This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
File:                     IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json)
Hash identifier:          sYc7LBI+l7gxx/cje+PTG61yFGbjRTBgIIJT0vMp5t0=
Subject key identifier:   3E:56:9A:2E:22:50:05:9D:27:C4:1A:60:CC:08:02:57:9B:A6:3B:F8
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Certificate issuer:       /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial:       019B43933714FFD31194649EC0DDDEFF5868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
Manifest number:          12F8
Signing time:             Mon 22 Dec 2025 01:01:19 +0000
Manifest this update:     Mon 22 Dec 2025 01:01:19 +0000
Manifest next update:     Tue 23 Dec 2025 01:01:19 +0000
Files and hashes:         1: 0KbtCJykTY4f7nA0QJzqQGWoqYA.roa (hash: T5Ow7OsLV+eTW1oVpch0eqCQrMYUfj4kySVUiBzlsHs=)
                          2: 1ioN5dcfVbbcvdiMUenNAJRsRF8.roa (hash: LLwhiNyP/7V6w2Kt2BpGMO0L81bfKA5S/Ex0r1Yi3e4=)
                          3: 90wCTu_VG0cg3v518Jw-uQZKG0I.roa (hash: WGgublq3d4Yb/k0UHfCjetZRey/6UF8GGMjAYAWKBew=)
                          4: 9ustLRCmQrVjSomh2CSbiU8tgAw.roa (hash: iqcE7BuOcWgu3suvDSZKPBILDJpc9DfkSe4omHd7kiw=)
                          5: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: QVO2U/0aidFmNEuvbLLP24jHfNXx4DcpgUh4AIG6x+A=)
                          6: Kp4lqcWI2L_udI0vjyDZ3KKhNqw.roa (hash: dhMCiSDQZM4kurcanBYjwM08N5LUsyI+HR6PEcfZSs4=)
                          7: Nv82XPVAXh7i0NinV8op7cxSCkY.roa (hash: Gwu9owA9BpGL2Gb5O0jUF/4E4PLOvSLoDJSNHgY1Ne0=)
                          8: O49fEEmdduEDlmHjywBTe4hbUrI.roa (hash: QGPcl2jLSGRNH/NTf0tO+RhE6wtLBqqp92bw06oxNfU=)
                          9: OPHGk6u2qSFcpqNXDoRynwkxRPg.roa (hash: tKvHMnELV5VNPCPmJyRYPHGYeZPGGn54PcC8eCvYwUE=)
                          10: R4FmsnUoBv32hIQfOsFBIJAcy94.roa (hash: 6kCVXpptWnPUtqwzVF9W/MkzfoaZ3BK4usx4hMk/bHI=)
                          11: SGXEhyIKPmMOen6I1PkB3pLeCvY.roa (hash: 9EH2IzLvB2rKmrGF7xG6OifEC/3ZYYgbCersKE1ntGs=)
                          12: Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa (hash: AngxdPPy9+UbmPG/n/8j13gA9QjKCfwyDf6PucND4FI=)
                          13: Uj9f4IMBhaHqTrTKSiJPLOEuUXY.roa (hash: BM3naWIqw85ohaDvPSxO7Ut5OjuXGJkv4mwMyMN/UKg=)
                          14: YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa (hash: B6C4+KUjcPcxnfaU4l6MZpxuvV7eh3cyPcoK+0EeHe8=)
                          15: _6ri1KyGrKWa-tqTjRsqpyUSZCk.roa (hash: isLYHAJU5J3ZPuL1/UUePiNJm0MmjXaPrbTm1cYHTyQ=)
                          16: _CI5_4aNxKaEPWYHOcyZKAbyObU.roa (hash: X5MyuI8Ww88wubWEkkjHn57GLRoFZnT3Qc6Lwjl782U=)
                          17: cHMExnQg_NgXj9RSngWJiE0Ry9w.roa (hash: ccksNIEDmgp05yf3K+8vErJuvCl+xg8f85HZISEiov8=)
                          18: uPxOt98I1tBick-uHh01WFNrRvQ.roa (hash: /HibKZ31j64AXkabjb8asgWDIKN4DMb9TRIPZEdaXFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:93:37:14:ff:d3:11:94:64:9e:c0:dd:de:ff:58:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
        Validity
            Not Before: Dec 22 01:01:19 2025 GMT
            Not After : Dec 23 01:01:19 2025 GMT
        Subject: CN=3e569a2e2250059d27c41a60cc0802579ba63bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:79:90:ab:c5:75:80:53:76:91:17:94:fb:
                    95:11:68:80:e6:99:58:c7:b9:cd:f8:eb:09:09:cc:
                    a5:b6:e7:f4:e1:cf:2f:18:79:a6:12:ac:94:3b:03:
                    ed:be:16:5b:68:cd:55:7f:b0:fe:de:f6:2d:48:5c:
                    70:cb:6d:99:4f:7d:c9:09:38:be:d1:25:e5:cc:bd:
                    1d:b9:8d:f9:f7:24:f7:33:c1:63:3c:c5:b2:19:d6:
                    b1:a4:c4:77:20:98:13:8c:f6:22:38:29:88:38:c7:
                    ef:9a:bf:33:9a:48:ed:0a:a6:8f:af:5d:5e:3d:b5:
                    e0:c8:f5:96:c0:7c:e1:db:9c:b6:c8:08:7a:f4:3c:
                    bf:b3:33:44:7d:26:2e:87:99:6b:9a:5f:ae:f9:10:
                    b2:d4:9c:6d:8f:84:66:1b:9a:87:55:ce:1c:0e:f8:
                    c0:34:e4:d0:24:50:2f:ca:65:55:b1:f4:90:f3:50:
                    e9:72:95:8f:5c:ed:82:bc:fc:62:b7:fd:f8:ac:09:
                    bc:f7:cf:b5:60:e3:38:a4:7c:f4:ba:eb:9c:97:1d:
                    67:bf:13:5a:25:24:0d:2d:be:29:b9:71:7b:63:5e:
                    4b:c7:ba:47:16:e1:54:11:c4:0b:ff:3e:26:44:99:
                    f6:12:66:ed:ae:4a:2e:41:2b:92:b2:8d:6d:ed:bb:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:56:9A:2E:22:50:05:9D:27:C4:1A:60:CC:08:02:57:9B:A6:3B:F8
            X509v3 Authority Key Identifier:
                keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:6e:20:4e:53:b4:fe:61:27:c4:5a:65:7d:81:32:53:db:
         44:c5:7c:a6:ff:c1:f7:21:3b:fa:7b:3a:53:27:44:b0:50:7b:
         fa:c1:f2:5d:e8:09:b9:42:97:77:ea:6e:85:dc:57:87:77:40:
         3e:eb:bc:83:6a:55:50:45:f6:e7:27:b8:a4:ac:6a:78:ce:b6:
         13:24:a6:89:ac:a9:a1:57:61:c7:cc:34:14:b7:71:6a:9b:05:
         b6:7f:9e:41:ab:3f:61:98:6e:3e:49:cc:f5:51:d7:96:e9:02:
         6a:ec:08:9f:ab:93:d1:73:8b:97:e8:17:7d:46:57:13:f6:05:
         81:76:92:bf:ba:b1:6d:0d:28:1e:52:d4:d6:c0:d6:1a:ae:31:
         86:ae:d7:0c:31:69:94:6b:6d:5c:4e:b0:48:e4:d7:ba:8a:a7:
         23:f2:8b:e5:e6:d5:75:80:84:b2:87:0f:e8:32:76:88:a5:fa:
         65:96:24:4e:7f:be:6a:6c:12:30:36:1d:15:f3:f8:2c:6a:e3:
         50:8a:f5:6c:92:22:d6:85:30:b5:dd:0c:6e:f5:2c:9d:b2:4d:
         20:34:65:79:7e:7e:20:65:cf:37:26:9a:ce:b4:39:d9:3f:33:
         73:a2:1b:d9:17:34:24:80:f4:7f:33:40:62:ed:80:97:0f:bb:
         ec:06:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:07:34 2025 by rpki-client