This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File:                     up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier:          LM+Umnkznw5z5MlXOZaYpjO9fIonBm/dh5YTV0vTfiY=
Subject key identifier:   87:5C:7C:B1:64:83:08:3C:28:8E:C3:87:E9:E5:9E:90:AB:6D:C4:BB
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer:       /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial:       019AF24029D8E381E09778274FA91187EDAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number:          1770
Signing time:             Sat 06 Dec 2025 06:01:22 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:22 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:22 +0000
Files and hashes:         1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=)
                          2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=)
                          3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=)
                          4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=)
                          5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=)
                          6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=)
                          7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=)
                          8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=)
                          9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=)
                          10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=)
                          11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=)
                          12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=)
                          13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=)
                          14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=)
                          15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=)
                          16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=)
                          17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=)
                          18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=)
                          19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=)
                          20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=)
                          21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=)
                          22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=)
                          23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=)
                          24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: N3kuRIrW9gU+Zze19Br9DjVpw+ETZX5GCqbZvIPnvkg=)
                          25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=)
                          26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:29:d8:e3:81:e0:97:78:27:4f:a9:11:87:ed:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
        Validity
            Not Before: Dec  6 06:01:22 2025 GMT
            Not After : Dec  7 06:01:22 2025 GMT
        Subject: CN=875c7cb16483083c288ec387e9e59e90ab6dc4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2e:f8:2c:08:7d:d7:60:c8:f1:60:44:d1:8e:
                    c1:5a:37:5d:b5:78:69:b4:da:36:67:1f:c0:53:af:
                    53:9c:9b:f4:98:75:00:d8:22:69:6e:38:b0:6b:cf:
                    35:7f:ca:2b:2b:47:23:09:f0:82:51:40:30:b2:47:
                    57:dc:88:37:83:b4:7c:85:94:cf:ed:2d:83:a4:f0:
                    0e:88:3d:ee:71:5a:be:ef:80:70:63:0f:9a:97:fc:
                    5e:db:32:98:bd:a2:e4:50:7e:63:53:7e:92:72:0c:
                    4a:a3:57:76:44:25:f5:0e:ed:fc:18:d0:ca:ee:78:
                    87:94:de:67:08:4e:6f:bf:d3:74:70:7d:99:18:e5:
                    53:7e:a4:3a:56:9b:a4:bd:00:5c:75:71:4f:25:09:
                    dd:cc:69:c5:7d:67:98:16:fb:c1:9e:c3:d1:50:11:
                    03:d3:10:b3:ea:4e:19:5e:85:94:f3:f8:57:72:5a:
                    fe:4c:73:93:a6:a1:7a:6f:a8:80:b4:bc:78:21:16:
                    ca:da:a1:b8:eb:c9:ff:97:ba:5d:d4:75:b0:d1:79:
                    d8:bb:d6:78:08:49:07:1e:2d:3a:f5:79:9f:7e:c4:
                    24:8b:ec:78:a2:b7:bf:44:63:bb:bf:84:2e:17:e6:
                    d7:74:dc:a9:c1:f8:94:b3:fd:8d:55:32:48:35:0d:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5C:7C:B1:64:83:08:3C:28:8E:C3:87:E9:E5:9E:90:AB:6D:C4:BB
            X509v3 Authority Key Identifier:
                keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:3f:6f:a9:68:c6:f1:29:26:22:6c:75:ea:95:d0:b5:4a:63:
         75:16:ba:38:83:f7:3d:22:45:0b:dd:52:ef:00:cd:5a:72:7b:
         75:78:5c:ea:f6:17:f9:9b:7a:81:e3:2f:ca:65:6d:5f:71:a0:
         59:2f:17:d8:7f:12:e3:1c:60:dc:06:af:ec:61:ee:46:7d:11:
         ab:36:6e:2a:c4:05:4b:5e:f9:e0:75:46:eb:a7:88:cc:b3:4f:
         45:1e:80:2c:c2:07:45:f0:66:55:d6:f2:f9:ff:9c:48:e2:07:
         a7:ec:9f:c7:71:7f:a3:08:dd:5f:20:54:19:2d:52:4d:82:36:
         1e:f5:e4:69:f9:83:c6:5b:bd:0b:2b:6b:cd:23:f2:a1:94:d2:
         7d:1a:d5:13:59:ee:6c:1e:d1:05:10:7f:7e:6a:55:69:3e:33:
         3e:d3:00:67:17:08:0b:1b:f8:29:4f:d9:8b:79:c8:2b:d8:63:
         61:26:3b:9d:c6:4f:fe:bc:3e:da:e8:06:53:86:62:c2:81:5b:
         95:bc:5f:35:c3:6c:70:58:fc:83:81:33:59:a4:d2:68:d0:d8:
         75:c3:24:51:e6:39:62:11:26:e5:c3:23:0c:39:3c:bf:71:3e:
         95:95:9a:88:5d:d7:53:63:bf:90:00:a4:8d:e9:e2:16:85:42:
         65:ea:b4:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryQCnY44Hgl3gnT6kRh+2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw
NGNlMmIwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD
Eyg4NzVjN2NiMTY0ODMwODNjMjg4ZWMzODdlOWU1OWU5MGFiNmRjNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C74LAh912DI8WBE0Y7BWjddtXhp
tNo2Zx/AU69TnJv0mHUA2CJpbjiwa881f8orK0cjCfCCUUAwskdX3Ig3g7R8hZTP
7S2DpPAOiD3ucVq+74BwYw+al/xe2zKYvaLkUH5jU36ScgxKo1d2RCX1Du38GNDK
7niHlN5nCE5vv9N0cH2ZGOVTfqQ6VpukvQBcdXFPJQndzGnFfWeYFvvBnsPRUBED
0xCz6k4ZXoWU8/hXclr+THOTpqF6b6iAtLx4IRbK2qG468n/l7pd1HWw0XnYu9Z4
CEkHHi069XmffsQki+x4ore/RGO7v4QuF+bXdNypwfiUs/2NVTJINQ1B8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdcfLFkgwg8KI7Dh+nlnpCrbcS7MB8GA1UdIwQY
MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt
NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3
LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArz9vqWjG
8SkmImx16pXQtUpjdRa6OIP3PSJFC91S7wDNWnJ7dXhc6vYX+Zt6geMvymVtX3Gg
WS8X2H8S4xxg3Aav7GHuRn0RqzZuKsQFS1754HVG66eIzLNPRR6ALMIHRfBmVdby
+f+cSOIHp+yfx3F/owjdXyBUGS1STYI2HvXkafmDxlu9CytrzSPyoZTSfRrVE1nu
bB7RBRB/fmpVaT4zPtMAZxcICxv4KU/Zi3nIK9hjYSY7ncZP/rw+2ugGU4ZiwoFb
lbxfNcNscFj8g4EzWaTSaNDYdcMkUeY5YhEm5cMjDDk8v3E+lZWaiF3XU2O/kACk
jeniFoVCZeq0SQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:58:54 2025 by rpki-client