This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File:                     Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier:          rOnt5EDx/s8Kf0tceb6x7sLnJiSdYHfw2DP5MoDtdho=
Subject key identifier:   D8:32:93:58:F1:75:AC:04:75:EB:B2:C3:09:AA:E4:50:50:DE:A0:BB
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer:       /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial:       019AF50A7D0473AD7AE6F4F2144ACCB3A7FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number:          16F8
Signing time:             Sat 06 Dec 2025 19:01:36 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:36 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:36 +0000
Files and hashes:         1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
                          2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: 3/JxbA3MQghqmNbg1flD3CsfBG1fgiDLJm5skOAXKTo=)
                          3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:7d:04:73:ad:7a:e6:f4:f2:14:4a:cc:b3:a7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
        Validity
            Not Before: Dec  6 19:01:36 2025 GMT
            Not After : Dec  7 19:01:36 2025 GMT
        Subject: CN=d8329358f175ac0475ebb2c309aae45050dea0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5c:49:f6:37:33:9e:1d:f1:52:67:2a:d7:00:
                    ce:e1:89:8a:31:7a:18:dc:9b:a9:e9:32:bc:7f:36:
                    61:04:0c:62:b7:25:06:de:88:c7:2c:d0:78:cc:86:
                    21:4d:08:aa:dd:c0:0f:c0:d6:d3:d6:7c:b1:4c:0d:
                    c0:65:8d:a1:3f:fa:2f:24:04:d8:0b:54:e8:69:b0:
                    10:eb:60:bc:fd:03:0c:d7:5c:6e:4f:1d:fe:5d:04:
                    09:b9:b2:62:69:3b:37:06:eb:ed:8a:1a:3c:89:be:
                    8d:9c:32:b7:d8:e2:0e:eb:f8:f9:c8:1c:cd:be:a0:
                    5f:86:b4:40:3b:6a:9b:ab:92:09:62:a5:11:96:16:
                    e1:2f:10:d8:8e:f2:ad:0e:3b:a1:6a:63:ea:ad:1f:
                    2e:0b:02:09:44:c5:1e:19:3a:8d:6b:79:a8:39:be:
                    44:18:7b:aa:52:c5:4f:68:6f:39:06:3f:0f:b5:71:
                    81:d9:27:19:06:34:5c:83:5e:be:ee:9d:c1:4f:3d:
                    81:1e:d5:e3:39:38:49:64:36:26:0a:c4:df:69:b2:
                    0d:04:7d:d0:ae:ff:19:7f:22:55:b6:89:90:eb:4c:
                    e0:d2:df:96:15:a6:66:7f:b4:53:7e:9e:d4:95:e5:
                    b1:75:bd:a9:57:05:06:16:be:d4:18:a3:76:44:21:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:32:93:58:F1:75:AC:04:75:EB:B2:C3:09:AA:E4:50:50:DE:A0:BB
            X509v3 Authority Key Identifier:
                keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:44:15:b0:83:1a:da:ff:6a:fa:c2:a4:b9:66:d4:3d:e8:8e:
         25:ec:b3:91:ae:d8:19:f7:97:97:48:0b:4b:49:0f:df:01:2a:
         65:16:70:29:35:62:c0:54:ab:ed:32:67:3c:26:1f:d8:1c:9c:
         2c:77:36:ef:3a:d1:90:93:99:8a:35:f4:26:a3:e4:6a:1e:74:
         f7:4f:dd:ec:ff:ca:3d:66:d1:6f:cf:ee:65:e4:33:2e:9f:43:
         fa:81:14:1c:b0:2b:84:77:13:fd:67:5c:df:e0:f8:5b:21:3c:
         3f:d0:e2:e4:7c:f2:41:41:e6:41:ca:0f:92:a7:41:9e:19:0a:
         a0:1e:06:88:9d:9c:42:aa:d3:19:01:85:c6:12:29:11:12:46:
         37:7c:e1:c8:f8:7f:48:3e:ea:d6:ef:d8:6b:60:2c:af:ec:a1:
         70:7e:79:c9:7e:9a:d6:22:3e:c2:65:d7:55:23:60:7e:55:04:
         0c:40:e1:a3:26:e4:ca:cc:09:31:d2:54:1e:a3:b2:4b:bc:d0:
         85:1f:19:36:a0:3b:c9:5e:0d:c8:e6:be:dc:5f:30:9a:e1:42:
         ea:6c:3b:64:17:94:97:42:10:c2:3d:83:04:2e:66:ec:f6:19:
         03:62:11:16:fc:b4:53:be:98:63:b8:09:00:9a:87:9a:f4:55:
         76:34:46:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1Cn0Ec6165vTyFErMs6f8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk
MDlmMDEwHhcNMjUxMjA2MTkwMTM2WhcNMjUxMjA3MTkwMTM2WjAzMTEwLwYDVQQD
EyhkODMyOTM1OGYxNzVhYzA0NzVlYmIyYzMwOWFhZTQ1MDUwZGVhMGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlxJ9jcznh3xUmcq1wDO4YmKMXoY
3Jup6TK8fzZhBAxityUG3ojHLNB4zIYhTQiq3cAPwNbT1nyxTA3AZY2hP/ovJATY
C1ToabAQ62C8/QMM11xuTx3+XQQJubJiaTs3Buvtiho8ib6NnDK32OIO6/j5yBzN
vqBfhrRAO2qbq5IJYqURlhbhLxDYjvKtDjuhamPqrR8uCwIJRMUeGTqNa3moOb5E
GHuqUsVPaG85Bj8PtXGB2ScZBjRcg16+7p3BTz2BHtXjOThJZDYmCsTfabINBH3Q
rv8ZfyJVtomQ60zg0t+WFaZmf7RTfp7UleWxdb2pVwUGFr7UGKN2RCEV+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgyk1jxdawEdeuywwmq5FBQ3qC7MB8GA1UdIwQY
MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et
OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl
LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUQVsIMa
2v9q+sKkuWbUPeiOJeyzka7YGfeXl0gLS0kP3wEqZRZwKTViwFSr7TJnPCYf2Byc
LHc27zrRkJOZijX0JqPkah5090/d7P/KPWbRb8/uZeQzLp9D+oEUHLArhHcT/Wdc
3+D4WyE8P9Di5HzyQUHmQcoPkqdBnhkKoB4GiJ2cQqrTGQGFxhIpERJGN3zhyPh/
SD7q1u/Ya2Asr+yhcH55yX6a1iI+wmXXVSNgflUEDEDhoybkyswJMdJUHqOyS7zQ
hR8ZNqA7yV4NyOa+3F8wmuFC6mw7ZBeUl0IQwj2DBC5m7PYZA2IRFvy0U76YY7gJ
AJqHmvRVdjRG5Q==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:31:37 2025 by rpki-client