This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
File:                     fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json)
Hash identifier:          gBX9JtKIWaUR9xp16/u+NWHmuCdl4Y9M1WiLs/qlzOY=
Subject key identifier:   7C:66:4A:04:A8:C1:B2:06:80:75:F0:17:FA:B8:51:75:9F:A8:32:70
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       019B3B346CE6D9DE284FC9BD3235BC42ECB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
Manifest number:          1395
Signing time:             Sat 20 Dec 2025 10:00:50 +0000
Manifest this update:     Sat 20 Dec 2025 10:00:50 +0000
Manifest next update:     Sun 21 Dec 2025 10:00:50 +0000
Files and hashes:         1: 2EnX4m92s0lhKmWE_sTzMD4Ayro.roa (hash: gA57KxZUSDCVnGJyJOSYKPN5gZzPfcQGEC6QQbL5A80=)
                          2: 3-Grh5jLZ10JU7OBJD1tp_47eyY.roa (hash: 2c45XwsvJy+h7TqtuH/GlyKMkqIf7Xkil5OLxUtEjls=)
                          3: 3O-PquqRfbA6nwdvb9qh_AlphQI.roa (hash: ui7wdGtAkSn5jSbzg9QOpRGaOjEkXjjG4DHPpDLyVM8=)
                          4: 9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa (hash: PfJNVhJ2t/gHrswGCAzyuF/aOd+UybWj7m8V6C9TjnM=)
                          5: DNKZJXST2kGoKjhKfNecPwD9F3A.roa (hash: hRAyyWzBrmRGz8fLB2bN07ZS6ISPKILq/slATox9sto=)
                          6: Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa (hash: SD0RplzRHSl5AqxByRd93YJkWu3aK44s9ywFpp3pnJ0=)
                          7: Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa (hash: XNzqWOUJb1G6BusqTwhK231Qfjyjj7xbS2sFfNlRRIY=)
                          8: HTr5rydQdFHu-uCLJk2lOL3Ir2E.roa (hash: i32saCx4DgxcZ7o3IHdv+kvs+bAPQrDg12HNZKhQfo4=)
                          9: RHQDwKu8R1BiqVyY2Tjg4hHJAWc.roa (hash: b8HvAiKDPdfzzLQtID64DX+UXDDGwjs7bi1PBPQ+P/8=)
                          10: WabN-J1FDu6W3p8yB6HeIVyu7fM.roa (hash: 4LNC/qP52AV9uC8vUXLHv0auNiYxyYlw8sJ9ArCTUpg=)
                          11: XE7cRB6SWvPtqodUbBU29gAlxy0.roa (hash: VEw1GCPGuZXegW9h5elGs3pbrIScm0hRkL6R6Vn1RLY=)
                          12: aTYH8WLc2Uw_7C2gcxcXUDSiXNE.roa (hash: uLUo/4kACROoANdVMI4SZiElSQhSuepEBxz4gCNJik0=)
                          13: brk2eWKkbDOeEGphbM_FR9qqM9A.roa (hash: yHMenONPVTRm7WPjBi5HPXl1TTgaMoeCdfTRvLQgfGk=)
                          14: ct5jXmRV16i6fK8y9z-vqgBC-eM.roa (hash: YwoZM0/dlMDJEjxF3IHm0bkS1+bWwqNb2ETiYm2dLk0=)
                          15: d3sFY8_J7LBIPwIhb4dAzqL5atM.roa (hash: Jn5pB2LDPV82LCwM4xQJY+PpwwF3+IHXMhIfwqqGyG4=)
                          16: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: zHrtt8ZxSeUWHtwDT+gc44Abfo9J3BgshIza6Gn0azM=)
                          17: hV3esBXd7kWM19SwGoTWr4W2RYo.roa (hash: nkuIcdLSR2rDjqKAyaaEtGABcGXULTJNPUbi1fRjd+w=)
                          18: hqcWZscvMvxfFB8QI_S-D4mwSnM.roa (hash: ffNiaNjp7TZpp1BEsr11TAWkOb9RQ/w06b89HrPSZY4=)
                          19: iHqHOmwrVyrtHOqJBGU-h4gTPGE.roa (hash: LgyVv3T9GhaxHLbeG0cUmNnr3zf3ppvzWIBGJwHUSNg=)
                          20: iPUqVolhLmbwFocDgLV6ncA_LRs.roa (hash: Vf7btw8BxFTBWWeh1+kJas/26jHzb0LOznlp7bXnAAo=)
                          21: j4qMrNazE4U-55TjMmv1LIDcc_A.roa (hash: Gj4NvJCKAdxN+LOAFljaCnKHiV1lpQyFMbBfJ0I+GNM=)
                          22: mshsch9jvLRWMOkW640opDKVZ6U.roa (hash: BsoqjBrJxvmkPWcY+fPLitNMqJrGGEQ6Lx9nbs/IguA=)
                          23: mss18FIq4ydcYebAHYX2pd8ocjk.roa (hash: J88GfjksI+w3VtUia6Hq+rhitJHHRkLoOK14jy8vrfc=)
                          24: n8beE_tI7GeE5JTD0amAF0WQp1M.roa (hash: iiReayb/lEPVoMVcPoo7tc123PhSZyon0Hw4QE2B2Jc=)
                          25: pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa (hash: i9S7NxmicTLIf3yhZDDOTywtRB20Rf0o941WAv3hGkY=)
                          26: phdVSjC8d7P_IPR9pfuqF3ibJeQ.roa (hash: LdfALFSTfppofahy/V7vrDSqtAjnA1jl4Wz8tBm0yaQ=)
                          27: qhqAQR22JaN9sFDstmAnfgH6jD4.roa (hash: DYrIqHwNjcGZSEbGFvg0f1ZcKdSDEK96zCtPjprY0u8=)
                          28: qsCWx0y5U0_tpArKY33BWGyPAKg.roa (hash: 5zlW+fe570TQ9t9Q/r880168DEL2PLYQkcP+DEhbBe0=)
                          29: uxv5-7Rkovcdr6oQ5HIcsyLXhFw.roa (hash: bmf7r/lnr8aPkEjOmBPWFHMJ7k6Z28feAqhka0AdSMM=)
                          30: vWcgLORNYaxn8oW87i0UFzUEE_0.roa (hash: H32EyNsUB/y926E/9Y3FItCi0tRX+tClcrtmQ4SkcBw=)
                          31: yArUxJuVZr7ZjsAQ50iIy89Di3E.roa (hash: FYImSGmHMUN8RyvNxZTCDINMDJQGeXHDQkBay1ZLpaA=)
                          32: yyxJQ5XATA8lfc_O-A0MIq50viw.roa (hash: b3vHgrn6G4FC+/ORCr2nTAcwUFNQFEM4kTv5ph/7kMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:34:6c:e6:d9:de:28:4f:c9:bd:32:35:bc:42:ec:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Dec 20 10:00:50 2025 GMT
            Not After : Dec 21 10:00:50 2025 GMT
        Subject: CN=7c664a04a8c1b2068075f017fab851759fa83270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:89:73:bc:e4:c7:ed:d2:df:df:5a:e0:7a:
                    f3:6e:3f:77:52:28:0b:b7:77:b9:ee:2c:1e:05:dc:
                    51:b1:47:f4:94:81:26:ea:a3:e1:a0:55:32:f9:f4:
                    11:81:95:60:e8:2c:aa:45:88:16:46:1d:74:76:2e:
                    ca:ef:56:e3:1a:cb:da:36:45:2f:f3:e7:d6:b9:97:
                    56:25:34:04:ef:12:25:ed:51:8f:35:4b:05:13:d0:
                    e4:39:9f:64:f8:96:2f:f4:32:74:15:64:3f:9c:9a:
                    43:82:e8:39:b6:e9:30:c0:9d:19:99:ad:75:d0:1d:
                    f2:0d:a1:ad:fa:9c:e0:ed:b1:bc:c4:66:69:90:fb:
                    d8:fa:3a:9e:30:8d:29:1b:ea:cf:60:fc:ca:6c:43:
                    3b:bc:de:6d:6f:c9:e4:80:cf:26:58:b8:44:b8:cf:
                    01:1a:c5:38:d3:96:90:9c:15:ec:cd:82:04:cc:14:
                    1d:03:86:08:6d:e2:ff:9c:ea:83:9e:0c:61:56:79:
                    52:78:4b:a0:0f:4c:03:37:a4:46:e4:32:22:54:92:
                    65:34:7f:d5:ad:9b:52:49:4f:8b:40:fa:8f:1f:d9:
                    d6:82:75:b2:f8:ec:4e:3e:0f:a0:e0:dd:aa:74:e2:
                    c6:32:69:bd:5e:d5:2e:ee:61:0b:17:07:91:20:38:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:66:4A:04:A8:C1:B2:06:80:75:F0:17:FA:B8:51:75:9F:A8:32:70
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a1:75:f8:28:ce:95:54:70:f8:28:80:ac:70:e6:c3:69:52:
         14:77:c2:90:bd:2d:ec:cd:f4:eb:62:5c:bc:f6:70:db:45:91:
         55:50:d7:f1:71:38:a3:ed:af:00:82:52:db:c8:89:22:28:d3:
         53:05:ca:f1:a3:5f:9d:e9:4e:dc:fb:14:e4:cb:3f:71:aa:58:
         2f:59:72:f6:66:3a:ce:6e:8e:0c:5f:7f:6b:59:f9:ff:de:39:
         8c:ad:3e:2e:85:11:a7:1f:10:12:f9:15:fa:9d:0f:d8:be:f4:
         32:18:04:8b:ac:82:cd:c8:b5:66:95:c5:73:43:b0:bf:23:08:
         41:2c:6a:ab:1c:17:39:50:dc:60:8e:00:53:b5:9d:35:1e:95:
         43:82:e2:03:0d:c0:53:67:fd:e8:87:cc:a1:d9:74:c0:54:45:
         67:b7:7c:5f:27:b3:c0:7a:a6:73:13:bc:4e:9d:ab:8b:2c:e0:
         c9:04:a7:93:d9:a1:94:b5:c9:27:cd:bb:c0:0c:de:62:bc:59:
         24:21:0e:e2:d2:b7:b7:7b:d1:9d:ae:82:86:44:a5:e2:0c:3b:
         56:c5:5d:9e:c0:be:c4:fb:d0:3f:99:c0:be:41:80:dc:7b:e0:
         1a:45:d0:4d:36:20:9b:b4:ca:f1:56:90:c9:4e:da:25:df:81:
         a8:e6:3f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:03:07 2025 by rpki-client