This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File:                     HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier:          KoUMeSTL8BhVdoxpvf4NflpOzHJsUeMJjHpAKuWEMqU=
Subject key identifier:   6E:4D:DF:EB:BE:55:57:14:47:C8:B7:50:50:2F:AD:60:B0:14:97:C6
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer:       /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial:       019B5117EF0FD9B3993EDCEC58D986253FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number:          1798
Signing time:             Wed 24 Dec 2025 16:01:21 +0000
Manifest this update:     Wed 24 Dec 2025 16:01:21 +0000
Manifest next update:     Thu 25 Dec 2025 16:01:21 +0000
Files and hashes:         1: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: z5JDyBoIThZlneT45nK2qPLBkopz12fOyT5LGfAh6wQ=)
                          2: JrMu8Fv-EJ0gYHcDKiU_A3eevzc.roa (hash: 6s6fSOnj2fawBTt5pakrIRbKDkLV0dgDjLyUP/ka7Zs=)
                          3: Yv3OBlam3VOOyrqHnKRvnmbQqTE.roa (hash: c4F3qlWubFRDD6IUHkMCGZaiuQoE5JPsyXqZuaXssXk=)
                          4: sZOw6ZmAV-eW5usk1RjXBfJwu3k.roa (hash: xYRWDuxjHSuoMKKmk6k/DnQlZPxerY0wU1cLVyqv9fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:51:17:ef:0f:d9:b3:99:3e:dc:ec:58:d9:86:25:3f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
        Validity
            Not Before: Dec 24 16:01:21 2025 GMT
            Not After : Dec 25 16:01:21 2025 GMT
        Subject: CN=6e4ddfebbe55571447c8b750502fad60b01497c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:0e:f9:b6:af:a6:d4:2d:f9:08:b9:1c:d4:
                    7b:01:ce:79:63:4f:b8:32:7a:22:92:cc:48:08:ba:
                    26:b6:7e:18:ab:b8:bc:0d:a7:48:2b:f4:de:3a:05:
                    80:3a:37:ea:9c:25:02:c9:f1:6c:05:a6:7d:c7:04:
                    5b:51:02:1c:b2:33:59:3e:a9:2c:a9:4a:05:1a:7d:
                    b2:2b:ea:eb:a2:7c:0f:c0:0d:23:96:93:32:81:d3:
                    6d:6e:d1:53:2c:73:39:ca:98:c8:d8:88:2f:3e:d2:
                    63:78:ca:1e:83:6b:87:2b:93:21:40:a4:0b:ba:ab:
                    11:1c:63:6f:df:9f:16:8f:c8:47:66:a4:c7:be:68:
                    0d:4a:e7:79:6f:d3:ea:10:d6:4c:9b:f0:94:cd:b3:
                    58:f8:c3:e8:3f:ff:cf:c8:a9:10:6b:87:8e:ca:3b:
                    ab:2e:dd:a0:92:0a:dc:f8:42:01:5c:95:9e:11:6e:
                    39:cc:6f:d3:7d:b6:63:14:b9:34:66:be:78:82:58:
                    e7:28:57:c6:07:79:c2:8d:19:1d:2c:40:08:16:0a:
                    d4:d8:b7:cc:bb:f9:03:47:e3:76:5a:74:be:7d:0e:
                    94:4e:ce:4a:a9:12:76:b3:ea:1e:84:10:26:6d:a7:
                    24:a2:26:18:f3:fc:39:e3:4b:27:26:ea:d4:f8:bc:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4D:DF:EB:BE:55:57:14:47:C8:B7:50:50:2F:AD:60:B0:14:97:C6
            X509v3 Authority Key Identifier:
                keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:2f:7b:40:a7:de:a7:9d:fe:1c:86:68:5a:3c:1d:c2:de:
         0a:36:75:4d:57:a3:e7:0a:b8:66:81:98:6b:bc:67:15:b3:db:
         88:0a:68:b4:dd:3e:61:a1:25:f7:ae:9b:06:52:89:13:cf:26:
         a5:66:b7:48:d1:32:a6:77:1c:fd:e8:72:83:02:64:af:60:17:
         73:3b:3d:c1:b9:6b:77:4a:8d:d3:32:59:29:b0:cd:24:17:e1:
         8d:fa:d3:2c:47:52:16:22:29:47:9f:29:1e:37:39:de:92:40:
         b6:9a:c9:17:37:b8:77:48:7e:3c:ca:0c:33:be:d9:1d:7f:91:
         81:42:1e:fb:0b:b3:ca:a6:5e:9a:b5:db:d8:18:fe:a5:32:ac:
         10:e7:f7:7a:e5:c1:79:00:9f:37:4f:f7:48:46:b3:77:5d:4e:
         51:01:70:3b:0b:bd:b4:63:bd:72:e2:79:03:76:63:ff:10:0d:
         70:5c:cc:a3:5e:42:78:db:34:77:04:81:99:02:23:b6:18:4c:
         b8:34:0e:9d:eb:6f:13:4b:81:57:28:a2:3b:f9:03:25:bc:d4:
         39:6e:8f:ae:5e:b3:51:bb:21:3e:cc:b6:f0:f7:5a:15:99:91:
         4b:37:83:20:97:00:76:0d:41:c3:03:d0:7a:aa:00:7c:fb:b5:
         9c:49:79:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtRF+8P2bOZPtzsWNmGJT/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWEyZjA4M2Y0NzFkZmI5NTA3YjRjOTczY2I1YzNhY2Q0
OTc1OWQwHhcNMjUxMjI0MTYwMTIxWhcNMjUxMjI1MTYwMTIxWjAzMTEwLwYDVQQD
Eyg2ZTRkZGZlYmJlNTU1NzE0NDdjOGI3NTA1MDJmYWQ2MGIwMTQ5N2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPAO+bavptQt+Qi5HNR7Ac55Y0+4
MnoiksxICLomtn4Yq7i8DadIK/TeOgWAOjfqnCUCyfFsBaZ9xwRbUQIcsjNZPqks
qUoFGn2yK+rronwPwA0jlpMygdNtbtFTLHM5ypjI2IgvPtJjeMoeg2uHK5MhQKQL
uqsRHGNv358Wj8hHZqTHvmgNSud5b9PqENZMm/CUzbNY+MPoP//PyKkQa4eOyjur
Lt2gkgrc+EIBXJWeEW45zG/TfbZjFLk0Zr54gljnKFfGB3nCjRkdLEAIFgrU2LfM
u/kDR+N2WnS+fQ6UTs5KqRJ2s+oehBAmbackoiYY8/w540snJurU+LwVFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5N3+u+VVcUR8i3UFAvrWCwFJfGMB8GA1UdIwQY
MBaAFB6aLwg/Rx37lQe0yXPLXDrNSXWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYt
MjVkNmU4NjEzZGM0LzEvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYtMjVkNmU4NjEzZGM0
LzEvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTYve0Cn
3qed/hyGaFo8HcLeCjZ1TVej5wq4ZoGYa7xnFbPbiApotN0+YaEl966bBlKJE88m
pWa3SNEypncc/ehygwJkr2AXczs9wblrd0qN0zJZKbDNJBfhjfrTLEdSFiIpR58p
Hjc53pJAtprJFze4d0h+PMoMM77ZHX+RgUIe+wuzyqZemrXb2Bj+pTKsEOf3euXB
eQCfN0/3SEazd11OUQFwOwu9tGO9cuJ5A3Zj/xANcFzMo15CeNs0dwSBmQIjthhM
uDQOnetvE0uBVyiiO/kDJbzUOW6Prl6zUbshPsy28PdaFZmRSzeDIJcAdg1BwwPQ
eqoAfPu1nEl59g==
-----END CERTIFICATE-----
Generated at Wed Dec 24 18:05:21 2025 by rpki-client