This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
File:                     Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json)
Hash identifier:          gVowz/CRvywTk7Utsps8Uea0bu/Zjao/iKsAVQWKAwk=
Subject key identifier:   F2:26:C7:12:CB:1B:1B:AE:E7:ED:77:9D:E3:3C:71:B0:4E:83:02:4A
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Certificate issuer:       /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial:       019AF3F7E7456683A36C7D669CE67065810F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
Manifest number:          0B7D
Signing time:             Sat 06 Dec 2025 14:01:41 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:41 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:41 +0000
Files and hashes:         1: 1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa (hash: ThozvqbE39I99NwlKLMA8FultirTXMcz2Kd4yrw2ZKw=)
                          2: 2JQiF-KuxisBuWKzCCYjlMYezbU.roa (hash: SXSN+jTHRj/1XPCNhGNyMfhXX6aenkr84XXZn44oBus=)
                          3: 2wuDk6nFqqGYiaSC6iucrRXcbQk.roa (hash: 79MFBQJOifCFih1gwOm9utzcHryDlN0MlgfAlM0KB/E=)
                          4: 64__ti8-v70UmOgEukqaYVnNiPA.roa (hash: VerqmgWX+ipN/DN9t0GnBufDYhut1qzOjx4DnJxcXoE=)
                          5: 8VGto6-m3ZhEtMlMk4okhMSijsU.roa (hash: SKlBiSxKydLy7D3Ilb/NXQqcAfFABqE3nA6lfv3eM7w=)
                          6: ABJisPvnQcjHBVgXGi4ydoloSZE.roa (hash: RVwFroWgpI+Qhh+kSCs8kXZIQCp91O1HkIX07p2fRcU=)
                          7: Dd0lNs2hky54dQAv3vPisZjCFp4.roa (hash: NVL0LmaHqGXfi7RWJ5Z26iREn6xhTna8KN7jsCj7oR4=)
                          8: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: 2VpSylkBQRYNydX0ofUm3zmBlzDuBzN2U3Hohfd2IEo=)
                          9: MtXcqoleDqMSyVWGFxd3850uGF8.roa (hash: 5zTGwHssmIeS5Ukj/HGoA7Wxq1gUaItGj34ri17+IlA=)
                          10: Q6bkyyQLjY5spQCrn9goEf71pPU.roa (hash: 9lviglTOByJ8RQWmZ8UPa2cM7z/LltLd8urB8JmBNnE=)
                          11: U93bZjAVh1P1joBT40YtFgkj33U.roa (hash: zo9QHI0N0+rtiU9CTdPl68EA0JwhDa16Oocr2Zm0PWg=)
                          12: Uaif5mluHcrJUGbfFQOQv5aGmqo.roa (hash: 4GcANOdK85GtkfgKCJ6D/Bc//mwXx0P/TVTNMp8rznY=)
                          13: diYtHkbWhD5oCZMkqf9gfGkO_S0.roa (hash: mAM70Fu/V+UYJ6UW5MauFuojQwzYrrWiK8CdKSQ5gBA=)
                          14: jyDBS4SlMdZTmgBvwq4TdZHy1_k.roa (hash: LeAOH2iyHYZi5p/Iq7kAMVJlSvm2ZJXwY56cgcvgz+I=)
                          15: wQmIukKER1i2VgSfKkNt8Tv2TII.roa (hash: DpzLTx/qXAbnfH+ej2Fwp80KfukeDoQIFE/iVUll7ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:e7:45:66:83:a3:6c:7d:66:9c:e6:70:65:81:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
        Validity
            Not Before: Dec  6 14:01:41 2025 GMT
            Not After : Dec  7 14:01:41 2025 GMT
        Subject: CN=f226c712cb1b1baee7ed779de33c71b04e83024a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:7a:08:6e:ed:82:75:a7:c9:39:13:f5:10:
                    8c:80:8a:a5:51:dc:9f:da:f7:99:60:b4:3f:35:71:
                    f6:e5:31:ab:20:c9:72:67:2b:fe:81:53:32:60:dd:
                    88:d4:31:26:2e:7e:cd:2e:73:26:e2:90:4d:99:f4:
                    0d:ea:dd:a4:9c:55:4d:9d:cb:1d:16:27:e1:ef:55:
                    a0:9f:0d:c9:ac:1c:89:c5:83:52:36:72:72:ab:53:
                    e9:5d:b0:34:44:a9:2e:22:82:a2:4b:0c:37:bd:b8:
                    18:e7:c6:c1:a2:45:10:c5:49:eb:e5:08:0e:85:31:
                    cd:76:b7:1e:00:f9:0d:b2:d3:5b:ec:87:4e:f3:20:
                    a7:98:b9:9d:2a:50:5f:d1:93:90:ad:66:02:88:62:
                    03:91:33:5f:56:66:00:16:c8:0d:da:09:0e:ba:82:
                    fd:73:79:e6:00:0b:34:2a:46:7e:1f:12:66:7b:bb:
                    8c:da:a9:42:24:7a:14:58:72:1c:65:22:fa:d6:29:
                    dd:60:77:11:b5:27:50:45:15:b2:2e:77:bb:b3:e2:
                    c9:23:2c:d1:7e:02:56:33:a0:0d:20:64:79:18:fb:
                    57:3a:71:ba:c1:70:84:8e:c6:78:95:a8:2c:59:d4:
                    c6:99:3d:e0:a1:8f:f1:d1:a1:e1:ff:a2:28:b5:fe:
                    ce:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:26:C7:12:CB:1B:1B:AE:E7:ED:77:9D:E3:3C:71:B0:4E:83:02:4A
            X509v3 Authority Key Identifier:
                keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:55:65:e9:0c:19:d4:3a:57:dc:dd:b3:fe:d5:f7:6a:aa:f9:
         17:03:0b:6d:28:5e:4c:74:14:29:92:a7:a7:45:c9:4b:6e:7b:
         f2:0f:19:bd:16:ab:8b:4a:0d:a7:80:76:84:86:a4:de:92:b4:
         b4:e1:82:c6:55:bf:de:7b:f6:56:f6:25:d1:29:05:cb:c4:34:
         87:c6:ee:e7:95:96:2e:39:96:e9:32:b8:ba:a7:c0:15:3f:9b:
         60:15:a8:9f:a2:48:e8:9e:85:80:2c:b7:e2:3e:84:5d:18:09:
         63:1f:29:f6:c7:15:74:8a:ad:23:b3:20:61:b5:38:15:12:7d:
         86:d4:a6:9d:0f:70:33:53:19:5d:72:f4:2f:ea:15:8a:c2:0b:
         83:d9:a9:59:9d:7e:7a:ad:d5:a2:1b:41:6a:cb:47:42:f1:51:
         12:fb:56:06:cd:2f:98:6f:c3:74:44:e6:02:c4:9e:4d:1d:f7:
         7a:ca:23:c5:6f:55:d7:a9:cb:2b:ef:5a:5e:35:0c:d9:27:c0:
         19:a3:86:9f:39:88:a1:7b:fd:f8:d4:72:c2:bc:7b:a9:db:90:
         f2:74:6a:b2:03:25:9b:02:ae:8c:25:8b:4b:31:62:87:16:cb:
         f4:15:e3:46:c9:bc:9c:a2:64:6b:61:3c:c1:28:24:e0:ef:c3:
         c0:a7:9b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:42:19 2025 by rpki-client