This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          niMQ4Lc3kddfgFWAgEAM5w0ntqkN4Bwm/hkjNyUyQpU=
Subject key identifier:   5B:56:57:2F:86:BA:E4:D0:47:66:F2:9A:20:D5:09:3C:B3:65:3F:44
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       019AF19B4ECE5FC96F928AFDFE6E03E001A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          17FC
Signing time:             Sat 06 Dec 2025 03:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:18 +0000
Files and hashes:         1: 1-L9qSgE09LkQG7Ea8EBDdDw4ino.roa (hash: L03XGEs9qhc6ohMjsbyVjgW+T6aNu0Or4uMNslNgGaI=)
                          2: 4iHcBGfl4oJ0jUkqbJpTpkjJRRA.roa (hash: 9gUiJ2PpTaXRBDYpcks5/ZTXgi/FI7Hpa6+iF/UooaM=)
                          3: 5GpN33ElR1lUI3r69WNur5XVlhs.roa (hash: Ag+FWXz8zur3U3WfkactLdqUhbzus2FhO2lgG9Wdyos=)
                          4: ApvhjKPqS54Ym0klIaNKAJ8kwfA.roa (hash: G7CMBZzYEWEowN0oeXl4yB4eRy4GZVwzz9Vsjln2SbY=)
                          5: Bl9_vWIpRsVo1QhxYcFKc0IqD6k.roa (hash: 1LM6MDYaE6Y/jo/PARMtexnN79ZdrRCB7ndwYT67l/g=)
                          6: D4fjlMdzoE531488p0OTA-8Nk-o.roa (hash: ZYvjH+ox9QqmVT8DocHf0I+vPA4vlzbkktR49hxKf8Q=)
                          7: KM_F04W97L4fGV6eB1EFGADXYBA.roa (hash: dZWwjg2hZJwYzS80M1Flty/faDlYaBPiOJ5OQ7mS6kc=)
                          8: LRsE8HjdoDuIOCHhNJWGn8Yh3Z4.roa (hash: x5/q1IzKRQsjqMHjgJuVRy8oArjf6h7TAw1i1N5j5cs=)
                          9: MsFmWJOoSFY3BCE49erYLm5IeF8.roa (hash: +ULhpY8+EhNOI9KNs3g5QfGlO9AZRphDDwBCNw26nt4=)
                          10: Mz8Xzjb4Em-bp16qe94uV9f2KSc.roa (hash: IgI2K3rzQ3JJ+QIwmVbORi3IMlNvAYMKIlRufn/wj8k=)
                          11: QOd_WFMEgwOyxqu-Xk2hZvgMcH8.roa (hash: uXkg5eescOxXc9nW3DCPgg8rcsXy8Kvy8S+sNh4PoXk=)
                          12: QsDL7x5oAgXjMeRoqEotR0YXQIw.roa (hash: z8q4Yda7b/Bhl+Mb3DcVE7Ved5TmFaoFf3dZxwrq/z8=)
                          13: RxbAg4EFxx_FKjDSty8_Ag5B0Wo.roa (hash: fyJVWs7abgQPirZqK6oCiRYQDMcFiF3X6qhzJ7XsPjw=)
                          14: T46eT9zSYH6URoM2Ax_k7Yqlvm0.roa (hash: p7kOptu0n/Z95hIwZVAQ4UU0Tcx07mXU3vGZb5npLhU=)
                          15: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: FU7k8ER3JEqYQKjEzNZos9DQpY19CMwIxy2B2JDUOE8=)
                          16: TLLe4Fv1ZWKn7cU4s2eOqRGhW2A.roa (hash: LIvDYJiCNzHfZb5Qat96s04TPvC5BTwrmEMarvzgqYw=)
                          17: W1_LeC4T7DrvujyTn3J3YI7-QXI.roa (hash: 0I3vgRjhX0kcMTxTGH5KTcOsn8j2HgujVu/6VCKIjmM=)
                          18: XDf-VYAuh-nDO2CMYXVIF4SuPC8.roa (hash: cl+9twv2D+eBNV8KlvTFCcF9tVblyskg3wu09JdTgSQ=)
                          19: YvEsta7UkUfJxn1JV9JHj6QzL1k.roa (hash: cVuuCBZsVwaCNI4FHR4twQLuwRlOFeF2gBPEHlJV5sI=)
                          20: ZTeJrV44cuelAuZVlfb9KznDqF8.roa (hash: fF8x7hlp4yott2TezNaaq/nLq2M2TgyvOaX91+gXVXU=)
                          21: cDexNbgz65SAnilI4jNQbU6GDQA.roa (hash: fm8UnKsXFZ8Kv7++bvjbjI+U2EMIi8pzLEAUXfPizog=)
                          22: cbLUFQPWDFBGgeTsBo59RiL6NGo.roa (hash: 3TCJxN5y669eIRDifXi9lQDad+lKQ5Y4Rq48mm7g5Zk=)
                          23: clX0YNiQqxrLh5KRIQ1WDmi_sYg.roa (hash: lHdAtOJZ05TKI2DoNumHZCY0VkGmTIkvqW26oGZ3P+8=)
                          24: dF6uuCIifQfhUD0TyBdOV3LZGPk.roa (hash: NBNM4QLzFqDChjC2tNuyVCLY8O/IcP3tokOM4fsmiRs=)
                          25: dPUv0UiEsSl2wmwWh7WXiVW0oUY.roa (hash: QsY9itLfjJ5WmB+KPuW0ZbZL+FhYgpcBDGOifX3R4vk=)
                          26: l2HpuvC6f9fVbGRIU_YgYBjx4vw.roa (hash: Kdrvt9fByjaGxTJ7co7gZehnEAPmEhpF7v2Q4ea8KVE=)
                          27: lPrZs3D91Gt-m6B9Dr3LWvP3o94.roa (hash: fhopXrhhREaGMI2tIGmpG5P4JKsz7B7bhwx1BvlGmtQ=)
                          28: rtmJ15QCyMu37KZSjTEhWQ0zmek.roa (hash: Lz0OEHkJQ5eiVEeDAp2VWfKoDiv6W8z6xoQRzfJhjuk=)
                          29: xmPrjXwgzAc4bi6Op-k92DP0zYQ.roa (hash: Yg07yPbPmPxhkY2QOReSXpIrXS2cz6DJVyYuiKyL6xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:4e:ce:5f:c9:6f:92:8a:fd:fe:6e:03:e0:01:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Dec  6 03:01:18 2025 GMT
            Not After : Dec  7 03:01:18 2025 GMT
        Subject: CN=5b56572f86bae4d04766f29a20d5093cb3653f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:e2:05:fe:6d:06:9a:25:2a:2b:81:bd:d7:
                    41:d4:f1:9b:c8:0e:88:6b:cf:96:5f:f5:3b:f9:96:
                    71:9c:c5:f5:7f:81:7e:62:b5:75:9d:c4:33:5f:91:
                    26:a5:78:c9:36:ee:20:95:64:46:2c:03:fb:8e:6a:
                    38:ac:1f:69:ea:e1:1d:49:69:99:04:37:aa:9c:54:
                    b3:be:a8:de:20:d1:cc:b5:07:df:a1:87:8b:f4:18:
                    1f:af:3e:ac:13:d0:70:ab:c5:f4:54:9e:96:88:74:
                    9c:7e:27:a7:82:a0:66:b9:5a:80:56:9d:f9:79:f5:
                    a4:3e:79:96:fc:8b:ec:08:39:e9:24:33:13:a3:ef:
                    ee:20:26:aa:aa:c3:6b:1d:69:1b:cb:34:50:3e:0e:
                    06:7e:dd:ad:e9:7f:b1:6b:e1:7f:47:28:19:cd:b7:
                    c0:79:29:a0:51:7c:2b:0e:43:1b:96:c5:ef:a7:7d:
                    81:6b:ca:95:3c:02:ee:d5:c9:67:ee:a1:42:60:1f:
                    1e:03:ca:7b:42:80:ea:fe:d2:dc:22:39:82:f5:d2:
                    60:8c:1a:bf:b7:28:c6:7e:b4:df:bc:42:d8:57:8a:
                    f2:8d:4a:88:6b:15:9b:f6:5c:fa:52:e8:b5:5e:41:
                    e1:0f:75:1e:6f:dd:48:50:48:88:21:ba:af:51:fd:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:56:57:2F:86:BA:E4:D0:47:66:F2:9A:20:D5:09:3C:B3:65:3F:44
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:29:2f:1d:b0:66:0d:56:ce:b8:f6:6d:65:64:83:7e:82:8a:
         0e:3d:24:1a:e7:07:fb:87:15:d5:2a:04:f8:de:60:55:c4:10:
         7a:8a:af:aa:56:36:00:58:bc:67:b7:a3:3a:c0:d7:ef:0c:fe:
         a7:35:1d:5b:e9:ea:91:94:e3:b1:20:c2:6f:dd:aa:27:e6:7b:
         c3:3f:7a:32:22:99:bb:e3:a3:c4:54:f4:41:5f:2b:4f:bf:6b:
         5d:a2:5a:68:5c:f0:be:3e:a0:15:b8:f5:fe:40:f4:03:05:e0:
         1d:b8:77:58:69:8f:6d:32:35:0b:3a:81:1f:56:e2:0b:8f:f2:
         ef:e3:1b:95:36:3f:01:bb:f9:a8:c6:f7:a0:95:c3:b1:3d:17:
         85:4a:43:b4:8d:62:ca:55:c3:d4:f3:2c:ca:07:5e:dd:e4:58:
         0c:3c:b8:ab:48:a2:0e:ab:26:2a:84:be:b0:25:4c:66:1d:ff:
         dd:cc:cd:3d:ba:d1:46:4c:8b:46:1b:1c:ae:12:3d:cd:f4:ef:
         f2:28:2c:11:39:e6:e6:e6:cb:d3:c3:cc:69:39:0f:26:41:b8:
         57:e7:f5:61:72:a9:bc:be:25:13:c5:85:ca:b8:d8:bb:98:f5:
         94:ad:3b:d2:12:d9:72:4c:38:9e:16:df:74:f4:eb:f6:1a:a2:
         79:88:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:04:49 2025 by rpki-client