This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
File:                     6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json)
Hash identifier:          oW+iv62S0gof0c+xci7I/XF4RE1IgQ833ifRj92BITk=
Subject key identifier:   56:4B:B9:B1:6E:C1:2B:39:E0:64:C2:A1:46:42:A2:3D:52:3F:F9:0F
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       019AF38A1B108D3DB4FB636835205B688715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
Manifest number:          177D
Signing time:             Sat 06 Dec 2025 12:01:45 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:45 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:45 +0000
Files and hashes:         1: 2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa (hash: yLn6kJw+CqbZW1dUkXz+GBQNhC9c3L10tkD4MEgQTUE=)
                          2: 3UXfxzBUjpd2dvq5bafsNogmKlM.roa (hash: bA7f58jlZlzveYNtUmlKVRtEpQ5Dv4hyfzeaC10VHb8=)
                          3: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: hwWKVXlAaHVaEoK61hDxKJWsnDPTkKusm5KQ9e7vZ8U=)
                          4: 8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa (hash: umQ/9CNn6Js/eenCZk/Xl2NFKYyEEBiHrADkOmEjW94=)
                          5: LzX9ElOnhGp_nPRgTmHqftx_RQw.roa (hash: WQnCNTmDNCYbVxX/RpMfdPSYlE7UFVrF2G8SgVlhVgg=)
                          6: NBTd6QujxD8vAm2y0tIory9u3RA.roa (hash: rM5YyydF6/qNks6DTzpTX8oZeL5PVUffE7pPyESdmdc=)
                          7: NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa (hash: njHyZER619olyoCLyEsYxiQZ9O5R4Bwt0OUnGB7OSF8=)
                          8: VpUO8FztHwErwqX-N9UX_EYZh7A.roa (hash: KoW1E0hQQXw+2PHPNCjmoEVjfKo8T8cI7h2RXMqdk48=)
                          9: XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa (hash: BYuJQzP7XF7y4zE0IMqDWIkw1HAyxFsUKQS4bmdvnys=)
                          10: fjtFOz4IlAaEAQnySY7OoN_tT9k.roa (hash: +Sr0IAWH0Sl8SJhZIIslWSKF0Gz1QtZzH2BHIKdnR6Y=)
                          11: k45M8B18zZq30kOscm_b2rNT_ps.roa (hash: IhynRM67pfZo8vAgxdL8T+Jmt4rzWlErc8AX7Hnu46c=)
                          12: kpBYvA7pyyD3z1jcuA_oTRs_124.roa (hash: Ob8UloqnH6bNNxpYRDCFPpSnvfiM9GWnQYENZrL5zNk=)
                          13: mxkIV_Neo21FW6vGUNgK8GUqr0c.roa (hash: xTxbqlyb8zL223PmZKQqMD79EKE/LVN8cFepCSvVq/s=)
                          14: rEwdtSFulCnCTL77TKt0RBsUn6E.roa (hash: VPfndTEDwAp0qhkIRKhD44IChBdT1Sb9UFTa2MCZt1k=)
                          15: riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa (hash: xkrhRcr1V0HCNzi2kFeVes+0hk2/Q9wIVrWF5EQxFxg=)
                          16: rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa (hash: CRdPsY1AifRgb2WD2TVMbcBGWygLvjbfoRTaCemUtQ0=)
                          17: vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa (hash: yF0HorR81LSF/NhH8Gd9GDZfF8ulu3VIOHSR4xRaNIQ=)
                          18: xAuy4WKwAiWwyWz_74f0hDIYmYU.roa (hash: cySMwsU48nXQT4v9lmbqhzw+DBOqWz9D22FydLNc6Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:8a:1b:10:8d:3d:b4:fb:63:68:35:20:5b:68:87:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Dec  6 12:01:45 2025 GMT
            Not After : Dec  7 12:01:45 2025 GMT
        Subject: CN=564bb9b16ec12b39e064c2a14642a23d523ff90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:34:07:5b:ba:74:d0:41:2b:22:8c:f8:6b:
                    da:0e:67:18:69:53:75:71:3b:7c:7d:cc:6e:2b:e7:
                    99:1c:db:e1:81:4b:a5:f6:de:ef:4b:e8:c0:09:1f:
                    81:d3:2a:a6:82:dd:22:be:10:d6:a6:62:6b:1a:59:
                    d3:e9:e5:70:9a:7f:38:4e:64:46:c7:4a:2e:46:64:
                    92:c8:21:e2:7d:9e:80:65:c2:55:47:17:ad:87:fc:
                    1a:f5:54:d3:1b:17:a6:8a:09:14:00:b9:48:12:e8:
                    23:fe:34:2b:bc:98:18:d3:08:52:5b:aa:cd:24:f4:
                    69:cd:a0:a3:22:9b:b4:03:15:0f:d3:d4:42:1f:6f:
                    8a:e9:85:81:d9:60:02:0a:39:51:27:2d:45:09:be:
                    67:51:85:7e:fe:57:8e:f2:88:54:65:09:ec:0d:01:
                    95:ee:1d:4d:9a:b1:c3:0e:ca:49:74:f7:e8:69:f3:
                    43:b3:4d:7f:5c:6f:14:ef:0e:68:b4:2c:5d:9d:23:
                    ee:67:3e:03:28:39:11:5a:e8:f8:37:48:6b:43:08:
                    78:a0:97:d6:45:55:ce:c7:3b:da:69:f7:45:26:49:
                    cd:bd:75:d7:ac:38:29:84:fe:6e:07:c4:a5:1e:cf:
                    d4:62:75:f1:51:10:23:11:3a:48:75:1e:c5:14:51:
                    44:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4B:B9:B1:6E:C1:2B:39:E0:64:C2:A1:46:42:A2:3D:52:3F:F9:0F
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:71:ee:7b:bd:d3:69:6c:4b:48:80:15:fd:58:52:29:00:9c:
         7a:31:9c:45:f1:9e:ca:75:4e:14:f8:90:bd:7f:ea:5f:3d:cf:
         c9:c3:72:7c:78:38:46:20:01:8b:23:14:2b:bd:b1:43:32:89:
         5b:b3:60:bd:41:46:da:2f:a8:22:87:ac:35:ef:81:bd:f1:8d:
         3d:62:4f:4c:e2:14:78:fd:31:9f:e0:5b:dd:56:b1:ba:c8:dd:
         8c:9f:dd:ac:83:fb:b6:b8:b8:04:9b:72:14:9d:14:0b:cb:8a:
         45:1b:2d:ad:11:b3:6b:49:5a:77:17:ad:e3:95:f1:1b:a5:bd:
         e4:fc:4e:09:c4:4f:90:f4:c4:3a:7f:65:60:78:26:45:ba:52:
         79:6f:c7:56:c7:76:b3:08:e5:82:56:1e:1d:25:84:a5:3f:45:
         9a:29:1d:db:59:0a:df:3a:a0:63:bc:ea:99:a0:d3:72:e8:6d:
         37:d2:87:61:9d:dc:bc:49:f1:66:4d:56:c2:9e:76:88:be:0f:
         37:3e:8a:1a:77:ee:f4:e9:0a:ad:a6:26:f5:f1:8c:2c:10:89:
         db:5b:d6:20:02:b1:d5:2b:19:66:5f:d9:5a:b8:a5:44:b7:2b:
         9e:90:43:02:18:14:56:05:01:57:2b:f3:77:6c:42:c3:19:91:
         2b:6f:06:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzihsQjT20+2NoNSBbaIcVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5
ODk4ODEwHhcNMjUxMjA2MTIwMTQ1WhcNMjUxMjA3MTIwMTQ1WjAzMTEwLwYDVQQD
Eyg1NjRiYjliMTZlYzEyYjM5ZTA2NGMyYTE0NjQyYTIzZDUyM2ZmOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAQ0B1u6dNBBKyKM+GvaDmcYaVN1
cTt8fcxuK+eZHNvhgUul9t7vS+jACR+B0yqmgt0ivhDWpmJrGlnT6eVwmn84TmRG
x0ouRmSSyCHifZ6AZcJVRxeth/wa9VTTGxemigkUALlIEugj/jQrvJgY0whSW6rN
JPRpzaCjIpu0AxUP09RCH2+K6YWB2WACCjlRJy1FCb5nUYV+/leO8ohUZQnsDQGV
7h1NmrHDDspJdPfoafNDs01/XG8U7w5otCxdnSPuZz4DKDkRWuj4N0hrQwh4oJfW
RVXOxzvaafdFJknNvXXXrDgphP5uB8SlHs/UYnXxURAjETpIdR7FFFFE/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZLubFuwSs54GTCoUZCoj1SP/kPMB8GA1UdIwQY
MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt
ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx
LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3Hue73T
aWxLSIAV/VhSKQCcejGcRfGeynVOFPiQvX/qXz3PycNyfHg4RiABiyMUK72xQzKJ
W7NgvUFG2i+oIoesNe+BvfGNPWJPTOIUeP0xn+Bb3VaxusjdjJ/drIP7tri4BJty
FJ0UC8uKRRstrRGza0ladxet45XxG6W95PxOCcRPkPTEOn9lYHgmRbpSeW/HVsd2
swjlglYeHSWEpT9Fmikd21kK3zqgY7zqmaDTcuhtN9KHYZ3cvEnxZk1Wwp52iL4P
Nz6KGnfu9OkKraYm9fGMLBCJ21vWIAKx1SsZZl/ZWrilRLcrnpBDAhgUVgUBVyvz
d2xCwxmRK28GtA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:16:21 2025 by rpki-client