This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
File:                     D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft (raw, json)
Hash identifier:          fJPY8V4PgovXhHqx9h4bSmt3iAZr2xGWmsu29+/enKY=
Subject key identifier:   22:2F:2B:1D:A4:E9:F0:CA:4C:F2:DC:17:C8:BD:60:08:0D:CC:DC:4B
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       019AF76654AF69C88AB2D5F8836C6F59D6E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
Manifest number:          126E
Signing time:             Sun 07 Dec 2025 06:01:09 +0000
Manifest this update:     Sun 07 Dec 2025 06:01:09 +0000
Manifest next update:     Mon 08 Dec 2025 06:01:09 +0000
Files and hashes:         1: 36cneJws6HIb-_f2mS0l66nxLX4.roa (hash: cv3+x1XjkIvksuAO0LUX+L5FwL88LDLqWblnVZ+rq3Q=)
                          2: 8AuUB3FxiHV1blKo-b6xY84eohk.roa (hash: Kg20ZKTXvW1uV16aDD+SNuojir6sQqoC1ASnSIoi3uI=)
                          3: D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl (hash: S3GIdtn7q0Yh4plMJaAbsoMehympenqGrnWsOxHjabc=)
                          4: E4H11vqlDsWfsKfFnRaByGFpFjE.roa (hash: uk2Eyw6ijxdod6j6CVfKRX8Y6AcwVXdvoKqS9Zsbg6E=)
                          5: MKy6XWAYP3zxh7zwKNcWOiDPR-k.roa (hash: R+XM0slVwo6Gs1r7U5p3g+xfmCVjwikkwCXqqmpC4RI=)
                          6: MMa9zjyYWF9MCSd9kWiKsBQwMOM.roa (hash: 1M1oXb07BTgtuT6hZTPpfndwoJo6RVKYLwfsIu34iO8=)
                          7: P1pvZ_QpHLCNhor-GrDuuGuoxWU.roa (hash: j2Q3VKziFV5MgEQnuqrclJc+B8ndKOKWRmqLDbcpuQk=)
                          8: TBO-3J5fI4kjR6nBhhGm9Q7Fxxs.roa (hash: GxuPpCFAskC5A0RoCelobXY9HbueDhOq2tEj0W9aVGs=)
                          9: XDcWQfbkwvZ4pO52-Rl-lOrB_iw.roa (hash: ht+KVJK83F1lQo8Wp6/sNr0N7S9QYHVd5SEP7bnL0Q4=)
                          10: fegZDjvnxgRurYo7N2dE56doPrs.roa (hash: G1Sc4jTNIBp0OhDx/ZdY4eKnulZIfcXzqIWbYkym44I=)
                          11: hNPAJBJQcRtE-SJjyoGEKsljmXA.roa (hash: cxILOvyPqMN2Kz+W/9LGBBCgK1NOKrZ4exJ0ZNKhTeQ=)
                          12: pDnsD5Q1hTzMW2k6uZ4MVh9ZizU.roa (hash: Ug4pqyVy1hepE30KQdlNpPdKYvaVRsEaEW6Bq45BqsI=)
                          13: rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa (hash: rnMK9FKk4H5lXqqOHDb/rM0tbc6UoAnWXexKMf+rh/I=)
                          14: svu4gQ0pPgVBKQU6339vQZbXEAQ.roa (hash: RAHfZT/d13ig7RU8lQNXL5nHpSOa8CZeRzLwR9xpJH8=)
                          15: ux64x-iG-RIiMC28cG1MXnvTlG8.roa (hash: BYFtMvhjulHNkOE6Oci/AgVAG/FMD/15DLpBK0+ttvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f7:66:54:af:69:c8:8a:b2:d5:f8:83:6c:6f:59:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Dec  7 06:01:09 2025 GMT
            Not After : Dec  8 06:01:09 2025 GMT
        Subject: CN=222f2b1da4e9f0ca4cf2dc17c8bd60080dccdc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:b5:73:1f:4b:c8:4c:bf:cd:5d:f8:b8:66:
                    6a:10:17:d1:22:96:65:82:77:d6:9c:1a:9e:3e:69:
                    df:07:e0:a6:9d:2f:91:b6:16:eb:06:11:50:64:0b:
                    b1:02:e0:23:3b:9e:eb:9f:c8:6e:23:b3:f8:af:ee:
                    55:d9:fb:c1:69:88:dd:75:3b:01:4d:e2:89:bc:83:
                    d1:09:63:44:f3:aa:67:6c:10:79:d0:a4:a9:f6:00:
                    4c:83:9b:74:74:7b:22:73:be:97:eb:6f:64:d6:9e:
                    31:da:0a:b1:d9:f0:a8:85:6a:05:18:49:3b:51:bc:
                    66:5f:15:d4:7e:d9:a1:6d:26:66:11:01:96:38:9d:
                    08:65:e9:8b:ae:5d:76:5b:6b:e5:a8:60:31:7f:d3:
                    b3:e8:b7:fc:33:fc:cd:ff:89:13:da:17:d3:ea:d0:
                    57:fb:46:79:c9:9e:f1:17:c3:c7:c6:70:9a:b7:83:
                    56:14:ef:7a:01:4a:d3:9b:06:18:7c:b9:ac:c4:03:
                    40:4c:26:40:f2:d2:33:bc:ba:b9:fa:b8:99:c3:c0:
                    cf:36:bf:57:12:7d:4c:b3:82:6f:54:53:ef:26:19:
                    c4:cb:8b:9a:27:d3:cd:e0:34:9a:77:61:ca:20:6c:
                    d6:51:30:c4:09:c0:66:f9:11:91:d1:d9:c1:12:78:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2F:2B:1D:A4:E9:F0:CA:4C:F2:DC:17:C8:BD:60:08:0D:CC:DC:4B
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:93:1f:4a:43:be:75:c0:6a:3a:99:91:11:60:97:ed:55:31:
         f4:50:eb:e3:40:68:86:1d:86:dd:5d:2f:dd:1f:b1:92:aa:57:
         96:76:1e:b2:15:29:a3:0b:2d:7d:67:ca:61:31:9b:39:e3:2c:
         9a:05:bc:21:02:32:30:ed:c7:46:c1:0e:f8:ae:76:bb:59:ee:
         b0:1b:56:a1:03:ba:e6:8d:dc:34:6e:d8:14:bf:0f:7b:28:60:
         7a:90:3b:55:8b:37:e4:d3:c4:77:ab:7b:42:0c:dd:94:a7:0d:
         8e:c6:0e:bf:37:86:1c:9f:24:55:10:25:3b:65:e9:46:14:08:
         68:f2:82:f5:91:fc:3b:b8:7d:a0:85:27:58:a0:29:b8:08:73:
         b9:d0:d0:80:6f:7c:b3:6e:36:37:8d:01:7c:86:5a:51:f6:7b:
         67:49:e0:c5:4c:c5:a2:2c:00:fc:7d:32:5e:76:fe:cb:6f:17:
         9a:33:fa:40:d7:5f:4c:68:1e:db:cf:7a:80:90:51:1e:b2:2b:
         ae:84:48:85:5b:49:4f:d9:32:5a:c8:2a:30:b5:0c:dc:38:03:
         6c:c6:be:fb:ea:76:ae:37:f7:3b:82:2f:df:96:3e:3a:48:92:
         4b:b4:76:83:60:3f:79:8d:0f:9b:bd:79:7d:04:50:64:a4:fd:
         b6:90:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:06:59 2025 by rpki-client