This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          Uz/J9x73aunpsqUZYWxLPZBYkz52hv26LnjawaspTa4=
Subject key identifier:   E5:E3:59:4D:B9:A1:88:15:DC:FF:11:7D:5E:C3:76:49:6D:3C:FC:CD
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       019B08FE561A0BE7120EE73959BE5AFE5941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          0D7E
Signing time:             Wed 10 Dec 2025 16:00:44 +0000
Manifest this update:     Wed 10 Dec 2025 16:00:44 +0000
Manifest next update:     Thu 11 Dec 2025 16:00:44 +0000
Files and hashes:         1: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (hash: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=)
                          2: 2ReKdgaYtIp3NshswWa0Ynp0WRg.roa (hash: mQx2YD8epmmqsl3MP9UUukVpCGzOBVTsrzitNDkbPKs=)
                          3: 30HBNFGj_StP7OnHCFYamttMRRo.roa (hash: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=)
                          4: 5JotAZkNsZmdy-emIgo1Usa9KiQ.roa (hash: KxNBmCau0tbWKOvKkyRjqvgSzYN9kgOnNbVL/mkB+N4=)
                          5: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (hash: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=)
                          6: 8qrXy8Q6IOvmRFa2BdiyfUkrMzE.roa (hash: qRXi9zsrTMdGbyvne1sTEgP/YtX/quprNa5rw9UyfMw=)
                          7: 9dBG9JuRDTu6Pezri5X9qjGglbU.roa (hash: +cmNANqYW5/TEslGANWHU/0YCKjGJgRnyw8zEhIdvRo=)
                          8: 9xcEatshauEO3IQR_Wu414zl24Y.roa (hash: fKSjlkQxueZV9jBeE970HxiT/qHpLp4twJArvl1NDVg=)
                          9: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (hash: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=)
                          10: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (hash: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=)
                          11: JBJDitDPQDp7uau__zLA0UwhCgw.roa (hash: R106/g5VQisRMQ9a+37PX+GheT0rDv2YD6EjIhwfsDo=)
                          12: LFMXcJ3OWByQXVfJAqZ7_ocSupA.roa (hash: Up4ZD4PUB4O4YaDGDS3M7+WCfTXGSLwStZaxdawLRGY=)
                          13: LnB1q1PM_kJ4XevQHSSwoAwFcTY.roa (hash: e7swdzDOe/Y/3x1bZCYwD/+li1TB00/HX6iaal7aLeI=)
                          14: MKk2eIZdBEHoejBBXOnExSwoMxY.roa (hash: a46f0IAxws6EBAs2zTmMvZ2jH6RBYNwGRDtcrPOSWm4=)
                          15: OsT-YBp3DAavsitz7NLsTwnK23M.roa (hash: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=)
                          16: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (hash: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=)
                          17: SrZ4RZPbkkulLRjDnKeeMWYxwzY.roa (hash: xB6TzyhgS5V679nPp3RIvv2qtymA4YPYZ/DhJiBNbCg=)
                          18: UKaRBf7raXAB65UumI4EA2EWZqM.roa (hash: 1Uq1ZdFBb9LIO9QqzDwwuSeOXeS0ihELz/teT1S+g+g=)
                          19: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (hash: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=)
                          20: YPVSkLDiWHzeuV_smRTrO2e6AgU.roa (hash: +1W/Hbl4uhL2Lv9y3DsFwhs/x9rhWXoW9vVhrNvRIik=)
                          21: _LaL2NGVikd-BXS-ihRrP5NY6ik.roa (hash: 8tMeMGtCDzB7YrSEIzydRyBsTv0sIFfm9Cd8vLZYHTU=)
                          22: _uuRs1q0kzzxOE8VMZdcXbaVR-c.roa (hash: nDyUFHiWf+ewggFbVwk2c6PxPQ54RKuKRQAD1V+EJys=)
                          23: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (hash: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=)
                          24: eO1Hg2bQ0LWJz736BXYL29sRTxI.roa (hash: HcMHeiosVQ+4/TAZPJOqS1U+rgX5YSFqAZBpZptf6lI=)
                          25: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: vaQ7n/Qz6gwIpQPnq3wByKX4exB8YX17erUYBZ5lxww=)
                          26: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (hash: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=)
                          27: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (hash: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=)
                          28: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (hash: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=)
                          29: s649jiXFkCJpu3sQ9wPlOGSgSkA.roa (hash: /65JftPkJbj96qvwBEvTKbcXlXWX7OGD8m1xhpXjm1w=)
                          30: sHKnbDWYF8v5U1MKqrGRJFJuELo.roa (hash: qVQJCzy3Z998XHa+C8cs8vimL83JWc3p3pyIfEzepNY=)
                          31: tNQHVbwfibzVK7c351AZ9f-onjU.roa (hash: 1fVQ9lETxiE2tUgAWaLP3sly8RCYpr3iz/wk181/7cM=)
                          32: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (hash: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=)
                          33: vCDztrlrNrPt9fo6YouxSjnnFVQ.roa (hash: C9gjTPImSV8XGrjP1z+30zoQvLbM1GI48tOhez4Na0Q=)
                          34: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (hash: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=)
                          35: wIwLqinns0huK5c5I3YcfTxRkzU.roa (hash: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=)
                          36: wOgDZdkiW7CNnk2a42GfpRveLMM.roa (hash: fZK2xuA5OS6VVpu9Qqe8Cfg/Fx5ihhnU//91+adop+w=)
                          37: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (hash: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=)
                          38: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (hash: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:fe:56:1a:0b:e7:12:0e:e7:39:59:be:5a:fe:59:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Dec 10 16:00:44 2025 GMT
            Not After : Dec 11 16:00:44 2025 GMT
        Subject: CN=e5e3594db9a18815dcff117d5ec376496d3cfccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:51:dd:7c:77:6f:cc:bf:f1:a4:a5:5f:2f:
                    e1:df:ab:8a:56:22:71:fb:98:d9:ed:9d:48:22:9b:
                    b6:3c:05:e3:28:98:d7:5c:cf:af:86:35:cd:57:05:
                    83:6e:d5:ed:30:83:04:25:b0:13:d7:05:3e:c9:ec:
                    f6:27:5d:8b:b0:c1:da:29:f9:d0:05:b0:ef:94:2e:
                    cc:03:fa:c7:fc:52:1d:bf:0c:77:95:13:2c:b1:2e:
                    e1:44:5b:4a:cd:88:89:05:b9:10:4c:a2:f4:23:df:
                    55:c0:42:cd:d9:50:0b:ea:6b:e6:07:3e:b7:f1:d9:
                    d1:3a:8e:ed:df:98:2d:64:a6:3a:c1:df:73:10:84:
                    e0:0e:f7:e7:57:e9:67:78:0c:58:4f:2e:fd:fa:b1:
                    64:1f:f8:d3:cf:7b:0f:22:70:e8:31:b2:bb:2e:7c:
                    a3:87:d7:22:dd:b6:1a:6e:62:3b:d7:b4:df:96:86:
                    77:ba:3c:43:13:48:ea:fb:b6:09:ea:24:a2:30:b3:
                    62:6d:c4:78:f3:90:3b:e9:99:34:ad:c3:e5:2d:7b:
                    a8:3e:68:f4:75:66:cd:58:a3:ef:24:cb:95:44:6c:
                    47:61:bf:1c:86:b2:e0:c6:e3:a7:10:98:8c:4a:2e:
                    e2:47:f7:17:5e:40:72:50:9d:e1:4f:6f:59:cf:07:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E3:59:4D:B9:A1:88:15:DC:FF:11:7D:5E:C3:76:49:6D:3C:FC:CD
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ee:f8:fa:d5:07:a3:98:08:df:2a:c8:fa:08:c0:dc:ec:e3:
         80:29:71:bd:f6:43:a0:6d:56:81:26:48:0c:8d:5d:de:f6:ab:
         a2:32:0b:0e:f1:4c:28:b2:b3:d0:e9:ba:92:a9:a0:f4:8e:fc:
         b0:9f:98:2c:85:27:ea:a9:e3:c4:85:83:bd:ed:ea:b0:65:cb:
         f1:a0:83:f5:29:4e:68:0a:31:28:4c:88:e2:d1:81:f9:57:0d:
         88:02:38:02:6f:5a:35:a3:d8:2d:43:ac:4d:57:cf:a8:8d:5a:
         13:49:cf:56:54:75:a0:85:f1:4e:b9:12:8f:f1:1c:7a:0b:fb:
         f1:e8:5a:29:ed:19:c6:9e:c3:14:ad:78:44:12:a8:fa:ac:8d:
         6e:a0:fc:47:e2:62:94:a4:b5:67:e4:cf:42:7d:a7:5d:ab:f5:
         ba:a7:74:25:e7:3e:01:a1:5f:56:05:3d:6c:c3:6f:73:e6:db:
         d7:bf:ba:51:c8:21:e2:12:13:93:75:0d:1c:1c:23:43:02:d4:
         e5:a6:9d:2f:89:a5:d0:7f:3b:ab:03:6f:ad:8f:33:ee:44:82:
         22:ea:a1:ed:fc:48:4b:87:a8:0a:b0:b7:91:0d:56:92:7c:cd:
         d1:cf:f3:99:11:9e:f7:04:d6:d8:7e:fd:9e:b8:f0:e2:0f:88:
         84:65:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 23:02:41 2025 by rpki-client