This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
File:                     snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json)
Hash identifier:          2PapIDX4F79sj9y4ctVuPh5pI4zMFG18Mx9XELdPkSc=
Subject key identifier:   2C:5A:31:6D:1F:CC:4A:2B:32:9C:6A:90:3E:ED:22:F6:E9:CD:B9:77
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Certificate issuer:       /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial:       019B123839A704192E351092DA469EF94FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
Manifest number:          129F
Signing time:             Fri 12 Dec 2025 11:00:33 +0000
Manifest this update:     Fri 12 Dec 2025 11:00:33 +0000
Manifest next update:     Sat 13 Dec 2025 11:00:33 +0000
Files and hashes:         1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=)
                          2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=)
                          3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=)
                          4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=)
                          5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=)
                          6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=)
                          7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=)
                          8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=)
                          9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=)
                          10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=)
                          11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=)
                          12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: uJorGnpCFY26gO+ZDUbklVDnuiiG1im1apEXvy1axu4=)
                          13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=)
                          14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=)
                          15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:38:39:a7:04:19:2e:35:10:92:da:46:9e:f9:4f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
        Validity
            Not Before: Dec 12 11:00:33 2025 GMT
            Not After : Dec 13 11:00:33 2025 GMT
        Subject: CN=2c5a316d1fcc4a2b329c6a903eed22f6e9cdb977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:c9:c6:3c:28:8c:5f:1f:69:d9:4f:dd:d7:
                    22:78:0f:b5:60:26:f7:83:b3:79:8d:9f:0e:9f:b6:
                    c9:7c:dd:29:ff:bf:1b:0e:6c:f3:bd:3b:a7:31:b9:
                    5d:7a:9e:88:44:eb:d4:90:a4:8b:00:5f:f4:91:9a:
                    e4:76:d4:58:55:69:a9:7f:fd:c2:aa:d2:d4:7a:5d:
                    72:e4:6b:41:22:4a:c1:e4:b3:3f:64:02:96:46:b4:
                    c6:26:ab:4f:bc:26:a0:74:2a:65:11:e2:59:d9:01:
                    67:92:f4:e1:fa:54:73:b1:e8:90:09:8e:90:ab:15:
                    d7:7e:42:36:97:80:35:e6:c7:89:b4:19:a9:4c:f7:
                    f9:f0:83:93:03:c9:06:c9:2b:39:4c:b9:02:6f:35:
                    6d:2b:4c:c3:09:35:c1:de:47:4d:14:9c:50:f0:ba:
                    37:89:23:77:28:8f:c6:56:77:43:5e:da:63:24:02:
                    c0:c4:85:e9:98:4c:19:dc:66:fc:f2:0e:22:07:c6:
                    5c:e5:c4:50:6f:63:a2:11:ec:77:a4:91:8d:04:64:
                    cf:bc:db:07:95:a3:7a:d3:c6:d9:69:96:0e:72:52:
                    90:3c:ca:df:70:5d:41:ff:da:43:e4:71:63:d9:f9:
                    14:1c:5d:33:d6:56:cf:fb:2a:8b:ae:1f:ba:d4:a3:
                    50:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5A:31:6D:1F:CC:4A:2B:32:9C:6A:90:3E:ED:22:F6:E9:CD:B9:77
            X509v3 Authority Key Identifier:
                keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:89:a7:22:7c:47:20:0a:42:bd:f4:be:aa:ae:5b:b9:f1:21:
         cd:bb:ff:2b:a9:20:82:41:fc:6d:b6:ac:c3:a0:28:7c:68:53:
         db:91:82:8d:a2:e6:dc:43:4b:f2:63:78:c8:fd:e6:62:8e:4c:
         67:b7:f8:0b:d6:3e:d4:16:9b:83:50:88:73:0f:15:87:3f:ba:
         9e:c9:91:41:c3:e7:ba:44:4c:da:09:87:b5:e9:53:8a:c9:15:
         c7:95:0a:e1:9b:02:2e:ed:1c:56:0c:97:ef:44:6b:d3:cd:dc:
         c3:f7:be:a1:8e:91:1d:c3:b9:dd:d5:23:77:be:c9:60:4a:8a:
         a5:51:a1:15:ee:7e:3d:44:5e:0d:c9:89:0d:6e:56:47:ff:52:
         e7:8c:24:97:ae:cd:c5:c8:8c:e4:ee:ec:ce:39:34:ac:b2:9a:
         a3:10:f1:57:67:e5:61:63:d7:90:48:d8:82:b3:5b:7c:57:ec:
         90:15:2e:da:2a:a9:08:f6:45:60:bb:83:cf:57:25:9f:9f:e1:
         a0:eb:c7:61:30:5d:cd:ce:51:18:fc:4e:db:20:72:07:bb:e4:
         b8:6f:02:74:47:4d:5e:97:e1:13:85:a5:e5:a8:14:98:00:26:
         90:e7:98:75:84:11:96:53:9f:44:d2:14:45:f0:e5:9e:b5:d3:
         aa:56:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:23:34 2025 by rpki-client