This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
File:                     HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json)
Hash identifier:          x7d/KoRTcN7jFANApakWVU8HeVzo1xHeC4Xrad2yAjI=
Subject key identifier:   A4:A4:4D:1D:1D:1F:92:8A:7F:E6:98:B6:62:9B:66:EF:47:C1:78:8E
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Certificate issuer:       /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial:       019AF31B58FFC8155D7B86B7DCFDE3A6CE18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
Manifest number:          1789
Signing time:             Sat 06 Dec 2025 10:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:47 +0000
Files and hashes:         1: 1-6_T1UR8RxQNCrO4uIs7DkXrQDQ.roa (hash: 9REY9ixrC0cn2b75D6q+Nm3sD55qb7ERu5o3EziHF5s=)
                          2: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=)
                          3: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=)
                          4: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=)
                          5: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=)
                          6: E_z1rRm2dPIkXYCFMVviLLfSyVg.roa (hash: VusW0dej7Bb9Ooea4R8NVWxaK/HakKSdSQk63k3jQc4=)
                          7: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: /uyoJ7uENYLg+jg3NyN+gczcheU+eszQyNhxpnsp1I0=)
                          8: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=)
                          9: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=)
                          10: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=)
                          11: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=)
                          12: eloma6ROlb3WGecKiAOHrBMJSNc.roa (hash: xqij8ENzmH6IHFmng7nPcmW1+/+AD15DS99+RfR6qA4=)
                          13: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=)
                          14: jhzB3ouu7eGFu6kVywcyzMtWs14.roa (hash: 7ZiZaqq6we6E8f2G4rGHZ2hDk0lAG3K7IdZ3KOrq/pc=)
                          15: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (hash: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=)
                          16: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=)
                          17: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=)
                          18: zg3nFQ0Sg8cWpJOYqLKRP35LJU8.roa (hash: 2J2iLBS4crA0QUVX97KQglPfQbj/gfi5p+BnPc66cJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:58:ff:c8:15:5d:7b:86:b7:dc:fd:e3:a6:ce:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
        Validity
            Not Before: Dec  6 10:00:47 2025 GMT
            Not After : Dec  7 10:00:47 2025 GMT
        Subject: CN=a4a44d1d1d1f928a7fe698b6629b66ef47c1788e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:0b:ae:a0:00:4c:5d:31:89:ae:5f:3d:94:
                    f7:fc:c4:16:42:64:f5:66:63:74:a2:fd:aa:b7:e5:
                    c6:c4:71:da:0f:b5:ad:ac:31:f4:11:93:01:bd:42:
                    04:d2:fb:50:0b:bb:af:66:49:83:e2:da:3f:cf:8d:
                    c6:4f:c4:95:05:e5:07:f9:4d:0c:bc:90:22:73:90:
                    52:76:49:94:26:f0:6c:97:82:a1:67:4b:50:fb:ed:
                    cb:01:cb:a5:f0:43:64:d1:eb:0c:60:6c:f8:9c:b4:
                    7f:72:62:2e:36:b9:ea:a6:c7:2f:16:a6:46:68:cb:
                    7c:3d:2c:27:c8:f6:41:84:b3:39:6a:aa:86:26:79:
                    e7:8a:73:84:05:ce:e4:d4:99:a0:2c:fc:13:7f:38:
                    11:f0:f4:81:63:d5:76:11:a8:e4:c0:9f:6a:37:1e:
                    20:f5:aa:f5:ec:cd:4f:d2:5d:9b:cd:b4:94:16:c0:
                    19:f6:37:19:09:41:55:c7:04:72:dc:fe:fa:ba:99:
                    4b:d1:6f:89:10:3e:81:6e:d1:25:9e:4d:af:78:81:
                    97:1b:d6:65:e3:c2:43:91:d4:72:2e:56:95:de:f5:
                    a2:8f:2a:46:31:5d:49:3f:4c:72:6a:c8:e2:ef:59:
                    be:40:a3:9e:7d:f8:36:44:b1:ff:ef:62:d5:6f:ee:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A4:4D:1D:1D:1F:92:8A:7F:E6:98:B6:62:9B:66:EF:47:C1:78:8E
            X509v3 Authority Key Identifier:
                keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8e:ea:59:78:72:83:ef:ed:04:af:e5:ed:86:30:1a:4c:05:
         f5:0a:0e:95:d1:62:7d:fa:65:06:8c:e6:c3:d8:80:6b:27:dc:
         c2:9c:40:be:90:43:94:a0:2d:ea:2d:65:4c:2b:36:5c:1a:2a:
         5c:b6:2f:f4:ef:d4:e9:d5:b3:71:a1:e3:7c:a8:ce:d1:3e:0c:
         d9:c5:80:10:ab:5d:e0:0b:41:d9:ec:18:ae:95:cb:a5:9b:7b:
         1e:97:56:e1:59:f4:18:fe:42:df:c2:40:20:e3:4b:d1:d3:0b:
         fa:c6:97:64:d4:63:ba:0e:00:86:b5:25:13:ca:8e:83:ca:90:
         a7:50:26:b2:aa:b9:b1:47:23:25:7e:f5:e7:0a:b4:0d:60:c3:
         ab:88:d5:f3:80:c9:15:e7:45:86:fe:54:20:8a:8a:f5:4e:d8:
         75:1d:39:c4:36:17:68:65:74:b2:87:ee:02:2e:5e:b9:e0:4d:
         2c:ac:f7:57:d5:81:d7:5a:02:d4:f7:4e:f9:ca:33:bf:9c:4e:
         8f:a0:60:1b:51:5b:da:09:82:bb:c9:8e:f2:6f:27:85:fc:43:
         3b:8e:90:13:10:9c:e0:ff:a8:10:fb:61:c2:3e:a9:ea:20:49:
         2c:47:13:ae:6d:75:6b:bb:a4:34:f5:0c:98:47:99:68:1b:6d:
         57:ec:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:33:06 2025 by rpki-client