This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File:                     Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier:          hh7MnApBxFsr7h8696kH8aLiHQnXg3di54UWKWTL4TE=
Subject key identifier:   69:A4:7A:16:03:21:CE:86:4D:9F:CA:33:F2:54:5E:A9:F1:71:B7:8F
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer:       /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial:       019B34C45560CCF75BC29EB1F636DDA9D3F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number:          1719
Signing time:             Fri 19 Dec 2025 04:00:40 +0000
Manifest this update:     Fri 19 Dec 2025 04:00:40 +0000
Manifest next update:     Sat 20 Dec 2025 04:00:40 +0000
Files and hashes:         1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
                          2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: OWqAWGRRU68Z30mN3MiIoeLiYev7hgo8do6QKSxP9gk=)
                          3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:c4:55:60:cc:f7:5b:c2:9e:b1:f6:36:dd:a9:d3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
        Validity
            Not Before: Dec 19 04:00:40 2025 GMT
            Not After : Dec 20 04:00:40 2025 GMT
        Subject: CN=69a47a160321ce864d9fca33f2545ea9f171b78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:b0:0d:c9:d0:51:9b:d4:12:03:6c:95:8c:
                    fa:dc:c8:9a:6f:4d:db:b7:36:21:36:8e:b2:e7:67:
                    91:66:11:dc:84:7e:06:b7:be:54:78:21:03:84:8e:
                    8e:7d:15:e1:d5:0a:1c:cb:e2:73:ea:0f:79:68:8f:
                    cc:6a:b1:eb:84:5a:3f:c1:f9:a3:89:e1:c3:38:90:
                    22:4a:74:08:74:7c:67:6e:9b:5a:ee:e9:7b:c4:56:
                    b9:71:3c:01:42:00:92:08:b4:49:b4:02:e5:ac:d8:
                    dd:af:f9:1f:5c:08:57:59:86:e8:27:e5:b4:b5:06:
                    54:dd:ca:fd:15:c1:cd:5b:d2:90:90:46:1a:f0:b3:
                    8b:25:36:c1:2d:67:17:3d:f7:42:14:71:82:4e:05:
                    39:99:43:d3:ac:d6:fb:69:4f:d4:d9:2e:6e:73:76:
                    7c:bf:35:49:df:28:15:bb:39:87:37:4f:3b:ef:0c:
                    96:84:bb:c8:db:aa:50:f1:4c:7f:28:3d:13:9f:7d:
                    4f:18:51:bd:a6:67:2c:e7:c6:29:d5:57:a0:93:bb:
                    0b:32:93:a9:01:fd:d3:a7:cd:ba:cf:16:e2:35:a1:
                    3a:e9:cc:54:be:be:10:69:fc:a6:df:56:8d:ca:35:
                    62:59:56:c3:4a:09:37:63:c6:0e:b3:46:cb:04:aa:
                    a2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A4:7A:16:03:21:CE:86:4D:9F:CA:33:F2:54:5E:A9:F1:71:B7:8F
            X509v3 Authority Key Identifier:
                keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:83:6a:3d:29:bd:31:30:d6:ac:0d:d3:1b:df:bc:cd:21:aa:
         d9:d5:e3:ac:d1:bf:a9:cc:1b:58:7a:0a:ef:10:90:2a:62:1a:
         2d:83:5e:81:0c:47:93:7a:b3:12:b3:41:96:06:f6:4c:b2:61:
         70:ef:ce:d8:4c:11:1e:2e:9c:dd:ee:8e:95:df:e0:ed:bc:8a:
         d2:a3:6b:2c:61:40:c6:fd:b6:64:96:9b:b6:db:aa:83:e5:3a:
         74:72:f6:9d:a9:ec:c7:5f:05:a3:29:34:3b:0a:a6:59:2e:76:
         6f:ba:9e:e8:65:34:5f:b3:61:b3:a2:93:9c:c5:4c:78:11:26:
         a2:ca:60:b9:b6:6e:3d:8b:a6:a4:57:f5:ba:0f:5e:9d:f1:2e:
         c4:a0:92:d4:2f:0d:48:df:29:6e:91:c5:33:7c:b6:bf:e4:32:
         06:c5:cd:b9:1f:f5:a8:2e:ea:1f:8b:81:f8:a2:1e:ff:ed:71:
         1e:b7:62:14:1d:c8:47:f4:4e:75:fd:9d:d3:0e:f5:17:71:cb:
         2a:17:d2:36:30:73:14:50:b0:53:1a:75:3a:ee:4a:71:ae:29:
         45:2c:23:9f:a2:1b:56:02:e3:20:30:aa:2c:00:56:dd:d5:fe:
         d9:81:2f:81:eb:7b:ed:b1:06:1c:53:76:02:89:32:79:ab:37:
         21:d4:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:06:39 2025 by rpki-client