This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File:                     l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier:          EmkzPH6ihRk/ee0FjkU1ajydB66/2xUPzggTOhCwtec=
Subject key identifier:   1D:85:3E:28:68:6D:DC:AC:E6:36:53:34:13:BA:A7:BF:F2:F3:3B:EA
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       019B390FF39CEC90199E7E745D97A7A19FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number:          1580
Signing time:             Sat 20 Dec 2025 00:01:45 +0000
Manifest this update:     Sat 20 Dec 2025 00:01:45 +0000
Manifest next update:     Sun 21 Dec 2025 00:01:45 +0000
Files and hashes:         1: 299uhEpzGFJEXIhUZ3hch4enjKM.roa (hash: 307PCiw/T4zXNlSyH03hWBls0NiBUzu1YZmXwWv4GKg=)
                          2: 3_CiK562_dUZNZ3_jrLDLES3Cuc.roa (hash: OThUpXsRf5i9hvgvSSvsO2HlTcX05269ZdZLERfG1DM=)
                          3: 7rLq9Yo_ZKMyDUcDNt839Vf4z_c.roa (hash: GX2WlcWFxc3/pJKbBIxA3Q2XCXlk/mYW0qr2Ex+/EXA=)
                          4: A_tEVik7EkSJhTC7T2FJIfD4hWE.asa (hash: 68EPop8TjMmm4peaii/vw95NHeqqlpJpXRJzZBSJs7g=)
                          5: GCT36J3n1OxX-WHPNyMOxT30V1I.roa (hash: a5Pszieg/F5+mp8skMSq3X98683NVjkxEMhhyfalK24=)
                          6: H2Gc0qKN46gAjUldVFBNpV93Xk4.asa (hash: KSarBkAjc6GXQsV+kmM1pcYpqDoYggEF4OpcfqU5XxI=)
                          7: HOso74W1VokYtKvyq7cUzsjtneE.asa (hash: XkgHTIUgOHbFT9e9eq8+M1TVv1ndaqq7zAajOmv3wN8=)
                          8: M3nuXRHV-HSVCrPsQchhdr5_x7Q.roa (hash: yixO/lM/jrXq6xFtI0OoJ7LnqzWDwB/3Pvi4UUX0Sqg=)
                          9: RatTcANG4U3IM7MOV2hXua2pFMs.asa (hash: USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=)
                          10: SMFHgAd465jvbKDW6YZwTehlmXs.roa (hash: mo74I69JinqweIsRPNZbaqL0YDRPxBEE9SrCUOt17NI=)
                          11: b-VQSWuLpLV93gdEDV9Lftl-uXw.asa (hash: Em1YerFm1QMulEXhz/0NYeLEV5IMD8Fh+85COdjHx64=)
                          12: cszYTkQVDcY76z8Av8ncweFdHcQ.asa (hash: xNxgKjmWZqB0F8LoHh9M3iOQxo1YlNVcpRWSs0jkU1w=)
                          13: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (hash: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII=)
                          14: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: 4M/0CCUvDjc4sJiLx2OEAl1lqkdo/URoNBoNrgcu/qQ=)
                          15: p906kmkgY0qUYyVJw53cck20ZMc.roa (hash: RM2au0VYfH5622DYXzfGpU015sseQv18gBHvKAhN9Co=)
                          16: u_kbu4tkIYiihS4--NXiyToxNhs.roa (hash: txkFHVV6Yy9iysc9+92y5JAS1DKWEBihN2iYh4NZA9g=)
                          17: z-gzGRp6g46RfhDlKhHGqEoG68k.roa (hash: zEuoDm3Q5DkSIXVAGKauWFsGpEgi0zHMp7amnQaC+g0=)
                          18: zdQE3nljteAvytR7FrZorPU0jyc.asa (hash: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 00:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:0f:f3:9c:ec:90:19:9e:7e:74:5d:97:a7:a1:9f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: Dec 20 00:01:45 2025 GMT
            Not After : Dec 21 00:01:45 2025 GMT
        Subject: CN=1d853e28686ddcace636533413baa7bff2f33bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:57:b7:54:05:42:dd:14:7b:1a:5f:1e:c1:
                    be:2e:b0:39:d2:36:50:87:fc:f5:c2:50:31:30:8b:
                    92:16:b6:2c:e0:77:38:11:d7:c4:c2:d5:0c:63:7d:
                    db:42:31:8b:74:e0:b5:df:e5:bf:34:24:5b:35:12:
                    14:17:37:9f:15:66:b1:73:82:38:ad:6f:28:f9:71:
                    0f:6d:aa:7d:27:18:1f:8e:3b:58:58:25:73:a2:47:
                    db:51:88:8d:aa:23:87:a3:cb:39:e9:14:bc:45:3e:
                    c7:6f:07:96:77:31:56:43:c1:47:8e:bc:9d:d4:7c:
                    70:79:c3:03:48:8c:06:1a:a9:90:4e:91:1a:3f:f6:
                    9f:20:39:ee:d6:07:19:88:e5:b0:a2:90:6a:a9:de:
                    17:3d:ba:67:c7:aa:ec:16:d4:be:90:f6:97:66:0a:
                    2f:ed:0e:fb:95:29:7f:69:e2:4d:22:0d:6d:e4:a4:
                    b7:0e:14:75:34:7b:e7:3b:91:66:33:9b:05:d3:39:
                    2a:3d:e8:cd:94:81:c3:9f:53:63:bc:6b:7f:64:16:
                    80:17:13:da:1f:40:fc:d7:9e:03:fc:11:c0:6f:64:
                    43:ed:01:28:a5:91:1a:29:01:e6:d2:d7:2f:bd:c7:
                    31:b7:60:5f:86:a1:d6:15:53:a7:39:0c:dc:bd:4e:
                    1c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:85:3E:28:68:6D:DC:AC:E6:36:53:34:13:BA:A7:BF:F2:F3:3B:EA
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:57:b0:0a:fd:a8:62:f5:32:a8:2c:50:b9:c8:2c:0c:c5:5c:
         2e:bd:ab:26:e6:26:9c:36:52:6a:c0:8c:f5:bf:9d:fa:ed:95:
         e1:77:f5:62:90:d4:25:03:b7:d5:cf:26:a6:7b:21:cd:9b:45:
         b3:05:af:be:89:56:6d:e9:ba:84:4c:7f:65:0a:a0:de:39:e2:
         db:1b:45:94:20:f6:18:67:63:4e:b5:ca:24:ce:a0:7b:90:a3:
         e8:cd:b1:ad:7c:a5:f9:91:67:08:b9:0d:a5:01:b7:c6:7e:95:
         84:48:d9:d2:d0:62:77:94:12:d0:36:dd:c5:5f:11:41:75:34:
         7d:fd:46:8c:2b:69:12:c4:87:a3:10:97:7a:7e:2e:bd:1d:ed:
         61:06:4e:b2:9e:aa:1c:7e:61:34:65:6c:2e:55:23:02:df:12:
         2b:5a:a6:bc:64:da:a8:c9:bd:83:79:b2:82:0d:f0:13:51:45:
         c9:98:54:d2:d1:67:f5:b4:fb:9a:06:e7:00:bd:c1:7f:ba:51:
         99:4a:7c:85:8f:96:d2:0e:0e:6c:7c:8b:64:b6:e6:70:3f:1f:
         32:48:1c:61:dc:31:85:9e:f9:cc:2d:f2:03:0c:2c:ab:ce:a6:
         bc:5b:2f:79:1d:d8:24:05:8a:cb:77:ef:3a:ca:9b:90:f1:12:
         81:0f:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:12:10 2025 by rpki-client