This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
File:                     HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json)
Hash identifier:          o87z7pupU1x59OEBEXC98xAd7QxYjI5duf0lqEjX4xk=
Subject key identifier:   FB:39:18:0E:AB:3E:AB:81:AE:B2:C6:B8:F0:9B:5A:6F:47:B8:7C:34
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Certificate issuer:       /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial:       019B307996DA16F47B894FF8EAD7B90FEFB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
Manifest number:          17A9
Signing time:             Thu 18 Dec 2025 08:00:33 +0000
Manifest this update:     Thu 18 Dec 2025 08:00:33 +0000
Manifest next update:     Fri 19 Dec 2025 08:00:33 +0000
Files and hashes:         1: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=)
                          2: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=)
                          3: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=)
                          4: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=)
                          5: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: GtnwdB+lv3iWJiAUeoMN/QmP1Y/B98n477v2aJ3CvmE=)
                          6: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=)
                          7: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=)
                          8: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=)
                          9: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=)
                          10: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=)
                          11: jhzB3ouu7eGFu6kVywcyzMtWs14.roa (hash: 7ZiZaqq6we6E8f2G4rGHZ2hDk0lAG3K7IdZ3KOrq/pc=)
                          12: o0vYiu7t9-Gf_p4my_hwACs12xM.roa (hash: ScfmqOpze90tdsEAKGtRqRtW3EkE/Acyl9MG35VvTP4=)
                          13: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (hash: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=)
                          14: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=)
                          15: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=)
                          16: zg3nFQ0Sg8cWpJOYqLKRP35LJU8.roa (hash: 2J2iLBS4crA0QUVX97KQglPfQbj/gfi5p+BnPc66cJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 08:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:79:96:da:16:f4:7b:89:4f:f8:ea:d7:b9:0f:ef:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
        Validity
            Not Before: Dec 18 08:00:33 2025 GMT
            Not After : Dec 19 08:00:33 2025 GMT
        Subject: CN=fb39180eab3eab81aeb2c6b8f09b5a6f47b87c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:49:6d:0e:04:8c:01:f3:b4:97:60:1c:1c:
                    5c:9b:46:85:06:7b:62:24:18:95:bd:18:7e:64:b4:
                    b0:e4:3c:b3:36:19:98:55:12:ea:64:75:c2:fe:7d:
                    95:f3:c2:db:1f:2e:2d:96:38:0a:be:31:41:b3:6e:
                    b4:0b:71:49:46:31:03:60:23:92:2d:e9:31:21:0c:
                    09:80:3e:c5:64:f5:6b:23:e0:c6:f5:6e:f0:e0:84:
                    c9:01:eb:b2:22:76:2c:de:54:a9:e4:fb:e1:f1:ac:
                    fc:d5:f8:32:76:bb:e6:8d:36:77:2d:61:0b:b5:f0:
                    7e:6b:8b:a3:57:35:b3:d3:b9:9e:79:79:d1:a4:09:
                    0b:ac:2a:24:b5:35:63:c2:8a:9d:6e:12:a0:6e:e7:
                    b4:e0:05:d4:d2:01:db:1d:15:f4:e7:ea:58:8d:05:
                    c3:e3:ab:79:b3:71:32:f2:ae:b5:d5:1f:bd:21:48:
                    28:06:68:a0:ac:02:e0:b6:13:21:3f:e5:97:74:3f:
                    bc:f3:6b:d4:75:ea:ca:70:99:25:57:9b:43:b4:8d:
                    de:80:d9:1d:a9:63:38:ff:ce:e0:51:43:62:f7:7c:
                    ca:da:26:08:bc:d6:98:dc:c4:f1:93:1a:9b:4f:84:
                    62:76:90:8c:22:ae:57:c3:cf:df:14:27:50:a6:99:
                    4e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:18:0E:AB:3E:AB:81:AE:B2:C6:B8:F0:9B:5A:6F:47:B8:7C:34
            X509v3 Authority Key Identifier:
                keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9a:04:78:7f:c3:e6:da:5e:55:e3:d0:9a:04:66:09:d1:8f:
         a7:93:74:94:b0:52:d9:ee:2d:5b:df:c0:8e:4d:05:7a:c5:e6:
         54:16:29:72:3d:43:f6:82:77:da:a3:19:71:b1:b6:03:b5:b8:
         a1:03:f4:e6:03:05:ac:c7:f1:27:03:df:f2:c9:80:53:99:5d:
         f1:64:a9:ae:c6:a8:4c:7f:38:54:6b:f5:54:08:14:05:6e:ce:
         d8:9f:ad:e7:9e:1d:d0:02:b5:14:5c:c5:3f:b6:d1:91:1e:43:
         9c:17:bb:1e:44:e4:0d:b7:f1:d2:6d:94:e2:53:49:20:ba:f9:
         cb:a0:88:61:fe:be:34:c6:9f:9b:e4:3b:68:62:01:d8:0c:cd:
         ac:5c:c6:e0:2e:7c:e0:44:f9:39:a3:cc:60:07:93:4b:9d:53:
         01:2e:d4:42:06:fe:54:ba:2c:0d:84:c4:13:3c:01:0f:69:4a:
         46:1c:10:ea:72:4b:92:15:6d:8e:5e:4d:73:f8:29:bf:45:53:
         c3:d2:cf:8f:1a:d5:a6:e1:6c:b9:0c:b6:95:06:07:17:23:fa:
         13:3c:09:0b:cd:83:b5:c9:e9:76:22:62:5f:90:35:cd:c3:27:
         3a:04:b0:1c:fb:3d:0b:01:c6:e8:4d:d6:1d:20:e0:f9:5a:45:
         b8:fd:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:23:36 2025 by rpki-client