This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          EJxO4DuT11yBqEhaG3lHFiK1PwaHg5N5kY30uPB6lIk=
Subject key identifier:   0B:7B:02:15:D9:4D:57:80:D4:06:A5:48:92:5D:6C:0B:C3:06:12:47
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       019AFB0BB4147B89D1F0A62EF0C58EDBDA64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          07AF
Signing time:             Sun 07 Dec 2025 23:00:39 +0000
Manifest this update:     Sun 07 Dec 2025 23:00:39 +0000
Manifest next update:     Mon 08 Dec 2025 23:00:39 +0000
Files and hashes:         1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
                          2: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=)
                          3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: qJBdcvF7CELkTfn9rsGJ6p0dmcnJwEgOfXFK9N7iEz4=)
                          4: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=)
                          5: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
                          6: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
                          7: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
                          8: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=)
                          9: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
                          10: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
                          11: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
                          12: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
                          13: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
                          14: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
                          15: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
                          16: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
                          17: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
                          18: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
                          19: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 19:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fb:0b:b4:14:7b:89:d1:f0:a6:2e:f0:c5:8e:db:da:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Dec  7 23:00:39 2025 GMT
            Not After : Dec  8 23:00:39 2025 GMT
        Subject: CN=0b7b0215d94d5780d406a548925d6c0bc3061247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:9e:34:a7:00:88:f1:b9:4d:8c:65:aa:2b:
                    0c:60:3b:9b:d5:87:18:cd:f4:aa:61:87:b0:f4:2b:
                    ce:a9:37:eb:57:c9:4c:f2:11:cc:28:e7:df:b2:d6:
                    48:11:e5:9a:1e:c8:af:33:ac:b0:70:c6:69:8d:66:
                    17:7e:d9:36:9a:c2:e6:74:43:7b:21:c4:09:4e:7d:
                    81:86:c3:f0:44:b0:94:f6:46:e6:2b:20:c4:9e:f9:
                    b1:4c:1e:79:d2:d2:1a:0d:9a:5f:52:b2:1b:30:b9:
                    de:a9:16:ef:b9:62:07:c5:bb:b3:6e:a3:ba:d7:21:
                    69:84:64:f2:6c:da:d2:83:37:90:49:17:a8:3c:be:
                    67:b4:32:31:97:e4:44:60:f0:e0:2e:96:0e:73:c0:
                    6a:fe:85:46:cf:c3:5a:f7:9f:2d:d2:d3:6e:15:22:
                    eb:b8:c4:c9:03:06:2f:19:9a:12:dc:7e:3f:a9:ab:
                    0c:40:af:36:b3:93:f5:17:47:df:cd:4f:2c:cb:24:
                    ee:3f:12:b1:93:de:8a:4b:6f:3c:c7:1c:f5:eb:75:
                    79:bc:9a:43:45:99:06:77:e3:cc:6e:51:6b:f7:33:
                    a3:1d:e9:12:2c:ba:7a:26:81:b9:f5:bc:55:05:13:
                    30:65:e6:b6:96:33:9d:74:b7:f9:b8:ff:c8:67:83:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:02:15:D9:4D:57:80:D4:06:A5:48:92:5D:6C:0B:C3:06:12:47
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:81:ab:0e:e9:a1:d7:de:ff:94:76:26:39:2d:6e:6e:43:ad:
         5f:27:30:59:f4:8d:27:f8:99:0b:39:98:b4:f8:1b:5f:d2:81:
         85:37:ee:e4:a3:ba:21:3d:f8:24:51:be:49:c6:1e:5f:a9:15:
         fa:c8:32:68:de:18:a3:2d:47:79:53:9e:41:e8:60:19:8e:e2:
         97:36:68:2b:df:94:ba:65:92:4f:9a:d8:97:e9:d4:fa:39:91:
         d7:a5:f9:3e:05:fe:fd:72:d6:cb:e3:f5:7f:e4:79:52:d8:d3:
         81:be:4c:6d:cf:45:40:2b:a7:e1:18:d0:6a:90:c5:6b:72:68:
         34:81:21:33:5f:ea:4b:40:3c:68:8e:5c:8e:0f:42:ec:43:4f:
         ee:50:7b:8b:35:8e:8d:47:7e:7a:a1:c4:88:d2:26:00:1f:17:
         01:f5:cc:7a:d2:39:69:b9:12:d1:12:1c:e8:3a:0e:1b:2d:14:
         c9:23:a0:d3:c9:9d:2d:43:92:ad:44:2b:3f:78:95:ea:e8:2b:
         e9:df:2f:fa:92:c2:b8:4b:e2:94:ea:f6:d7:70:51:d1:49:22:
         38:99:c5:3b:22:c5:53:88:01:a2:46:43:b1:05:c5:66:cb:26:
         a6:7b:bd:cf:03:4b:b2:a9:38:44:25:26:ab:85:05:29:cc:e5:
         25:77:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 04:25:49 2025 by rpki-client