This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File:                     Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier:          ClwYhcMfr8D3hUfXA447NFxlTJViKgV5JqyxxyxvLWY=
Subject key identifier:   8B:42:60:C5:AD:19:F2:1B:F7:D4:95:84:66:88:80:02:CD:1A:D7:C2
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       019B42120760A80CD6EF6356C3C3B15B292C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number:          11E6
Signing time:             Sun 21 Dec 2025 18:00:36 +0000
Manifest this update:     Sun 21 Dec 2025 18:00:36 +0000
Manifest next update:     Mon 22 Dec 2025 18:00:36 +0000
Files and hashes:         1: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (hash: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=)
                          2: 6PxBgUSRHd1EjYh3aR3NrW9EPHg.roa (hash: WiFLNJi8EFWrkwSxJcCvJRnRmfSBPW/TIg84s3LJWkY=)
                          3: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=)
                          4: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=)
                          5: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=)
                          6: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: S8/te2u7oXO4JCo3O7PtXQftG50/IdR246B6UHEn5fk=)
                          7: K03TI5nYUitEhr3tDnZaspm3S48.roa (hash: 0GhwyXOcDmriRSuXnm9/II1OmPaoLu8Djc5b090uRNw=)
                          8: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=)
                          9: RRfbWS9gJIpkQlUHUBT_C-4iKW4.roa (hash: 5YJMcnD8st6XyEBie4P9czS9E91f4FDnUOlRC1amfu0=)
                          10: RdAiuj0CKwGdWqOPsTysiaxS8RM.roa (hash: RUegU9jus91oC1XvjlC85kvkBYAhgdo3GTaU32XzLRI=)
                          11: SYk4GxliaZpJqTCuYoS1RlB42nQ.roa (hash: 9B1ID7kU7lydVLj0Bq4vSnoOl2X9alpr1jITqsrON4I=)
                          12: TvBd_TBobczJOG8QWKDSmcVHnII.roa (hash: SV6ijHb1FOcL82xPrijcBg+IdcxSfneZcM0YuAynCMs=)
                          13: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=)
                          14: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=)
                          15: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=)
                          16: bsGlZCjY2If1xF5r6Lh9aXftQxY.roa (hash: 4I+nRvBh4ozmeE6qARWVUjACm5WcVyPe6u5e5vaiYo4=)
                          17: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:12:07:60:a8:0c:d6:ef:63:56:c3:c3:b1:5b:29:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Dec 21 18:00:36 2025 GMT
            Not After : Dec 22 18:00:36 2025 GMT
        Subject: CN=8b4260c5ad19f21bf7d4958466888002cd1ad7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0f:c9:1c:12:f8:51:dc:ef:9e:92:2e:46:11:
                    2e:b7:cd:52:68:07:c7:22:41:47:0d:09:21:ee:82:
                    b8:7d:20:bd:59:3b:13:d7:4a:4e:52:f4:58:13:e9:
                    3d:0a:dc:ce:33:b3:cf:bf:26:5e:cd:a0:94:0f:06:
                    12:4e:73:08:8f:26:fb:d8:15:af:06:5c:70:a3:f2:
                    c8:bb:9a:d4:3d:a7:10:7c:94:c7:15:2c:50:d0:27:
                    f4:9f:c8:f2:19:28:e7:94:0f:22:a3:d9:b2:21:8c:
                    ce:fb:5e:e5:dd:31:10:7f:66:51:1c:36:e1:55:37:
                    d8:f5:26:13:b1:33:9b:ab:03:2e:b0:0c:93:68:23:
                    27:a4:0d:53:d6:8c:8c:a7:96:af:a7:8b:66:74:1c:
                    66:2f:ef:a2:a5:08:9d:3c:cd:ac:9e:f5:ac:53:85:
                    52:b9:d5:9c:79:30:e6:c3:61:4d:20:b2:cb:c5:4f:
                    25:a3:f2:96:15:fd:0c:63:0b:fc:33:2a:52:0b:7a:
                    98:c3:a1:fc:55:32:c6:2e:ef:31:a6:c9:d3:c0:fc:
                    6f:7b:98:90:7d:46:ee:d1:7f:1a:13:50:66:49:8e:
                    b3:5f:67:8c:f3:4e:c1:3d:5f:97:29:5a:ce:9a:ee:
                    1e:0a:56:f8:b5:55:ca:b9:03:2e:1f:2d:f5:61:ac:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:42:60:C5:AD:19:F2:1B:F7:D4:95:84:66:88:80:02:CD:1A:D7:C2
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fc:63:87:7d:af:02:42:1a:eb:a5:2b:23:f1:31:48:30:27:
         5a:81:ad:31:5b:8d:d7:31:c5:0a:cc:08:14:e3:a0:18:cc:11:
         68:fc:d0:3b:dd:f3:f1:78:01:ed:2a:9e:ef:4b:d9:09:47:3c:
         82:7c:de:15:0a:63:1a:e7:03:0a:a7:65:43:c1:a7:ef:aa:7d:
         ba:b0:b8:b1:3d:e9:86:3d:3a:d7:f3:ec:6b:9e:cb:2c:ef:b1:
         8e:89:a6:3c:dd:ff:67:a0:85:e1:fe:24:b7:5e:f4:10:a7:e1:
         65:22:e6:de:62:a3:e1:be:0b:e6:2e:47:d4:4a:07:e1:c2:0a:
         81:c8:4a:da:fe:63:0b:3b:04:92:2b:85:ba:10:7a:0c:0d:97:
         47:0c:2c:ec:ae:40:7b:d7:a2:43:90:f4:d8:6c:df:a0:16:d4:
         35:2c:e0:17:83:0e:fa:40:c5:7f:c9:22:4d:04:5e:83:ce:85:
         84:fe:37:a9:5f:87:1d:5b:61:7d:86:83:5c:3a:05:c1:0d:68:
         1e:ca:87:76:73:68:45:1b:30:47:4c:ef:b2:f7:3b:56:b2:15:
         1a:26:05:69:fb:0c:af:3c:20:31:ef:71:e5:77:7b:d0:8b:c6:
         e7:8e:ef:83:cd:56:c5:ee:cc:82:a0:e4:c3:86:49:10:e6:6f:
         9e:e4:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:08:21 2025 by rpki-client