This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
File:                     V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json)
Hash identifier:          z0dsBIydaavKiE/fmA4b4B11K6O4oOC6RuZsY3baTUQ=
Subject key identifier:   06:C3:08:2A:B5:42:EB:02:78:78:5E:EF:A8:75:04:EB:41:3B:2D:C4
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Certificate issuer:       /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial:       019B3A90FB9AA43040BD53DA27BB6641A5EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
Manifest number:          137C
Signing time:             Sat 20 Dec 2025 07:02:18 +0000
Manifest this update:     Sat 20 Dec 2025 07:02:18 +0000
Manifest next update:     Sun 21 Dec 2025 07:02:18 +0000
Files and hashes:         1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=)
                          2: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=)
                          3: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=)
                          4: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=)
                          5: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=)
                          6: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=)
                          7: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=)
                          8: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=)
                          9: SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa (hash: dI19F02QJ/eVSmcDcyQsUmklhiicL/qqyQKGyXmUBoc=)
                          10: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: Ev2cBJEgQHKDbc2FntWySclNlrD0gJiDvEDOQTStr+g=)
                          11: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=)
                          12: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=)
                          13: e2eD9qK2hYztM9wMgcHLi8AhZs8.roa (hash: tUPW+7fViLoXv6YzC5FAQqNxsVyrAjo9of3A+F1usKg=)
                          14: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (hash: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=)
                          15: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:fb:9a:a4:30:40:bd:53:da:27:bb:66:41:a5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
        Validity
            Not Before: Dec 20 07:02:18 2025 GMT
            Not After : Dec 21 07:02:18 2025 GMT
        Subject: CN=06c3082ab542eb0278785eefa87504eb413b2dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:dc:13:a6:e0:c7:e3:27:48:1c:ca:1c:68:
                    95:e3:1b:a8:f0:a3:05:b2:7d:e6:8d:6c:f7:47:3e:
                    49:77:1a:1b:70:de:5d:5c:d9:80:78:5b:bf:f8:8b:
                    07:81:22:b8:b0:41:bc:9f:a3:e3:cb:4f:a3:dd:2d:
                    fd:18:06:f2:c3:21:0b:e1:07:4e:5a:78:24:9a:dd:
                    0c:15:8d:f7:e6:c3:b7:37:eb:5f:f0:56:0a:43:72:
                    1a:7f:f8:a3:f5:91:43:f4:fa:f8:52:75:08:25:7a:
                    92:31:3d:0a:ac:e1:ac:fc:ca:bc:8d:7e:2a:47:c7:
                    8e:a5:c2:41:31:b1:78:72:76:00:10:01:f1:40:1a:
                    47:1a:88:34:ec:49:ba:58:1e:39:fc:c7:56:8d:96:
                    1d:b0:2c:42:79:15:79:3c:75:d3:00:6d:ab:ed:ea:
                    31:f9:bf:92:03:84:83:13:66:0d:35:d7:25:d8:09:
                    a7:f2:e7:19:5a:4c:85:b4:03:06:d3:03:5b:d1:c8:
                    c8:22:a0:9c:f3:cb:ec:f8:75:fd:45:9f:b2:d2:32:
                    21:f9:b0:6d:20:82:78:6a:7d:00:3b:00:11:06:6f:
                    91:32:4b:28:c1:00:57:4c:b5:e3:c8:fb:9c:e5:d7:
                    b3:a1:b2:b8:2a:7c:8b:0e:a9:9c:11:c1:77:3d:f2:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C3:08:2A:B5:42:EB:02:78:78:5E:EF:A8:75:04:EB:41:3B:2D:C4
            X509v3 Authority Key Identifier:
                keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:48:48:14:da:93:42:e4:7c:1d:33:0f:59:d3:18:c1:32:85:
         3d:73:75:5f:87:39:3d:d3:50:0b:17:82:9b:d3:72:d8:95:da:
         22:23:54:7e:a6:6d:b3:f5:a6:76:ae:a6:64:ef:89:6b:dc:a5:
         8b:ff:73:a5:6a:1b:ef:08:aa:24:48:97:ad:12:5a:a7:6e:ab:
         34:77:e9:3f:c7:7b:a5:a9:79:cf:5f:69:0b:88:64:43:76:1b:
         5f:4f:de:4d:23:8e:cf:72:1f:2c:a2:db:46:79:df:c3:ed:b3:
         de:75:c0:84:7a:be:2b:97:98:7d:c3:4b:d1:91:1b:c5:0d:cf:
         41:f3:a0:29:1c:ca:ca:17:4e:f0:ca:ab:9d:a1:27:fb:0f:d6:
         6a:bc:01:ec:33:96:af:33:d4:c7:2d:ed:24:78:1a:bc:db:0f:
         71:b9:de:0a:43:50:c1:2a:e3:d7:1e:91:09:05:81:7c:28:a4:
         ed:19:54:dc:67:76:b2:8f:f2:92:a4:e6:3a:67:6a:40:7c:48:
         8b:c8:15:52:ad:0d:89:c2:21:a1:50:ff:ea:83:dc:fb:aa:cf:
         ff:e7:42:09:65:66:06:fa:4d:6d:d8:07:1c:2c:31:df:af:d8:
         b4:db:1f:e6:d8:77:83:87:ea:6a:6a:6d:3f:69:cf:fb:b4:71:
         79:13:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:45:08 2025 by rpki-client