This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File:                     Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier:          DNjDra7UR4ilwrh6pXdoTTKzz0HhqaDxCOGgzxlMGqU=
Subject key identifier:   17:CF:6E:6F:C8:69:AA:95:7E:76:65:53:A4:F1:11:E4:4F:D0:44:3F
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer:       /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial:       019AF3520DB36170CD07203923FC2AB43CC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number:          17A9
Signing time:             Sat 06 Dec 2025 11:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:32 +0000
Files and hashes:         1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
                          2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
                          3: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
                          4: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: /Hbu1vgQmofdpPpKac6VEMGLDZhvjBcjeCS/Ysch5uA=)
                          5: RKWcmyLUW_UNC9soF_0W82gJ_IM.roa (hash: fIRqyjPnfCuVn8VliMyXWnb6TeKWTGyoRNtSpwTvMzE=)
                          6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
                          7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
                          8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:0d:b3:61:70:cd:07:20:39:23:fc:2a:b4:3c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
        Validity
            Not Before: Dec  6 11:00:32 2025 GMT
            Not After : Dec  7 11:00:32 2025 GMT
        Subject: CN=17cf6e6fc869aa957e766553a4f111e44fd0443f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:05:67:6f:cf:dd:1c:71:71:f5:61:c3:92:
                    7d:41:8a:44:da:95:5e:74:28:3c:77:fb:5d:03:4d:
                    22:d2:cf:b1:f6:e9:df:d4:b8:c1:5c:65:01:de:f6:
                    21:88:3e:c4:63:58:60:04:5a:ce:b2:44:26:62:3e:
                    59:12:7f:ee:dc:d1:6d:d8:ce:f4:5c:26:e5:b7:22:
                    aa:be:26:2f:e5:56:39:ae:4d:46:96:91:1d:9c:e1:
                    24:77:5e:52:79:a1:26:1c:19:68:ca:7f:bf:dc:e8:
                    59:c6:02:44:71:1d:fd:88:89:20:b1:fb:e4:99:87:
                    45:e4:93:d4:94:99:57:f1:72:81:43:cf:21:fd:5a:
                    20:05:7b:a7:3f:ee:86:95:cc:ef:23:0c:b9:8d:b1:
                    ed:d0:30:b8:e7:a4:22:ab:db:ef:bc:1b:de:d2:f0:
                    35:bd:ce:e0:a9:12:b2:b3:a3:c7:52:c5:87:a3:29:
                    f0:d2:3b:70:4f:c6:bc:9f:13:fe:10:1c:1d:2c:d3:
                    ce:a0:53:5f:a8:a7:79:b9:e3:e3:48:c2:53:3a:44:
                    ac:dd:bb:da:b6:31:2b:7f:4c:be:ab:b3:eb:cc:f1:
                    13:4b:dc:66:46:c2:c3:3a:f6:3a:00:f6:a1:b6:37:
                    ff:2f:11:05:9a:61:3d:67:7c:5b:b2:87:92:36:f4:
                    f3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CF:6E:6F:C8:69:AA:95:7E:76:65:53:A4:F1:11:E4:4F:D0:44:3F
            X509v3 Authority Key Identifier:
                keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2e:3b:e9:72:bb:ec:b1:ad:8c:b5:65:76:d2:68:f7:af:61:
         3c:a7:bf:2f:35:ac:e0:38:05:56:4f:a0:f3:72:ea:27:be:7f:
         c6:82:7b:1c:3c:a2:88:0c:11:9f:fd:9b:33:60:1a:a6:15:fb:
         9e:b8:a7:28:11:13:41:cf:7e:ad:6a:69:1a:0f:af:0a:e1:5e:
         fc:2d:12:fc:3a:a9:15:46:10:ee:fe:c8:dd:f2:89:40:f5:58:
         03:97:ae:94:e5:c9:5c:10:12:26:62:99:66:6b:15:11:5e:73:
         ed:78:45:bf:77:57:21:32:04:5b:6a:cb:6d:f7:14:ea:b7:1b:
         36:44:c5:59:c9:8b:e5:b0:db:2d:78:62:35:26:02:dd:50:8b:
         3c:13:00:92:1f:5d:6e:36:df:cb:64:94:16:12:c8:d6:33:59:
         4a:e0:bd:48:27:31:c0:5f:72:6a:30:f5:6b:6a:c4:37:c5:c6:
         25:ed:94:70:8e:f3:0d:e3:15:a1:d1:00:65:a9:34:2b:ea:b6:
         c6:ea:96:a2:ac:b5:06:91:9f:f9:9e:af:17:88:0a:9c:fc:2e:
         96:85:4e:b8:56:bd:2b:40:b4:bb:eb:5c:7e:01:40:35:8e:fe:
         84:d7:09:85:e9:3f:ff:32:4d:1a:04:dd:0c:d1:d5:5d:bb:1c:
         ae:03:5f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:00:41 2025 by rpki-client