This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File:                     e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier:          oQCmptZkAfjv2G8xcwf9qJcuE+q0Ph6fe73EIYomf/c=
Subject key identifier:   C0:3F:A9:D9:50:14:31:C2:23:A3:62:3B:F1:9D:FB:4E:8F:35:B1:6A
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer:       /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial:       019B3BD902100D4FA75D2234F49FE24A8ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number:          02BA
Signing time:             Sat 20 Dec 2025 13:00:36 +0000
Manifest this update:     Sat 20 Dec 2025 13:00:36 +0000
Manifest next update:     Sun 21 Dec 2025 13:00:36 +0000
Files and hashes:         1: 36QCi9gQh9tE74apIP0AUk7-Sr8.roa (hash: bFg76n5+s3/DgXURQWdNC73y3/o3Eq9hbscTlV6BsZY=)
                          2: 3qMnzegnJFRMdqj9_RxrliQV9LM.roa (hash: irVxMyTLI0mdYOfT78wXitWNxqzDfC5hTPTHdWrdTqM=)
                          3: B16Z8jw3-GtAU3hcNRF1sFBOM7U.roa (hash: aaAdtl6DDoVRo6SJjsYxRJmj8KdTthVqgWUA1J2mPj4=)
                          4: Bww04LBwxBB1y6rGH757C_xud3s.roa (hash: quqNEZs1nsjXNRnY683lQOPEfOLi5g4tury87348zBY=)
                          5: G_L9-k7kl5xJGnz4egCFDtxxaVg.roa (hash: JY4YV9TmnbicGUYv06ZMCkyc0EHzSeH2663bLnF/bYk=)
                          6: GztDcv1wOIshQxIOLwJqTJDSyGw.roa (hash: qFDHdyDAkwjk96ej9WLJA+3FYjQLPrqczmkb2Ix2yaY=)
                          7: HgNlDxtVI_FZHJ-yg5V2bGuq6V0.roa (hash: /mLah/dk5n4ZBua8a6QDuH7hNHn7+jWSIk14BHGnCao=)
                          8: JsojVSNGW_6MQsylEevXw37Un4I.roa (hash: uyp9vv7Icxi5xYgKVSefYCJmGLo/DyClRuzzUQ+0KJI=)
                          9: KPxH6L4VBadP6tk4Gv2ftPNEm2o.roa (hash: 2iXYEdSOmwm3bODYrmY9cPs6umm1lNKA4+/nGQ/v4XA=)
                          10: NzHA_YldHM1AjXEdEx-U24OI_CU.roa (hash: uhp5UTG2CO0f9oiB5g6MPk1HvLgJdaZyTM5hgsLSVoM=)
                          11: S3l_ZxOe0vksgRec6YnoaQ1tTcM.roa (hash: ZfGKjrYT3zpMcFluD61+mKTayU59cDNHTpqd96ROkBo=)
                          12: TTBErUL6vl3lSqjsByIpaDDgE6U.roa (hash: 4weVW558ecVuX1Zae4lOHzv/p4kGkETVv2eYyWWuW94=)
                          13: V1jbg-NiX_oSIpSj0eYvMxiYlKo.roa (hash: Y9QvU3WPEkqlp1r7xScFCfD4/+c84H5zgBo5GTZPNnE=)
                          14: X9YZAIxPcs8Z6oidZTveLJBkHvw.roa (hash: VGs1xBJh0QfEsITLoj2YbluQOUz4PYPnk7zZRSZl2BY=)
                          15: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: WpaUOpvHhrjOLkovEqyc0o2gj9RkI8ms3r10XfY7ynQ=)
                          16: f-A38n-d5fyud_iYPeLHbx-sbUk.roa (hash: 2hwdLgzaTlm4Tton83Slz9wiJFdMuYjI3gUlE3qoav4=)
                          17: iiDcyFQb9cAke3RBNMr7qfXmkyM.roa (hash: kzpg6p53Rvmk3JRHQ44t9CSv2lHV19rFFQGgUo5Zijg=)
                          18: krfc0WNLUx6hJvboRiV5gk-WnVc.roa (hash: K3F7v7vct+kdtxcJdeS+2oWlYV9pZORsvbv2DJKsK9Q=)
                          19: m9PcA8-OwFepKS47hmN4AxlvQMY.roa (hash: Qpa25XlvI/sDlWgjx0yG7D6gCCao+tLoIa+GJUVplR8=)
                          20: oDclA6yqobvsaqJJT443zmBke-0.roa (hash: yZKlumYkdmAJnO3OghUN+CNhxfFsX0VhB+tnf4Y6t1E=)
                          21: p_sKryOv5jzqHsQkohs_QPsmrqk.roa (hash: 9GNjv6WXXhnS29imH4SS0PVJW8Ywrh+W/DxVrG7PAyU=)
                          22: rQtfM8PefL_hK-A8NPTHmlIKSLs.roa (hash: f2wwDmx2Wkc12eQdKNSHdJlIoMOj8WliCAuLil9HxNE=)
                          23: t0tCch-yn7o-pJ5N_Rs5j81xWnc.roa (hash: eM+E0i9nzeMdj+coKh8ToZipyJgk/cpYwH4HOyuu2b0=)
                          24: zbIAsFwD5ePJdM-wyedaiDucJ4s.roa (hash: FD7BXNbP86/URBegfFq5gaF2zYtItcl8bvGrxblk8mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:02:10:0d:4f:a7:5d:22:34:f4:9f:e2:4a:8e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
        Validity
            Not Before: Dec 20 13:00:36 2025 GMT
            Not After : Dec 21 13:00:36 2025 GMT
        Subject: CN=c03fa9d9501431c223a3623bf19dfb4e8f35b16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cf:fc:4f:41:70:f9:1d:eb:00:ba:92:d7:6b:
                    2a:35:e7:95:47:9e:5c:af:a1:fd:75:83:e0:d2:95:
                    9b:d7:d5:44:60:4a:9a:03:20:e7:d0:d4:2c:dd:a1:
                    5a:88:11:57:a8:71:50:29:7c:a2:35:cb:89:f8:61:
                    a5:76:b7:d5:3b:94:65:8c:80:cb:34:74:ed:31:9b:
                    69:e4:3a:72:a1:39:d4:e9:04:3f:3a:29:61:14:2e:
                    20:63:0f:22:dc:75:da:21:29:dd:4f:a8:84:44:3e:
                    85:7b:28:83:d3:52:49:32:81:fb:68:a9:b5:69:ce:
                    e8:c8:59:1f:88:46:af:7b:fa:3d:13:42:cf:98:e3:
                    d9:22:4b:a5:00:60:e0:5b:5a:93:a1:be:c6:87:81:
                    1f:d2:ff:66:12:14:63:aa:6d:ae:89:4f:9b:6c:b6:
                    24:cc:f1:74:5c:71:c7:1f:c8:46:6b:d0:86:bd:25:
                    22:ed:6f:54:b9:9a:b0:a2:ca:28:60:9f:1a:b5:52:
                    7c:f0:1b:8e:60:1a:91:eb:2b:d1:ac:69:1b:ae:15:
                    8e:92:84:ea:4b:70:62:31:5f:2f:c4:02:f0:86:08:
                    ca:f3:6c:fb:4d:73:5e:16:1a:2b:0f:a5:19:3a:cb:
                    7a:e5:91:e5:3d:3c:76:5d:db:a1:60:f4:b8:ec:36:
                    51:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3F:A9:D9:50:14:31:C2:23:A3:62:3B:F1:9D:FB:4E:8F:35:B1:6A
            X509v3 Authority Key Identifier:
                keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:24:5d:ff:55:95:3d:a1:a2:66:4f:b4:4b:cb:a2:5e:56:95:
         73:d8:bb:2a:5a:97:6c:bc:fe:57:29:8b:13:10:77:42:b7:35:
         37:ef:62:9e:0a:de:d8:86:f5:ac:da:ed:dd:b1:c9:8e:d2:2c:
         6b:ab:c5:ea:80:b9:33:87:53:58:9e:1c:d1:68:88:ef:3f:76:
         40:ed:53:4a:c2:65:85:a4:e5:26:17:76:4c:96:c5:cb:c1:70:
         71:af:30:e5:e6:27:5d:63:6e:9f:61:88:f4:3d:0e:66:aa:3a:
         3b:a7:bb:81:37:21:df:cd:bf:5f:fa:73:e9:bc:9a:2d:19:85:
         f9:44:f7:79:ca:cd:0c:8a:4b:71:93:67:f9:f6:80:58:9a:48:
         6d:63:54:83:fb:fe:e2:86:f8:99:66:41:1e:a2:00:79:56:7b:
         4a:3e:c4:4d:d6:19:32:8c:ff:ed:c1:9e:86:8f:71:ed:1c:62:
         f4:3a:05:a9:e7:b5:38:58:31:71:4c:4c:1d:fa:8d:99:f1:3f:
         c5:bd:f0:34:35:a5:4f:4d:37:f2:f7:25:32:5f:65:4d:93:49:
         c9:d4:b2:00:2a:34:52:70:5e:f5:8b:ff:4c:0e:f7:6f:73:f6:
         ea:f3:ec:99:24:e7:21:c5:b8:b3:e9:3d:43:fb:0e:22:5a:dd:
         38:3d:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:29:04 2025 by rpki-client