This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File:                     l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier:          hRV0kETGbYimdYkiLskjdCH3o5j14muloDrFgspxMTw=
Subject key identifier:   72:EE:6D:0C:40:51:47:2B:CE:23:B6:DB:5C:1C:C7:5A:14:A5:DA:7E
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       019B6D330084B424461ED6944B190C8565F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number:          159B
Signing time:             Tue 30 Dec 2025 03:00:17 +0000
Manifest this update:     Tue 30 Dec 2025 03:00:17 +0000
Manifest next update:     Wed 31 Dec 2025 03:00:17 +0000
Files and hashes:         1: 299uhEpzGFJEXIhUZ3hch4enjKM.roa (hash: 307PCiw/T4zXNlSyH03hWBls0NiBUzu1YZmXwWv4GKg=)
                          2: 3_CiK562_dUZNZ3_jrLDLES3Cuc.roa (hash: OThUpXsRf5i9hvgvSSvsO2HlTcX05269ZdZLERfG1DM=)
                          3: 7rLq9Yo_ZKMyDUcDNt839Vf4z_c.roa (hash: GX2WlcWFxc3/pJKbBIxA3Q2XCXlk/mYW0qr2Ex+/EXA=)
                          4: A_tEVik7EkSJhTC7T2FJIfD4hWE.asa (hash: 68EPop8TjMmm4peaii/vw95NHeqqlpJpXRJzZBSJs7g=)
                          5: GCT36J3n1OxX-WHPNyMOxT30V1I.roa (hash: a5Pszieg/F5+mp8skMSq3X98683NVjkxEMhhyfalK24=)
                          6: H2Gc0qKN46gAjUldVFBNpV93Xk4.asa (hash: KSarBkAjc6GXQsV+kmM1pcYpqDoYggEF4OpcfqU5XxI=)
                          7: HOso74W1VokYtKvyq7cUzsjtneE.asa (hash: XkgHTIUgOHbFT9e9eq8+M1TVv1ndaqq7zAajOmv3wN8=)
                          8: M3nuXRHV-HSVCrPsQchhdr5_x7Q.roa (hash: yixO/lM/jrXq6xFtI0OoJ7LnqzWDwB/3Pvi4UUX0Sqg=)
                          9: RatTcANG4U3IM7MOV2hXua2pFMs.asa (hash: USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=)
                          10: SMFHgAd465jvbKDW6YZwTehlmXs.roa (hash: mo74I69JinqweIsRPNZbaqL0YDRPxBEE9SrCUOt17NI=)
                          11: b-VQSWuLpLV93gdEDV9Lftl-uXw.asa (hash: Em1YerFm1QMulEXhz/0NYeLEV5IMD8Fh+85COdjHx64=)
                          12: cszYTkQVDcY76z8Av8ncweFdHcQ.asa (hash: xNxgKjmWZqB0F8LoHh9M3iOQxo1YlNVcpRWSs0jkU1w=)
                          13: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (hash: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII=)
                          14: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: B4St/sxD7F5gJ9aNiS+NUqRFlBpri8jBlhGhTwtH2JY=)
                          15: p906kmkgY0qUYyVJw53cck20ZMc.roa (hash: RM2au0VYfH5622DYXzfGpU015sseQv18gBHvKAhN9Co=)
                          16: u_kbu4tkIYiihS4--NXiyToxNhs.roa (hash: txkFHVV6Yy9iysc9+92y5JAS1DKWEBihN2iYh4NZA9g=)
                          17: z-gzGRp6g46RfhDlKhHGqEoG68k.roa (hash: zEuoDm3Q5DkSIXVAGKauWFsGpEgi0zHMp7amnQaC+g0=)
                          18: zdQE3nljteAvytR7FrZorPU0jyc.asa (hash: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6d:33:00:84:b4:24:46:1e:d6:94:4b:19:0c:85:65:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: Dec 30 03:00:17 2025 GMT
            Not After : Dec 31 03:00:17 2025 GMT
        Subject: CN=72ee6d0c4051472bce23b6db5c1cc75a14a5da7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3a:b0:a3:40:b2:95:bf:e1:40:cc:28:97:60:
                    83:0a:14:01:eb:3e:43:27:5f:a6:33:04:0c:94:4e:
                    58:a0:8c:ac:b2:7d:d1:23:a4:50:e7:d9:2d:7c:c5:
                    e7:a6:b2:82:13:2e:eb:48:40:e6:4d:c8:d3:55:b1:
                    ee:0b:bd:3e:87:b8:21:65:cc:ee:83:e0:6f:20:3c:
                    15:3b:fb:37:32:41:3e:c4:41:9e:d0:63:78:30:2f:
                    bf:fd:80:00:c6:b1:d6:ef:05:79:97:82:e0:6b:bf:
                    e3:34:8f:5d:41:fc:83:15:7c:3a:e7:e2:1d:6f:53:
                    fd:f7:4f:76:2a:d6:0a:ca:52:fe:3f:cf:fb:d6:3a:
                    d0:38:cd:cf:fc:e2:60:ec:ba:ca:83:1f:da:ac:52:
                    17:77:61:3b:fd:ff:80:3f:43:c6:c9:8b:9e:0f:5f:
                    95:ee:90:f9:24:32:91:be:e5:f2:c9:5b:d1:33:66:
                    cf:df:da:8c:a8:44:43:49:73:8f:5c:e6:67:69:cd:
                    13:4f:58:7f:4d:6a:ab:01:7e:c0:e7:78:de:2a:02:
                    52:fd:96:b5:fd:fc:2f:05:37:57:cc:55:4f:df:a6:
                    9d:ac:f6:e2:ff:4d:90:3e:bb:93:a4:89:15:25:cc:
                    39:7b:09:ae:00:68:41:61:8f:a5:3c:ed:29:2c:0d:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EE:6D:0C:40:51:47:2B:CE:23:B6:DB:5C:1C:C7:5A:14:A5:DA:7E
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4d:ef:41:0d:5f:7b:00:e5:b7:7b:5c:8f:80:00:16:35:56:
         25:e8:b2:77:2d:25:06:7a:3a:2b:46:59:bc:c7:af:07:62:2e:
         8d:96:18:88:14:26:7c:d9:83:22:8c:b1:76:99:d5:72:53:88:
         bd:f6:3a:b9:aa:52:46:30:b3:13:be:98:65:3a:6e:06:f2:4b:
         cc:36:99:73:02:b4:17:3f:27:fa:0d:5b:5b:47:88:aa:19:18:
         5c:b4:e5:ee:5d:23:9c:e9:a3:b8:a8:41:92:b9:40:e5:bd:97:
         1e:20:dd:0f:0a:00:06:82:4f:d6:0d:4f:59:9c:d9:0c:ae:60:
         a8:d3:6c:fd:3f:3f:75:ee:e5:aa:1f:40:ae:6f:b3:5a:2d:a5:
         e9:92:cc:4d:16:a7:84:81:7a:53:40:15:a7:76:72:70:6a:c6:
         3f:16:0c:71:f5:50:b3:5f:6d:57:07:d3:19:3e:ff:77:93:46:
         e9:e8:0d:53:91:a3:bb:86:0d:39:3b:cc:1c:1c:94:01:90:ab:
         7f:aa:5d:ce:d8:4c:82:70:59:11:52:df:61:56:f2:c7:8b:f7:
         31:ad:64:d4:6e:38:4a:92:0e:7d:79:db:a0:07:c6:93:61:8f:
         69:5d:90:13:62:25:7a:db:fc:19:17:a3:4d:79:3c:41:56:99:
         3f:cb:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 09:06:31 2025 by rpki-client