This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          eG4vTZJXd96c4YLpbPUhpwcYsZZzLxuNsd6ISazXag0=
Subject key identifier:   74:DE:63:EB:CF:EA:EC:6B:9F:C6:22:B9:CE:C6:FA:93:F8:72:E7:16
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       019B330D55060F509E8B919A513E515C5A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          1792
Signing time:             Thu 18 Dec 2025 20:01:10 +0000
Manifest this update:     Thu 18 Dec 2025 20:01:10 +0000
Manifest next update:     Fri 19 Dec 2025 20:01:10 +0000
Files and hashes:         1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=)
                          2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=)
                          3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=)
                          4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=)
                          5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=)
                          6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: QUmKWXEWMAgeWZTGS+GfDG9tzXsB/hNMz48uBa5AT80=)
                          7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=)
                          8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=)
                          9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=)
                          10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=)
                          11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=)
                          12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=)
                          13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=)
                          14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=)
                          15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=)
                          16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=)
                          17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=)
                          18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=)
                          19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=)
                          20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:0d:55:06:0f:50:9e:8b:91:9a:51:3e:51:5c:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Dec 18 20:01:10 2025 GMT
            Not After : Dec 19 20:01:10 2025 GMT
        Subject: CN=74de63ebcfeaec6b9fc622b9cec6fa93f872e716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:76:ba:a9:26:23:e0:3e:89:4c:0a:f1:3b:e5:
                    67:24:ab:1d:0a:d9:27:ff:92:f6:1f:66:46:1b:fe:
                    17:9f:d9:ed:76:6d:81:ed:6b:9e:36:64:e3:7a:5a:
                    8e:eb:83:83:b1:b3:a4:a8:9e:8f:3a:09:a6:0e:71:
                    3b:bc:18:df:ab:da:ff:c9:2d:d3:f7:d0:62:5f:7a:
                    37:3b:2d:24:43:4c:65:04:4f:21:fc:34:05:4f:64:
                    3b:63:d9:10:9e:f6:7f:83:f3:c9:10:5e:a1:85:9e:
                    b1:37:0a:09:e4:36:45:64:58:03:bf:11:bc:21:29:
                    44:88:4f:25:8f:25:20:09:9c:f6:26:9d:91:c3:c3:
                    8c:a6:45:fb:1c:d4:c0:61:a2:e8:6c:c7:dd:3c:aa:
                    11:ba:0e:e5:38:93:d3:ce:77:cc:88:14:65:65:ce:
                    ff:68:4e:1d:b3:8a:1d:f3:92:1f:1f:dd:e9:9d:38:
                    26:d2:29:e7:ab:8e:86:98:b2:17:d4:f7:df:4e:4e:
                    ef:60:9e:b9:3b:80:7d:3e:41:c3:13:02:c2:16:4c:
                    1f:f1:1e:05:7c:bb:4f:2b:89:11:f9:fb:3b:3c:4a:
                    86:8d:c5:48:e8:ac:cf:16:61:50:f7:4f:9e:05:cf:
                    a0:12:41:61:17:1d:47:5b:7a:03:d5:5b:fb:08:4c:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DE:63:EB:CF:EA:EC:6B:9F:C6:22:B9:CE:C6:FA:93:F8:72:E7:16
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:77:38:7b:bf:04:09:c6:36:c8:76:17:fc:89:83:55:aa:
         6d:7d:c4:9d:53:1b:ff:e3:ed:17:2d:9a:10:ff:9a:d9:88:66:
         2e:16:67:a8:ea:d5:fe:dc:83:0b:6a:11:67:da:c1:72:e3:45:
         81:03:cf:02:98:56:eb:9c:b2:7c:ab:10:d9:58:84:0a:fe:50:
         58:bf:3a:a2:8b:91:3b:b1:d9:82:97:bc:2d:a0:82:38:03:04:
         a9:28:fe:e2:19:54:38:6e:9c:28:ac:9a:2c:27:0d:8b:dc:82:
         aa:69:ab:16:94:6a:1b:97:5f:0b:58:9a:a2:75:68:74:64:89:
         9a:b6:f4:0a:33:37:be:8e:61:7f:a2:54:5c:e9:95:f8:cf:00:
         5f:4d:1d:b6:fe:ce:c9:ec:56:30:10:87:74:5b:e4:16:92:1f:
         83:3a:a9:ed:1d:c3:05:dc:3f:d1:fb:c3:70:25:3f:da:a9:35:
         74:14:44:f2:b7:dc:1a:89:3f:a0:95:c5:8a:55:11:a8:11:b5:
         19:71:bd:19:8f:25:f6:5a:5a:45:4d:f5:63:21:51:d7:24:08:
         34:db:30:ab:9b:07:a8:44:16:21:5b:6d:d5:ef:c6:5e:62:69:
         36:22:40:cd:81:9b:e3:11:e1:0a:e7:c9:3e:da:01:84:13:84:
         9d:0c:cc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:47:22 2025 by rpki-client