This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File:                     ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier:          OoavS2xPeYfhPXMn+r570e+WnPnOoVidedEwIlPCHSI=
Subject key identifier:   FE:2B:45:34:AB:C2:84:A8:B5:0C:2E:31:0F:8E:DC:87:FC:8C:1F:51
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer:       /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial:       019B3CEBE8BAC2B90DC213A7474F2DC27187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number:          1794
Signing time:             Sat 20 Dec 2025 18:00:51 +0000
Manifest this update:     Sat 20 Dec 2025 18:00:51 +0000
Manifest next update:     Sun 21 Dec 2025 18:00:51 +0000
Files and hashes:         1: 0HtxlG1tnNzIep81031kd9p-fBw.roa (hash: OXzBPa2feSryqGHpXn/FEvG/w29ffxoaGIUchPvm3mk=)
                          2: 15E544iqbijbzQkYAdS47aYrD9A.roa (hash: UqW9jr3a9GHG7Uy8FuE2NGM92ysT2U6k57t/AfdIbps=)
                          3: 4e59DVO4NkPnw3RUdXinXYgZKhI.roa (hash: Xsz+QLo3ua4qkoV0U1mBEVAYiGazJCq/50LjJfTfImQ=)
                          4: HLg6VWsPMYDiVDNc71bln7BtlmI.roa (hash: zOH/eTKTLW5itJCzaK8r7su+5axAuuxkhBxsE0F25B8=)
                          5: QeYOzxISXgl6M7OixDgTpfZERu4.roa (hash: s4UEY+I5WghrV5P9V2zo2Pa66DhiVa+5TyKkmVvFOc4=)
                          6: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: vb8XRZuPyIFzfAsutYsCZ2cqKsNAMc25TlnAxzJLXKM=)
                          7: UyMuRFmaCk5x7XKTvKAf7rXw_p4.roa (hash: L73FGhBPgjleo1+zJ19RP4Fe/K9eboVk+DpjFaSLBeY=)
                          8: mb6SEFuusb8ccfPkUgnr1G-16Gg.roa (hash: Cbmq4R34rOxE+s++uid9OxtsaiHFlr2Tu54+IMtMuXI=)
                          9: oD5ktIApamXxgwjGSpDfwIhQqYQ.roa (hash: yFFoY0qvHYFgL03wlalkQiMq33WT4afE35wQSaZE/qI=)
                          10: xHPbbeon1SNsE_0gmuT8lFya0kY.roa (hash: m7FtBUaCPAlNvC/LFbXZEFv5bG9Pb/Vc9bKRiuxNTq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:eb:e8:ba:c2:b9:0d:c2:13:a7:47:4f:2d:c2:71:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
        Validity
            Not Before: Dec 20 18:00:51 2025 GMT
            Not After : Dec 21 18:00:51 2025 GMT
        Subject: CN=fe2b4534abc284a8b50c2e310f8edc87fc8c1f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5b:3e:aa:cc:24:a7:96:c5:1a:43:14:79:06:
                    8b:d0:b4:95:e9:62:b5:59:90:14:15:46:39:ec:39:
                    17:57:df:79:86:93:29:4f:cc:98:e6:df:89:37:40:
                    3a:52:ce:ea:43:9c:79:e3:f4:21:8b:ee:dc:f7:16:
                    c3:6b:4a:c2:c2:05:86:62:47:82:10:1f:af:df:de:
                    81:7c:dc:72:93:bd:40:00:97:2f:f5:97:1d:1b:47:
                    d8:8a:69:22:8b:88:6e:00:84:a8:83:3c:01:39:bd:
                    9f:0a:56:98:57:2e:65:d2:07:c8:53:5f:47:a8:ce:
                    98:9d:d0:b0:d3:54:ca:0c:92:21:4b:b1:3d:d4:8d:
                    49:00:bf:c8:29:68:3e:17:d2:69:14:b6:00:48:5b:
                    5c:33:63:96:6b:0e:70:83:4a:2d:2b:e4:6c:cd:f5:
                    d2:98:96:53:d2:8d:a7:a4:9b:5d:c4:aa:a9:4b:7f:
                    51:6f:e0:84:d3:db:80:d9:50:e5:67:16:fc:bc:dc:
                    f0:a9:a7:cb:08:32:5e:e8:b9:2f:29:43:1e:fe:eb:
                    70:c4:c0:b7:d8:45:82:83:5e:bf:25:3c:53:16:bf:
                    6d:d6:f7:71:53:34:14:68:36:cc:bc:d8:4a:c3:bb:
                    34:85:51:c2:7b:9c:66:ef:29:5b:54:b3:aa:7b:34:
                    e5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2B:45:34:AB:C2:84:A8:B5:0C:2E:31:0F:8E:DC:87:FC:8C:1F:51
            X509v3 Authority Key Identifier:
                keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e0:63:a4:76:9b:a3:d9:2c:44:d4:36:cc:cc:69:4a:4a:db:
         40:c9:4d:d6:6f:65:21:28:6a:f7:be:eb:fc:3f:c1:39:6b:62:
         f0:17:71:5a:ea:a0:58:2c:72:b2:fb:7a:2d:79:82:72:2c:36:
         19:28:52:6d:66:9a:ee:c8:2a:a6:dc:db:2c:53:7f:bc:91:7d:
         c2:a4:4d:06:05:1b:33:b2:e6:8d:87:1e:1a:2b:b0:1d:fe:3f:
         e1:d0:87:15:23:57:72:65:0f:a0:67:55:25:bb:a8:be:ab:03:
         d7:d5:33:aa:64:38:3e:13:fb:2c:88:5b:7f:b6:00:e9:f6:43:
         ca:99:10:bf:cd:30:15:f0:69:d0:ad:bf:8e:6e:2a:c3:f4:7e:
         ce:68:43:78:88:80:37:c5:85:92:74:1a:c5:df:01:6b:9b:9a:
         99:77:85:d4:ea:71:b3:fc:b4:56:85:eb:88:80:db:cd:0f:44:
         74:19:9e:93:91:c2:0b:7a:16:b5:86:bb:a6:a6:7c:1c:14:d5:
         e5:5a:8f:f8:cf:10:f9:6b:68:4e:18:d0:67:ae:95:59:a2:66:
         fa:71:2f:44:d7:4d:5f:97:15:9a:e5:06:a5:cb:ed:7f:fb:ea:
         0d:39:f3:e4:4a:5d:3a:45:37:be:f9:35:23:56:1e:d0:6b:87:
         63:c3:42:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:42:10 2025 by rpki-client