This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File:                     ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier:          wFh+xds8vNAnMxwbiglda8Kyz2Qo9a4aN99QO6So8G4=
Subject key identifier:   30:8D:2D:A4:FC:32:D4:CF:A6:66:1C:61:3C:D0:3C:DB:64:DE:68:FC
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer:       /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial:       019B23D0E997FDBFF3B113248BA53FBD0D36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number:          1787
Signing time:             Mon 15 Dec 2025 21:00:52 +0000
Manifest this update:     Mon 15 Dec 2025 21:00:52 +0000
Manifest next update:     Tue 16 Dec 2025 21:00:52 +0000
Files and hashes:         1: 0HtxlG1tnNzIep81031kd9p-fBw.roa (hash: OXzBPa2feSryqGHpXn/FEvG/w29ffxoaGIUchPvm3mk=)
                          2: 15E544iqbijbzQkYAdS47aYrD9A.roa (hash: UqW9jr3a9GHG7Uy8FuE2NGM92ysT2U6k57t/AfdIbps=)
                          3: 4e59DVO4NkPnw3RUdXinXYgZKhI.roa (hash: Xsz+QLo3ua4qkoV0U1mBEVAYiGazJCq/50LjJfTfImQ=)
                          4: HLg6VWsPMYDiVDNc71bln7BtlmI.roa (hash: zOH/eTKTLW5itJCzaK8r7su+5axAuuxkhBxsE0F25B8=)
                          5: QeYOzxISXgl6M7OixDgTpfZERu4.roa (hash: s4UEY+I5WghrV5P9V2zo2Pa66DhiVa+5TyKkmVvFOc4=)
                          6: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: 3Mcc82OS/fPNX8YzFfdE3a9dkFtG78t+MWT985X4Kck=)
                          7: UyMuRFmaCk5x7XKTvKAf7rXw_p4.roa (hash: L73FGhBPgjleo1+zJ19RP4Fe/K9eboVk+DpjFaSLBeY=)
                          8: mb6SEFuusb8ccfPkUgnr1G-16Gg.roa (hash: Cbmq4R34rOxE+s++uid9OxtsaiHFlr2Tu54+IMtMuXI=)
                          9: oD5ktIApamXxgwjGSpDfwIhQqYQ.roa (hash: yFFoY0qvHYFgL03wlalkQiMq33WT4afE35wQSaZE/qI=)
                          10: xHPbbeon1SNsE_0gmuT8lFya0kY.roa (hash: m7FtBUaCPAlNvC/LFbXZEFv5bG9Pb/Vc9bKRiuxNTq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 15:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:d0:e9:97:fd:bf:f3:b1:13:24:8b:a5:3f:bd:0d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
        Validity
            Not Before: Dec 15 21:00:52 2025 GMT
            Not After : Dec 16 21:00:52 2025 GMT
        Subject: CN=308d2da4fc32d4cfa6661c613cd03cdb64de68fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:9a:e5:d2:3f:93:78:66:32:35:0e:24:a3:
                    c3:6a:58:e2:5a:a6:db:75:e6:3a:32:51:36:15:5c:
                    9f:33:08:e1:40:7a:9c:e8:15:d6:4b:dc:8e:9b:a9:
                    23:01:60:da:84:80:f9:e8:fd:9d:98:7b:51:b5:92:
                    d1:f2:f5:df:20:15:b1:94:b3:86:fd:dd:31:90:cf:
                    5e:52:cb:3d:ee:e9:52:f6:10:19:61:ab:0e:6d:63:
                    f1:6b:b4:de:a3:79:4a:c1:70:48:81:f2:10:06:0d:
                    be:d1:22:86:2a:f5:df:60:ca:cf:dd:e6:ab:2b:a6:
                    e9:b7:43:c4:6f:59:10:19:f7:27:6a:52:c3:78:f7:
                    4c:bc:3e:bb:bd:8c:9f:5b:16:81:72:95:72:fb:c7:
                    ee:b4:56:2e:2e:77:af:d2:c8:80:30:fa:12:0e:9c:
                    b6:b3:fe:b4:fd:2d:e6:0b:9c:0f:ee:a1:ef:df:6f:
                    13:6a:11:e9:4e:12:b3:de:df:f4:52:f2:ab:3d:7c:
                    dd:bf:9f:18:d3:f5:aa:43:b2:36:a2:78:e3:d4:d0:
                    c4:ee:85:a7:95:22:c2:85:ed:1c:6d:51:13:e2:08:
                    01:cc:91:7b:b1:14:8f:da:40:09:c3:4e:a2:01:b6:
                    21:67:42:65:ab:f2:14:40:d3:1e:d4:64:81:4a:da:
                    19:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8D:2D:A4:FC:32:D4:CF:A6:66:1C:61:3C:D0:3C:DB:64:DE:68:FC
            X509v3 Authority Key Identifier:
                keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fb:db:47:75:ed:e3:fb:69:b6:ff:0f:23:37:d8:ba:f1:0d:
         e5:54:d6:8a:8e:2f:07:fd:c9:d7:c0:5f:0e:e1:0b:01:db:ad:
         8f:1e:1f:8b:53:dc:3e:5f:ce:69:e1:67:d0:d0:aa:e9:82:11:
         18:96:2b:5d:b6:58:52:56:97:07:7b:c3:ff:c2:af:de:c3:d7:
         e8:dd:b3:9d:42:02:6a:77:24:c3:23:05:21:e3:f2:7a:13:c4:
         78:12:19:60:32:8c:9e:70:ae:b9:39:ed:94:df:3f:60:c9:17:
         4a:26:62:95:df:e6:83:ed:d5:ab:07:c3:a7:c8:44:97:8d:1b:
         eb:3b:8f:58:1c:01:41:75:25:fc:b2:1d:35:31:19:fc:e5:15:
         29:d5:85:9d:ce:58:77:f2:91:88:6a:29:d0:55:f7:09:f4:90:
         36:4f:b7:55:73:a9:c7:88:8f:19:d6:60:00:ae:c5:8f:b2:16:
         aa:4e:06:ab:ac:a4:2a:e1:c9:00:0d:31:6b:07:05:86:95:6f:
         d4:f8:3c:84:0b:9b:da:53:e3:92:65:70:96:cd:c2:26:ec:a3:
         76:59:d4:4b:1a:fd:0e:c2:91:ce:86:04:4e:15:77:9f:e6:78:
         d2:38:ce:06:36:82:2e:39:49:ff:35:9e:b0:99:a7:ee:71:5d:
         bf:b9:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 00:30:38 2025 by rpki-client