This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File:                     H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier:          STkyZDLLb0HKkPlqteqUie3UbU0kZGos2D3coKy5zPg=
Subject key identifier:   FA:BD:05:F2:B5:24:9B:0E:84:42:82:EA:79:49:27:41:AA:86:F0:DE
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer:       /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial:       019B0E92BAE713322647C03DF08A0133CCEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number:          178E
Signing time:             Thu 11 Dec 2025 18:00:55 +0000
Manifest this update:     Thu 11 Dec 2025 18:00:55 +0000
Manifest next update:     Fri 12 Dec 2025 18:00:55 +0000
Files and hashes:         1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=)
                          2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=)
                          3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=)
                          4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=)
                          5: 9-BujRyAiG67GPBXPyZf0-ILLF4.roa (hash: KkFtXt5WRV9VBYy3IBvnda5CkZe910L5RSJzKX/5FFY=)
                          6: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=)
                          7: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=)
                          8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=)
                          9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=)
                          10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=)
                          11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: O9jeUWeaXNh/a9ji81PUZX/xsDCSgwqqLexMehL6S/o=)
                          12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=)
                          13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=)
                          14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=)
                          15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=)
                          16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=)
                          17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=)
                          18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=)
                          19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=)
                          20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=)
                          21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=)
                          22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=)
                          23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=)
                          24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=)
                          25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=)
                          26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=)
                          27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=)
                          28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=)
                          29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=)
                          30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=)
                          31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=)
                          32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=)
                          33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=)
                          34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:92:ba:e7:13:32:26:47:c0:3d:f0:8a:01:33:cc:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
        Validity
            Not Before: Dec 11 18:00:55 2025 GMT
            Not After : Dec 12 18:00:55 2025 GMT
        Subject: CN=fabd05f2b5249b0e844282ea79492741aa86f0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:ca:05:c9:8d:c9:e7:b9:e3:45:6b:33:28:
                    56:d6:03:a4:50:a3:c4:15:fb:b9:8d:86:ea:74:04:
                    79:85:10:44:1b:7b:70:aa:f6:d2:e3:83:08:2c:b6:
                    2a:af:da:a5:38:c0:2e:db:8c:ef:56:79:cd:25:1c:
                    79:61:51:3d:de:39:e3:22:9d:08:ad:2e:67:ee:30:
                    fc:9b:b3:af:67:b2:80:0f:f2:af:09:08:d2:c9:ad:
                    fd:b6:c4:36:a1:37:aa:02:99:b8:81:89:0a:fe:87:
                    46:19:c9:93:42:9b:64:1a:a7:fb:b8:b3:c3:d2:6e:
                    a5:e1:c5:92:42:55:e4:2b:44:ea:f3:81:b5:18:26:
                    a4:79:d9:50:b7:22:1d:7c:64:9f:1f:88:c4:3b:2a:
                    9a:c4:54:4c:eb:7c:00:7e:34:26:43:3f:88:d2:8e:
                    e0:6e:49:7d:fd:d7:25:12:eb:71:f7:6a:b7:5f:c2:
                    83:7d:c3:63:40:6c:57:05:c1:42:3f:2a:e8:7f:92:
                    08:cb:97:9a:2e:16:6f:ee:f4:40:2f:f0:87:fa:91:
                    b4:72:66:67:18:4a:da:81:2f:c3:25:6c:3e:c0:09:
                    d1:ee:2c:44:32:65:c9:4d:5b:cb:39:88:d6:ec:72:
                    c2:0c:1f:ff:43:cb:ae:f1:f4:d7:db:29:3b:cc:62:
                    4b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BD:05:F2:B5:24:9B:0E:84:42:82:EA:79:49:27:41:AA:86:F0:DE
            X509v3 Authority Key Identifier:
                keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:49:0c:50:6d:8f:ee:6a:ba:fc:25:05:ac:28:7a:31:a9:95:
         09:aa:b4:b9:2a:70:6c:68:25:16:2a:71:6a:67:60:b0:f8:27:
         b1:5b:e5:ff:36:43:da:b1:b5:e8:3e:fe:8d:0b:53:53:5f:43:
         94:94:5b:fe:d1:cf:95:9a:dd:c7:60:c3:81:9a:57:59:7f:96:
         e2:c6:b9:5c:64:6e:c5:74:8a:2e:92:2e:f0:c1:71:3b:cb:c9:
         33:12:a6:7a:d3:00:9b:32:36:ec:2a:00:55:9e:e3:ea:5c:cc:
         e1:65:ed:11:5f:33:2d:e0:41:6c:a6:8f:2c:3e:ec:77:62:80:
         41:01:36:8c:da:c9:56:c2:fd:76:29:29:b6:ae:a6:63:05:06:
         c4:0c:7a:ad:4f:39:78:9a:ad:64:fe:20:be:58:54:bb:58:ca:
         26:72:fd:2c:64:97:9c:60:84:13:6f:a1:1a:89:5b:e5:43:f3:
         84:42:a5:d1:92:a4:da:88:c0:67:75:8f:4e:67:0e:d3:9e:d6:
         09:8d:e3:29:bd:ec:8b:84:9c:05:6a:5a:e1:d9:08:75:b5:14:
         2e:a9:89:60:99:2e:1f:23:d6:b0:ba:fc:3e:7a:a5:52:a7:5c:
         bc:1f:1c:41:da:fe:36:df:95:69:35:76:9d:c5:32:1d:f4:c3:
         f7:fa:92:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 03:07:21 2025 by rpki-client