This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
File:                     kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json)
Hash identifier:          r6H+qVufUhCUpL1a1ysaOqoLHojuhcPvDFSEd81Sllg=
Subject key identifier:   0E:4C:23:F3:62:FF:09:BA:82:5E:01:61:95:AD:9B:2A:E7:27:E5:A9
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Certificate issuer:       /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial:       019B35D76206560A4A3B148D5D43AEB77AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
Manifest number:          17D8
Signing time:             Fri 19 Dec 2025 09:01:06 +0000
Manifest this update:     Fri 19 Dec 2025 09:01:06 +0000
Manifest next update:     Sat 20 Dec 2025 09:01:06 +0000
Files and hashes:         1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=)
                          2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=)
                          3: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=)
                          4: Il-erxMI4M94_jrG5zUQVeoL7sI.roa (hash: k2tfe5PGNF5YTVczprADK+deYh+5lz2pJBVEO5+Hrkc=)
                          5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=)
                          6: WtirBgLdd1QDsDcFh1HdrsUIlWo.roa (hash: GA2Y0Eudc/59qW3vmpiDOm6qcDbR/NWl/VMU6tiADWg=)
                          7: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=)
                          8: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=)
                          9: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=)
                          10: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=)
                          11: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=)
                          12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: SrrYIy8hKMN9795f08gE+KRSxgyi/6C/INQgDWgalXU=)
                          13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=)
                          14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=)
                          15: vQeju5IXNjEoWBC9ET0ksVohAAw.roa (hash: vNUoX8dzp8vlCht08az7kkkn7Bm6tbtsihn+s5TebwA=)
                          16: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:d7:62:06:56:0a:4a:3b:14:8d:5d:43:ae:b7:7a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
        Validity
            Not Before: Dec 19 09:01:06 2025 GMT
            Not After : Dec 20 09:01:06 2025 GMT
        Subject: CN=0e4c23f362ff09ba825e016195ad9b2ae727e5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9b:f3:d8:9a:af:6a:d9:0f:e2:13:49:e8:6c:
                    34:a0:a0:2d:92:1f:b6:21:79:0d:bc:39:88:d4:bd:
                    68:c8:44:c7:0f:90:29:64:6e:11:a8:2c:15:f7:19:
                    8a:1b:74:16:77:48:3f:ed:19:54:53:88:dc:d9:e7:
                    d1:43:e8:1b:12:b4:a1:5a:47:74:f0:a7:7a:30:7e:
                    00:a4:f3:17:4d:bb:5c:3f:18:39:58:8c:db:fe:49:
                    a3:a8:69:5c:3f:9b:3c:9f:d4:5f:fe:aa:4f:db:31:
                    c1:a5:7e:ff:d5:84:2c:4c:3c:b4:02:97:e3:15:e3:
                    a1:9e:77:e3:31:b7:7b:a0:8a:1b:2e:85:78:b2:9f:
                    24:dc:04:90:43:21:b0:dc:5a:4e:73:bd:cf:c9:21:
                    eb:aa:7f:35:35:bc:8c:a5:f7:ed:ac:df:40:4d:d2:
                    b3:52:f4:3b:47:5a:4b:46:7b:4c:4b:a2:bd:9f:b9:
                    2a:5d:a6:fc:97:53:41:98:57:b6:b7:9d:56:b1:3f:
                    00:6a:05:05:34:13:f6:8a:92:ec:6a:1a:92:0a:1e:
                    ab:6d:16:9e:df:16:96:50:56:dc:4e:aa:ce:0c:2b:
                    1d:df:50:6c:7d:6f:f0:92:3a:73:00:e3:0b:db:2b:
                    73:c6:3c:8f:78:1c:de:57:82:90:31:03:1d:70:55:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4C:23:F3:62:FF:09:BA:82:5E:01:61:95:AD:9B:2A:E7:27:E5:A9
            X509v3 Authority Key Identifier:
                keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:78:0b:02:96:f8:19:aa:fd:b0:a2:be:71:b4:ae:b1:ba:7d:
         1e:fc:f2:60:03:79:53:84:18:c9:17:cb:bc:18:0c:cd:1c:d2:
         b1:c4:55:d7:01:90:6a:60:60:57:7e:d2:33:97:ce:27:78:ce:
         8c:c2:85:41:40:19:cd:7a:8d:ba:ff:c8:00:78:71:7e:29:63:
         d6:9e:bf:cc:b1:83:f7:d6:c2:02:ad:d0:da:37:98:82:40:83:
         49:90:a5:f8:06:26:8b:19:a5:43:30:9e:b9:50:65:0a:80:d6:
         27:1a:68:89:1d:33:b7:6c:59:4b:95:b3:e3:e4:d0:0f:65:e6:
         68:65:ca:4b:91:71:da:20:85:84:b9:f5:00:b7:fc:db:4f:2a:
         37:97:52:98:2c:f2:07:42:84:6f:4b:f5:e9:ba:88:68:f1:2b:
         eb:07:c6:4b:b8:e0:32:42:ec:6d:d1:20:4c:15:fb:04:44:ee:
         7d:81:93:8e:2b:45:d3:6c:1b:f3:9d:13:ec:3b:69:90:39:fe:
         78:ea:a8:81:e0:c5:85:e7:0b:6f:b3:1d:e7:d5:a2:2b:98:0f:
         af:bb:34:19:21:22:33:8c:bd:c7:a2:37:68:70:76:5c:57:c1:
         ad:ac:30:0e:91:c3:eb:8d:67:df:2d:c3:72:95:16:81:2e:35:
         8e:31:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:39:51 2025 by rpki-client