This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
File:                     10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json)
Hash identifier:          2iR/+NiGchFpRWf/eLBR0D3HiYxxeIqR3N+4UXz/a6Y=
Subject key identifier:   2E:20:FE:89:65:56:4E:C8:58:84:B9:75:2D:EB:90:80:2D:0F:0C:5B
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       019B2B8A2144B27D88A1065E7BD3372F981A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
Manifest number:          1820
Signing time:             Wed 17 Dec 2025 09:00:31 +0000
Manifest this update:     Wed 17 Dec 2025 09:00:31 +0000
Manifest next update:     Thu 18 Dec 2025 09:00:31 +0000
Files and hashes:         1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: sdrM1QCDpdsFtLTfshq4+MceENab1GkHuMNhNiJw9JM=)
                          2: 1L7Y6OLDRX8ATBT4-mV96SZ6FOU.roa (hash: m8wwCwecp0KG21zfw+PHnUnhiPotAg/Kcldtw5QJnwI=)
                          3: 6BXLX0LH6IoFnVEgmeTmnjk3sTM.roa (hash: qSzWqPlKHdtkFhY0N3iiqf+44mjD24bSbWGh/QepF9U=)
                          4: 7DLgW1_AEJnFRBnMP9DUZFvxjOk.roa (hash: raPeEfqiYW57HqMcse3rmHrWriulB1kH4YGu8bRaYZQ=)
                          5: 7fJvelaeWRPaeeOqQiVdqp5Exxc.roa (hash: u3Jlx57PaTOE1SJ38utPoD5WJWb3hvAAlv0+GWsZJkE=)
                          6: CjTVhDRUdYeYGpfw19vf8IdBcu4.roa (hash: mdffuqPdTXZApk9676GRStovFZhT4PmFv7pCJJymj+I=)
                          7: DvLbsc5ECTtzWXwAHat2lS2CmCQ.roa (hash: 27SjmQLahfEV8/oOJ8A2X0mKS+LdBuzCoqfA36DRon0=)
                          8: E8kn7aEukt3A02XfkuhthKBKbNM.roa (hash: Tt0umHn7tFpaKFeQtx4HB3IwGyxvBq1weMf6aMmIN9c=)
                          9: Gu4fdtI6ifLBZoBrWirD7Lk31YI.roa (hash: 6g02bbz7+35Jk54vCdrzHk533LcEU45qtdmE3cJZevQ=)
                          10: Jv8CRfjds1b_ZfNR_DA8H4cnRe4.roa (hash: 73nQMY7oUme6InpZuiFQ8pzh3gvcuZ+jCA6e3CNfQE4=)
                          11: JxvXv1SK_8H7hNIOu3azheEUN_c.roa (hash: x34KV2+MPw2bH9bEpIO2qyGptTiGLHv6QYjhlgGztgA=)
                          12: LmQkPTctK2jSGiSfsndjKmsIN1s.roa (hash: nFCXSPzYZ400StRreKtw2z+wi7uGbR4CjXlF+FAF7u4=)
                          13: R4plGPMvWUjpa9aukliAnhzGe2A.roa (hash: oscewSfDrM/B93KPAN0LoRkJw9vGJj8ctioIUb2phK4=)
                          14: Wo7cBKbAs9u8S4SVJ3-l67jGwYM.roa (hash: oKk2du3XesafVCaeuT8l0tzTai4bCgh0qNTFPpfoKhU=)
                          15: akkUXfA8yjmbAbge7T9s-UuKdck.roa (hash: bTuwJwUzkex/N9xt02kabUmVlqjLA6HLXLMaFWG1Vj4=)
                          16: dKYMWOSuDbDzG_55PxQ6zWUGjo4.roa (hash: jx6o6656P1/2uAu6tNuMhpveGEMTalzlqd0P2gLiCYA=)
                          17: dT4eKxKuiMlejujStpkeBlqhlOM.roa (hash: jTmPsaj5YAbHSTlj3nB1Krnj3ip2XzfaIfy6VeLkbfc=)
                          18: eXmLXScgkQlZFJY2owYgI3HJtns.roa (hash: aE7sjemkm9QvnBnknfgKs5kPN5UFKUUkPmfsuOVG/yw=)
                          19: gIUxN2GBsUoK8BYbrzLOZ4zooEs.roa (hash: NGAW89R8AdDYifyIj10//HgW4r1O80XD0St/aLijhJg=)
                          20: gL5Y2iWE_ZCPNJrNlSdtKJmjg2o.roa (hash: wCggpARdDyZ/wAC1b4ExDASBW4uAEwHa8r5dk7EAX70=)
                          21: iPBzS_uwUzrjrIw4HXWeXeuGKQk.roa (hash: YuRhgQ6UmgVdtdBtX9QYtthLyJmtsPqkTXpg5SmzCCs=)
                          22: itabYXi3irEL53byV06jkZ3aC48.roa (hash: QjaQucmPtw8duEVnsbQImiTK3kNOasMc0swqbwK8Lu8=)
                          23: v7T9_oyFYAPN_vUJUuEgZ_WQNJI.roa (hash: XchZv6OupInQB4mmV3EszoeFc599qe/XG+jbFEKYskA=)
                          24: zZcPwXd3-9CVbOi6b88i7sOrBco.roa (hash: 2GF7Rjb8NN/bKnG12nbz2lxITDWGz7Whf8AG3sw8XcQ=)
                          25: zhUAhL2EdvfFS-YlGh5Iqcos6Ww.roa (hash: gyYfNwxUTJ6w/PF/66IV9SQklQuOl14GHolxHTxn8Mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:8a:21:44:b2:7d:88:a1:06:5e:7b:d3:37:2f:98:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: Dec 17 09:00:31 2025 GMT
            Not After : Dec 18 09:00:31 2025 GMT
        Subject: CN=2e20fe8965564ec85884b9752deb90802d0f0c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fc:b4:bb:a7:06:8d:ac:79:23:5a:70:c9:37:
                    85:e1:29:9d:87:99:67:6f:9d:ab:9f:97:63:8d:70:
                    69:86:cd:97:69:b7:d6:98:a4:33:3b:55:c4:1e:87:
                    e9:88:8a:d7:7a:6d:47:48:c2:8a:9e:55:33:64:60:
                    12:9e:34:30:38:84:01:65:2f:17:0a:01:e4:92:97:
                    bf:1e:85:5e:ba:e8:f0:bc:47:92:7a:b7:54:8c:aa:
                    eb:10:aa:d3:79:21:6d:d5:69:f3:43:48:c2:8f:9e:
                    45:cb:5d:e5:ea:9a:98:68:f3:9c:29:29:80:9a:4c:
                    79:52:83:3c:0a:bc:a4:36:4d:2e:97:42:28:2b:81:
                    9a:57:e7:97:49:c9:5e:b1:06:5b:31:ce:18:bf:8c:
                    1e:a4:43:9b:29:52:73:69:83:00:39:98:c4:fb:b2:
                    82:61:93:e6:6c:aa:11:b6:d3:33:d6:ce:aa:07:a4:
                    ea:fb:46:1f:93:3b:f6:90:38:d7:8f:be:be:c8:2a:
                    80:56:ad:e3:33:11:af:48:ef:74:4c:69:2f:cb:15:
                    0e:a6:f0:27:f5:f1:81:d6:8c:c9:74:25:9f:44:ae:
                    11:65:23:ef:fd:17:8a:cb:9b:27:b8:39:b7:7e:8d:
                    10:61:2b:86:5c:72:ad:7b:39:a7:af:94:55:6a:0d:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:20:FE:89:65:56:4E:C8:58:84:B9:75:2D:EB:90:80:2D:0F:0C:5B
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:38:5f:ca:bf:93:99:32:22:21:6e:6b:55:85:c2:f6:52:63:
         01:06:e2:ee:50:a8:e0:8c:e6:49:17:6e:9b:e5:d2:fc:03:69:
         3c:99:77:b3:6b:34:96:43:a1:5b:41:77:fe:2e:12:78:39:b3:
         7a:9e:11:17:dc:e7:ea:88:78:88:3f:9e:05:e1:ac:3e:35:91:
         d5:b4:14:f9:48:de:90:99:ac:60:38:3d:56:6a:c4:dd:43:55:
         63:9b:2c:f2:9f:0c:b0:00:0b:28:1d:b9:13:43:3e:63:b5:02:
         5e:6e:34:af:cb:b3:d3:45:ab:5f:1a:d9:0e:10:7f:c7:4e:51:
         11:70:76:56:14:13:81:50:52:b2:6d:8f:5e:f2:7e:b7:4f:42:
         0d:18:08:72:2d:20:5a:60:3d:af:0e:9b:83:81:1b:e8:0a:a3:
         01:30:6e:6e:dc:2f:9e:50:4e:9c:28:bc:e7:47:75:bc:e2:4f:
         af:81:35:e6:d7:16:a9:67:0f:90:89:5b:7a:ba:c5:39:e9:df:
         c7:47:7d:9d:49:84:19:7c:01:f4:89:17:7f:bf:89:28:5c:42:
         eb:be:bb:ec:71:e8:ab:8d:80:53:b1:d0:a0:77:4f:b2:65:a2:
         23:50:2f:70:c7:ac:8d:21:5b:9a:92:fa:c4:9d:e8:d7:8e:b9:
         cb:5a:00:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 13:42:24 2025 by rpki-client