This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
File:                     FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json)
Hash identifier:          lpFNMcVIqGRfl75WqR7xU9SM1YET3f9QVkI6iOxRpOM=
Subject key identifier:   D3:E9:8C:99:23:B6:10:75:ED:4F:0E:8C:E0:AC:4F:DC:9B:41:85:4C
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Certificate issuer:       /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial:       019B435BEE7048B6147026B5D2B2514A9D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
Manifest number:          055D
Signing time:             Mon 22 Dec 2025 00:00:56 +0000
Manifest this update:     Mon 22 Dec 2025 00:00:56 +0000
Manifest next update:     Tue 23 Dec 2025 00:00:56 +0000
Files and hashes:         1: 1-Zxv3Kw0-TaH9QonJVNF4xt--FY.roa (hash: sdWRgTuLAn51+8HXVLa0jTAQ8mRzO7dfL4mFOSXplrM=)
                          2: 1KQdLQdqSavQ8opOsJBCC_LRSmI.roa (hash: sDbjsiQHm8jFEXwFUnfwIQmQndNvaybGYHSFGwTIBNw=)
                          3: 2KRS8xNg1n3MiFJIQWdojz6XlS0.roa (hash: VaIgVtBIZ8x0cTFrgwuhgZXExSOoccJFrVYDCE79DMA=)
                          4: 2cq1P4ZZ6UgiNYpOTVH-QcalGJI.roa (hash: fmH1CIvCoESiHgfxGKptTnPIXfqs2dEuOrOdNgFQtUI=)
                          5: 76jBSZXqoCLYuDx37Tg4k-XUZVs.roa (hash: MscmAcdESi3fGqr0XkNp+WZ2R9GaWQ30ttgidFzjvE8=)
                          6: 7LtUkCfnFV91w_Qgt3azxsZGlDI.roa (hash: i1o3vDAN7Yv1q7SUHLsRiMIQog9Vz1PLu8QgwEX9G30=)
                          7: 7t_DBi7rvDWnaJfK8uCa5LRmY78.roa (hash: 7TgZemqGxNTXfSYaQtKBuZaayYpndfag3pdDKsqeVt0=)
                          8: CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa (hash: 8VwJdcpb3DlrQc7aqH1TphMMsq6OhgM+K3smNx7xgHw=)
                          9: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: /mlXZ/Rg+s7ILGOZquGj5vqHRheY79eyYm2d3PPukOA=)
                          10: GJ7WM9XZ8aPvhFL3nonJQjZ3cyU.roa (hash: WROjdaGli8Fi41MZppDPsHHJ/iTpg3Lqh4RMCj2LsKM=)
                          11: MJtGqW7EBoBUv03MjLuA1rZGnFk.roa (hash: JHIhHbc+O3brVI4S29z9gJ9Jp7NY0cEpDDfJ3vUoSrQ=)
                          12: SXhe4rP3vlGTN1HmqiPt6-7F4UA.roa (hash: hq9k9H+DZDNkXqrxIZRW2srgyTDA0B51MAjaksVaNxQ=)
                          13: Th9yBiWSbMsH3gwbWRPwpFcad2A.roa (hash: U0xnJVCep9fDorHM9EM9nJ7vs7fc/6GEbSINMoe/caM=)
                          14: Z8p5c-rlAPW0cZ-sWH7G-yZd9To.roa (hash: 14NxmVMH2EBfG9yj1NkfTzczT8KoDClH3gg1peZJpIk=)
                          15: aNo1lorx6tVQ1LtbDZZYpwG98bI.roa (hash: M/dPr78yQy8Oq7tst5W5cmGPYp+8hAOwwdyPVs5Qgpw=)
                          16: c930EprhnZN7cHXpxEPDmkxAFWE.roa (hash: I5pKgo4EnECDdKNPyg4GGz0ZsDtoM6WEh8x6XGTYns4=)
                          17: d4I51w20scF0qqj486GiV-nYoLE.roa (hash: BmIi2OiasNN95IJMu0tNLgXYd8MOoQKfmXcF14LcfbE=)
                          18: dwxVTJjwRdmFY55JH2yvjXmSVts.roa (hash: Lh23QBiX92su9UHZMQr+EOFIPCcgDPrhS+6BAN9DBAs=)
                          19: hyf_FSstDRsTVrHqWp4atR0wNuE.roa (hash: 9ioSdjemsZQEdMQrcBPYz4QYSaYVbVg2990HFiQlLkg=)
                          20: kA6CHPfPdas7hoxpTjyG1FQEu_U.roa (hash: URBA5QHXvsO4eLiy7HZHrf75n0PShSo0ZJWH9NZIu7o=)
                          21: rRfJh5h1OvSwA68tMG8wiO1COM0.roa (hash: Yu2Vd8cvt5rkk54xHpMlJX4kDqxA9npkwDRcXxwFDAc=)
                          22: rUKIXSNoku-s4H0elFpLk-iK8XY.roa (hash: QK159DI2sWxdlIL1qi4EvXyGAxLNLVcLS1syEm3cec4=)
                          23: taeDw9RW8HvsYXrOqqTDJ80VR30.roa (hash: 1W3/AMRkO5ZrM8JjZnDlNP0Qz3/F1UlCB8epuYiTNf0=)
                          24: tu3hGRkBbSBQ--nqT5wdg-lVn3Y.roa (hash: GOHAj03XK7r6uHKyuAW9rpoOeyK5T9KDx1ewuKony44=)
                          25: z7_le-_Pv4aO1HMJCPyW0cp8Ipg.roa (hash: puM9Q5Q/7MRIbJGAP4I3Va5Cr7OobK3lRhK3cCFDj24=)
                          26: zOhruI3f8CmZnvrfikkp_umvSCQ.roa (hash: NEbucM5c57bMZLBETD9r4o+f8o+xAOVGhz7z1f9K4Ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:5b:ee:70:48:b6:14:70:26:b5:d2:b2:51:4a:9d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
        Validity
            Not Before: Dec 22 00:00:56 2025 GMT
            Not After : Dec 23 00:00:56 2025 GMT
        Subject: CN=d3e98c9923b61075ed4f0e8ce0ac4fdc9b41854c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:b7:88:53:ae:85:28:98:56:b3:53:56:43:
                    df:b4:60:7f:ee:72:16:3e:f8:e5:6c:34:15:15:a3:
                    a5:66:a9:91:dc:5e:bd:75:f8:0d:13:9c:d6:fa:64:
                    2c:0a:7d:ef:49:8f:ce:52:47:ad:93:57:9f:1f:ed:
                    23:6a:e2:d9:1f:bc:1e:fd:0d:94:01:49:9f:d5:47:
                    4a:68:d8:6b:4e:0e:69:bf:eb:50:1d:03:f7:95:20:
                    20:a5:90:e7:db:f6:cf:ed:34:39:1c:28:1e:fa:bc:
                    e4:f3:1d:e4:f8:e8:5e:bc:3c:60:e4:13:aa:47:ec:
                    c4:1c:ef:e6:30:40:3e:08:c9:1b:77:b2:de:be:12:
                    4f:f2:ad:f6:41:fd:23:ec:af:6c:4d:15:26:ef:5b:
                    1a:b2:8d:d6:fe:7e:9f:11:f4:ec:0c:41:e9:20:8f:
                    67:14:80:3b:7c:3d:3e:63:53:b1:97:81:42:fd:5a:
                    91:9d:ab:17:40:9f:68:80:36:1c:fb:9a:12:51:5e:
                    b8:8c:c6:5c:49:93:0d:bc:c9:5b:68:6d:e7:9d:18:
                    76:50:bd:66:ba:f0:8a:c9:e4:33:dd:b9:80:8f:f7:
                    ce:6b:19:df:1d:f5:97:c3:cd:f8:5c:bf:00:1b:c2:
                    ee:28:38:13:3f:d5:50:a1:2a:e9:90:4d:3a:22:64:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E9:8C:99:23:B6:10:75:ED:4F:0E:8C:E0:AC:4F:DC:9B:41:85:4C
            X509v3 Authority Key Identifier:
                keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:87:12:81:e1:da:7b:09:52:8d:5d:67:51:94:e2:4e:29:
         3c:a8:70:c7:6c:b4:9b:d4:d9:ed:97:68:0a:80:7d:1a:0c:f7:
         1c:10:7b:d3:34:31:81:a8:cb:1e:ce:2b:07:90:82:08:72:d4:
         e6:c9:d8:b5:81:1b:49:b7:61:4f:1c:23:a2:5b:0c:3a:3c:21:
         e8:4a:ae:26:09:18:08:cd:42:63:c0:d9:78:74:42:87:4b:96:
         92:5c:78:cc:f0:50:a1:2d:ee:7f:8a:a1:a9:6f:2e:af:ee:1c:
         0b:65:07:da:2e:d3:db:b1:da:ec:33:12:3f:86:e0:91:4f:51:
         2e:54:20:9e:f3:fc:2e:7f:e1:ac:14:df:2e:92:0e:f9:ea:a9:
         32:80:2e:1a:4c:35:ab:58:61:45:d6:8c:d0:16:fc:5f:85:b1:
         94:0f:dd:f6:12:da:91:63:13:0a:c9:75:9f:9e:c3:44:15:8f:
         7f:44:cc:ef:42:0b:cf:1b:25:09:e6:5f:47:fa:b0:08:63:8a:
         92:92:4e:9a:47:bb:ce:b5:ca:dc:b3:1d:7b:85:66:d2:bf:a5:
         5e:9d:d5:b1:3f:bc:e0:84:a2:00:cf:0c:17:68:09:06:0b:4f:
         5c:8c:f3:6b:84:d7:87:45:e1:71:ff:b9:b3:d4:85:79:e6:72:
         e0:37:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:05:22 2025 by rpki-client