This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File:                     tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier:          XZdggos/zjAbL9vW5udHc/RfqVVC4nnOXNRH+KENQNE=
Subject key identifier:   29:31:70:6D:DB:47:36:B1:94:50:C7:7A:42:BB:D3:DC:75:33:A0:99
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer:       /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial:       019B3946730EFED9BD591859D5F9A15FD250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number:          105C
Signing time:             Sat 20 Dec 2025 01:01:16 +0000
Manifest this update:     Sat 20 Dec 2025 01:01:16 +0000
Manifest next update:     Sun 21 Dec 2025 01:01:16 +0000
Files and hashes:         1: 2LtUkcgkIuZhBK0wGfDHXpO90Fg.roa (hash: fHYbhPRLNrvgqYDM43jt9s30bh16kQSVsBZ1CH2USmQ=)
                          2: 6SHuayDCb_08mqBJTOUzFTsfjuw.roa (hash: l0vui4Z61D+6w4eHGOqnX6EDthpEADIAOWmuDi43beU=)
                          3: GnoVV1PtMRC2jUfUFiPdzHxlxwU.roa (hash: lk6jGrozVKQ/8B+Qe2uINFFR8sFLolbJMCGzGH2bMm8=)
                          4: Jcq5yvwEtHQoD_1jYEKNyZCWXLM.roa (hash: kShwVd7RPed1Q8cEpgFDRaXOy2m8MWShMYQnb7UjDXw=)
                          5: Mj-NOn9zizLNKb-0-RicSOUuRk0.roa (hash: hhQVdihq8/005gpS3V23Lq37Y3XHWYZymySch3SUK5k=)
                          6: NSzWrjRXn4HjfrL5mu4iDEF2ZKM.roa (hash: 68u8eq1g4Qd3vK6iv6ViZSMZ7p+lDJUxXvgGZjFl+cA=)
                          7: PLIxOGwNx3c8Pq_uw264rVEtmG0.roa (hash: p/Jz+hiXxG8qMBDmsNQ6aRAkWpEh3GcYKquryP1QGqM=)
                          8: ViKQAjbjoPYnrdJgXbxuRJZ2JQ0.roa (hash: sWcoLNpiycy3qZmgDh7RC3B1pLSPMX74VG0McMDKWD4=)
                          9: bXVrxlVdI4qAAAO-JnB2Pdm9qp0.roa (hash: 72otF4TInR6Q172fut2kjaHVHz20mtF6Laz6xJ2s+vk=)
                          10: cCfCyGxkxUozU9FRyKJ9edlcQkE.roa (hash: h9vt0bGSL2WHGRbc9Q7mU1NqYbThUpUx2quDNYLWXTI=)
                          11: eO3zR0KWJ1q4slWPsVVDzeU-pUk.roa (hash: a3FY21E+vx07KCq1wzX0fpbG9ePqDn95lO47g+2QwDc=)
                          12: gqPaWXZsUGNbcY4gnqlpogLao-8.roa (hash: Iw92HcYzpoQx7JXnJD2EPoFslbAR6z3uKi+7CNkU9JQ=)
                          13: k7Uo3u2MzNohX_u6sT_OxVy2xnM.roa (hash: QBE+EeYaOsV6QXl/drSvoTjp9qL1wi5Vvv2BO8PtTiM=)
                          14: kzkxlAjNluX99z1bTtF79HY_wp4.roa (hash: TFi7zUlhEhQqH665vNFOO2zhHl+RI/6mE+V//oHUM0w=)
                          15: pkgADNAfz09-oaAdnI75ykFSSAo.roa (hash: MuieRTuxtPsTfDo1enRicQpjQc/dAw9joMOV5dvGUeE=)
                          16: sUBo3xS4-7zJfFSUwBd9ZNwLanA.roa (hash: gXuVjhXUo8PTlb1IaJweEiB3+QHVS+7yaQSnMjwBJME=)
                          17: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: /IKsU+2B8PzfZECe4lOCDPSZ6gcDZGl9PAU/LGtVNXg=)
                          18: z-QoEkF6zLCFpcF_-M5edmlEZsg.roa (hash: WYLBEFCcRstcUEGK3n2Y55tgOTBgy5qAWmg1FymkBnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:73:0e:fe:d9:bd:59:18:59:d5:f9:a1:5f:d2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
        Validity
            Not Before: Dec 20 01:01:16 2025 GMT
            Not After : Dec 21 01:01:16 2025 GMT
        Subject: CN=2931706ddb4736b19450c77a42bbd3dc7533a099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:96:59:f4:cb:15:2b:e3:e5:08:73:90:f6:
                    9f:b2:1b:98:50:63:53:d9:27:e3:98:f1:ab:c9:7b:
                    a5:bf:dd:3f:3c:f3:a2:31:5d:8d:fd:64:70:52:63:
                    e8:24:d5:ab:84:10:28:b3:c6:e7:99:99:72:a7:87:
                    60:5c:22:8c:7f:40:68:cc:94:39:55:ef:a5:b2:37:
                    02:1b:ad:50:61:5f:21:f6:d6:db:4a:14:37:4f:d4:
                    54:3a:42:a9:96:31:14:e2:33:4d:e1:40:71:90:46:
                    eb:b2:09:ed:03:ba:5d:95:cb:14:5b:30:66:b7:a1:
                    89:6b:e3:f1:f7:da:d4:0b:d3:6d:d8:a7:77:d7:66:
                    fb:1d:da:ec:9d:2b:cb:65:a4:1f:00:14:d8:8d:5c:
                    22:4c:23:36:a7:eb:34:67:b8:e1:ef:21:3a:a4:9d:
                    c4:d7:49:04:8d:b4:e4:d7:88:aa:7e:5a:d2:ab:90:
                    fe:49:4b:4c:e5:0e:50:08:22:36:3b:00:85:32:9e:
                    0b:0f:b8:5f:4d:87:4f:92:e1:5a:7c:9d:57:48:12:
                    ef:f1:54:d0:16:4c:7f:8c:76:74:30:a2:59:8c:df:
                    b3:52:b2:15:5a:66:a3:94:7a:4d:55:a2:94:e9:5a:
                    82:1e:5d:72:79:f1:5c:7e:ab:81:f8:1e:1b:cd:82:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:31:70:6D:DB:47:36:B1:94:50:C7:7A:42:BB:D3:DC:75:33:A0:99
            X509v3 Authority Key Identifier:
                keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:19:4c:33:5d:11:bb:79:cc:da:68:df:2a:e0:39:df:0c:e6:
         9c:ad:e1:6d:60:11:ec:c5:0d:d9:c4:24:80:13:46:f3:08:af:
         1f:3f:29:b4:4e:c4:e3:c9:b7:bc:b3:e9:d0:de:63:f9:b0:62:
         75:6c:e5:28:7f:be:6e:37:70:74:19:58:1e:62:d5:16:c4:35:
         10:c7:39:d1:a2:8a:86:db:5b:fe:64:ba:67:73:c9:5e:c8:95:
         72:10:13:a8:bb:53:d7:05:37:fe:14:50:35:7b:77:f5:9f:80:
         1b:52:2e:40:4b:a6:d5:2f:0b:a8:e7:06:94:86:4b:db:b5:0f:
         6e:4e:e8:89:f7:c5:cd:e0:3f:1d:ca:bd:e7:b6:7f:80:5d:99:
         8f:35:3f:c7:8a:1e:4a:a0:22:87:fc:38:77:1b:cf:5a:09:a1:
         49:56:a5:58:e9:e6:56:d1:91:a5:73:62:6c:52:4b:d4:3d:8b:
         33:dc:60:b4:d6:96:15:b0:26:15:97:20:ad:8f:9c:7c:8d:92:
         a4:5f:96:58:6d:b1:a3:89:97:05:20:72:f5:b4:20:ee:fc:53:
         11:e3:64:dd:1b:6f:4e:ef:d5:80:2d:05:62:25:5a:b3:95:61:
         d8:59:ed:fa:8f:c8:fa:5a:21:d6:c1:ee:5b:65:9c:bf:60:3a:
         93:4b:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:52:53 2025 by rpki-client