This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
File:                     k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft (raw, json)
Hash identifier:          sb/02CCummM7FAzcwo44StVlDHsnLeN9cZvE7sFC7SA=
Subject key identifier:   31:F2:47:E0:9E:0C:96:6E:CD:8E:FF:46:69:49:2B:FE:A3:A6:BD:FB
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       019B4023CF61940B6B3A608E8745B301C3E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
Manifest number:          1809
Signing time:             Sun 21 Dec 2025 09:00:47 +0000
Manifest this update:     Sun 21 Dec 2025 09:00:47 +0000
Manifest next update:     Mon 22 Dec 2025 09:00:47 +0000
Files and hashes:         1: 1-8pDmMDEEfzKpgrhdzsNLY7lSWY.roa (hash: OPxozI7mVi2nDc4IC7ZWtXvLS8c16Xv6I+p3sYV5clo=)
                          2: 1-I6iaHoKkQRui-maOvyaf903-pY.roa (hash: DGjM+DdDY1m1wnJ52Hf6vozqF6JWG92yg1rZUVU5NCo=)
                          3: 5uVuvju1BqfCC9TlwKIrEaaUVXk.roa (hash: 7KIg0ieMJiNuV46pTrLRYuuK/hkTM0/9/2Qw5cXqUlo=)
                          4: 983YbIKiLKsA79Q4v-0HCtRz4PI.roa (hash: sYCCGQ1q22415RC+XALwNZ+DuN/Sxp4fgBXPbA8X8PA=)
                          5: AGH_4XKMoJQXMUQcmRNvaim4IeY.roa (hash: u19XXYRrm4hyR4kTBNQvGZ68bk7v1EjkrEyikPrEGqo=)
                          6: Ar5poSRAQujxaX6q2fXk5PIUu20.roa (hash: sxd1T0MJCAS9pg0Vdic73URNqUZ3CxlTpLu0FNLKBNw=)
                          7: BuAmcDIPoJ5Lp44p8HB8tAyWhmA.roa (hash: yrjTAdHqCaVQiRX6XOva0nJjmmyQUQwT4uCD2MwcGTo=)
                          8: D7FjlWMe6-PwuPG3BMpV_LKIyz8.roa (hash: bII3KO9txgZTag71uUVlyzOnHGrD7kmSU4//JJbzkZo=)
                          9: EAuxtZuYlulou3dCmKaHYscKS7A.roa (hash: L6f1AWFUl4+e3ZQ+Wk1/7XbAK0YgJh5zvVC5kFi+B7Q=)
                          10: JToXLwiaabPWVn7k7SmF-YWU5ro.roa (hash: hpuL90O+mIKhj3+Wy1oe3zyrYzzVPJTbG5oDK4Ya1es=)
                          11: O0zn8FlsZtfpPdEnqXoXxmVpgl8.roa (hash: KyGWwEJdCipct259hyA9F4mxLo276WcHsUgpLEqtT38=)
                          12: RRlCeM4gB4HHCT3InAd_yIrqoLg.roa (hash: +PW3rQN6p2A7EiMnylJWDZGQy0A0iFzGedDPlpAMYD4=)
                          13: UuK3HXxMCh37g6d3LBH8pLQfhkw.roa (hash: gwRDu4mIj3MzGWkeYSwx8sHHZwsCX42WxQrLPWRXccM=)
                          14: fmLn40rK7e-kwLrOR1_MivV_lTs.roa (hash: f1jZexHT1rx7FJNMv/8AMpXH6m8ggfq4EEnoab0o9fs=)
                          15: h-L32JDD-cDXLSKS5D8kizQ6BZk.roa (hash: SrQk7B5niRWj3WywMNW4nPtpBFdZAbZhiHLCQKotkS4=)
                          16: ht8VbyTSw0nsNawK_niRHh_9H4M.roa (hash: fWa0dv6CvhTyrQldYgDU4gxwIE6Oirwkitn87EACZwA=)
                          17: j3ZfN7Z9SFof5EvqaNbKoJRFF5M.roa (hash: ij5cGD+hdBC6iu46+G68MBD5e09HHj1SFfP59ydKwt4=)
                          18: jIfoMhT2Fw5KN5QTxKy_59TapUA.roa (hash: 3+G/bBr8L/0IOjg8ZDZTC94WXpGJBSDkyWYGC/U0/hg=)
                          19: k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl (hash: cEEez8I5An4766gTSFTqjumy9L+2u55FL0289AVI4tI=)
                          20: lRtWiEUGI08QkTj-JAgK-bKDZAM.roa (hash: ewOxoxwYLcFsIAFisXEFAEvCf5KlmrBM7jLNVcTuzwc=)
                          21: mQ_S9SBKYsiofCy4l7CtIv3oDL4.roa (hash: KXEpTonEsssW69BBWkMEAOHuLnS4yHulPcrEUU+4eao=)
                          22: nG7UPwWdNXA11rjoEPxSlN9hF2Y.roa (hash: 6tjWe0Ebxfi7VT+Yr7pRrZaTJDirGyHuAodi17lOXl8=)
                          23: sD_dX7pupy2DcLlmE7QFIJ2MGkQ.roa (hash: N/4cy3GtLTvRW9uw8BRyRspOVsX90+cI/TGL47ddSl0=)
                          24: tqmZd2LvNRZuj9JvLfgMPuwsnQ4.roa (hash: FxaO/1VMY0bHSvADqDCXMdZI7+dsMEPHunesOi47d/I=)
                          25: u5grIZWsM8V-tAHbtKtyMrwToNU.roa (hash: SgJL7BS0zkWOubaOtU4rG+reX7W6MqOgE4ywVhYViQs=)
                          26: uKaPMlMyKCekDRE578BC9or9uiw.roa (hash: vbq4uMxmQgOFSiPWnwk+wQIBuzYMbzW7auwqaeVtUaw=)
                          27: w4kmP7B_Fxki60Rm8oVTnhcxqxA.roa (hash: FYmhQk/RB/mbvwG20mFIyTdb7vP2YfXGbmhSYFbiUzc=)
                          28: xefNt18UaTn08mlaaX374HLD6eU.roa (hash: VmW7eolrvRkHLYGBCyc5PcXaK7AxpSci/XgN/FNZx0c=)
                          29: yqdAdTF_TXkyufp-NOMjPwUoi8s.roa (hash: 7Lyt3L7IBUZHdgVsAOUp4Bmxqp1Jy4t64OfZT44d3NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:23:cf:61:94:0b:6b:3a:60:8e:87:45:b3:01:c3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Dec 21 09:00:47 2025 GMT
            Not After : Dec 22 09:00:47 2025 GMT
        Subject: CN=31f247e09e0c966ecd8eff4669492bfea3a6bdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:f7:05:14:b8:93:ef:65:65:e6:bb:23:82:
                    8c:61:35:68:ce:92:97:77:c7:c5:c6:30:8a:ea:db:
                    6e:0e:e2:9b:1c:06:8b:8c:dd:28:92:fb:03:e7:65:
                    69:33:92:34:33:3d:3e:6a:6d:d1:72:97:3a:4b:e3:
                    03:3d:c3:c6:cc:e2:a9:a4:46:6b:9a:94:a7:aa:26:
                    24:ca:84:2f:d5:62:9e:23:d7:7e:04:de:0a:85:8a:
                    45:d1:63:a7:75:4e:21:ba:bd:85:a2:b9:02:f1:dd:
                    b5:5c:1c:1a:09:99:a4:df:65:d7:e9:49:3b:c4:fd:
                    38:1e:c3:79:3b:5b:c5:65:6b:ec:11:ca:f3:bb:68:
                    ae:38:7e:24:05:bb:14:84:ac:aa:3d:ae:b0:bb:1b:
                    a2:c0:50:bb:b1:c5:db:fc:50:93:76:90:56:4e:e8:
                    83:a1:a5:db:81:61:48:b2:4b:fd:37:cb:6b:30:e2:
                    66:b3:bf:d5:a9:ea:4b:cb:b6:37:4c:50:bb:6d:bc:
                    d0:87:dc:fb:2e:d8:14:aa:cb:8a:5e:e7:dc:d7:d7:
                    17:a7:03:1e:5a:fe:0b:f2:f0:8f:46:02:10:85:e3:
                    a3:88:37:79:40:89:a6:e1:32:45:4d:e7:65:72:6e:
                    a5:79:c2:41:10:45:4f:fc:b0:42:ad:9e:88:fb:e9:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F2:47:E0:9E:0C:96:6E:CD:8E:FF:46:69:49:2B:FE:A3:A6:BD:FB
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ce:3e:66:80:92:d1:f4:4e:39:f4:4f:d8:26:bf:c7:5a:e0:
         87:41:77:be:1a:26:2d:6d:cf:c4:e3:4b:63:5c:d2:f4:67:4d:
         fd:82:2d:8c:d0:9b:43:d0:03:a5:b6:17:8a:80:fb:48:43:45:
         26:e4:33:57:b4:7c:6b:95:a9:c5:e9:34:cb:65:06:7d:ac:3c:
         fa:73:f6:63:36:93:b0:2e:8e:13:1c:41:58:15:a5:51:95:d0:
         e4:f3:5c:d2:f2:a8:ce:95:07:0a:32:3d:77:a0:6e:c8:0f:bc:
         70:3c:a6:a9:33:9b:f1:cc:c8:31:bc:a0:53:69:2d:e5:4b:4b:
         23:e2:55:ba:03:38:0f:6d:13:8b:f5:48:86:72:c6:bc:41:db:
         96:4e:45:35:42:28:48:61:e5:15:83:33:95:14:60:28:24:31:
         ef:f5:6a:b6:31:44:66:95:13:82:30:99:53:50:c6:5a:32:b4:
         49:2f:e3:d7:37:dc:22:26:4d:08:ec:fd:41:9c:49:d8:f7:42:
         42:46:a1:48:53:15:aa:b6:c8:54:d0:ca:1e:be:35:8b:ff:ad:
         1a:42:d2:32:6c:67:8b:69:1a:45:44:58:52:c9:c4:88:12:d2:
         15:4d:e7:48:93:cb:05:6e:c9:fc:f6:e2:ab:ac:70:b3:a5:78:
         dd:6f:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:13:53 2025 by rpki-client