This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          h1dWKDKVVSPSHb5/n6aOZ6Ysqaf4u5tGssWLMInT34A=
Subject key identifier:   9C:7D:53:36:0C:2C:A3:5A:F0:A4:FF:CB:8B:9C:08:55:A7:F7:21:6C
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019A9AB397007369B553E732EB013EE5427F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0617
Signing time:             Wed 19 Nov 2025 06:00:52 +0000
Manifest this update:     Wed 19 Nov 2025 06:00:52 +0000
Manifest next update:     Thu 20 Nov 2025 06:00:52 +0000
Files and hashes:         1: 06Lo3TEshbdLYbOiItMhIrRRP7Y.roa (hash: UneRobUa0HOEvhDKQSJldaXTwM77pPlsoKNgn+2tT6w=)
                          2: 1-pnnUKWpCO7g-oyYSyyU_EoGV_c.roa (hash: nZP6B6GRqHHfjfeYVyMFTNBoRQupuuOfgOI2fjJzj7s=)
                          3: 5MuegZc941EXlrf0YhhZc8L4RKk.roa (hash: kHiIPTd4Jj/nvsaJvM9+xNmDRvRf/qPKh36k1EGAn74=)
                          4: 7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa (hash: kR684iL/BnCvE3LFX4t7FZeKIp8gUxbro9Dzx1l6bTg=)
                          5: 9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa (hash: ZO5449lHjcawIHB7jnV7qvkZUlVwVElkUGzx+T6uypQ=)
                          6: BUagtr_9kQTY8i9MdNXLq5cnNHM.roa (hash: FYPs+RVTF2NhaR4COrGmc5vQPfr7hdf5D4C5BHXkqrs=)
                          7: D4aJgyurg5sBV9aRkfmz2Wsl9lU.roa (hash: zPt9r8i/IiMY/kNPrd/XCtTmcwSRz/do1PNZccVMDv8=)
                          8: EtvYYt1SsPhVbUBlb-gyRW3BpiI.roa (hash: mKLlkYLYAV8TtsT89IDg/2Tbl2phQohLCpJVPEdEhrA=)
                          9: HAEssOWQRwSdc5TGWOA9Yahl7WM.roa (hash: GGhgfbO/+6MLQCq+HU+0d0YUwkftNYr1yFwg0YzDhQk=)
                          10: IvRgmT2reOzeuytZym-ijAGPPBk.roa (hash: dSmrvci4sQWpc2gVp+CZfEWf5dBDbTlu7yUnaMUzc1w=)
                          11: JxZ2PV2RYnx-i5FgEdX8_ua6vLk.roa (hash: knnuID3189A1YGf/2FgAAdsJ3ixY4wa1onnycZbuIbI=)
                          12: K92C_yNDKzsTCHDwtvUzf5BEgm4.roa (hash: uHvP6kjYrxhAN/UryJAYdy0y/8R5E+pHtm61oXkhge8=)
                          13: KAJR7Az03SttMk_zWkKXtcY_Zv4.roa (hash: mPYizTtCYKtuALtzDruuWZjX6sFa/cj7Bo/6GSj1GAA=)
                          14: KSgdLldEqa59Zql4-IziLX55TPU.roa (hash: XUqaNezvDdSkEpv/qzEgciAhag3ntITFRCYMF7kPQRw=)
                          15: RWE60Ns1mQje11llf2ihFVQVFic.roa (hash: DmwyemnAa+wXP/+CS2xNccyTOXtBd2D9MzdHPDGZd3A=)
                          16: Ro3-EUE6MEHO8Brlu5iaFdAlG5Q.roa (hash: u0Ts/8nh0LiCnzteTiJkyma0H6U2qh30HZDM8HXhaHI=)
                          17: YyaG3S0poVAnzLCPDdFpzugK_PQ.roa (hash: 24Gl7AEyeVcP6AdBrJexExnxFpJwqifZ9iimIKjJBOQ=)
                          18: _ts8OAlwojVR7RrxU45171xnFEQ.roa (hash: 1o7jXDgX6gwszcNb2hDK4ztSUb/3OElL3cvx3GiOQa4=)
                          19: dmEWgN6h3xFkBWjn9tW8-qNYTVM.roa (hash: xaHtGUiCewEsAabyHcWlMpWAwt2sd21SLnG70Nk49gU=)
                          20: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: x5zCG0bJPCC0i2XubHpiwiqmnkqDTsC9M9IgmSH6ZQU=)
                          21: fMNp0WawB9aiZNJhENwtDIMKv6s.roa (hash: kX9bqTf62TSE/EgEllfWIXr155ziuFoEFR2CWnne/68=)
                          22: fiCGtzKKE-k-7cha3uNWaHMAwQE.roa (hash: DG4Oq1uFkwkg9DHh3q1fJzBn5icOEgMS7FPAHL+4K8o=)
                          23: grdt8mgDzKnb-AIa5iVppNSJziE.roa (hash: YgndpH0ES5lTVzS9HaDo0++Ke9eabHkve02TiNj7Qmg=)
                          24: r0nJOCJ10S04X7H7zv2CKw_zDn4.roa (hash: xwzQb3JWF4aT5fFeGlsSIZbdFmn1yjypXLkzltmVenA=)
                          25: tx4Fg1lZCftTlOqdZzz3VUxny5A.roa (hash: YfKwLGhi+IqH7ACriVDXhCQ+ssHF1d2DL7St3G18BL8=)
                          26: v6DRm2BxHSU2TI8KD12J2fvQjdI.roa (hash: 2jOdiO20NF/908n5Oq5KVZ1zpLepOGdqMBtD3aX7Ya4=)
                          27: w4fdgcM_VAZQqEjdsKX2MaMiGZs.roa (hash: YDrr6E1j35eer9d2XxL6nLYIzyCqbmfyxlWv4gXRs3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Nov 2025 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:9a:b3:97:00:73:69:b5:53:e7:32:eb:01:3e:e5:42:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Nov 19 06:00:52 2025 GMT
            Not After : Nov 20 06:00:52 2025 GMT
        Subject: CN=9c7d53360c2ca35af0a4ffcb8b9c0855a7f7216c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:22:0b:1c:d4:c7:29:ee:07:10:e3:55:b1:
                    54:5a:f0:53:31:93:af:c7:55:0e:b0:54:62:46:74:
                    95:34:8b:99:f6:2d:15:1f:8f:1d:2b:0e:fc:8f:a5:
                    2a:26:08:a8:9f:92:aa:f7:15:a3:eb:2e:b3:60:41:
                    9c:53:fb:13:03:b3:17:00:29:09:e0:25:e3:21:8d:
                    1a:dd:0b:8f:9c:ab:1d:68:b8:ad:0e:d7:b5:b5:52:
                    43:0f:47:5f:e7:52:63:01:d2:22:bd:6c:09:4e:4d:
                    5d:aa:f5:4b:f4:5f:b5:01:aa:b0:b5:c3:8e:4b:53:
                    b6:8a:62:98:be:cd:9f:3e:d6:a7:65:99:d4:13:6d:
                    24:9a:c2:d7:41:d0:17:e3:f0:59:d5:4a:ed:ed:41:
                    2d:9f:f0:82:62:af:33:e5:f3:55:b4:cf:ce:0f:25:
                    b1:f2:50:3e:a1:a4:21:41:7c:71:58:60:3a:a8:54:
                    66:0e:27:29:1b:d6:82:e9:f7:0d:b9:62:72:cd:a6:
                    eb:9c:c7:5e:c4:7b:37:11:17:12:e3:d3:7f:bd:48:
                    cf:2d:7b:43:92:88:25:6c:0a:f2:75:24:a2:c2:ce:
                    2e:5d:9a:b6:84:97:16:13:97:ff:78:7d:4d:68:d0:
                    ca:0d:d1:95:01:36:b0:9c:21:5d:ec:b0:f0:94:24:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7D:53:36:0C:2C:A3:5A:F0:A4:FF:CB:8B:9C:08:55:A7:F7:21:6C
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:59:f3:41:21:df:3f:6d:1d:fe:a2:f4:6f:2c:99:e0:1a:cf:
         65:74:3b:0a:cf:b1:70:6c:56:5e:ca:ca:aa:2a:fc:5b:7e:ea:
         ba:91:6c:9d:7f:8a:0e:83:d7:2c:62:9e:55:78:2b:86:55:ec:
         e5:7f:0e:76:3a:d8:6c:47:dc:ef:0f:3a:be:d7:47:56:5a:91:
         7a:c5:46:40:ce:73:78:1f:30:2b:e2:a6:71:9a:26:46:76:dc:
         2d:19:db:3f:39:47:b8:1e:2a:e3:6d:61:56:96:46:96:aa:c9:
         94:16:49:94:d9:ab:f9:4c:96:4b:f7:b3:de:15:72:2f:80:87:
         b0:11:a1:6d:0e:ff:58:7b:b3:20:fc:64:4a:d9:c7:7c:3a:cc:
         1f:c3:2f:f3:be:3d:7f:6a:be:e0:22:2f:57:13:d3:77:1a:e0:
         7e:1f:2b:15:29:8f:de:0b:bd:06:4f:d3:e1:44:f6:75:ec:ec:
         66:12:6a:ee:17:a8:3e:0a:ae:b1:80:50:5d:cc:42:b4:78:01:
         9d:67:95:a3:22:c4:d5:b9:62:86:2b:f2:a8:7d:1c:53:99:d5:
         bb:a8:bc:39:a0:f3:6e:ea:4f:3d:6d:26:37:a3:ba:b6:3d:2b:
         dd:b1:62:64:62:a0:c3:39:4b:43:0d:59:40:71:7c:53:17:d3:
         ad:c1:11:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 19 08:56:53 2025 by rpki-client