This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
File:                     FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json)
Hash identifier:          IfYYzRvR9Kb9Y4vhbklG/J7+AIZhZ6gCF2GVTP1MZT4=
Subject key identifier:   F7:D6:BB:F0:7F:4A:CB:78:00:BE:66:C6:EB:21:E0:53:70:D2:58:DA
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Certificate issuer:       /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial:       019B36B4294759F5F0D397807C7DA89A54B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
Manifest number:          1331
Signing time:             Fri 19 Dec 2025 13:02:15 +0000
Manifest this update:     Fri 19 Dec 2025 13:02:15 +0000
Manifest next update:     Sat 20 Dec 2025 13:02:15 +0000
Files and hashes:         1: 2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa (hash: TfV5gjjTMgj1xj0Upkt0peRpp3goSL2reEN8E3rsU9U=)
                          2: 3sc6nhVLbwJ1z02F-PiOohjJ0J0.roa (hash: 0remMWTD7pdKNfkG6LLCexKquOrgh3mgrNIP1RZSi5k=)
                          3: 7jwxCTrpuBYCzl_mE2RCtp0REXI.roa (hash: +ypxyRmQFEVXeIrygXjJlGbbYxoSAkj90Kr5Ppz5cVM=)
                          4: 9-cNoUHfts0wQ_gvF0Ks-jvLNo8.roa (hash: 7JFrmTCKHutOWT6lIT9Dw7Z0P0VWT+jDVcU4+bfyDdY=)
                          5: DcF4EXA1DH40O2Gur2tDFRiyLmI.roa (hash: QWh3tKlpjxXQZWrNQyG4IfuTceVp2rI45sJsjo7QbCM=)
                          6: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: 150a+zbwqvHIprxaUCbQcSYfS+hIbkOWPyvkuoa4Org=)
                          7: LUXiP9lc-43LWBpb942dwhjBNw4.roa (hash: 7y3gL/Nd09qe+9fnzQGt4tQA+oTTyzaF0SSwuon/o0s=)
                          8: NSYavHGFkjW9fPOW1IOQ-kAXpiw.roa (hash: bIlwmcqM0xR+NaQTXsekU/G4W1PV6OipwVLIIvkpte8=)
                          9: Pqgs8GxJxd3RB-9nQ3zYGfd-UqQ.roa (hash: M6uYkLbVdZzoxMrzslJAyf+dKNKxxdwwoY8rXjymTu4=)
                          10: Q2qnyLydoV_350r3ktyvCayeB4A.roa (hash: VKvgtQJ7GEIFvBeuyv+3v21yRGy73uTpFRdHzIJJWeo=)
                          11: UzvoNIBCTayYuI6U30KDrmerNuU.roa (hash: ER4WPs+jwzqBTn7Puvn1t7r63jTe9VQjgZr+2QHU1CA=)
                          12: VLujB7yFiHinNLFQrBnwY5M5C5I.roa (hash: CRa7Mo3U10BpG0ciSJutDorcHnsSRI8g2W8zd6kWfdk=)
                          13: _w77mxnXYMzjVPAP0_cpV98KsaE.roa (hash: 32DhWPOHAuWUTGvH/e9uUEVHq8FhbwALLmQiYJ+C/yk=)
                          14: bZqocWZwcU5ZaTTgVW1c4s9fiMo.roa (hash: V7YCD7e4GhCq4YTEJi9oA8hOwYBama0jJDytOGcYv1s=)
                          15: b_BH8k9dkbRKJ0Ey58ItHR33E0o.roa (hash: fq+WuygPKpc2KtNCX59PHbTRL3jzzc5JcGmz5xkPFE4=)
                          16: cdQEhr1O999um7MubPp-AySW3SU.roa (hash: kCWL/fzpDob5h7QESa50Y8FlUEupbCUO8I1kcI0W7jU=)
                          17: cyBS3fAo042cEWYq-ULKBfWmEYM.roa (hash: lGLWllBey91le8GZeS3K6F+EddIaYMAhM6BNqVcxruc=)
                          18: dwbrpKdHneYwi6Da8KbDgkX0CFk.roa (hash: U/aZ7WuyrXf3NvUwErTGp+ud4TsEFtx0YqpNoC5JosA=)
                          19: fwVrtZ5ukpHJADRQ973fQLlwSq8.roa (hash: +fmmqMgZKKsqId3qofqToV4Cyb2Bc8ldGVtgwbDXlj8=)
                          20: hjJ2dh9WkCJvId42nBaNK0DfJQ4.roa (hash: soNvW/tmStKQSGFafN9/NKP7RG5wnZ/o8P4a68ZfACw=)
                          21: xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa (hash: jvkL9UNrV/XhDKwlKTr7+v9+oligHaLGnfb05Kn+v4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 13:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:b4:29:47:59:f5:f0:d3:97:80:7c:7d:a8:9a:54:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
        Validity
            Not Before: Dec 19 13:02:15 2025 GMT
            Not After : Dec 20 13:02:15 2025 GMT
        Subject: CN=f7d6bbf07f4acb7800be66c6eb21e05370d258da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:4f:3f:c7:d1:ff:01:e4:2d:d8:52:dd:24:
                    7b:36:dc:4d:38:c6:dd:10:d9:4c:34:a5:2b:c8:84:
                    d0:b8:19:c2:6f:31:ca:1d:c2:9d:2c:c5:28:fd:a3:
                    df:c2:08:aa:bd:6a:4e:97:c8:16:d3:59:b8:0f:d1:
                    2f:2b:e5:f1:2f:2c:6c:d1:72:b0:6d:6f:a5:d3:78:
                    fe:06:33:9a:4a:ab:6f:57:10:5c:fb:d2:8d:98:80:
                    12:8a:49:a0:3f:18:d4:98:cb:58:93:1e:c2:ad:4f:
                    3b:88:c9:3c:cb:ab:40:45:d5:79:f1:f3:a1:a8:bd:
                    77:60:4a:25:c9:91:e8:59:2e:16:55:a6:a1:78:3f:
                    4b:d5:3c:18:21:5f:0b:fe:36:9b:77:13:98:bf:f8:
                    c2:aa:19:0a:c1:ff:a2:d3:c6:85:8a:81:29:03:43:
                    d8:9a:2c:40:d7:fb:78:94:39:cb:a4:eb:63:d4:04:
                    70:72:3b:69:54:9d:18:6f:ce:01:f5:48:6a:d3:f9:
                    04:c6:69:62:3f:2a:ca:ca:9a:b3:d1:30:1f:46:05:
                    a0:63:6b:a6:fb:6c:fd:17:4f:79:94:3d:5a:fc:13:
                    3a:fe:53:2b:34:0a:b0:c5:3a:91:28:e6:f6:c6:a5:
                    57:2b:d3:f9:43:31:df:a5:5e:c8:fb:0a:37:e5:5b:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D6:BB:F0:7F:4A:CB:78:00:BE:66:C6:EB:21:E0:53:70:D2:58:DA
            X509v3 Authority Key Identifier:
                keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:af:99:74:9d:88:e7:e8:37:f1:fa:56:96:56:d9:dc:66:ea:
         56:3d:75:8a:55:5b:31:1c:cc:09:d9:70:83:9a:ed:fe:06:c9:
         da:90:c5:58:e5:6e:34:48:aa:f3:d1:31:45:6b:a8:89:bd:80:
         16:88:ac:3f:f0:6f:f6:7e:89:8b:c0:56:d8:ba:bd:bf:dd:9f:
         1e:44:75:18:7d:55:17:41:43:8e:65:a4:8b:f7:5a:e0:73:a2:
         0d:0d:9c:5b:0b:79:15:b3:28:df:f3:a9:bc:44:f1:c4:a2:de:
         31:40:a1:e2:80:66:cd:b1:c5:f6:97:79:d1:79:06:a8:42:a1:
         9c:85:c1:dc:42:4b:4d:d5:0a:b5:4f:22:4a:06:3b:f9:d7:9d:
         86:76:60:32:3e:fa:b3:da:68:ac:f0:97:4f:2e:48:a4:65:c5:
         75:b5:65:8b:89:50:bd:5a:13:3f:63:30:8a:52:75:5c:59:e2:
         eb:10:dd:96:bb:8a:cb:cf:ee:46:da:9a:f3:62:42:b2:ea:92:
         48:f3:28:da:5e:1b:e5:7b:57:7c:42:29:c4:f6:29:e0:c5:ef:
         f4:db:e1:26:da:55:02:44:55:14:6b:d2:4b:0a:cf:22:de:34:
         5c:64:32:93:3a:39:23:54:db:c0:46:d2:58:fa:07:d7:87:d4:
         7e:a7:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:07:16 2025 by rpki-client