This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
File:                     AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json)
Hash identifier:          kYlWJEOaC3aCZ4W3RvBsvcYwrquNwsPMrFr17eUzFg8=
Subject key identifier:   5B:9A:62:C7:4C:CF:3E:13:61:F2:D5:67:3E:9C:F0:70:87:DE:25:53
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Certificate issuer:       /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial:       019B0D498EA6B7C5826A92975AF5929326CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
Manifest number:          14B2
Signing time:             Thu 11 Dec 2025 12:01:22 +0000
Manifest this update:     Thu 11 Dec 2025 12:01:22 +0000
Manifest next update:     Fri 12 Dec 2025 12:01:22 +0000
Files and hashes:         1: 5brKbRBtOvHFjh0oXn8r8X9Yoww.roa (hash: ACQA/vy+zy4fT5JbE8/TavE1wLY971r5N9JADwPEgrU=)
                          2: 5f4jHn1pLp9_czy0P6q4mWQPuaQ.roa (hash: 3KM64Cf6ndit+2Kg00oB3Tn7DU/3A/UJsq/nZfbmrTw=)
                          3: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: GL0/nkZMSL0V5/f7YQ0MvVyTn4Ss6muNWCPr1yG5UyY=)
                          4: DOQPFseUooqpRadfc9Jx4JU6a5w.roa (hash: XAqWMnzc6s03+/9ahgtWZZS99wqgCO9uHPxIAengots=)
                          5: HUhMVW-ldLEfTap6Snf3A4DJkEU.roa (hash: BWPDA7ah1ktjRpynxF0766anW0jKmETqpySALyHpL1I=)
                          6: KQ6n4tDni3AIbl89TiA9LShR5J4.roa (hash: eJSTrL5nCsUccTE0LUUEIBRIdvXEaKFzbIAwyimw6Ls=)
                          7: OrF2xG8avuxGrpmOXZN3cT6uOd4.roa (hash: 6sBq02Bpl0iKdz4R0G8yzMetYTxfTK9ZttAM0+HPHcY=)
                          8: TlLzQFaA8VlRrAgPC7RAijqNra0.roa (hash: SoMB+UVUymjveuF3MvkPc6BzZ0mDzrz28rZ+mOfkhhw=)
                          9: Un_m0DbVRENrUueiG3ELv6Kx-eE.roa (hash: pEXnje18ssNBz+sY/hTtrPTkAvEMGt9WYJcpE39pmUM=)
                          10: VOYB184l4I5HKOOxR4bYnxvGzZs.roa (hash: mdiqaccT7rJ4NJ3jvspjR5ZxSCjb6Tgu2CjLTSJb1Us=)
                          11: at_SsqmuruHw3U3ih5ZvkPERAo4.roa (hash: qgllsDkXSoqmopmK6Nvv+gOUGdbl9WK4/RlYS45trQE=)
                          12: mr-HNjr6kVeCJqK27hiMeoGu7wo.roa (hash: 2cCwRolIlWawdY4pJgJJRXgW9VztAAcC6pZFSIFR/7s=)
                          13: zkX0tVSTFsoyaxd_5uUsOhnJd-4.roa (hash: +7/YlZRCmdBXU3YPbp3jELJ7uYVAAvsXumfUvYl8oRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:49:8e:a6:b7:c5:82:6a:92:97:5a:f5:92:93:26:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
        Validity
            Not Before: Dec 11 12:01:22 2025 GMT
            Not After : Dec 12 12:01:22 2025 GMT
        Subject: CN=5b9a62c74ccf3e1361f2d5673e9cf07087de2553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:7a:3c:5b:a8:8d:b6:c6:73:2c:9b:00:a1:
                    5c:8f:b7:3f:76:1c:1f:78:0e:61:87:d0:e5:67:52:
                    ac:89:69:61:f4:be:a0:f4:cd:73:cf:24:21:af:ec:
                    c6:cb:9d:c4:fa:a5:2a:24:b6:7e:2e:d7:0a:02:07:
                    09:e5:a2:95:68:87:9e:d9:58:47:79:12:4d:03:1d:
                    73:f7:0f:bf:01:97:08:36:f6:1d:c3:63:4c:a0:83:
                    7a:8e:ed:4a:3d:4f:db:12:af:e2:82:ab:67:dd:97:
                    dd:d8:6a:fa:98:6d:64:53:bb:92:5f:b3:4c:87:7b:
                    43:b4:ef:11:82:6f:6d:79:ba:35:f4:01:12:32:61:
                    85:e6:32:64:80:28:32:cd:45:be:d7:d8:46:af:79:
                    14:75:2a:03:81:e4:de:77:2d:09:d5:3c:75:8e:e0:
                    ea:17:c4:f2:51:52:44:69:f6:9c:c3:a6:3b:0b:11:
                    5c:9d:4a:bd:15:b1:9d:fe:6d:eb:29:d2:10:d0:ad:
                    fc:11:07:ab:32:32:e7:80:64:56:ef:13:79:42:3d:
                    9d:da:86:24:5c:68:a2:49:47:2e:72:b4:b1:22:1a:
                    d3:18:f0:a3:e0:b7:82:47:3a:ef:41:a2:70:5b:10:
                    50:9a:f4:75:bb:44:3b:74:b8:9c:bb:8d:99:16:81:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:62:C7:4C:CF:3E:13:61:F2:D5:67:3E:9C:F0:70:87:DE:25:53
            X509v3 Authority Key Identifier:
                keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:cc:4b:c9:45:be:a4:e3:b7:4b:17:83:a8:e3:32:bb:49:d3:
         a5:d9:63:e9:e9:08:c0:02:a5:b5:69:8a:39:3b:0d:d2:06:43:
         52:be:5e:e8:b3:8a:9a:22:a2:13:23:df:31:a8:d0:aa:ec:8f:
         b8:86:d5:81:10:c3:b5:fc:62:f5:64:9c:d7:e8:6d:59:43:eb:
         0f:ed:29:1c:b0:6d:45:15:92:43:d3:e4:3f:dc:7d:7c:5c:2d:
         39:6d:77:bb:5f:7c:a8:36:bb:67:32:ec:0c:be:be:72:45:f3:
         c2:ec:08:2a:af:32:2b:4c:41:24:a9:9c:34:b8:ad:6a:ce:6b:
         94:d3:7a:e5:20:cb:d9:f9:d3:3c:77:41:1a:2a:1b:93:67:20:
         76:14:b4:99:10:c2:6a:d0:ac:de:d4:85:97:c6:f8:6f:5a:e0:
         5e:d9:5b:08:9f:e8:5e:c6:6a:79:26:c7:90:3d:dd:d8:e4:ca:
         48:f9:86:b3:60:54:d2:74:85:9c:ea:a8:5d:fc:78:38:a6:ac:
         19:f5:ea:94:ec:70:e8:fe:b0:c7:63:ab:5e:f0:f7:bf:ae:54:
         f1:d5:eb:72:57:25:67:80:4a:21:f4:b5:bd:6c:ef:6c:d6:20:
         bf:9a:8a:27:8d:fa:29:9a:a7:ea:dd:6c:35:83:b7:05:b7:10:
         ec:23:6e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 22:18:41 2025 by rpki-client