This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
File:                     _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json)
Hash identifier:          h0W7g0tseqDXR0jsfAmnym1d3S+v7uxiTbJESIaKB7M=
Subject key identifier:   CE:A1:F7:82:7F:09:76:1C:21:D9:AF:66:2E:1F:88:C7:63:A1:45:8A
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       019B3D59E3ABDECDB719A00DA82E32E4368C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
Manifest number:          17E6
Signing time:             Sat 20 Dec 2025 20:00:59 +0000
Manifest this update:     Sat 20 Dec 2025 20:00:59 +0000
Manifest next update:     Sun 21 Dec 2025 20:00:59 +0000
Files and hashes:         1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=)
                          2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=)
                          3: 4YpVbO9HFvvq74shOPQXNaG5KS0.roa (hash: bVpCtuoPNa1SZMwszxLRHo7H9I6mu3GeU6NgJiv+OkM=)
                          4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=)
                          5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=)
                          6: Jx7Zy-NW88qIjubdbnfsP6WvkeM.roa (hash: GC9kGCOxPDmQCJoGza3DVhBvvCLswzv831ifgYwZVo8=)
                          7: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=)
                          8: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=)
                          9: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=)
                          10: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=)
                          11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: 27KGrivu6cBcjMp2nMGyc8CtD4N3AmrubkucDBdIjEg=)
                          12: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=)
                          13: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=)
                          14: kJYpVxtVyfv4dwbVg4WNh0NM0_w.roa (hash: wZE3vmAhLe9i25qjRpSrq5TNgZ7FBQQ+/m7aI5d1gmY=)
                          15: lSE1obQ59T94JWyP17qNbBJ8Mi4.roa (hash: //1SxIcij8D7RTJOSo9c6uRC0w9XN7/ELpwWy3gm8m8=)
                          16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:59:e3:ab:de:cd:b7:19:a0:0d:a8:2e:32:e4:36:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Dec 20 20:00:59 2025 GMT
            Not After : Dec 21 20:00:59 2025 GMT
        Subject: CN=cea1f7827f09761c21d9af662e1f88c763a1458a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:50:6d:b2:88:c7:cc:a9:57:4b:54:19:9e:
                    40:bc:2d:8a:e5:31:38:70:5a:ca:ca:c5:a4:a9:20:
                    fa:48:c1:ec:eb:d8:8e:df:a7:17:d6:f4:54:c9:3f:
                    04:50:71:12:93:25:f7:0a:50:c4:c7:d5:e0:38:f0:
                    e7:40:1d:d8:cf:15:69:87:ae:22:b8:f1:5e:bd:54:
                    a3:3a:cf:38:64:b5:16:42:b1:63:e1:2e:97:b6:b8:
                    e5:ff:8f:10:21:4a:d2:7b:e4:d7:0f:18:35:32:ba:
                    48:19:46:1a:6c:ca:68:95:78:f9:8c:92:4c:ca:4a:
                    a8:f4:7a:25:1f:1d:e3:5d:0f:d5:b8:cb:bb:3d:7d:
                    6b:d5:ab:5a:78:5d:09:c1:01:2a:2c:53:c1:bd:43:
                    9e:0b:f6:0e:0e:04:03:f8:18:38:d2:b9:2e:eb:a7:
                    1c:7d:d2:b2:fb:7a:f4:98:3e:10:23:ad:de:5d:f6:
                    66:bf:c6:db:95:79:48:dd:14:99:4f:b1:55:ed:22:
                    36:ac:b3:8b:4a:0b:81:92:aa:9d:60:b9:a2:b4:61:
                    1b:f6:27:c5:b9:5a:ad:be:d5:40:df:0b:12:ce:4c:
                    09:ce:79:f6:32:49:e0:ac:95:67:1b:5c:0a:1b:ff:
                    02:0b:56:5c:0b:2f:cd:b2:57:1b:c8:19:52:fc:df:
                    a0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A1:F7:82:7F:09:76:1C:21:D9:AF:66:2E:1F:88:C7:63:A1:45:8A
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e1:28:fb:5e:fb:5b:47:f6:e4:c9:a8:1d:c0:f4:ae:1c:2c:
         c4:bb:ce:8c:7e:cb:73:ea:3b:50:03:b5:43:67:e9:81:30:b8:
         da:33:3f:e8:37:74:f7:0c:6d:38:29:a2:09:ee:46:10:2f:13:
         80:f6:df:74:e0:a6:d8:16:02:83:bc:38:34:5d:10:9f:a1:d2:
         0d:73:f4:3c:67:65:d3:82:27:94:8a:9d:0f:4c:57:37:b5:c9:
         a1:a4:48:d0:05:3d:9f:5c:27:61:74:e7:f9:ec:1f:10:3b:d1:
         09:7e:b8:5b:2e:e3:fe:3b:d3:2b:7c:42:39:24:b6:8f:50:7d:
         31:54:1a:fa:cd:6a:c0:39:12:79:09:11:68:ff:3d:fa:86:18:
         92:5d:06:7b:cd:c0:43:95:ad:36:8d:e5:f5:53:a2:8c:cb:a2:
         cc:20:b1:3c:de:c8:36:33:d1:bf:7e:29:d8:7d:4d:07:99:b8:
         2d:ed:ea:43:a3:59:28:c1:78:97:4f:84:5d:4f:39:a5:77:ca:
         d8:5a:dd:21:a1:21:85:81:4b:89:08:0d:5d:e7:22:e4:7b:5f:
         05:56:8a:c8:ab:fc:00:32:7e:68:d1:6e:14:93:97:14:20:e3:
         4f:b6:21:75:ef:0e:53:85:32:c7:8b:ea:e5:39:a1:92:7d:51:
         a4:5c:00:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:54:05 2025 by rpki-client