This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          CoXxH1cmLqe81CYAPw/g4Q6TQbLpCND9r+BdzZn8nEk=
Subject key identifier:   77:DA:CA:31:2F:7F:DF:12:13:BF:1E:E9:73:F6:B9:BA:07:65:AC:CD
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       019B394696343F1038941D642B7DBE555F55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          17CD
Signing time:             Sat 20 Dec 2025 01:01:25 +0000
Manifest this update:     Sat 20 Dec 2025 01:01:25 +0000
Manifest next update:     Sun 21 Dec 2025 01:01:25 +0000
Files and hashes:         1: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: IPJ+elryHrK0qT/3VWk/KkP5pjyNt70tI3L/ejYEftU=)
                          2: 1U6WyMqsZGid0T3NYQ9DAZ6gJQY.roa (hash: F8XNKrvuc9Q1Nu4SwuceqF3nF6Xwjfiv6CKLGF36N9o=)
                          3: AOzgmFptP-TTohv3IqoDSstHBco.roa (hash: E03eZxbf/EuXdLKDt7qVPONNosnX3JMcim9Rf3ahviw=)
                          4: ARYdkedt9hArm1X7hp83_Cg5tpQ.roa (hash: JuBJSBaOkvov17EXCYN32IfgGgf0k5Tgl6lj874nn5w=)
                          5: EnUCXK5toVH53tlZOLLeV6oPWBg.roa (hash: 5dFEexl7EsTZCh+F8XMO8WuHOD0gqtHWJ30CQfuEpV4=)
                          6: GkHiDHIr7HTOUId4AyJatL1OA68.roa (hash: ry2bBxXk4C9dBw82DZVtUnDVRsGRjPykl7o+jmf06RM=)
                          7: I5QYvq4IicclfQWoviXNqVkoJ1Y.roa (hash: 5MBWFEJVGuF7S46IjtmTYb6qp1cvuLGpPvqKkXBXql8=)
                          8: JD10CY-i84YcUMqJlGDowbidmN8.roa (hash: XMDhrcZoGK5i42ls2n+Jvun/2Ta8y4audrWdpm2Fv7o=)
                          9: KeM1ORJvG57zJzj1K2DwpMPSMZU.roa (hash: XHsHlY/bthSxdaTkdBh4Cmp1Xjdn7NaEjSx+3/K5zJQ=)
                          10: Kpu-woyfQvXBZfd1b22Idh3h33U.roa (hash: qJO2UPFNA1dZx3ehm0lE/hT5Zn8Q29+wMwWC8D8ulww=)
                          11: NDTb5wEV6mi4gNG-Fu6rF-wbgiA.roa (hash: NEy4PeHLS5dO/ZjNCa+Z5peBIXcrVaqt3QmALKubiB0=)
                          12: NjLk2e2zqXQskhSwEvgc6VrieSE.roa (hash: /tSrJbpm+cVRf2wVaaTrsH5ognA/ZAO3z9nKKazqJL4=)
                          13: Nv12FFJAhm76vmtQvLtk0-qb9uU.roa (hash: GWYX+UV7jTRToJvscvGnDmcfi+hdjE9fs/PSDIO/qXI=)
                          14: P6DmMh6gJbdEiU32OPNgOyp7mCY.roa (hash: 88yaz4q97O5d7cXTtRqRjBiGFSE36MGooJOUALTPCRA=)
                          15: PVvGYWt24uzVlwnsAFMPqAtNvZQ.roa (hash: jUjkhiHyuibAHI/mM+xTuAPWbIQGwY5NVpAGVowuUvU=)
                          16: PjMzQwKUrF-VvmoyR5v8Mv9UDo0.roa (hash: djWTkmrlBUFs68uxALTdJmeXHsgVGm4cPvwKlvS+poM=)
                          17: TFiXnA69SUIjZxShh655vlYs5os.roa (hash: iue8xNO+FBfmf0WBI+KQBXMK4ZDijvqm8QzG1kL5NP4=)
                          18: X_FL5W5PaBcXLOauRMxOwRuyYlc.roa (hash: kCKDT8tcDr1dP8XE79tCmIW9bJ4NTTFNxriENFz7kC0=)
                          19: Xdb2GonGqu9DkyPtW1xL_ewg_Bo.roa (hash: GVGr4S1zTr+dNdiuuONrJJ2q6Nn0ihVO0n5qN0zw/pQ=)
                          20: ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa (hash: Tk3A5shWtfiSwwuDcCc68dVXd7yvds9RfjT7MSIEjKQ=)
                          21: _Vf3TO7lMmdtkCjp92trzTwldE4.roa (hash: ThjCJsCygSwWOPGFIhdZvUVgS1n+5uy4UgbfkgRne8M=)
                          22: _YFT4hVNYyXh4lnoEwOwHf8FvbM.roa (hash: tlgEY6jYUU+UF0+FT6gUJlgYou8+Ams7PkVw5ofCpx4=)
                          23: b77IgHc-0C0Rr_dfvuGtS4avGl0.roa (hash: pUFCLnY0Uuj86mPeajrETTuvcuysKr2jMpqMVsvwa6w=)
                          24: cm0LnEhivdiG8YPAYwDpDqid4TY.roa (hash: vvmdzQrIc6DH27Jx2ppbWfOfWIe4OW78TOQB1QE//Zs=)
                          25: eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa (hash: qJu+C3kZMtw4Lzr4RPWfIIggz4SLZ1MdPm3V0ZSYkCA=)
                          26: grTxe7kxw6ZzaQqpTIbiKf1m4JM.roa (hash: i5OkfeqChX4b5A5gBGr0b6nOiJOg7XT/mMLOR9RIW50=)
                          27: hNrTf4PE5wrSnR7cUGP-FWLvavA.roa (hash: 419lgUmCiB5WepdJkvKnWC8TY9QzFCGf/bRs/Tt6fMo=)
                          28: ki55bfqHhRC77pU-EJ0EZN9IsgY.roa (hash: AccLPwD52wvMA4/Hsn0acDKYYBn7x4JHw/P1GwnYSwA=)
                          29: lAsvBALGAB7ffanhsI2XBbzGjwg.roa (hash: Lfmd3jAWkGrnZmmpvbr3VmK27pHIPidZbcCZnfMNIH8=)
                          30: lDebapMVKq7c3cdLNAzBSuTVL9I.roa (hash: JLLBlWGQZm0pTsOl8c3P+gghkK2T0TR/9bgigt6vPnw=)
                          31: skoFlpQBI8LF51NmTT39lnjZrMk.roa (hash: l+MFPkSAFr/Bu/aMzD3WDDtaslazJr/lXcJRueoJtKQ=)
                          32: u0rrjscEg5ouwkZEoUUv9ywqEJM.roa (hash: KAhmaRaJ9yCDkMpLHGC+00wVlDYCLhy/BJgRV7XQ8BQ=)
                          33: u3IeL1WtwZrppYb7gzyGvxoAWq4.roa (hash: u4/0Flhb+g2HVbYnU4CFZNSkHaVHi6ldxHLZ21W79Xw=)
                          34: vVo5jg2GQAZIqK4h2tPzZS3ji70.roa (hash: VyY0O3FHC/dgFA8HrUMfqDla8B1EBlXwEVoR6qUh5T0=)
                          35: xeZzF4kLsUeSGRaVWSM2Yl0MJyw.roa (hash: lnF7laQENq7wiyRjfsr7hJCvC1X60Wd/Bj27GtnwCQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:96:34:3f:10:38:94:1d:64:2b:7d:be:55:5f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Dec 20 01:01:25 2025 GMT
            Not After : Dec 21 01:01:25 2025 GMT
        Subject: CN=77daca312f7fdf1213bf1ee973f6b9ba0765accd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c6:31:2b:ef:e1:84:f8:81:92:9f:84:1c:17:
                    c9:69:1d:a7:87:18:1d:49:55:2d:8c:3f:7f:b1:f9:
                    43:ec:89:7c:ec:58:81:6d:0a:90:9c:fa:04:dc:0b:
                    3e:a5:0d:c5:02:53:04:2e:ca:55:91:38:5f:95:90:
                    19:66:c0:39:f1:87:65:97:89:16:a7:49:ab:cb:1a:
                    58:a2:33:01:e3:61:1d:39:94:67:a4:e8:78:62:20:
                    be:16:66:ff:44:41:a3:31:eb:87:f2:b8:e8:3b:22:
                    e0:bc:e4:1d:fa:96:2b:d3:74:3f:76:3c:92:ac:a6:
                    2f:5f:64:05:52:af:fd:e0:13:0d:a0:8a:29:d3:2d:
                    33:36:c6:4f:4b:37:89:eb:10:a9:03:de:2b:a1:80:
                    0c:78:95:d2:14:37:dd:db:a4:4b:bb:8e:60:d7:85:
                    95:06:32:9a:f0:65:8f:92:e9:d1:06:1b:10:3c:8a:
                    44:a8:07:fc:13:8d:da:14:a8:67:12:af:3f:a2:a3:
                    1f:20:fc:c7:f4:87:dd:d6:38:c5:7f:25:06:b6:9a:
                    30:d5:da:1d:74:13:f7:96:15:c7:40:e5:08:c7:d0:
                    d9:21:a2:68:e1:87:4b:fb:7f:74:5f:20:8b:f9:7c:
                    69:68:8d:7e:32:3d:c7:08:58:38:fb:da:0b:7d:cf:
                    68:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DA:CA:31:2F:7F:DF:12:13:BF:1E:E9:73:F6:B9:BA:07:65:AC:CD
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:cd:72:55:a5:2f:21:55:58:25:24:04:1f:c6:6c:d3:3e:ca:
         99:50:b1:39:c2:80:04:4d:51:01:7a:7b:32:c0:a1:a4:98:00:
         a9:7c:53:8b:ca:4b:ba:11:21:42:71:18:81:31:ba:29:a2:61:
         b9:4d:86:74:70:a2:2f:b3:2e:61:37:10:75:e5:d3:64:09:20:
         57:48:71:73:ef:a3:ce:bd:38:4b:62:b8:6d:65:00:d8:7d:10:
         77:74:33:ec:93:5f:4e:6d:4b:3a:9d:1f:f9:06:27:ed:2a:4f:
         c4:44:96:da:3f:37:71:bd:c3:29:d0:07:46:87:e4:e8:f9:41:
         1a:af:b6:56:3b:9b:78:3d:e9:48:58:e0:70:7b:27:58:65:fd:
         a9:1c:7b:24:23:38:1c:9a:0c:88:35:0d:b8:51:d9:45:12:a7:
         4f:78:37:31:d4:44:d8:2b:89:92:b1:2f:30:34:77:6e:c6:8b:
         f1:28:eb:5f:ea:dc:db:ad:ba:59:54:27:40:f2:45:e4:b7:83:
         91:e1:2a:8f:b9:84:8f:81:d8:e1:ff:88:5b:66:b4:21:85:e4:
         97:ec:88:fc:38:11:65:9e:d6:70:d1:5b:30:0d:99:3c:21:ee:
         9f:c0:25:6c:cf:8d:42:85:5f:0f:3e:8b:39:86:d7:02:f2:53:
         65:23:ca:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:29:17 2025 by rpki-client