This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
File:                     AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json)
Hash identifier:          8Ow6ZvSNgcovcSFmFfffIr7g1aEtCJg72v6zCZCjgMg=
Subject key identifier:   34:64:34:9F:43:CA:85:AC:61:D2:FB:5D:BE:C7:47:E4:89:1A:0C:69
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Certificate issuer:       /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial:       019AF42DDE2C72D882EF85D54B39A0AF0F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
Manifest number:          14A5
Signing time:             Sat 06 Dec 2025 15:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:37 +0000
Files and hashes:         1: 5brKbRBtOvHFjh0oXn8r8X9Yoww.roa (hash: ACQA/vy+zy4fT5JbE8/TavE1wLY971r5N9JADwPEgrU=)
                          2: 5f4jHn1pLp9_czy0P6q4mWQPuaQ.roa (hash: 3KM64Cf6ndit+2Kg00oB3Tn7DU/3A/UJsq/nZfbmrTw=)
                          3: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: X9oJKHCbYJhEaeDnopbBEfB4yTYT7ddLf7svb13wrEU=)
                          4: DOQPFseUooqpRadfc9Jx4JU6a5w.roa (hash: XAqWMnzc6s03+/9ahgtWZZS99wqgCO9uHPxIAengots=)
                          5: HUhMVW-ldLEfTap6Snf3A4DJkEU.roa (hash: BWPDA7ah1ktjRpynxF0766anW0jKmETqpySALyHpL1I=)
                          6: KQ6n4tDni3AIbl89TiA9LShR5J4.roa (hash: eJSTrL5nCsUccTE0LUUEIBRIdvXEaKFzbIAwyimw6Ls=)
                          7: OrF2xG8avuxGrpmOXZN3cT6uOd4.roa (hash: 6sBq02Bpl0iKdz4R0G8yzMetYTxfTK9ZttAM0+HPHcY=)
                          8: TlLzQFaA8VlRrAgPC7RAijqNra0.roa (hash: SoMB+UVUymjveuF3MvkPc6BzZ0mDzrz28rZ+mOfkhhw=)
                          9: Un_m0DbVRENrUueiG3ELv6Kx-eE.roa (hash: pEXnje18ssNBz+sY/hTtrPTkAvEMGt9WYJcpE39pmUM=)
                          10: VOYB184l4I5HKOOxR4bYnxvGzZs.roa (hash: mdiqaccT7rJ4NJ3jvspjR5ZxSCjb6Tgu2CjLTSJb1Us=)
                          11: at_SsqmuruHw3U3ih5ZvkPERAo4.roa (hash: qgllsDkXSoqmopmK6Nvv+gOUGdbl9WK4/RlYS45trQE=)
                          12: mr-HNjr6kVeCJqK27hiMeoGu7wo.roa (hash: 2cCwRolIlWawdY4pJgJJRXgW9VztAAcC6pZFSIFR/7s=)
                          13: zkX0tVSTFsoyaxd_5uUsOhnJd-4.roa (hash: +7/YlZRCmdBXU3YPbp3jELJ7uYVAAvsXumfUvYl8oRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2d:de:2c:72:d8:82:ef:85:d5:4b:39:a0:af:0f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
        Validity
            Not Before: Dec  6 15:00:37 2025 GMT
            Not After : Dec  7 15:00:37 2025 GMT
        Subject: CN=3464349f43ca85ac61d2fb5dbec747e4891a0c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:b4:94:70:0f:e7:f7:e9:ca:34:f3:d4:15:
                    99:e3:41:91:06:4b:d1:1a:0f:49:8c:c9:ba:2a:c2:
                    ea:e1:26:12:55:c7:f9:08:77:71:91:38:d2:ee:ae:
                    d9:2e:0f:f0:3f:ca:48:4e:72:65:e5:30:d9:95:71:
                    fe:ca:04:94:a8:7e:fe:3f:be:fa:a3:7c:f7:7a:21:
                    5e:50:c3:88:ce:3f:b5:94:00:73:b9:5b:f4:30:8f:
                    c4:50:ba:ad:e1:09:26:e9:13:2b:ca:51:1e:1a:cd:
                    20:63:17:06:74:6f:ca:17:b6:a5:46:66:53:a9:11:
                    9c:fb:11:b4:7b:d7:98:3b:8e:1c:90:e7:d3:25:29:
                    89:fd:07:4d:89:7b:9f:83:c0:8c:cd:d2:b3:53:f0:
                    ea:1a:26:af:00:35:bc:e6:f5:35:07:96:90:1c:86:
                    d8:d6:78:73:e2:1e:54:2a:c6:b5:bb:76:84:e6:4f:
                    ba:8a:fe:c3:ea:8b:65:ba:d1:dd:9f:0f:84:95:9c:
                    6b:81:ba:c2:5d:9a:fe:28:ff:de:8c:01:fb:51:d9:
                    10:cc:fe:3f:4f:de:ab:91:9b:ce:23:ba:c0:bc:09:
                    9c:8c:ff:64:15:dd:ea:04:40:db:dd:73:6a:56:45:
                    e5:6f:8a:20:f6:e5:c1:de:54:76:f5:40:b6:fe:ba:
                    a5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:64:34:9F:43:CA:85:AC:61:D2:FB:5D:BE:C7:47:E4:89:1A:0C:69
            X509v3 Authority Key Identifier:
                keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:22:28:c9:4f:5b:d8:29:aa:d9:ed:45:b5:e8:3f:d4:1b:6d:
         97:1f:e6:02:4b:39:e0:22:bb:c1:76:91:32:a5:a2:e9:e3:2b:
         06:2a:2f:40:aa:44:6c:e7:78:4e:b2:ef:0b:10:e0:d7:3b:1b:
         26:8e:05:24:6b:e1:c3:52:c9:8c:09:28:a9:8f:47:59:2b:28:
         3c:e8:71:f4:be:83:b6:f3:1a:d0:b5:d1:81:ae:6e:ef:bb:b7:
         16:a1:c6:ef:d0:e6:1f:83:cb:55:94:59:02:3f:a0:ec:2b:83:
         8f:0a:f3:26:c9:c2:c6:c2:b0:15:ab:13:5b:dc:25:ad:ef:06:
         cc:e4:db:ca:33:b0:85:76:ba:69:8e:94:3b:c3:ff:eb:05:12:
         c1:78:38:62:bf:61:fb:e8:66:ba:8d:a0:0c:20:76:08:0d:55:
         1c:7c:9c:cf:8f:cb:f1:a3:87:58:29:ad:25:6b:aa:a2:f6:e7:
         b7:9f:f7:96:3b:41:43:f6:6b:28:b5:33:a4:0a:64:aa:e5:f9:
         5e:9b:aa:2c:8d:fc:ad:11:bb:2d:88:84:21:09:93:3b:ea:e4:
         fb:2e:64:d4:f2:89:ea:93:32:bc:8c:8b:a8:c0:84:e2:7c:94:
         3c:42:8d:be:6e:18:99:00:b8:9e:66:e5:fc:51:a2:23:11:0b:
         4e:9c:3b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:36:51 2025 by rpki-client