This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
File:                     C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft (raw, json)
Hash identifier:          SZuJj83yVoIG6rY5hTkWkgJuTO/qk/Jz2W52cd1i6Oo=
Subject key identifier:   E0:3D:18:3F:04:8D:5D:16:F2:E9:2F:82:9A:E3:3C:D8:E3:55:93:CF
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Certificate issuer:       /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial:       019B0FA544D276AFBD3C79CE88F7A4E0B531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
Manifest number:          1420
Signing time:             Thu 11 Dec 2025 23:00:47 +0000
Manifest this update:     Thu 11 Dec 2025 23:00:47 +0000
Manifest next update:     Fri 12 Dec 2025 23:00:47 +0000
Files and hashes:         1: 3kJhXofCpFDD7Eo6E2j1Gd-FMQ4.roa (hash: K3OTcQcoZnzC8T3KuSMerKr1Yy1y4ZL68Y/lWSF+tJA=)
                          2: 5vgRN93Ikx6vDyOuxjecwfDMpQo.roa (hash: Nm0/LoBBPkWnuWn59UFBPJeNenuNXFQpk38gCTpN7ng=)
                          3: AfLHT74NdL4YRI-gpiiLO8PPShM.roa (hash: 944lZaS4mAfM/S0ieSHEvM3mRV9M0T2Y3u48y1aDIjk=)
                          4: BqUsGxJbAHaodSor8dzxhiBDYnY.roa (hash: UcdL5oWXT3jVU2069PpqlnxiDKWvKcXri93cb+kI6qY=)
                          5: CLgBj6oYt6sGJ5ZpJJTL8C3Fnrs.roa (hash: aUOM41Nf+BqbKmy9YjUFL+mBeBI8749PsIPj/loME94=)
                          6: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl (hash: OV8BQa09EoWW4UvuTh5+F73UXQEAC5jkWm+sL/mJChM=)
                          7: CqNmCGGQsBrEt7zh-VfcGtUv9RA.roa (hash: 7HTEUHavuiaMXQtqJhG62cD/8gu3Fv5evoWWikvAioM=)
                          8: HH7LiS3U3uopaZw4Q2ypSb4mHCU.roa (hash: g8QkQGvHJtb9sSJ+GjbOOdCXOEktOE2F1fhBHqBOKls=)
                          9: HZmCfsHb09xlrSBh2iIxpOWZ3Ow.roa (hash: RrsPdmWqoOnc37eNmh2WMAAS+360HWRIjhjqZURUhWk=)
                          10: Ha6B96NNdRYOdZinwD0K4FfFvZU.roa (hash: rPSvBQM3yuUs9wJEKKxibaAsnl3o3tzJWi7VDh3ziS0=)
                          11: JPuN2YPz_l01LHcxJTRgQ5fN06Q.roa (hash: sO4iVZOw03myN2KiGjBOdg4pmq+1tC1eFs8GD/uCEJk=)
                          12: L7BpeKSr3aJNyrJ3jyLg3Vye834.roa (hash: BKU0s1AFVfjoQBSMzARmXiXP2HsCC4PJttRceRONfMI=)
                          13: MDIbS6sEXbMo4ibcLekhzijIjYY.roa (hash: 7iIxmTu02d89hGoTIMu/80TJLS3BqGKAagC48ze8HTo=)
                          14: MtRudBwfeuM_gV5Rxs2GMGZwQ28.roa (hash: jyZOCTzazS4hZAS8vXh55e8wdvGkjLOC1l/j4Cldlkk=)
                          15: MvceJYeC7exu39P-KklGzIhKezo.roa (hash: l7CWLK2x2ygZPduMunzZSQp+ZhD4hpMbVwc9AxPKUD8=)
                          16: OctDu_DWJM_ePhGKcxjKDU812B4.roa (hash: 8PSwDnEoVXcVpWULLxMU/tnZb/t/w988BD3T8r1Vyqk=)
                          17: RdFk8pqwtmhHw2UX4x0rgDjdvVg.roa (hash: UfFtH0Qa2ULdo2eWM4CXCIXafZmQBAeqkERPoGsE9DY=)
                          18: SlBCxI-Gr8RZUcWFdhLWCcmpICs.roa (hash: JIPe6vhu+AxbOSgeBUS8yHnoK/5rZWIA9A3Gij3IhXY=)
                          19: T8DiPd4COZAMrM15dsDMZh3-46k.roa (hash: FLVoIftsSDw3XycsNixyrK2164vfuETBh8sALFOAFvo=)
                          20: YKuzm8eZ5thjoG3YWlLmGyis6Hc.roa (hash: lRlLqWarJKTArL8I3Oh3IGUAjFaJLYWsMsfvgIvdCEk=)
                          21: ekzy4TbSmKoAngHD6nt1XvIY_kg.roa (hash: S4bTYJiZvd+MIyq2CNE9A391k97deJn0Ljqufvr/oI0=)
                          22: mlYAGWh15vGd93694fMr69kZ1-s.roa (hash: otHCfgliIY/SrOf4+V6i45uE7RR60PmYBw532SayjKk=)
                          23: nBGaxHS4njnBuZih8vNGsp1DG9c.roa (hash: XLGWBSyFNOz/Nq0CINiB/5Nx/Ff5JQHbqxgQoHl8pY8=)
                          24: uF1fzkxS1dvB384G_6ACG-gahqw.roa (hash: /0hDj28NRbF23VkEh2wmxEvtyGKZo3nN4bNoYlxvanE=)
                          25: uiEwRDzyo2IATe2UZ8J34lJkwOQ.roa (hash: qd8Q/scpzUgFvAn3rGCEs42W3qdpmfptd5u2EgNgXK4=)
                          26: zgvcOUimolOfc-2snaZEdo8wyhc.roa (hash: S2xJZFbuR+fVbmsKnaewbJdRcVJWvtsi5rfDD2/PNaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:a5:44:d2:76:af:bd:3c:79:ce:88:f7:a4:e0:b5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
        Validity
            Not Before: Dec 11 23:00:47 2025 GMT
            Not After : Dec 12 23:00:47 2025 GMT
        Subject: CN=e03d183f048d5d16f2e92f829ae33cd8e35593cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:cc:e5:ad:98:3d:dd:be:17:9c:91:5f:56:
                    ce:6f:0c:c5:d9:be:e4:33:4a:cb:fe:57:de:dc:7a:
                    01:f1:c9:e1:37:51:6c:09:cc:73:fe:7b:13:b1:d3:
                    2b:b5:77:ec:2a:aa:bf:84:2a:a5:70:58:d1:2c:33:
                    aa:28:f2:eb:9f:34:20:ec:01:bf:a7:f6:02:07:7a:
                    04:49:43:04:ce:fa:c2:96:03:63:35:b5:9b:cf:78:
                    61:33:9d:5a:34:e9:83:29:ce:11:9f:be:00:eb:75:
                    1f:e1:bc:0b:e2:fb:d2:9d:6c:a2:4f:d7:f7:c4:bb:
                    ba:5b:3c:fb:da:9c:03:5b:0d:18:48:6d:1f:e5:9d:
                    f7:66:99:d4:b1:61:27:c2:2a:c3:fe:30:33:f3:ee:
                    c5:7d:7f:ec:91:12:81:1c:3c:2f:ea:cc:70:23:72:
                    3b:7b:f2:f6:9d:f3:28:39:57:7e:99:17:89:0c:18:
                    b5:e0:56:2c:e5:c7:40:b0:31:6f:ed:9f:21:b6:61:
                    5f:40:4f:98:4c:8a:22:7a:08:29:74:9e:d6:15:a0:
                    71:72:db:4f:9e:60:91:e7:ec:e7:b3:07:6a:0d:41:
                    75:a5:b6:3b:28:57:55:2a:51:47:24:87:b0:40:4a:
                    a8:b8:49:1a:50:e6:2e:6e:65:94:75:67:19:41:cf:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3D:18:3F:04:8D:5D:16:F2:E9:2F:82:9A:E3:3C:D8:E3:55:93:CF
            X509v3 Authority Key Identifier:
                keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:13:18:04:e0:62:db:02:91:18:a6:65:01:8f:b6:b6:dc:7d:
         f8:de:f6:4c:38:48:a6:74:be:b6:7c:3c:60:1f:cb:c9:c4:ab:
         28:10:36:46:10:c9:4d:8c:fb:ca:3e:f5:5d:06:57:3c:12:af:
         23:a2:b1:1e:e0:b5:9f:34:10:d2:99:d1:ce:ca:bc:f8:5d:ff:
         a8:88:a4:89:b3:81:f6:37:03:b7:c9:41:c5:d8:6d:93:4e:f1:
         c1:18:02:16:20:91:39:cc:be:ff:f6:59:8c:25:ae:d1:89:c9:
         58:64:73:46:3f:d3:d5:0f:ba:45:e2:63:57:a7:6f:e1:bd:e0:
         a1:12:f1:16:cf:7d:f3:87:14:47:e7:ef:22:37:ef:e8:81:43:
         9a:2c:3d:9d:bb:fc:23:52:c5:db:c8:cd:2a:39:41:b9:1d:e8:
         6f:ba:a3:d6:9a:a6:a2:89:fd:9a:e5:8a:3f:0a:44:79:ef:f0:
         7b:77:5b:60:e7:31:68:72:2d:f7:b2:f5:90:8d:89:c9:2a:81:
         a5:53:71:a9:ec:a8:49:1f:79:0e:e5:65:13:ee:39:6f:2b:95:
         12:9d:1f:65:a3:8b:fd:6f:04:52:c9:f8:8a:e1:97:89:69:bf:
         91:f8:a9:e8:46:55:cd:a4:0b:8d:c1:40:13:cb:9c:09:ef:b9:
         bc:da:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:20:50 2025 by rpki-client