This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          rhL/Q1VWkFCXyHm7Yg7KSgmVZJTZutEGaUF+9byHtxw=
Subject key identifier:   E3:AB:2B:E1:1D:0A:18:9F:91:51:15:7E:79:4E:A4:EB:3E:44:C5:D8
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019AEA85EB354D96BD2798F4797CCA1AA0A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          107F
Signing time:             Thu 04 Dec 2025 18:00:36 +0000
Manifest this update:     Thu 04 Dec 2025 18:00:36 +0000
Manifest next update:     Fri 05 Dec 2025 18:00:36 +0000
Files and hashes:         1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=)
                          2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=)
                          3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: qxGNzozuEyrVAm3m0n/ZQnzp+ZAwoB/vWym96RHZET4=)
                          4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=)
                          5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=)
                          6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=)
                          7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=)
                          8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=)
                          9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=)
                          10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=)
                          11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=)
                          12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=)
                          13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=)
                          14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=)
                          15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=)
                          16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=)
                          17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=)
                          18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=)
                          19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ea:85:eb:35:4d:96:bd:27:98:f4:79:7c:ca:1a:a0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Dec  4 18:00:36 2025 GMT
            Not After : Dec  5 18:00:36 2025 GMT
        Subject: CN=e3ab2be11d0a189f9151157e794ea4eb3e44c5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:73:a2:ca:b3:96:0b:0d:88:1b:1b:c9:ff:
                    de:49:eb:3d:14:5f:2e:46:b2:7c:0f:60:df:25:c3:
                    06:70:7e:7b:91:d5:fd:df:63:14:7e:8a:c3:b6:14:
                    a8:95:91:5a:fb:59:89:5d:f2:75:a1:b2:98:30:7f:
                    b9:85:3f:d4:66:28:25:2c:64:75:52:4e:fa:a7:1b:
                    c0:04:a1:af:3d:b2:ca:e2:51:69:97:6c:0e:07:d7:
                    3b:d5:a7:18:86:98:75:0b:d4:a7:37:6a:89:24:22:
                    74:0d:1a:35:0d:58:a7:46:c0:34:ab:79:ea:11:51:
                    74:19:be:30:ee:28:cf:64:35:1b:e4:ce:19:ed:a2:
                    af:99:54:36:f3:e0:cd:f5:0a:19:db:81:9b:03:b5:
                    38:65:d4:39:11:d4:81:07:1a:14:c7:d3:4f:d5:a4:
                    f7:26:09:a0:b7:3a:4c:76:61:52:bd:8d:c4:4e:3f:
                    2f:cd:82:53:46:e0:4f:09:46:46:7f:a6:49:a6:8e:
                    d1:67:92:a6:91:81:b5:38:06:30:6d:26:2c:d2:3b:
                    87:8f:73:e0:77:48:22:ca:a8:b9:20:b3:bd:d8:42:
                    e9:a8:f0:85:83:82:e2:52:91:21:49:61:af:dd:0a:
                    39:c3:7d:0b:ab:42:3b:68:bd:39:5a:39:f8:be:6b:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AB:2B:E1:1D:0A:18:9F:91:51:15:7E:79:4E:A4:EB:3E:44:C5:D8
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d8:a7:4b:61:bb:6a:29:25:92:72:87:19:8f:6b:3e:9a:c5:
         1f:c0:3b:8c:e9:05:6e:40:8b:80:68:0f:af:08:33:fe:c3:26:
         af:db:e7:39:0b:ef:78:8c:3a:3e:79:9d:c8:39:f4:df:35:fb:
         43:ad:14:29:44:70:25:d6:65:a1:20:88:21:70:08:73:0a:9a:
         e9:70:d4:c6:1d:58:82:37:5b:2b:f2:72:b3:04:6d:27:cd:04:
         20:10:57:0e:89:59:94:c7:16:ea:03:68:52:d6:ab:46:d7:86:
         42:64:6e:9f:9f:62:9f:cf:de:c0:46:1b:60:78:7f:f7:3b:15:
         f7:fa:fe:51:c0:1a:c8:46:39:31:ec:d2:8c:c6:bc:ef:35:99:
         79:d1:6a:87:be:fe:a0:6b:33:b4:36:7d:89:98:b6:77:8b:e7:
         97:61:d6:17:45:23:08:78:32:24:a7:13:83:df:bf:95:cd:da:
         ba:d0:0b:9b:76:76:d7:fe:d7:52:63:a4:1b:7b:c9:05:89:14:
         26:f8:25:e7:5f:06:8a:df:64:ee:62:31:17:29:76:8c:7b:0c:
         1d:d2:1a:a1:cc:f7:87:7a:1b:0f:a5:3c:4f:08:84:cf:2b:62:
         43:1f:f3:85:a5:8e:e6:05:13:34:54:c5:bc:de:f8:75:3b:25:
         46:cf:3e:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrqhes1TZa9J5j0eXzKGqCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm
YTYyZDIwHhcNMjUxMjA0MTgwMDM2WhcNMjUxMjA1MTgwMDM2WjAzMTEwLwYDVQQD
EyhlM2FiMmJlMTFkMGExODlmOTE1MTE1N2U3OTRlYTRlYjNlNDRjNWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG9zosqzlgsNiBsbyf/eSes9FF8u
RrJ8D2DfJcMGcH57kdX932MUforDthSolZFa+1mJXfJ1obKYMH+5hT/UZiglLGR1
Uk76pxvABKGvPbLK4lFpl2wOB9c71acYhph1C9SnN2qJJCJ0DRo1DVinRsA0q3nq
EVF0Gb4w7ijPZDUb5M4Z7aKvmVQ28+DN9QoZ24GbA7U4ZdQ5EdSBBxoUx9NP1aT3
JgmgtzpMdmFSvY3ETj8vzYJTRuBPCUZGf6ZJpo7RZ5KmkYG1OAYwbSYs0juHj3Pg
d0giyqi5ILO92ELpqPCFg4LiUpEhSWGv3Qo5w30Lq0I7aL05Wjn4vmsb8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOrK+EdChifkVEVfnlOpOs+RMXYMB8GA1UdIwQY
MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtinS2G7
aiklknKHGY9rPprFH8A7jOkFbkCLgGgPrwgz/sMmr9vnOQvveIw6PnmdyDn03zX7
Q60UKURwJdZloSCIIXAIcwqa6XDUxh1YgjdbK/JyswRtJ80EIBBXDolZlMcW6gNo
UtarRteGQmRun59in8/ewEYbYHh/9zsV9/r+UcAayEY5MezSjMa87zWZedFqh77+
oGsztDZ9iZi2d4vnl2HWF0UjCHgyJKcTg9+/lc3autALm3Z21/7XUmOkG3vJBYkU
Jvgl518Git9k7mIxFyl2jHsMHdIaocz3h3obD6U8TwiEzytiQx/zhaWO5gUTNFTF
vN74dTslRs8+qA==
-----END CERTIFICATE-----
Generated at Fri Dec 5 03:32:35 2025 by rpki-client