This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File:                     1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier:          T5Gdf6UeXJaTa7SO/lfEyiwI/yKcFt3nTshiJaKCcDk=
Subject key identifier:   C3:16:1D:C4:21:A4:20:46:39:84:C5:49:05:07:B9:25:82:B2:F0:A6
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer:       /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial:       019B5297EA5EE8DC5E34EFD663E0F0B1F015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number:          17A0
Signing time:             Wed 24 Dec 2025 23:00:46 +0000
Manifest this update:     Wed 24 Dec 2025 23:00:46 +0000
Manifest next update:     Thu 25 Dec 2025 23:00:46 +0000
Files and hashes:         1: 0GQGYjFgeoe90j-QzubD6mrcJkk.roa (hash: cASoDwOCqQQo3HckgWr9Fm6RrFpE5g5vgsJJsPTF9PI=)
                          2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: T/LZSmP6k8kXkVRV985wpHm1kqZp5up0nlL6cEgvTVc=)
                          3: 5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa (hash: +Wt4CaG2KBebUdy7DTYqNM4+qA+qSGjkIL8Uj7jYbKY=)
                          4: LkZMbp2aUa0yXxOxLWaqN5AS52o.roa (hash: o8vH7FtM5V/qTZoiT6aAxSseM4Yg902eHtLadTVcAzY=)
                          5: N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa (hash: /XNE593x81Nv5d88KdthJ5cf11PusTGT9f+nPTiwsmQ=)
                          6: O2VeVpIY0NqqJs4saKQoTuFoA6I.roa (hash: eCU07QC/oP0X/AS+uAyqKGOShTlcgaS/MZcj5EXt1FQ=)
                          7: PmeI5MIhQ4wxSrPUPOIOQ9Ubvnk.roa (hash: W6jZRl9BSEjjkm486LLqed9ed+xxHLYMlqc3sRgCALQ=)
                          8: QJVbOLfuQimwnt2csTkB91gXkec.roa (hash: GkGvp1WsMKLXrnxKgO0ikQrOP7Rki9hxYkm+S7LbAS8=)
                          9: RTN7ctApkTYd2Og2JaBeJOrSDKw.roa (hash: PECp9vVhGIOoiVTK3bRnzPU+NWZIUXb57SnIExeKGko=)
                          10: ZFUmkI5Si20CHGaDBK-ZoNXIfEk.roa (hash: 4y56G8cf16t1jWavTqKOCy9B29Mw+jTHj1dGwOZOhA0=)
                          11: _28X1lMsvBxqScVY5HiVqqNdE4o.roa (hash: 1zLcZ1CwGAvvzQsYCPPfZSZE3xWE9xsMdQ0aDUZbc8g=)
                          12: cdmQ2_ODlCp8h7SlTaorYnidAuk.roa (hash: +IC730dtvUCM5X3ceJwMJA3N6qWFyePDz8c3aKLMcqE=)
                          13: gWN0YMhA97UPOTqYvOMM9zaPWRs.roa (hash: Hm5lPWw7bUXDdTOs1pfp1fHbk/bNa8PnxIySi1lfXPs=)
                          14: iY_9p9rfYCrq76s6mH8iLmqZ8G4.roa (hash: WZh8CFIJ4XBLsbT8NvOnixg7Xgopb12vdZ21KTVanqQ=)
                          15: jTMPeohgGOxcMFZVU8z0ehshce0.roa (hash: SyL8iMLhykQz8ANtvdKfK1EugykUZcu24olhfWQesXo=)
                          16: n7V7OXaDS-XvJc4UQc5MPqTFYmY.roa (hash: 0QBDYhcEfGTqjEJgSs+TOY3XMDZsBCVa117v4v2Y4iI=)
                          17: uEsfVd8NIzUxBoG774jECjWdTsY.roa (hash: lAehouSKcnB2amZVq4TUPtcrTxH5jfwC6dVK0vZrRgI=)
                          18: vlDfC43FHcefunPJngYR1WAZ7rA.roa (hash: az+OZ3tRKu13gj7aBFAWboRwowS41+dYdps7euT4uWg=)
                          19: w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa (hash: cKSU2IKqf8A5+vV8g8UVVjc9ie4gyRlLREV+QT0zjV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:52:97:ea:5e:e8:dc:5e:34:ef:d6:63:e0:f0:b1:f0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
        Validity
            Not Before: Dec 24 23:00:46 2025 GMT
            Not After : Dec 25 23:00:46 2025 GMT
        Subject: CN=c3161dc421a420463984c5490507b92582b2f0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:8e:ef:a6:1d:67:2f:a0:44:47:55:9c:ec:
                    0d:95:39:a0:f0:cf:11:9b:2b:4b:a5:5b:0e:82:07:
                    e1:6a:c4:ab:b3:aa:13:dc:e0:a2:ce:17:7f:38:00:
                    1a:7e:b6:9a:6c:79:7f:68:14:dc:d3:bb:52:18:0c:
                    51:79:33:8a:8c:2d:ae:29:c7:f9:d0:a5:3c:44:f1:
                    a9:21:8f:ff:ad:03:ec:58:11:23:bb:ec:79:d3:2f:
                    f0:9b:64:1f:be:7e:bd:28:7e:13:9f:cc:7e:6c:b9:
                    53:a5:a0:25:1d:d9:9b:85:23:7c:dc:63:b6:db:d7:
                    d9:2e:05:51:b3:ad:cb:80:8d:b2:2f:73:5c:5a:d1:
                    60:50:65:29:4f:5b:b2:be:e9:c2:e6:8c:8a:ff:0a:
                    99:58:2f:03:42:6a:5c:de:a3:7c:11:5a:a7:d4:95:
                    31:c8:56:ed:51:80:70:08:db:92:76:58:e7:7e:5e:
                    74:23:ea:2c:fc:e8:f3:ef:50:23:75:4d:39:d6:d8:
                    46:0d:7d:89:48:4d:64:9b:50:73:97:b0:7a:24:7e:
                    f4:9d:e2:84:16:8e:db:2b:33:39:d6:a3:41:52:12:
                    e2:66:69:14:60:a1:4f:a5:67:03:37:94:17:7f:ac:
                    6b:96:37:25:1e:f0:b7:56:46:3f:f5:51:c9:cc:d9:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:16:1D:C4:21:A4:20:46:39:84:C5:49:05:07:B9:25:82:B2:F0:A6
            X509v3 Authority Key Identifier:
                keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:45:46:94:de:5b:58:87:0a:aa:52:94:93:4c:a9:c5:3e:1f:
         38:2c:c7:9d:16:28:04:16:04:09:9f:06:bb:3a:7e:3e:d7:16:
         6a:3e:b5:74:56:cf:08:56:f7:2f:95:10:26:50:96:ee:83:be:
         a9:73:64:32:a1:9d:83:3f:85:3b:c3:f5:57:2c:48:ad:ae:fa:
         db:bc:d4:b1:8a:03:7d:72:be:8c:3f:84:a4:91:63:f0:8d:8b:
         cb:fc:5e:6d:30:33:8c:1f:42:8b:ef:12:3b:2a:0d:70:62:b2:
         f0:e0:a7:d0:de:41:20:ed:39:8a:72:d8:31:6f:d1:f3:79:29:
         67:6d:b5:4f:a3:17:2d:f4:0d:f8:92:a2:54:0f:a1:14:91:46:
         a1:ce:03:a1:43:a2:4e:b1:b5:da:35:11:c5:8b:44:b3:b2:3c:
         18:6a:59:c3:44:dd:8c:4d:2f:cd:82:e2:1f:0c:51:5b:c6:08:
         d1:89:ad:17:b7:9c:43:f4:29:31:52:2e:00:01:01:fc:63:96:
         57:6b:a2:54:77:4b:c5:a5:fc:a4:99:e1:bc:1c:a1:14:80:8c:
         cc:b9:82:de:f5:b9:24:88:20:82:12:ab:fd:79:43:7a:b4:92:
         06:d6:20:84:44:6d:57:20:37:d4:7a:09:a8:56:c8:36:bb:78:
         e8:5e:a1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:36:22 2025 by rpki-client