6:24:16:af:b8:ca:af:22:e1:77:
         73:b0:b5:12:7b:05:cf:ad:23:8c:69:3e:2c:17:60:5d:78:ae:
         72:4b:51:ed:50:68:78:df:65:f0:4a:2a:d4:37:04:db:d8:dd:
         29:96:c5:6c:24:cd:70:01:e5:94:97:5f:14:22:03:9a:7d:1f:
         77:0d:74:4b:d7:60:3d:ac:14:ca:ea:51:8b:40:52:f3:53:29:
         d1:e9:51:d6:7a:d0:4c:c4:c4:2b:5b:c8:d5:3f:b2:fa:b6:96:
         2d:1a:8f:49:77:b0:04:b4:f1:db:58:7a:7e:b5:c7:ba:64:13:
         8a:dd:ad:f9:32:e7:05:a0:be:63:e2:aa:f9:c6:ff:31:18:ca:
         d3:7b:6a:e4:35:cb:15:5d:90:16:72:d8:9c:ae:28:8b:00:fc:
         90:14:84:97:f6:a1:53:f7:ee:dd:0a:21:83:1e:ea:72:05:a1:
         90:5a:63:e1:76:1a:aa:50:30:39:c0:ad:86:ce:17:31:fd:21:
         2c:ea:b1:23:76:8a:4a:5e:5f:d6:54:42:80:97:a7:67:68:e2:
         c3:31:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----