This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          kCRtfEqrsvCoo2+sXySFH6jp0CCI/9QVHpx3Mj25j44=
Subject key identifier:   17:0F:32:30:E7:51:40:23:93:23:15:A5:F8:F5:4D:43:DF:ED:52:2C
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       019AEFAC544B920AA8BB4D898F7BA2A39A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          17FB
Signing time:             Fri 05 Dec 2025 18:00:39 +0000
Manifest this update:     Fri 05 Dec 2025 18:00:39 +0000
Manifest next update:     Sat 06 Dec 2025 18:00:39 +0000
Files and hashes:         1: 1-L9qSgE09LkQG7Ea8EBDdDw4ino.roa (hash: L03XGEs9qhc6ohMjsbyVjgW+T6aNu0Or4uMNslNgGaI=)
                          2: 4iHcBGfl4oJ0jUkqbJpTpkjJRRA.roa (hash: 9gUiJ2PpTaXRBDYpcks5/ZTXgi/FI7Hpa6+iF/UooaM=)
                          3: 5GpN33ElR1lUI3r69WNur5XVlhs.roa (hash: Ag+FWXz8zur3U3WfkactLdqUhbzus2FhO2lgG9Wdyos=)
                          4: ApvhjKPqS54Ym0klIaNKAJ8kwfA.roa (hash: G7CMBZzYEWEowN0oeXl4yB4eRy4GZVwzz9Vsjln2SbY=)
                          5: Bl9_vWIpRsVo1QhxYcFKc0IqD6k.roa (hash: 1LM6MDYaE6Y/jo/PARMtexnN79ZdrRCB7ndwYT67l/g=)
                          6: D4fjlMdzoE531488p0OTA-8Nk-o.roa (hash: ZYvjH+ox9QqmVT8DocHf0I+vPA4vlzbkktR49hxKf8Q=)
                          7: KM_F04W97L4fGV6eB1EFGADXYBA.roa (hash: dZWwjg2hZJwYzS80M1Flty/faDlYaBPiOJ5OQ7mS6kc=)
                          8: LRsE8HjdoDuIOCHhNJWGn8Yh3Z4.roa (hash: x5/q1IzKRQsjqMHjgJuVRy8oArjf6h7TAw1i1N5j5cs=)
                          9: MsFmWJOoSFY3BCE49erYLm5IeF8.roa (hash: +ULhpY8+EhNOI9KNs3g5QfGlO9AZRphDDwBCNw26nt4=)
                          10: Mz8Xzjb4Em-bp16qe94uV9f2KSc.roa (hash: IgI2K3rzQ3JJ+QIwmVbORi3IMlNvAYMKIlRufn/wj8k=)
                          11: QOd_WFMEgwOyxqu-Xk2hZvgMcH8.roa (hash: uXkg5eescOxXc9nW3DCPgg8rcsXy8Kvy8S+sNh4PoXk=)
                          12: QsDL7x5oAgXjMeRoqEotR0YXQIw.roa (hash: z8q4Yda7b/Bhl+Mb3DcVE7Ved5TmFaoFf3dZxwrq/z8=)
                          13: RxbAg4EFxx_FKjDSty8_Ag5B0Wo.roa (hash: fyJVWs7abgQPirZqK6oCiRYQDMcFiF3X6qhzJ7XsPjw=)
                          14: T46eT9zSYH6URoM2Ax_k7Yqlvm0.roa (hash: p7kOptu0n/Z95hIwZVAQ4UU0Tcx07mXU3vGZb5npLhU=)
                          15: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: 523IQ/GydmwlH4NK3dJWDcuWqOlLdcXOELnGZTgTGGI=)
                          16: TLLe4Fv1ZWKn7cU4s2eOqRGhW2A.roa (hash: LIvDYJiCNzHfZb5Qat96s04TPvC5BTwrmEMarvzgqYw=)
                          17: W1_LeC4T7DrvujyTn3J3YI7-QXI.roa (hash: 0I3vgRjhX0kcMTxTGH5KTcOsn8j2HgujVu/6VCKIjmM=)
                          18: XDf-VYAuh-nDO2CMYXVIF4SuPC8.roa (hash: cl+9twv2D+eBNV8KlvTFCcF9tVblyskg3wu09JdTgSQ=)
                          19: YvEsta7UkUfJxn1JV9JHj6QzL1k.roa (hash: cVuuCBZsVwaCNI4FHR4twQLuwRlOFeF2gBPEHlJV5sI=)
                          20: ZTeJrV44cuelAuZVlfb9KznDqF8.roa (hash: fF8x7hlp4yott2TezNaaq/nLq2M2TgyvOaX91+gXVXU=)
                          21: cDexNbgz65SAnilI4jNQbU6GDQA.roa (hash: fm8UnKsXFZ8Kv7++bvjbjI+U2EMIi8pzLEAUXfPizog=)
                          22: cbLUFQPWDFBGgeTsBo59RiL6NGo.roa (hash: 3TCJxN5y669eIRDifXi9lQDad+lKQ5Y4Rq48mm7g5Zk=)
                          23: clX0YNiQqxrLh5KRIQ1WDmi_sYg.roa (hash: lHdAtOJZ05TKI2DoNumHZCY0VkGmTIkvqW26oGZ3P+8=)
                          24: dF6uuCIifQfhUD0TyBdOV3LZGPk.roa (hash: NBNM4QLzFqDChjC2tNuyVCLY8O/IcP3tokOM4fsmiRs=)
                          25: dPUv0UiEsSl2wmwWh7WXiVW0oUY.roa (hash: QsY9itLfjJ5WmB+KPuW0ZbZL+FhYgpcBDGOifX3R4vk=)
                          26: l2HpuvC6f9fVbGRIU_YgYBjx4vw.roa (hash: Kdrvt9fByjaGxTJ7co7gZehnEAPmEhpF7v2Q4ea8KVE=)
                          27: lPrZs3D91Gt-m6B9Dr3LWvP3o94.roa (hash: fhopXrhhREaGMI2tIGmpG5P4JKsz7B7bhwx1BvlGmtQ=)
                          28: rtmJ15QCyMu37KZSjTEhWQ0zmek.roa (hash: Lz0OEHkJQ5eiVEeDAp2VWfKoDiv6W8z6xoQRzfJhjuk=)
                          29: xmPrjXwgzAc4bi6Op-k92DP0zYQ.roa (hash: Yg07yPbPmPxhkY2QOReSXpIrXS2cz6DJVyYuiKyL6xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:ac:54:4b:92:0a:a8:bb:4d:89:8f:7b:a2:a3:9a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Dec  5 18:00:39 2025 GMT
            Not After : Dec  6 18:00:39 2025 GMT
        Subject: CN=170f3230e7514023932315a5f8f54d43dfed522c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:b6:af:7f:c7:95:da:d6:e6:62:7b:b3:27:
                    33:84:54:cd:11:1d:71:e9:d2:74:7a:32:83:c7:45:
                    92:17:df:0e:6f:a5:b4:48:0e:be:d3:52:0c:d9:fc:
                    8e:d8:d2:1d:87:71:4a:f3:58:5a:71:41:67:7f:ab:
                    1a:99:37:f1:58:3c:eb:84:48:38:f6:29:b3:25:7f:
                    27:a9:e3:5b:99:3c:10:fb:34:0e:9c:3c:cc:a4:fe:
                    c7:f6:04:f8:59:c6:98:fb:d9:81:dc:56:27:2d:ee:
                    b9:1c:49:63:91:22:03:f1:5e:99:f6:27:c1:e8:35:
                    99:89:a1:a4:ca:3e:e8:5b:34:e8:16:71:8f:79:36:
                    ba:ff:f9:d6:b8:35:1d:e1:2e:11:8b:cd:ef:6f:ec:
                    f8:d8:e1:35:9b:1a:a1:ba:95:bc:71:75:79:90:30:
                    00:0b:a4:27:16:a5:6b:b5:13:01:4d:da:58:3f:b2:
                    e1:f6:c8:3b:12:a4:91:a8:01:c7:66:16:30:60:0f:
                    0a:ed:f1:c1:96:26:d6:d3:2d:0a:bc:b2:7b:06:0d:
                    b8:58:aa:a9:06:44:14:39:f7:1a:a8:48:90:d6:1e:
                    79:12:c2:ca:df:3d:01:52:a4:7b:69:36:1c:b7:6f:
                    f7:07:20:7f:65:c3:5e:6b:71:93:f0:51:74:ed:fb:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0F:32:30:E7:51:40:23:93:23:15:A5:F8:F5:4D:43:DF:ED:52:2C
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:90:1d:79:ea:56:ab:9b:a0:38:b7:ed:69:ce:34:72:43:88:
         6d:22:89:1d:e7:3f:9b:4d:93:75:69:6b:7d:87:e0:bd:7d:f7:
         c5:c9:2e:60:d9:fa:e5:47:13:d2:55:d6:f5:3b:a9:11:d0:36:
         e1:eb:cb:d5:e0:3c:1e:d0:fa:b2:20:15:10:ed:03:4a:65:07:
         64:d4:fa:e5:49:37:40:d4:71:1c:48:31:30:8a:48:0f:36:ea:
         8f:66:02:2a:30:ac:c3:88:db:5f:8f:ee:79:dc:12:86:f5:73:
         73:65:b3:96:a2:3e:71:2f:c5:be:8c:d0:ff:c8:5d:e7:01:59:
         ff:7b:43:17:72:d2:4a:d7:fa:60:4b:fc:3c:28:10:5d:bb:44:
         4b:59:68:3f:5b:8b:e3:e8:3a:82:75:a4:12:dd:bf:94:9b:55:
         7e:2d:b4:e0:40:6e:4b:e2:e9:19:a6:a2:cc:dd:23:d7:1c:5a:
         fa:62:84:2a:67:ef:11:70:ff:46:20:a1:89:f1:36:89:3e:31:
         5c:5d:ac:a2:a3:e0:bd:e8:65:28:6a:cd:d9:44:2a:8e:85:9a:
         37:1f:77:72:dd:33:6a:68:15:e5:bb:02:99:91:04:92:2b:5c:
         19:a8:e3:c5:a4:2f:82:3a:c2:11:be:0d:4a:65:f0:e6:e9:42:
         05:a6:42:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:09:28 2025 by rpki-client