This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          2yzQZUBq/INpTipd0Wv02pxgc6enMeaLHm8hW/vrRrw=
Subject key identifier:   04:15:41:12:27:55:FB:5D:83:C6:AD:F4:BC:C1:BF:6C:2B:C1:2E:40
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019B03A1314570FEB38940E1390EDD1FEED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          108C
Signing time:             Tue 09 Dec 2025 15:00:54 +0000
Manifest this update:     Tue 09 Dec 2025 15:00:54 +0000
Manifest next update:     Wed 10 Dec 2025 15:00:54 +0000
Files and hashes:         1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=)
                          2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=)
                          3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: D3mChJrGDhB5aY33yuIk2WVuJ65Qp3IH0Nd4ufyeBGc=)
                          4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=)
                          5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=)
                          6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=)
                          7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=)
                          8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=)
                          9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=)
                          10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=)
                          11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=)
                          12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=)
                          13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=)
                          14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=)
                          15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=)
                          16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=)
                          17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=)
                          18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=)
                          19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Dec 2025 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:03:a1:31:45:70:fe:b3:89:40:e1:39:0e:dd:1f:ee:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Dec  9 15:00:54 2025 GMT
            Not After : Dec 10 15:00:54 2025 GMT
        Subject: CN=041541122755fb5d83c6adf4bcc1bf6c2bc12e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:62:a5:71:2e:f7:77:50:cc:55:74:df:25:
                    85:f2:2f:e2:eb:1c:e3:4b:ac:b1:18:15:d9:89:c1:
                    a7:48:d1:36:c9:1d:ff:02:d6:67:64:7f:a6:24:2d:
                    d6:1f:34:ec:87:07:e3:05:fc:54:17:da:cb:96:c0:
                    f2:70:83:7a:ae:11:51:a2:41:9f:b2:2d:61:26:d7:
                    ae:26:b5:6e:59:b3:61:33:5c:2f:be:0c:d7:fb:3d:
                    00:b7:a6:74:34:27:f6:11:52:5d:f2:c1:42:8f:2a:
                    3f:bd:c1:da:02:a4:01:b5:1e:94:f0:48:bb:f1:6a:
                    38:be:79:89:9a:95:6d:05:e5:5d:a0:f3:1c:b8:80:
                    76:26:6e:4e:40:f4:a4:d1:f1:0b:c6:5b:d8:b0:f5:
                    b3:7e:d5:d0:5c:0d:42:25:be:46:a3:c6:ad:8a:6d:
                    d7:fc:5f:5c:f7:94:9e:81:6d:78:b3:07:8f:1b:95:
                    a5:a1:a5:4f:1c:2e:4c:e0:1a:83:ac:3c:3d:a7:24:
                    86:e3:d7:8e:32:d7:46:cf:f4:1b:70:e9:91:ec:84:
                    8d:98:e0:38:2b:74:6f:25:cf:d7:f2:7f:8d:2b:78:
                    3b:1f:96:e0:f9:1f:89:0f:c9:fd:45:18:42:59:02:
                    1d:e3:75:ff:71:e0:f4:da:6e:96:fe:f0:6a:f3:09:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:15:41:12:27:55:FB:5D:83:C6:AD:F4:BC:C1:BF:6C:2B:C1:2E:40
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:26:f9:a7:b0:c2:b9:4a:bd:f8:24:e7:3a:10:28:4a:26:
         c7:e6:77:e2:1c:2e:8c:bc:51:2d:69:96:06:b9:78:0f:5a:7a:
         e1:b4:4e:e8:45:1e:3a:f5:91:46:04:fa:6d:fd:a9:ed:ed:37:
         ec:63:e8:a9:df:fb:d2:3e:5f:7d:64:06:dc:67:ea:e8:fa:26:
         2a:c6:99:79:e9:95:8d:e6:21:05:73:ac:03:b4:69:59:05:2d:
         b9:85:14:46:c8:13:ad:a8:d1:fc:4e:73:69:db:d7:07:9c:d7:
         6e:cc:a7:80:de:a5:03:7a:ed:ea:45:ce:bb:34:50:62:a2:2a:
         ce:35:b2:a1:30:41:f0:49:00:0f:f1:e2:95:e8:f3:51:89:f2:
         b8:fe:a9:98:0e:66:40:7d:70:fa:36:40:28:2d:ac:fe:b0:ee:
         83:24:5b:e2:78:9c:c1:52:2c:c1:a9:10:89:b8:7e:55:bf:73:
         be:9a:fe:85:39:9d:ab:ea:db:93:d2:6a:06:f5:f0:7e:9e:53:
         d6:80:86:93:91:d7:79:03:80:72:97:52:26:5a:33:c1:3d:17:
         53:9e:05:78:cd:d0:cd:bb:3e:b6:c3:cc:6a:6c:80:b6:4a:34:
         da:67:f3:c9:9d:e1:da:f6:d7:46:a1:8a:4b:79:e1:96:32:4b:
         cf:94:dd:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsDoTFFcP6ziUDhOQ7dH+7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm
YTYyZDIwHhcNMjUxMjA5MTUwMDU0WhcNMjUxMjEwMTUwMDU0WjAzMTEwLwYDVQQD
EygwNDE1NDExMjI3NTVmYjVkODNjNmFkZjRiY2MxYmY2YzJiYzEyZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhlipXEu93dQzFV03yWF8i/i6xzj
S6yxGBXZicGnSNE2yR3/AtZnZH+mJC3WHzTshwfjBfxUF9rLlsDycIN6rhFRokGf
si1hJteuJrVuWbNhM1wvvgzX+z0At6Z0NCf2EVJd8sFCjyo/vcHaAqQBtR6U8Ei7
8Wo4vnmJmpVtBeVdoPMcuIB2Jm5OQPSk0fELxlvYsPWzftXQXA1CJb5Go8atim3X
/F9c95SegW14swePG5WloaVPHC5M4BqDrDw9pySG49eOMtdGz/QbcOmR7ISNmOA4
K3RvJc/X8n+NK3g7H5bg+R+JD8n9RRhCWQId43X/ceD02m6W/vBq8wkKewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQVQRInVftdg8at9LzBv2wrwS5AMB8GA1UdIwQY
MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7wm+aew
wrlKvfgk5zoQKEomx+Z34hwujLxRLWmWBrl4D1p64bRO6EUeOvWRRgT6bf2p7e03
7GPoqd/70j5ffWQG3Gfq6PomKsaZeemVjeYhBXOsA7RpWQUtuYUURsgTrajR/E5z
advXB5zXbsyngN6lA3rt6kXOuzRQYqIqzjWyoTBB8EkAD/HilejzUYnyuP6pmA5m
QH1w+jZAKC2s/rDugyRb4nicwVIswakQibh+Vb9zvpr+hTmdq+rbk9JqBvXwfp5T
1oCGk5HXeQOAcpdSJlozwT0XU54FeM3Qzbs+tsPMamyAtko02mfzyZ3h2vbXRqGK
S3nhljJLz5TdSA==
-----END CERTIFICATE-----
Generated at Tue Dec 9 21:02:47 2025 by rpki-client