This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
File:                     mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json)
Hash identifier:          c9Vyn5+DUx3MiCQMV5BDb+lbNaTjR3OYj/f+5enBfa4=
Subject key identifier:   DC:BD:B0:67:D8:86:23:EE:08:FD:C3:27:08:12:D9:1B:8E:2E:76:A4
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Certificate issuer:       /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial:       019AF3F7413BB0DF76B1680AEB38888910AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
Manifest number:          1791
Signing time:             Sat 06 Dec 2025 14:00:58 +0000
Manifest this update:     Sat 06 Dec 2025 14:00:58 +0000
Manifest next update:     Sun 07 Dec 2025 14:00:58 +0000
Files and hashes:         1: 0RyrSS5TsuNkSrgX42mZlqnL_6Y.roa (hash: BRzu0fdIaz6Lovt3QNbsRMaTYaq8KePDTC4YuQ5xp+8=)
                          2: 13v_SFUUaJanH2ti7gyyAMAe4E8.roa (hash: 9BOoaT9u38i4PO8whYYhUIN3eU3jwn/DC/9uSOlK5Wc=)
                          3: 1JXcZFx0cVgp_nurSkDz34ejXRw.roa (hash: eT3VUKiYG35yZHjK8chZuS2ARmnYiiATHH1jK3UENw4=)
                          4: 6z4rHWGcADRparknQzyj2yRTc7Q.roa (hash: n4ymMhjOhAWzzuUuICwnt0DuPDacCxWlW+NEkRCL8OQ=)
                          5: 7-CIZj9uif--br5voFAmQlLSW6c.roa (hash: uTSjmKpL+cFNc34iNkcWzIdWbLSiGj8LHYTNjwuj3bY=)
                          6: 8JryklODS-H6RCW3s1L6jAA10aM.roa (hash: N4V6jxdE6ULDTseAhDT5eiy4WHG+mdZx70Ca/CGSOis=)
                          7: A31_B2nuhoGFF02yDR9tIcsA9vo.roa (hash: xg/RP32VB0XjW0/mDPvjyFUORhRt5edu/HqQYElspR4=)
                          8: BAByn752h23LDapbWtvPQCf7FGA.roa (hash: aEzN77kDLNn/k0lFsBHzbqjz++GYSZ5QPiWUhv2jUcs=)
                          9: DgqNbF9iJTN6tJqFHFsmrsPTN-0.roa (hash: LWJhYWGLPkv6XiCgsYq7ikNGs7uAsKZdQqaT/g/DLbI=)
                          10: EA04VGqvrPQszKxiTiYT5otCGRs.roa (hash: jxzccstOx8k+w6FBDeBmh5NVBQOSYOxvaie7YTOrrr0=)
                          11: EHXBWUxeWMDtm-263T3CeCfIQg0.roa (hash: upykUfWusTim+qPavoonZ87RcamCDQGsa5cCnxfzAXA=)
                          12: EJJjIWEkSJVR16lMZ3JAA3Erae4.roa (hash: cEYNtBA9K74UcwqPRIFv+v9Gz/Ga0WnXLgpuQ29y8a4=)
                          13: F8f4kxW24uJzOzniLERBk3yZc8g.roa (hash: Ve8YWI7OVk2wPQ5uGjmWzFVz86n7rtMNCFhPgNLkgZE=)
                          14: Gf5l1q8M-R9ATztiNG1wYa5QWW4.roa (hash: 97mQ1AfgdstY7yHk40JSfso1yc9R8LG4mzhYmCvo4E0=)
                          15: IUoj14L85V7dFoSNxHQERg8IME0.roa (hash: yLZKOBB3BN8zxQwSxMgLL7kO6gXgb1541/UgXA3XP8c=)
                          16: Jf79I31rpbTO5W9IPaX7rIB_nKQ.roa (hash: v37HfVcSPPGTt9P/qQorvZQf7f7Dq5xgbuMnSpO2rw0=)
                          17: LZ4tnH9lGxh0iu-rU3u9Fkm-pFk.roa (hash: +JM6B0zdaawDdz8KRtRSCTdjUiYYSokishxaS8i4x7Y=)
                          18: QO4VVs5SI_NodctTdkKAUO1ebEc.roa (hash: Lg34OgBQ8Ox1b1e+BjsftLuK02aFfjJ/oJTA/t+0XB8=)
                          19: Qgnr5pBRl_rZGcPCmikTzbpdRhA.roa (hash: CsJlJBJH3+6jV3tl9xVBuGfLlTLLS9kglg9jMQQ1KqQ=)
                          20: ZIBj51rvzdxNBOQu45s1TsXZfA4.roa (hash: Mlg1sMaq1AzoqpdQv0YafCX4XwaQte0j2dMM5uFDd64=)
                          21: ZbERZjYg6cuT4X-RnR4eWqsmK2w.roa (hash: nziMUISsqPUXbIiPbxCVPBDhbRy0MibwmCl8xQisRW8=)
                          22: b_rI4TYzOidB7VM9UUtKiSxW5LU.roa (hash: FSPXI3Dcd4NYJhk5Uaoa5iEsUpA3P4ClToZPryW5vs4=)
                          23: cJspXZBTRkOp7Qt_iJd_u0-CVXM.roa (hash: +Q93BMqAczWnkXHr2ly5zbZ8kF90gI/c8DRSS/XTs0A=)
                          24: eH9NeYZ6476-_LV8hEYeX0fc0QI.roa (hash: qpYMUOd5FFvMlQNvSubLKokumQC5dpDSUWn6yu3Z38Q=)
                          25: fiXZjFVhkN8HnCYHCQ4y4EM5tTw.roa (hash: WGUlo6TBZJCZDArB+udlJuMvOeQwlu964bRVTQeiYz0=)
                          26: hgUVlBMr-3weLeCDxLmYbzcEvDs.roa (hash: uNZAsOSUtlXYpFt0EPAGWC7rkjy2E7P557kov/78pUY=)
                          27: hsXTdDwIDQeR8Y4thDk7zd5XS_E.roa (hash: WxjjzedasgKM79/0bmtsmVyW63ILl73WxBDKWi3e8Sw=)
                          28: i-BpcnBIQppslPVpu9Ytz-GUVDI.roa (hash: v2afblKiPEHq9bVQqxQqdwwNaJR3fRJr4v5JF0bAYU8=)
                          29: iiCSGGgxN2dI_YNYAYnLsWSzIvk.roa (hash: rHuaFNuztgBdjSOmq2nEo94MqWDd+bV87f0qBWPvt94=)
                          30: kjCBwq1j9xX1EaDBTI424dSK14A.roa (hash: y34Z+vhK1gAu2AvvEzAPgCnHcDqbgumJZa/tYihBKvk=)
                          31: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: Hh+zq70B88o+p5kc5krtiN6E96Ky/mU50a3THnBz4u0=)
                          32: npSbX89ppW1EvXT8SquAkvP6voE.roa (hash: MxmtVOWJZ2CbOzuQXF5iaQtC+5JJ6zax1Xsv1/neKxU=)
                          33: olZgy9U7ThNnepinAJEKzkRvZJg.roa (hash: 4b9F9m0pUTdzvwoF0mVT1XODHic5uNOOg/5TKG+EAGE=)
                          34: udpFcarhA2Di-ueqJLzwdxMkwFU.roa (hash: /CtOZMK/oLqOqAo2qZJtD+fd7exGsI2oA16cE8ogLbU=)
                          35: vtUVPmF_sR2bn9GK3_hTbEIy_h0.roa (hash: EgxlYUmqGL8wGtFTWH2dHB4zW0mfcmREpW1FWRXtq8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:41:3b:b0:df:76:b1:68:0a:eb:38:88:89:10:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
        Validity
            Not Before: Dec  6 14:00:58 2025 GMT
            Not After : Dec  7 14:00:58 2025 GMT
        Subject: CN=dcbdb067d88623ee08fdc3270812d91b8e2e76a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2b:0d:64:a0:0f:1d:5e:f9:0f:4f:e3:72:d1:
                    ac:1b:da:b9:f7:4a:90:82:ce:68:66:12:88:68:87:
                    5a:87:99:08:a3:ce:01:5f:be:ad:2f:1a:97:ee:a3:
                    c5:33:b6:53:35:1d:79:c6:5c:80:66:db:ab:c1:ec:
                    ac:1e:67:aa:77:97:f0:e3:4c:9c:29:4b:03:a0:00:
                    99:61:09:ea:55:67:4f:e1:14:f3:b6:24:67:32:1b:
                    ea:91:b0:4e:5c:50:51:38:ea:d5:d0:b8:4d:2d:3c:
                    ec:7e:ad:f1:9c:6a:d7:f7:45:a1:d4:bd:51:fe:73:
                    75:38:26:ec:a2:c3:4f:5a:f4:40:bb:df:88:e4:6f:
                    39:d4:96:25:ac:b7:d5:2c:db:94:57:d8:80:69:16:
                    77:6b:e2:5d:5d:c8:eb:a2:63:22:c9:31:69:22:23:
                    8f:7e:d4:17:97:1e:fd:57:3e:c3:d3:7b:47:73:7f:
                    a2:28:43:e9:87:33:b3:a1:41:0d:5e:53:8e:26:32:
                    ce:cc:08:d7:20:5d:2b:bb:c9:c8:4a:0a:05:d5:a8:
                    08:e3:63:ed:99:56:6f:ce:dc:4b:38:0a:78:bd:e4:
                    1b:cb:a8:1a:a3:00:61:9a:7b:ca:8c:b3:54:76:64:
                    ab:c0:84:27:50:4e:eb:6c:34:cf:b9:82:47:c8:af:
                    04:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BD:B0:67:D8:86:23:EE:08:FD:C3:27:08:12:D9:1B:8E:2E:76:A4
            X509v3 Authority Key Identifier:
                keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:a1:f3:f0:1a:aa:75:1f:64:f8:76:45:f7:b2:0d:b8:a1:
         83:8d:3e:4a:18:bc:a3:6d:1b:d7:fd:e5:e0:f0:9a:d7:ff:96:
         fb:ff:15:6a:80:dc:c8:7e:02:2d:63:63:8a:64:8c:8e:85:2e:
         a6:62:47:ec:12:a2:0f:f0:5c:35:c0:7f:25:d2:b3:7b:7a:bd:
         a3:01:14:f8:7e:af:f2:8e:9a:94:12:4d:e0:8b:5e:79:fe:1e:
         78:55:b5:0b:11:9c:49:93:30:73:89:63:92:32:4c:7a:59:9f:
         05:f3:b0:cd:ea:64:d1:c9:08:6b:19:24:8b:0d:f4:1d:17:9f:
         42:a8:52:17:19:90:e5:aa:29:b4:83:03:5d:64:6f:9a:1d:69:
         72:ce:b4:8a:9e:ad:75:e9:c4:81:1f:7c:51:63:c4:b2:28:16:
         88:eb:a1:4a:cc:7a:6b:65:67:fc:36:4d:b3:97:8f:55:50:c5:
         c2:ab:5d:6d:0c:8e:e4:0f:c6:8f:fd:df:4c:a9:62:69:69:b7:
         89:b4:f3:94:1f:55:e3:3c:62:27:8f:f8:86:fc:dd:62:49:74:
         62:7d:d8:70:f0:38:40:e5:7b:88:6a:e5:b7:98:d3:bd:cf:60:
         10:73:1d:5f:58:77:89:dd:e5:cd:9f:57:25:55:c3:50:2a:22:
         05:9a:d1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:14 2025 by rpki-client