This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
File:                     h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json)
Hash identifier:          uKS3XH3sWWUOua/lcaeM+XwAy4y4ank9bMOEXq+DmJc=
Subject key identifier:   09:8E:1A:09:FB:43:D6:22:20:54:09:45:C9:AC:0D:5D:F9:BB:2A:29
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Certificate issuer:       /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial:       019B0633FFE77128D6C15D3DB0969BE34F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
Manifest number:          1789
Signing time:             Wed 10 Dec 2025 03:00:29 +0000
Manifest this update:     Wed 10 Dec 2025 03:00:29 +0000
Manifest next update:     Thu 11 Dec 2025 03:00:29 +0000
Files and hashes:         1: 3VQFHIG_0NRiYGSMTzNDYelPmMs.roa (hash: T8N7lYcGBn0m7uBQBcevnqsWbvysQD6cxVHO1RDwUvg=)
                          2: 41kwTSa8H9b9pjrkUzwf85FQ470.roa (hash: 6DgsyUX2uyntOPFl8yDMIgTXXXs0mzyQ219673BzCzU=)
                          3: CdQNI5gcW0_1cf24cLvP-tL_omw.roa (hash: fyArCRfx7SbzhmzmpSevkzJflw0c7SkqK2TimwbjqzM=)
                          4: RXJMzhMtehSuCCi6uqljNw1_L-s.roa (hash: Xot9S/JUju+/cZl9baS7ZUR4Rh18U5S5qk4hiX6txpg=)
                          5: TpqMtUwJukfz53BZIUdbM-kP9dU.roa (hash: sJ+1FquCHUKBx1oFow8K9ca95AgoJ61IjnusPLlcDN8=)
                          6: WEKuOaRTTX2rTln9asflqP9Y2Os.roa (hash: EcqtEEKcbvmbmPvboEcXGauHM+e7HHmS4JSP0Le2t4o=)
                          7: XmOvv05xULfAWuDqrX7juNO-0qI.roa (hash: eJeMTOSpJLyqSZNQmSL2OZUvlINOSkmPnV9aTneLjHg=)
                          8: Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa (hash: 6XHRFIs5VNl1aw2+x8Rz4IQniQIfYw9CyiplPPtk5bE=)
                          9: aMv6gEqWxpGKwwWm6t5nV_iaM3Q.roa (hash: +a48j1hsLG2vzEIY2MRVBswlr1+jm51V+Dk+4EhL/9Y=)
                          10: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: Nzvc7uyxhWtt0mtzjoJYGVggYZBXVQQNa0KJk04Bf2w=)
                          11: jF6aKXBNyHTawjaz9GVexS6_Vps.roa (hash: FiDTfOMoZak8gOhtJT/8yhL0tIdZjUn13AvzOxfMN0E=)
                          12: s6XbpS6zvG-OGcqP78qsGOOoOlQ.roa (hash: vai/46FuXyssCtnAk+MIcYY2mUqRBxwISqAf2lFmzsg=)
                          13: vsuobB7Q7M7H0d2b7icsBX46rF8.roa (hash: 7WzZ613I/LXa4Zefx9tEqY2ZhSRre3hj1QC98fA5RuY=)
                          14: xP11eIeQX9x-FJdxDPaYbALauGA.roa (hash: X/B/3lK+XxCa5BQgDlvPLTFtIiO9rYw/6L5OCGSXKQE=)
                          15: xT7aM3kUy4b46Qb4CAkkSam9t5g.roa (hash: Rfd0mKt9HyiAqh5+s2geHZ1SUFHa0fSNkwoTUgmAYpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:33:ff:e7:71:28:d6:c1:5d:3d:b0:96:9b:e3:4f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
        Validity
            Not Before: Dec 10 03:00:29 2025 GMT
            Not After : Dec 11 03:00:29 2025 GMT
        Subject: CN=098e1a09fb43d62220540945c9ac0d5df9bb2a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:b5:b4:4b:ee:e6:0a:89:23:ae:a4:dd:af:
                    0b:3d:6f:b7:ab:77:6f:97:6e:b6:73:5b:a0:b8:cc:
                    99:ca:f1:85:92:e5:3c:0a:d8:20:11:a3:ec:2a:71:
                    5c:eb:7f:53:d9:ac:d4:22:31:d1:93:51:4a:2a:82:
                    c4:6b:ee:68:29:e3:02:a5:07:70:8a:88:55:08:0f:
                    ba:9b:22:2b:54:b8:7a:1c:5b:a5:1e:9c:2a:b6:88:
                    8f:ae:f8:90:61:10:85:45:32:d2:79:ce:c1:99:e3:
                    67:b9:f4:90:5e:61:68:f7:ee:92:a8:8b:e7:d2:f8:
                    dc:b6:e2:e1:3d:bf:79:84:e3:62:c7:68:00:9e:77:
                    da:c1:eb:e8:78:07:f0:af:4c:e2:34:8c:67:0f:9d:
                    43:4f:bd:28:88:d2:98:11:70:e1:b8:fb:16:b9:88:
                    1a:49:56:34:76:ff:18:3e:ea:1c:0e:84:53:90:a3:
                    73:cd:4f:44:27:31:68:fb:22:58:d2:01:ef:cd:a2:
                    30:ad:cf:28:20:f7:ee:46:f3:5e:c2:62:ed:23:59:
                    31:cd:37:29:e6:00:0a:06:4f:c8:44:92:c2:5d:97:
                    e7:0a:df:fe:7c:48:bd:90:84:6c:31:66:33:c1:17:
                    53:d1:64:bd:de:56:82:cb:26:f7:1c:a9:0e:70:f6:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8E:1A:09:FB:43:D6:22:20:54:09:45:C9:AC:0D:5D:F9:BB:2A:29
            X509v3 Authority Key Identifier:
                keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:6e:03:79:18:14:21:27:43:a5:65:cd:44:be:2a:ea:9d:
         02:a4:c8:b7:9a:2f:b9:29:ce:4e:9e:5b:d2:f6:0e:50:84:b1:
         41:c9:4d:ae:3c:97:e9:5d:36:78:01:1c:d7:a5:8c:a3:85:c3:
         af:56:e6:30:9e:52:6d:c4:5d:73:2c:54:a7:8b:f0:6d:04:ce:
         04:18:a0:44:b3:46:0f:1b:ed:c0:4e:6a:9a:89:b7:c6:96:15:
         ca:b8:3a:a1:2e:f0:6a:52:9a:ac:e5:18:a4:dd:97:d7:ed:f8:
         54:28:e6:3e:14:4f:21:d8:3f:d9:c6:f2:d3:7d:3d:e7:2b:b1:
         ec:06:c3:83:83:8b:40:c6:b6:31:41:89:7d:13:19:8f:f9:b5:
         9f:fe:f4:e6:05:bc:8c:a9:4d:d3:2c:66:91:ee:18:0f:80:65:
         54:77:84:85:51:c7:01:06:8c:2f:d4:32:5b:ee:42:c9:ff:01:
         6d:c5:6d:af:ff:a0:82:87:0c:6c:c9:88:52:b0:01:c6:62:0a:
         a5:6f:59:cb:e6:b3:34:c4:32:b2:43:c3:b7:42:d7:af:2c:54:
         65:4a:81:7f:13:33:2d:fc:e7:5b:d8:9d:fe:f4:30:51:0a:0d:
         86:f5:e7:e2:dd:a6:23:6e:21:86:7a:9b:d8:96:7f:05:c1:d8:
         54:60:91:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsGM//ncSjWwV09sJab408WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi
ZjA2OTIwHhcNMjUxMjEwMDMwMDI5WhcNMjUxMjExMDMwMDI5WjAzMTEwLwYDVQQD
EygwOThlMWEwOWZiNDNkNjIyMjA1NDA5NDVjOWFjMGQ1ZGY5YmIyYTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZO1tEvu5gqJI66k3a8LPW+3q3dv
l262c1uguMyZyvGFkuU8CtggEaPsKnFc639T2azUIjHRk1FKKoLEa+5oKeMCpQdw
iohVCA+6myIrVLh6HFulHpwqtoiPrviQYRCFRTLSec7BmeNnufSQXmFo9+6SqIvn
0vjctuLhPb95hONix2gAnnfawevoeAfwr0ziNIxnD51DT70oiNKYEXDhuPsWuYga
SVY0dv8YPuocDoRTkKNzzU9EJzFo+yJY0gHvzaIwrc8oIPfuRvNewmLtI1kxzTcp
5gAKBk/IRJLCXZfnCt/+fEi9kIRsMWYzwRdT0WS93laCyyb3HKkOcPbONwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmOGgn7Q9YiIFQJRcmsDV35uyopMB8GA1UdIwQY
MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt
YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3
LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2NuA3kY
FCEnQ6VlzUS+KuqdAqTIt5ovuSnOTp5b0vYOUISxQclNrjyX6V02eAEc16WMo4XD
r1bmMJ5SbcRdcyxUp4vwbQTOBBigRLNGDxvtwE5qmom3xpYVyrg6oS7walKarOUY
pN2X1+34VCjmPhRPIdg/2cby03095yux7AbDg4OLQMa2MUGJfRMZj/m1n/705gW8
jKlN0yxmke4YD4BlVHeEhVHHAQaML9QyW+5Cyf8BbcVtr/+ggocMbMmIUrABxmIK
pW9Zy+azNMQyskPDt0LXryxUZUqBfxMzLfznW9id/vQwUQoNhvXn4t2mI24hhnqb
2JZ/BcHYVGCRXw==
-----END CERTIFICATE-----