This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
File:                     RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json)
Hash identifier:          yG7sJ3QLmXxnroPN2yEo/dj4bvS3VsguCVmIKu5SiCE=
Subject key identifier:   22:FF:03:11:C6:D8:D5:88:96:3E:27:73:C9:4A:1D:FD:36:12:FF:1E
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Certificate issuer:       /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial:       019AF464B0E0258C0D3DD977DA19C3D8355E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
Manifest number:          0B0E
Signing time:             Sat 06 Dec 2025 16:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 16:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 16:00:30 +0000
Files and hashes:         1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=)
                          2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=)
                          3: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (hash: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=)
                          4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=)
                          5: CshdLYgm8KyBI5ue0kfqXsT_Uys.roa (hash: DVS6FpXLV5zruadQ+b5hngh4jzKnFCNJRTeuOL+rHMo=)
                          6: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=)
                          7: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: 9RPDUkad+AnVJguVXdCp1z2K6C+Z/Pqaz9OvzRN6JhE=)
                          8: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=)
                          9: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=)
                          10: bsJ2xZlOkw1plvuA7l4e3XmHypY.roa (hash: 1vESi505hq9zZ4EhI/OkoYePF4oay9Y9KHYuJ7nDjEk=)
                          11: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=)
                          12: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=)
                          13: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=)
                          14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=)
                          15: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:64:b0:e0:25:8c:0d:3d:d9:77:da:19:c3:d8:35:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
        Validity
            Not Before: Dec  6 16:00:30 2025 GMT
            Not After : Dec  7 16:00:30 2025 GMT
        Subject: CN=22ff0311c6d8d588963e2773c94a1dfd3612ff1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:92:49:8e:8d:5d:80:f6:97:bb:3b:a5:18:
                    ce:f9:60:0a:cd:92:19:24:86:95:89:b2:ec:78:74:
                    55:ec:73:1b:dd:9b:f6:c9:56:42:4a:10:f5:93:72:
                    50:f8:1a:79:f0:6a:34:b2:bc:76:6f:de:4a:df:c2:
                    cb:df:8d:5c:80:ad:be:07:7c:04:96:3e:5c:04:9a:
                    a0:a6:d0:ea:ff:07:e2:59:16:b0:28:b5:f7:8d:42:
                    99:ee:ab:59:2c:65:33:66:34:09:d1:ed:24:21:4b:
                    e1:70:6f:a8:2c:79:45:9a:e4:5d:23:1d:8a:4c:8b:
                    f6:c9:5e:1f:50:39:cf:1b:be:88:b3:c4:51:92:7b:
                    2b:26:bf:d3:bc:53:32:cb:8b:87:97:c0:98:f1:b9:
                    a8:21:24:df:d2:63:81:69:2d:8b:02:2b:0d:b3:10:
                    33:ae:ed:c6:82:ed:d6:45:ea:a4:0d:cb:4c:f0:61:
                    c6:3b:a5:f4:30:60:e9:29:04:6c:c8:ec:0c:a8:e0:
                    f5:de:ed:30:b5:be:42:33:5a:0d:7c:cb:f6:1a:17:
                    b8:81:08:ca:70:84:2d:c8:e0:c5:90:7d:72:29:06:
                    be:2d:f9:f6:56:9c:8e:13:22:34:f0:2f:25:8d:20:
                    56:6b:ef:82:63:6a:4d:c0:ff:f8:74:db:f7:f3:ae:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FF:03:11:C6:D8:D5:88:96:3E:27:73:C9:4A:1D:FD:36:12:FF:1E
            X509v3 Authority Key Identifier:
                keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e6:49:f3:48:4b:15:6b:66:27:d8:45:1b:6a:bb:f1:78:1a:
         ba:e8:81:eb:73:10:75:fa:fe:bd:7a:9d:72:34:27:78:54:38:
         49:42:ea:06:de:5a:fd:bf:b7:e9:4c:9c:2e:96:de:dd:4f:55:
         8a:94:4f:c9:90:d9:a2:7a:da:77:4d:4e:51:49:3d:d0:1b:1b:
         8f:7c:91:8d:e7:f0:c2:ec:4d:83:3a:c9:6e:02:1a:7e:a6:ec:
         95:a7:e1:3e:32:99:a8:32:d8:e2:66:8e:b3:e2:d7:5b:b7:c4:
         8d:fe:e3:c1:31:24:48:fe:84:3a:3a:96:36:5e:ae:35:19:68:
         f1:24:72:dc:fc:07:70:e5:09:7a:e6:79:cb:50:b3:1a:2d:f9:
         1b:48:38:79:d4:82:13:19:29:fd:a2:e9:68:c5:9f:e6:51:6d:
         8e:3f:50:18:0f:e3:11:37:d0:0e:b8:b1:cc:ad:00:fa:a2:f4:
         c5:ee:00:1d:be:31:d8:96:7f:df:46:e6:69:72:0e:ec:37:10:
         b6:f1:c3:39:4b:35:12:fc:0e:5e:cc:97:8c:ec:e2:7b:ff:7b:
         d8:63:c5:2c:34:57:7a:18:fd:70:e2:7e:0e:72:34:d5:42:3f:
         ad:cd:cc:be:ad:ff:e8:3c:e3:5e:4e:47:ba:27:8c:f3:7d:14:
         10:35:05:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:15:36 2025 by rpki-client