This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          ATYii+FOR/n1Vs3Azc7QCUlY3wRXH0XmwAhOYlOR4Fc=
Subject key identifier:   19:5D:0E:BD:A5:4E:35:38:32:49:F9:22:CE:C8:FB:EA:32:FA:CA:D7
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       019B3B6B890C0705BAA2207B59964C00B2DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          0BBF
Signing time:             Sat 20 Dec 2025 11:01:01 +0000
Manifest this update:     Sat 20 Dec 2025 11:01:01 +0000
Manifest next update:     Sun 21 Dec 2025 11:01:01 +0000
Files and hashes:         1: 1wvnbg6Q8117K_nteTTte4S7nxg.roa (hash: ENgyyDmLjUOckKDAZj9H4d3tNAHS1prBGM7EEwWm16I=)
                          2: 9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa (hash: Xv3UwiZDLnCoNcJK6yL4jK5x2OhDSbCPqqehYPRB424=)
                          3: CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa (hash: ISITsHZjmPxvc/MPY47Wu9xllgRRtuPX5xEX6qhzCKw=)
                          4: EEEX0e66KOWTKOERpFoaxtXp3uI.roa (hash: JFPlKxMz0/Nj8vpjBsVBD96v5DpLlvYLrr+f6kqewt8=)
                          5: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: wFL4XlZlWD0TSKielhd8TC7H3OBUkg3VlNgLmeI6KFk=)
                          6: MTmWvr8uibadZE8o6jRrxqRGRzE.roa (hash: 0jqsfFy8FlNhCDstxSZBm5rl+QTt+KMOpAYA4a3i8co=)
                          7: O3desnRLE4eMtaLYXnU5Nh4QOG4.roa (hash: M/pLCjMkuIdvQFjtWmiXKAnVxVqmcU2sbBu8lSfc//o=)
                          8: Ox9GZAka0glhoxQ2kcpTG40p5TY.roa (hash: 9fZOyfSbu8PtJINC4B8NBR5wPhorryRlu5FEj0R87qc=)
                          9: T_tBIVOnk6atlnO-qvOB3SEZFOg.roa (hash: l/bz7iGuLSVMu5+jIvFJJiOT8fpLOG7JuBRb/GRh10A=)
                          10: UDwlK5i6kK3A947K1F2f3Nxg72M.roa (hash: /9gSFN6Jh6IOVjlZNhRpSBitYWPHct6GZTgiTAiwPR8=)
                          11: WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa (hash: 5/nNeU++Tk3tTxk1UDX88TCuqrCoToCpYKSrEibPyls=)
                          12: _-qLuY0dJaZaSWjtWCqfvkINW98.roa (hash: wQKawmTp+JnLi1nfzjxaxc0y+Fv2NQma/wD/xIsptVw=)
                          13: _1lqE5scJ0MBH0b9lTR0YHuGOuU.roa (hash: 4TZYcGOcfHMexmHJPq3AcWYTwMqwPGPD0OgXI/Zx1Ik=)
                          14: f9P9TOtw3B1yLwWd-zzgWOHgFyo.roa (hash: eY72IEUw47OrnHrbzBE3H8Hn9IWCmc+eDQ3PnvNlgzc=)
                          15: h4Wdvms4wuQVg2v8lAhl_FvWiDU.roa (hash: qgpyjP3KxvlInp3FHrdBXgF7d6QXTNIjbw3bJgQTHgw=)
                          16: jR6B6upcDz-k-D33X5cUCpKNQhY.roa (hash: 17bzKKAmw9P5KCIa3O7ZZ3Gz7ehvl9SAXpWrtnaB8HQ=)
                          17: keTJqY7deNugwlmSUKuLVvK51wo.roa (hash: q6jipuf1WpKULW6CAfzHiIY9EHwk4hFmc5paPypsmNQ=)
                          18: leAvVKB-KF9YkNjyBGLznG9z208.roa (hash: sNz5PxJVA3WdR6kA9tPYVEIxVQ3UHzFMpibhNTNaOv4=)
                          19: lsTY6AmWoYOLDn9vJEopaPrCzaE.roa (hash: zdYo35yHHZ9h7IbD1O6eQ0PbAdPIh6AmlbW/iwXvWFw=)
                          20: mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa (hash: N9byFHS2GD4WLMaI+ZrMFbqxvlxUMFZZr0x2guAAd5g=)
                          21: olxf7ZsuzIbb2ywWmhByxe-xLw8.roa (hash: fH7TNj8hlrTs9pJaEkQ+/5PSjQ7A59ZxCk5/AxaRv18=)
                          22: oq_bdGbnwKTXTnGXJdYy9S7WicU.roa (hash: p8oLPJnZdi4G9SjZfWCHDdPw6B3VXekrGGf+ZY2rnv0=)
                          23: s-ve3F8tXP4595quse_pLEBwHiM.roa (hash: etXcDa5JBalQlJuVD2B5TBUIJ+CVNp1v8p140S4caec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:6b:89:0c:07:05:ba:a2:20:7b:59:96:4c:00:b2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Dec 20 11:01:01 2025 GMT
            Not After : Dec 21 11:01:01 2025 GMT
        Subject: CN=195d0ebda54e35383249f922cec8fbea32facad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:36:36:94:b0:cf:8a:8a:b7:f0:07:35:3f:
                    fd:09:28:09:c7:77:bf:f4:81:67:ea:91:b6:65:87:
                    e8:b5:7b:be:86:2a:9d:2c:5f:6e:12:6d:3c:46:3e:
                    13:ff:9a:5f:dc:b4:a1:cf:3d:f9:65:bb:7c:e1:9f:
                    da:47:49:54:d2:7e:f2:e0:67:26:98:89:2e:11:b8:
                    fc:70:65:b6:68:16:81:52:75:e1:a3:f9:24:43:ab:
                    c0:d9:e4:c8:9d:50:11:50:40:8e:7c:26:09:48:c7:
                    db:d3:ec:10:3a:ec:1d:32:29:ba:0d:3c:c9:76:55:
                    1b:94:9f:93:f8:28:a3:8d:c3:94:68:72:c0:5a:91:
                    c2:94:8a:93:bf:25:a0:da:4e:01:e5:77:f6:8f:80:
                    ec:9a:1c:90:69:54:ba:4d:82:40:89:0a:95:56:7b:
                    cd:7b:1f:2a:1b:8f:2b:78:5b:69:6e:64:e3:b2:35:
                    c0:c6:ef:aa:a4:a3:e3:52:fe:52:43:94:13:88:75:
                    86:53:00:40:91:09:0c:8d:b7:ff:ec:bc:82:20:f0:
                    97:b4:a0:50:4f:38:b7:79:b5:83:18:c8:6b:03:fc:
                    c5:e6:09:93:80:4e:6d:9a:ad:53:2b:74:d7:82:e0:
                    75:e1:f0:b1:87:36:b1:7c:b8:1d:30:25:5e:38:68:
                    31:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5D:0E:BD:A5:4E:35:38:32:49:F9:22:CE:C8:FB:EA:32:FA:CA:D7
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:94:79:2b:73:0c:95:25:e0:79:65:9b:3d:21:33:0c:b6:
         ae:93:cb:37:16:58:5f:1a:c6:2a:d2:34:3f:8e:3c:4d:79:78:
         4c:46:53:02:dd:3a:00:03:6f:05:a8:0d:52:22:2d:6b:31:a8:
         02:5c:f8:1f:10:95:ed:d4:55:ac:3b:de:c9:50:3e:c0:20:dc:
         c9:9e:c2:96:84:b4:1a:15:ae:f4:09:ee:b0:1d:24:2f:44:27:
         78:ed:14:fc:1e:5a:ab:9b:b3:98:15:43:a6:93:74:4e:eb:34:
         de:c8:58:f0:3c:3a:8b:91:d6:d0:99:17:4f:b7:b0:3b:b3:f7:
         56:c0:8c:37:2b:26:fe:fd:48:91:63:da:f4:9c:0f:6a:bf:25:
         ce:b6:0e:a6:87:fc:a1:6c:4f:68:77:ea:01:a0:30:d9:56:fc:
         dd:74:5e:76:a0:08:f3:d2:75:6a:43:a6:47:dc:11:70:ef:1f:
         87:92:ba:0a:f9:f0:c8:13:82:b0:b8:f0:ef:8e:2f:e2:ba:e1:
         b2:70:f2:4e:cd:14:bc:7b:cd:b3:e1:8c:c0:07:c3:45:7d:8f:
         93:a8:4b:77:83:a8:06:df:dd:11:07:33:b9:0d:00:e5:65:b6:
         01:c3:2f:3c:92:eb:6f:0c:bd:cd:e0:2c:1c:2e:63:9e:65:63:
         b9:25:47:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:07:07 2025 by rpki-client