This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
File:                     2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json)
Hash identifier:          FVhkF74IKw+bFMZ3wZWnfHGcnkm/rqwrgdDOBF9j6kE=
Subject key identifier:   90:BF:F8:47:00:A5:2A:61:DB:11:5E:19:A0:73:76:B0:0B:16:20:F1
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Certificate issuer:       /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial:       019AF23FC6D6952C83FA9CAD44EDEE9D701F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
Manifest number:          116E
Signing time:             Sat 06 Dec 2025 06:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:57 +0000
Files and hashes:         1: 1sKE36lDWeWUjMSloo6n26lQvxE.roa (hash: 0YFmLsRRla2daPn9GavHfi/iWCjcjVBR51fAM/YzUPA=)
                          2: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: 3+6i4pDOeopTZp4HhO+daCz/zpyhsIjEfdFZmNI4864=)
                          3: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=)
                          4: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=)
                          5: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=)
                          6: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=)
                          7: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=)
                          8: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=)
                          9: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=)
                          10: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=)
                          11: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=)
                          12: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=)
                          13: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=)
                          14: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=)
                          15: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:c6:d6:95:2c:83:fa:9c:ad:44:ed:ee:9d:70:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
        Validity
            Not Before: Dec  6 06:00:57 2025 GMT
            Not After : Dec  7 06:00:57 2025 GMT
        Subject: CN=90bff84700a52a61db115e19a07376b00b1620f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:5a:25:0e:4f:70:5d:c9:25:9b:02:ae:4f:
                    01:60:2b:1d:be:75:8f:ca:ce:9b:63:aa:1d:59:02:
                    df:a2:5a:43:70:0a:4a:d1:14:41:5b:1d:90:51:2b:
                    2a:d0:e0:30:5f:cf:91:49:d4:b7:fd:5f:cd:8e:6a:
                    90:6a:6e:d1:3a:ec:7a:69:56:8d:98:b4:2f:2e:14:
                    43:a7:15:b8:3e:5f:90:c3:b5:37:f4:79:6c:c6:dc:
                    21:4a:e5:79:fa:d8:80:8a:cb:38:b3:ed:35:aa:81:
                    26:95:86:b5:92:fa:90:85:75:2a:41:56:e0:7e:d1:
                    5b:d2:61:1c:5d:86:72:8e:b9:5c:35:40:63:1a:51:
                    1b:79:b2:25:cb:57:6e:c2:12:25:1c:df:dd:65:90:
                    ef:61:12:5f:2f:4c:57:3c:9c:a6:b0:e8:fb:81:4a:
                    84:ac:79:aa:9f:c1:9c:97:d6:30:33:50:87:fa:b4:
                    b2:83:b8:b5:a2:f5:81:ba:81:e5:c2:f3:5c:ba:26:
                    13:7a:48:1d:cf:75:e7:74:87:3d:04:dd:d4:9b:2d:
                    f9:6e:91:04:0f:a9:21:e9:ca:01:d3:21:b3:52:53:
                    48:3f:ee:2a:6c:bf:2f:eb:90:08:a4:8a:6f:d2:d2:
                    50:d7:77:b1:4c:5c:1e:c1:d1:1d:5d:11:14:b5:e9:
                    e8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BF:F8:47:00:A5:2A:61:DB:11:5E:19:A0:73:76:B0:0B:16:20:F1
            X509v3 Authority Key Identifier:
                keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:1b:b9:30:3b:7f:14:e5:0a:f1:a4:42:d9:ee:de:cd:6c:
         b1:2a:16:ca:40:8e:8a:fe:b7:c1:aa:49:84:9b:8a:09:20:8b:
         11:c0:bd:20:a3:1f:74:04:5e:52:0b:b4:bc:2e:d6:f6:87:f0:
         21:df:ba:0b:db:4a:0f:93:fb:49:37:f1:86:c3:c4:d7:f5:4e:
         7f:bb:19:af:1b:6b:83:b6:90:7d:2b:29:cc:6d:20:c3:6d:e3:
         9b:0a:68:eb:28:55:e9:4c:3e:45:1b:ff:14:97:b1:5c:4b:a2:
         b1:14:dd:e3:fa:48:9c:98:ef:5d:bc:f3:b2:21:25:a6:22:d0:
         75:f3:7b:95:92:2e:15:d8:b0:df:d2:b5:58:8e:c3:cb:57:b0:
         35:06:99:4b:0e:88:9c:7c:9f:c1:27:65:c9:be:b8:e1:bd:f5:
         5d:84:ea:f5:91:fc:e6:14:b1:47:50:bc:0a:50:b9:5c:e5:a3:
         af:a3:eb:cd:b6:6a:aa:d9:e4:f5:10:ce:31:9f:3b:96:56:77:
         07:ff:2b:38:de:e7:39:e5:c8:ad:08:ba:dc:e3:d7:cc:f2:73:
         3e:a8:52:73:97:fe:af:83:e6:65:8b:18:b9:bc:5b:40:7c:0b:
         88:a3:83:ac:1c:eb:83:15:37:34:55:ff:9d:86:59:27:6e:a3:
         6c:70:bf:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP8bWlSyD+pytRO3unXAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjUxMjA2MDYwMDU3WhcNMjUxMjA3MDYwMDU3WjAzMTEwLwYDVQQD
Eyg5MGJmZjg0NzAwYTUyYTYxZGIxMTVlMTlhMDczNzZiMDBiMTYyMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUVaJQ5PcF3JJZsCrk8BYCsdvnWP
ys6bY6odWQLfolpDcApK0RRBWx2QUSsq0OAwX8+RSdS3/V/NjmqQam7ROux6aVaN
mLQvLhRDpxW4Pl+Qw7U39HlsxtwhSuV5+tiAiss4s+01qoEmlYa1kvqQhXUqQVbg
ftFb0mEcXYZyjrlcNUBjGlEbebIly1duwhIlHN/dZZDvYRJfL0xXPJymsOj7gUqE
rHmqn8Gcl9YwM1CH+rSyg7i1ovWBuoHlwvNcuiYTekgdz3XndIc9BN3Umy35bpEE
D6kh6coB0yGzUlNIP+4qbL8v65AIpIpv0tJQ13exTFwewdEdXREUtenodQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJC/+EcApSph2xFeGaBzdrALFiDxMB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWQbuTA7
fxTlCvGkQtnu3s1ssSoWykCOiv63wapJhJuKCSCLEcC9IKMfdAReUgu0vC7W9ofw
Id+6C9tKD5P7STfxhsPE1/VOf7sZrxtrg7aQfSspzG0gw23jmwpo6yhV6Uw+RRv/
FJexXEuisRTd4/pInJjvXbzzsiElpiLQdfN7lZIuFdiw39K1WI7Dy1ewNQaZSw6I
nHyfwSdlyb644b31XYTq9ZH85hSxR1C8ClC5XOWjr6PrzbZqqtnk9RDOMZ87llZ3
B/8rON7nOeXIrQi63OPXzPJzPqhSc5f+r4PmZYsYubxbQHwLiKODrBzrgxU3NFX/
nYZZJ26jbHC/nA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:46:50 2025 by rpki-client