This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
File:                     H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json)
Hash identifier:          xhPJjSyFeDqiVbhU6Pr9DKBPrgS3+/QnCcQXclbB0ak=
Subject key identifier:   99:EC:DF:6C:23:07:96:81:15:15:EE:2F:CB:05:79:92:2E:DD:20:EF
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       019B058F5ED5AA89C0C423CB673B3AA5355A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
Manifest number:          14DB
Signing time:             Wed 10 Dec 2025 00:00:40 +0000
Manifest this update:     Wed 10 Dec 2025 00:00:40 +0000
Manifest next update:     Thu 11 Dec 2025 00:00:40 +0000
Files and hashes:         1: 2CMmm-IO3y31CC1PnY_uGGrhn9w.roa (hash: 4X4+4X/uOYbuErCckaKak0v4fA7/5gtq1a9L2A4Lw/g=)
                          2: 78A7ZX40X9PEI2sIAHMeK5HoKFY.roa (hash: swhlpKQufE8U+BL4fuo/cIho13Ce4xy+ebg5hBF4uDo=)
                          3: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=)
                          4: 8ZC0k7rzA0E1rhNje27CVkEZJ3k.roa (hash: A0opDIEQI4MN92tRbOLHdM7zZc/0nBThej01ve87lSE=)
                          5: CGtvlVAjeOKgmOegCwgkAU5viUg.roa (hash: tYOH0itDmxfLkiehctgBZN5JIUldgyHwoFbKsMtsM8Q=)
                          6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: p3xb7ifKO3cBKvQ9568SDcjPkcRTVA6tZCTbKvyHnHo=)
                          7: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=)
                          8: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=)
                          9: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=)
                          10: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=)
                          11: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=)
                          12: mX1m4UQyXXwpGD0jqQb_y8LC8FI.roa (hash: rM0m6jdxRtvhd5JgDnoJoekO12B/OCdpvQvQXsOMtes=)
                          13: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=)
                          14: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=)
                          15: wnciBdu8lZY2hvNA1n2wUZlVCqI.roa (hash: UdaEqwB7nqa+Pnyq5hGu9jVwXxakpdXfIHnlHShbVZI=)
                          16: xs8kgLY-61uyKfGESALykLk9Pj0.roa (hash: uV1wjICOu9X1DokywqYjnW+r/mANbpnz+9BPI0bQ5c8=)
                          17: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=)
                          18: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 00:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:05:8f:5e:d5:aa:89:c0:c4:23:cb:67:3b:3a:a5:35:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Dec 10 00:00:40 2025 GMT
            Not After : Dec 11 00:00:40 2025 GMT
        Subject: CN=99ecdf6c230796811515ee2fcb0579922edd20ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:df:97:51:99:d9:92:3f:0c:61:b6:d4:55:
                    06:2a:b7:3b:de:d7:3c:1a:89:f9:04:3b:c0:5c:7c:
                    e4:7f:d4:63:56:e5:7e:f9:07:3b:89:fa:34:ed:81:
                    12:c5:14:4c:c1:76:53:fe:7a:f9:a5:8c:d3:f7:7f:
                    33:5c:1c:21:98:c2:1b:68:ce:05:dc:e6:12:a0:cd:
                    20:0b:bb:be:9e:91:87:7c:1e:84:1a:8b:3e:38:d5:
                    b8:14:cb:a8:a0:6d:40:69:60:20:6b:06:93:9b:3e:
                    cd:44:34:d8:41:d2:ef:b1:e3:7d:55:79:c0:da:a8:
                    a4:5b:ab:0d:16:f2:49:9d:93:2f:4a:b3:d0:ff:e4:
                    1c:0f:92:06:30:cc:7a:18:f4:45:b5:b8:63:55:3d:
                    12:ee:0d:fd:10:32:5e:9a:9c:d6:db:a1:38:92:17:
                    b1:70:40:53:fd:bb:70:a4:49:40:d4:c3:4b:1f:37:
                    3a:32:6a:96:fe:a3:b3:38:f0:d7:dd:52:e4:0d:f6:
                    8b:16:dc:84:b5:4a:65:77:39:6e:23:37:0b:92:a5:
                    94:6a:c0:9c:b1:2c:44:32:b4:08:2a:c9:53:fd:c2:
                    39:e5:83:50:0a:39:99:12:1b:6a:14:fc:a4:39:52:
                    85:aa:e2:8b:62:e7:05:a8:af:77:56:98:21:4b:6c:
                    06:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:DF:6C:23:07:96:81:15:15:EE:2F:CB:05:79:92:2E:DD:20:EF
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0b:0f:76:5e:74:16:48:fd:85:ee:39:42:f0:8f:a9:af:d0:
         dd:d3:b8:6a:37:5d:a1:fc:23:01:f9:9d:10:69:5b:e4:d9:56:
         79:93:59:b3:7c:f9:7f:0e:7c:98:f0:e4:13:2b:00:d9:cc:36:
         61:e0:56:75:e4:f3:1a:e0:c3:05:b8:2a:fa:ec:c6:e2:4f:fc:
         22:ea:d7:89:78:60:81:8b:bd:81:48:52:e4:93:c0:2e:88:0b:
         88:43:58:7f:5c:11:43:b1:04:37:1a:1f:21:2c:10:de:d4:4e:
         6a:7f:08:fa:68:b4:e3:4c:ca:af:e1:87:9b:e5:5e:0b:64:bb:
         9b:98:e5:43:26:57:d4:4f:72:1b:85:1c:ca:59:e0:09:28:ec:
         64:75:32:61:bb:e0:99:9b:d4:d8:b2:53:7a:1a:b8:48:9c:fe:
         75:2f:d9:a3:68:39:e1:3a:ee:45:ef:a4:4d:47:2d:fe:a2:c4:
         41:d6:8f:12:77:e0:aa:44:11:c7:ed:98:0a:a0:de:70:ac:50:
         8a:a5:a2:14:57:a5:84:3d:23:68:f3:f2:3e:00:a6:06:07:04:
         09:1d:1d:f2:7f:5f:27:d6:41:c8:2d:5c:c8:3c:ac:74:70:0b:
         e5:b5:6b:d2:89:44:e9:0f:1c:4f:df:4b:bb:05:85:4e:b5:43:
         ed:d3:73:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:24:45 2025 by rpki-client