This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
File:                     C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft (raw, json)
Hash identifier:          gul8i20sa8GlVMgyxKM8v1MpPE6ptIv0WCtpZCNhWzA=
Subject key identifier:   79:E6:CB:F9:D9:0B:3A:4D:3E:6B:F3:BE:53:93:4D:1B:9D:0A:6F:4A
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Certificate issuer:       /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial:       019B2AAEDE34DE5996C8B60F80FFE78CFDC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
Manifest number:          142E
Signing time:             Wed 17 Dec 2025 05:01:01 +0000
Manifest this update:     Wed 17 Dec 2025 05:01:01 +0000
Manifest next update:     Thu 18 Dec 2025 05:01:01 +0000
Files and hashes:         1: 3kJhXofCpFDD7Eo6E2j1Gd-FMQ4.roa (hash: K3OTcQcoZnzC8T3KuSMerKr1Yy1y4ZL68Y/lWSF+tJA=)
                          2: 5vgRN93Ikx6vDyOuxjecwfDMpQo.roa (hash: Nm0/LoBBPkWnuWn59UFBPJeNenuNXFQpk38gCTpN7ng=)
                          3: AfLHT74NdL4YRI-gpiiLO8PPShM.roa (hash: 944lZaS4mAfM/S0ieSHEvM3mRV9M0T2Y3u48y1aDIjk=)
                          4: BqUsGxJbAHaodSor8dzxhiBDYnY.roa (hash: UcdL5oWXT3jVU2069PpqlnxiDKWvKcXri93cb+kI6qY=)
                          5: CLgBj6oYt6sGJ5ZpJJTL8C3Fnrs.roa (hash: aUOM41Nf+BqbKmy9YjUFL+mBeBI8749PsIPj/loME94=)
                          6: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl (hash: cEHhrhD2/7DuRefOEHSWxNU0YNd92uHQgbp6KPwoL4k=)
                          7: CqNmCGGQsBrEt7zh-VfcGtUv9RA.roa (hash: 7HTEUHavuiaMXQtqJhG62cD/8gu3Fv5evoWWikvAioM=)
                          8: HH7LiS3U3uopaZw4Q2ypSb4mHCU.roa (hash: g8QkQGvHJtb9sSJ+GjbOOdCXOEktOE2F1fhBHqBOKls=)
                          9: HZmCfsHb09xlrSBh2iIxpOWZ3Ow.roa (hash: RrsPdmWqoOnc37eNmh2WMAAS+360HWRIjhjqZURUhWk=)
                          10: Ha6B96NNdRYOdZinwD0K4FfFvZU.roa (hash: rPSvBQM3yuUs9wJEKKxibaAsnl3o3tzJWi7VDh3ziS0=)
                          11: JPuN2YPz_l01LHcxJTRgQ5fN06Q.roa (hash: sO4iVZOw03myN2KiGjBOdg4pmq+1tC1eFs8GD/uCEJk=)
                          12: L7BpeKSr3aJNyrJ3jyLg3Vye834.roa (hash: BKU0s1AFVfjoQBSMzARmXiXP2HsCC4PJttRceRONfMI=)
                          13: MDIbS6sEXbMo4ibcLekhzijIjYY.roa (hash: 7iIxmTu02d89hGoTIMu/80TJLS3BqGKAagC48ze8HTo=)
                          14: MtRudBwfeuM_gV5Rxs2GMGZwQ28.roa (hash: jyZOCTzazS4hZAS8vXh55e8wdvGkjLOC1l/j4Cldlkk=)
                          15: MvceJYeC7exu39P-KklGzIhKezo.roa (hash: l7CWLK2x2ygZPduMunzZSQp+ZhD4hpMbVwc9AxPKUD8=)
                          16: OctDu_DWJM_ePhGKcxjKDU812B4.roa (hash: 8PSwDnEoVXcVpWULLxMU/tnZb/t/w988BD3T8r1Vyqk=)
                          17: RdFk8pqwtmhHw2UX4x0rgDjdvVg.roa (hash: UfFtH0Qa2ULdo2eWM4CXCIXafZmQBAeqkERPoGsE9DY=)
                          18: SlBCxI-Gr8RZUcWFdhLWCcmpICs.roa (hash: JIPe6vhu+AxbOSgeBUS8yHnoK/5rZWIA9A3Gij3IhXY=)
                          19: T8DiPd4COZAMrM15dsDMZh3-46k.roa (hash: FLVoIftsSDw3XycsNixyrK2164vfuETBh8sALFOAFvo=)
                          20: YKuzm8eZ5thjoG3YWlLmGyis6Hc.roa (hash: lRlLqWarJKTArL8I3Oh3IGUAjFaJLYWsMsfvgIvdCEk=)
                          21: ekzy4TbSmKoAngHD6nt1XvIY_kg.roa (hash: S4bTYJiZvd+MIyq2CNE9A391k97deJn0Ljqufvr/oI0=)
                          22: mlYAGWh15vGd93694fMr69kZ1-s.roa (hash: otHCfgliIY/SrOf4+V6i45uE7RR60PmYBw532SayjKk=)
                          23: nBGaxHS4njnBuZih8vNGsp1DG9c.roa (hash: XLGWBSyFNOz/Nq0CINiB/5Nx/Ff5JQHbqxgQoHl8pY8=)
                          24: uF1fzkxS1dvB384G_6ACG-gahqw.roa (hash: /0hDj28NRbF23VkEh2wmxEvtyGKZo3nN4bNoYlxvanE=)
                          25: uiEwRDzyo2IATe2UZ8J34lJkwOQ.roa (hash: qd8Q/scpzUgFvAn3rGCEs42W3qdpmfptd5u2EgNgXK4=)
                          26: zgvcOUimolOfc-2snaZEdo8wyhc.roa (hash: S2xJZFbuR+fVbmsKnaewbJdRcVJWvtsi5rfDD2/PNaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:ae:de:34:de:59:96:c8:b6:0f:80:ff:e7:8c:fd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
        Validity
            Not Before: Dec 17 05:01:01 2025 GMT
            Not After : Dec 18 05:01:01 2025 GMT
        Subject: CN=79e6cbf9d90b3a4d3e6bf3be53934d1b9d0a6f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:18:d5:d9:7b:d0:02:1e:db:06:e4:57:e5:
                    1f:bb:7a:c9:8c:cd:1a:c4:4f:c1:0b:48:73:34:e8:
                    50:06:63:09:24:bb:3e:9f:de:ea:51:e6:58:5d:0e:
                    d2:da:d7:74:9b:c8:12:08:3d:91:6f:10:6d:de:97:
                    0e:a2:4c:34:98:30:a6:b1:b5:f4:89:c6:03:0e:af:
                    73:4d:93:c8:40:bb:d7:c7:00:9c:0c:8b:56:34:f7:
                    66:f7:f5:cd:ad:d9:6d:c9:90:20:5e:cb:93:1d:2c:
                    11:a7:9f:c7:39:7f:9e:36:44:45:d8:db:ee:9e:73:
                    08:99:69:5e:67:bf:86:ac:0a:7f:6e:e1:1e:27:46:
                    59:68:49:bb:04:40:8e:34:a2:0e:19:c3:03:1a:51:
                    5f:58:a6:38:14:03:ce:56:8e:14:fa:95:29:ed:6f:
                    e1:7e:52:c5:4c:d2:a9:70:7c:02:0a:ed:b6:a8:cd:
                    1a:63:ad:09:ca:c4:e1:07:30:be:b2:6c:c1:1f:de:
                    f1:3a:8c:45:74:7f:33:d3:e9:29:c2:f0:fe:ba:10:
                    e1:19:6d:77:c2:ec:94:5b:18:05:55:1e:f1:7a:4a:
                    ca:0f:9f:c0:4e:0a:c6:99:fc:7a:ae:a2:fa:6c:cd:
                    dc:1c:5a:4e:25:9d:6c:88:9a:6f:fd:4c:5b:bd:3d:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E6:CB:F9:D9:0B:3A:4D:3E:6B:F3:BE:53:93:4D:1B:9D:0A:6F:4A
            X509v3 Authority Key Identifier:
                keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:73:e8:32:e2:5d:1e:6b:a1:1d:63:ff:9f:a3:75:7b:b6:09:
         e9:46:e0:7e:48:a4:9a:91:7c:2d:cf:e3:e9:3a:22:8c:55:e9:
         07:f1:b0:a4:a9:74:3e:88:05:64:51:c4:66:72:ac:c5:ab:8e:
         13:39:e7:f3:6f:87:ba:72:d4:a2:46:28:92:b7:64:99:6f:9c:
         f5:82:83:01:d6:86:eb:ea:17:77:8c:dd:57:5d:30:48:e3:52:
         64:70:73:f4:53:e3:37:6c:c1:75:3e:f6:01:8d:36:d8:c3:ff:
         df:fa:bb:e5:23:5a:58:8b:ad:44:05:e8:45:e9:40:8d:2d:78:
         0c:46:7c:e6:90:de:db:dc:59:3d:1a:bf:24:5e:ee:f3:ec:42:
         f8:93:23:ca:54:98:81:5b:58:19:a5:83:44:bf:98:a6:d4:18:
         67:8c:b5:30:16:2d:b5:cf:aa:75:57:83:8b:d9:21:79:eb:27:
         7a:6e:75:e5:4b:eb:ec:cc:a1:93:ef:a1:6f:2b:69:26:2d:57:
         eb:19:03:bd:81:5e:b1:8e:b0:e5:6a:18:5c:a6:d7:9d:4c:e8:
         d4:28:77:04:fe:04:c6:2c:b0:3f:c9:4b:82:47:d2:c2:2e:9e:
         6a:bd:be:ca:db:ae:f2:d4:67:cb:4e:4f:cc:02:bd:b3:e4:04:
         d1:e3:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 09:43:54 2025 by rpki-client