This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
File:                     F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft (raw, json)
Hash identifier:          8zWQoAB5yTAwCxpPL9dLBgPiaS+zfWKDNvMkU1FKWNw=
Subject key identifier:   98:12:A1:B3:8B:09:B7:68:6C:2C:9A:A9:DE:68:0C:37:BC:32:B3:E3
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       019AF3529BE206EF43EC29F23481AE9C341B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
Manifest number:          1859
Signing time:             Sat 06 Dec 2025 11:01:08 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:08 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:08 +0000
Files and hashes:         1: 1-1lRKLu371HDTHk8c8EivyJBtuU.roa (hash: JU9c2IXBDe8sTydlUA5qMPVW4/hxpmRR4ICEo97INqw=)
                          2: 4oyZa4gdDUkTyvig9B5MyEBxtgY.roa (hash: 65mItYo2Zy5ZDdSzQQF5aR64hGTdR3bqRDrtgJvvNZI=)
                          3: 502f50d1NmQlr_QgXEe6FmpQuXs.roa (hash: /FaifmzpLcs3/LqoeHJo9JuiLbqNAC7mFVWjJRhMRO0=)
                          4: 8V1ryzk7LfNRSiFKp_7toQJ8huM.roa (hash: joPe9uWB9UCnoIbEth1HHghcYtVJJ07pHsyNYeVnqPw=)
                          5: 8drSNO4c28JBTvdRZ2V_eb-ECc8.roa (hash: gR2B7vbwxu/2iESNk/phikf31ZfQzoZkgpf8LTcbqJc=)
                          6: 8yMWV-BYRvr77OAzEy7JFJVcmyA.roa (hash: xjx8Uo3Gz1pZnbztb/FJvzXMxr22qVETaOIP/mg500U=)
                          7: AqkuMwOWpcjFIQUNACx397i9qMI.roa (hash: ha/OMr66LwgOd9K7o9DEGPQxt1hmy9/aNOLXxw8wx6w=)
                          8: BgvMLxSeSe60azRb1NkUA0ot22s.roa (hash: C7aDDYI0X+QRoHMtx0ezoJw1C8mWVSKIdotzc0BXCH4=)
                          9: DR6SICtYwwm1HogED7BDIhfpeoI.roa (hash: GHQceK37rrfaAB/D7Oaacj1eUTWMgMM/nsbZCEXmHkg=)
                          10: Dv5vrPmyYu_MnRIdRbvjPtAmTCQ.roa (hash: rW8mc8/vAfi5HR0gCnT0PC1Da6a+T1zVjRQOt1IWh/0=)
                          11: F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl (hash: RLEq+OqlVF0lAcZ4JbQ3NIIUeo4QmJbXzPiS2PtVeJ8=)
                          12: GcchgiajCXxa9KVue-wbvF3k3Rs.roa (hash: m7M+iG8ePoyQdRj+JQNsjxYIZN0DVm5ibaTqXMTle0Q=)
                          13: H4OiQGL1DbG4MibNSVMRd8RQc_Q.roa (hash: rv//nIfVZsrdzhdfXCHCp7/ysXvAYIb8HuuMGaQi3tw=)
                          14: HdJxPdso7JVrZYx9UQ0nvOnNryo.roa (hash: zqP1nETzTGVCqbMo3I/K5MwH+sEDXTpAb5N+eSbyenQ=)
                          15: Hgor3XOJG_33qkL94qd2eia1vzY.roa (hash: yQpTujKyRlMiL/Y1O2gPBdFC/8SSAUfzxqd1Meo2vUg=)
                          16: HuoNXJGwniINSg9uYW1zjf1lnCg.roa (hash: xti/hBmMeZkiIrI9gLnHUDXFnGlYkqDp/4ahVmX7Pzw=)
                          17: IG5mSmtKzkJj8RTljMdMBjniTjs.roa (hash: gvOzCSa8vDbFgYDTYfRkyPudCfEKxmfVO6kLEZWirf4=)
                          18: KmC6wS-Bry5klAycE2tBc7Q2hVk.roa (hash: ZcqNpLLMacfOeosAYfPte8ziOUeM115N30agsD9prWg=)
                          19: LzvNqjZjSXd-VoA3XyxYbK3-ROk.roa (hash: IXlBtSHgll3EWlIRCHI/7XXmqvwCKUDds5SRDvZb09g=)
                          20: Plhp8kozsjJjr5xutG_5OmCKOzc.roa (hash: jHhve6x91eRg7+8bDu5j5Ify1fEYSDj5qu2zoKgYUY0=)
                          21: PvnYj70vWIEtSZ4-TLAUROqH-mQ.roa (hash: C32arwbPmPblT8QjzIktSbeBph+9mftQGk8FxNUGy80=)
                          22: QikrQfPZcEuLXxNM9QRFuZqmwX8.roa (hash: GTgZFx+2E4BxRZ/cmNVpT3kb9A3tv7hfyB2pD3LWoag=)
                          23: SiQZbt7Y66GtmJ_f96kwaY-G998.roa (hash: dgNLChdS6cQ5M1MIq+zgZcYxmgFmlTXUHjgAF6gyPTw=)
                          24: SvD0YrflKZtrg8ajsXRYlZShlIQ.roa (hash: BCIwz2vY2jLgYS7z7fY4QU/HwErNwcVpkosUz//VdPM=)
                          25: TuKKlp-YU9hH3BDdx-_-iqpSkuQ.roa (hash: T0MoII0bHUQVy4/EIU0McUWW03OrtpRdQcw2oGJ90xw=)
                          26: UEYPaIJk57iANe2fXLEYrDHuBW8.roa (hash: vVCdcBaBVIiJ2UFubFblYlCEyga/mYmujS2FPpjWlf8=)
                          27: VVla6EZ_k4ich0q1LQvSMa7XgXE.roa (hash: na3BjMDhMQN3+lX+Wa4sspVkXqU5tz8Lf3773gbeC9U=)
                          28: YFWVotFPF4rkids3QA341Z9fyK4.roa (hash: YvO+2nszTC3s3sqVEtLJ1xWwZVIVv6VgaQF2qtreTRU=)
                          29: Yi1aaKV--Ft5FHEg_qo0n4PwG8M.roa (hash: wa6m8y9TLptAA6kEXSjmRxoc6mRj+CTH3xrXy9JLq+8=)
                          30: _1gr71TtxKrGYfishpOTTlC-Yf0.roa (hash: LXqUscGa5O5l0ANuPWlp7ZJ5IGrnqrBbr0WR9gp+Xlg=)
                          31: _4lvYeV-ayqEuNBULPPOUTjxshM.roa (hash: NdQ48sOIXtMVgyfAT4cDSjJrP8NrGiMF8pPwF4Fl/SU=)
                          32: _NP7KLLqMrN1MnGQmRzYwY7srro.roa (hash: yxeClpkT7+DTzIpMnMbwVDLNUo4DerckRO6AAThHbTE=)
                          33: evYLEFvdvSvmkbuLm6rh3tZsvKw.roa (hash: 52BX1RaGCebJiVa5KK5DyLHFtzsT7REGB3uiL5jegrk=)
                          34: fNzqJvsbqb0H74heu_eSek8VtgI.roa (hash: o4Nod9JSdaU0RMBqsV3JfhPtjNeHWMXe4pMD3qdsnU8=)
                          35: fiZS1QoC13O9LGwSQ4heL3EDJHg.roa (hash: cQaKdfdjwvkVki02Gk6rg/cphkwoTFB2MpHuxaFIw5A=)
                          36: gRpxZ9tPgRBVp8qdYzJqgIxd2nc.roa (hash: 83UGnHR1vvpOBiG28c0LTC7t5cOOarvTlEqPeJagnUo=)
                          37: itLqudVm_LWWCSb2ZaHE7Y8xg9k.roa (hash: bTfyy1SxJCeaK5coWhOr/Q8NlmQaYiJZYALhNcfWwOg=)
                          38: jDRBJTXqU-l0mlBW0i631wxPZt0.roa (hash: iDEkyKeMVMFwrMXDKR4bsKp+geBFSFoieBkCq1waIkE=)
                          39: ljimio0yfAoNBs_GfjBqxUShUR0.roa (hash: oGMAKqjP+odUb/r9E/zYCwk+hlgLp2FpS6nliQwMO9g=)
                          40: n0JluA_q73XjEpq04uEzn-RmsXg.roa (hash: T7rTE9/E8va60SJXGuKikAJZCiAgEmhE8Vpka/OYUOA=)
                          41: nlWr11m2o9h4NC-tzohScSJdOxg.roa (hash: A3Wa8TFObznb1XsDpDHOQf+qyyepDtcekiYNrboghKo=)
                          42: nyh3L1_fO9-0gtPACanLqE-8L6A.roa (hash: 3ZfslFeCGwiSaXAFPs++rXWZnjwclEp0fgAs/mguHtQ=)
                          43: o3jnOci1LEZmio5eVK_R1X59Bc8.roa (hash: ksK9oLd/45fgUjzdDyp1g1OluUQE8WOO6qYAiQZLnSM=)
                          44: ogGjBXxXETAXn_SWysZLSIXlzgw.roa (hash: OhDv3nNKAjKm8OE9tBfPAqcATubsrufJ5O98V91J7Nc=)
                          45: qZFf8xBKOBqZq28f1CYsPIryFfY.roa (hash: c2azlwgqsewfRUN5oiHErUO6fO6RA6AsE7ib1fWtYcI=)
                          46: rAvqaXWido6bWlI2ZyzEOa-fJxY.roa (hash: mS4B6JctTZL+j9e8gePNzMiZWID31MHSX3j95UzrBZw=)
                          47: rxVm1BUHBkaau-7W_r_kxy-XrHo.roa (hash: rLOdOXbVl3h3am2CiNQtp6HBEUOsXCq9yn33g8ZOc4Y=)
                          48: wvI-bWHbqyIi7YmDIPNC1qEOm7I.roa (hash: CNT8v1erBNFUKMa4YZJ6Xp0UWbXqQmTcLcNUIXdYqAI=)
                          49: xdzMl2dBjCTNBQybuXYBgSxzduo.roa (hash: JEkwDfKXDwIr/2rXwBPBdk3uqDoMAYK5dQs47lFmsqg=)
                          50: yWlbkrEj2-GR1WBLh_nb3kwtTP4.roa (hash: M9mG3BDKpakDn8xVlL2w2ltK4fDQEQSGSLniQRr2b/4=)
                          51: yqERyPlYcI7gwU1vTFWtgKROF4Q.roa (hash: ZOoOsoLK/kRp7KQgMGDcfDCSmXIincRW0/KQwLYz59Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:9b:e2:06:ef:43:ec:29:f2:34:81:ae:9c:34:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Dec  6 11:01:08 2025 GMT
            Not After : Dec  7 11:01:08 2025 GMT
        Subject: CN=9812a1b38b09b7686c2c9aa9de680c37bc32b3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e3:d1:a4:1f:e1:39:47:61:63:d0:f0:ca:f6:
                    7b:e6:4d:1a:1b:4c:0a:7b:7a:e7:27:c4:26:03:87:
                    de:15:10:19:ea:d2:0c:bb:72:45:b0:f9:da:0c:df:
                    3f:20:b4:82:06:e0:23:0a:08:9a:fc:52:5f:b1:b9:
                    97:4a:6a:63:43:cb:88:bd:c6:2f:51:b4:ed:17:c6:
                    a9:f4:31:b8:b7:a9:57:25:f6:d9:76:29:75:81:3e:
                    2c:63:0d:97:54:b3:dd:ea:50:4e:12:50:0e:fa:90:
                    01:2b:31:21:68:7a:89:b2:f3:9c:dd:0c:35:0f:07:
                    79:2e:f8:8b:3e:ae:bf:99:79:50:81:7b:a3:e8:fa:
                    19:a4:58:1a:b0:86:78:4c:06:46:a8:0e:33:af:54:
                    dd:b1:aa:4d:ae:45:40:71:d3:29:71:74:8f:ab:3a:
                    8f:6b:1b:91:a7:2c:9b:3a:bb:66:b9:53:f6:63:49:
                    15:14:05:79:96:cc:b2:42:ea:21:15:f8:4e:7c:ae:
                    06:c6:9e:e8:fd:66:89:75:32:45:c8:be:fd:c1:af:
                    27:38:04:93:7e:f0:45:fc:8d:22:bb:e0:41:2e:02:
                    ed:e2:fd:56:c5:9f:5f:0b:3c:96:f1:d3:b0:90:5e:
                    9a:7a:b1:46:ee:48:61:36:01:0f:58:5e:94:19:08:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:12:A1:B3:8B:09:B7:68:6C:2C:9A:A9:DE:68:0C:37:BC:32:B3:E3
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a3:bd:20:5b:81:75:e5:d3:44:48:54:1f:7c:6f:48:43:40:
         64:94:fb:e6:3f:df:5e:4d:f3:2b:7a:3a:82:1f:c5:9c:8b:df:
         d9:b0:a1:8b:72:50:a7:56:10:12:61:3e:d1:86:69:e0:ed:7b:
         d7:1d:8c:df:fe:d0:49:86:71:71:c2:8c:fa:c9:7d:19:80:49:
         71:12:0d:38:9b:ae:21:7a:97:92:c1:8c:84:5b:13:c8:d0:ec:
         2c:63:f8:30:c2:a9:13:bc:ad:7b:f8:0b:e6:d6:1e:aa:26:5f:
         55:62:2d:19:36:12:60:21:61:75:7a:4b:e7:7d:37:7a:68:26:
         75:85:5f:88:2d:d6:c1:d8:98:94:1a:30:b9:d6:d1:a6:f7:c4:
         7e:8b:61:da:6f:76:c8:7f:e0:ea:82:40:26:03:d4:01:3a:bd:
         29:ec:0a:fe:06:d2:50:12:f3:83:88:6f:e7:af:dd:8a:c0:8a:
         b0:3f:1a:07:08:4b:b3:9f:89:73:71:5b:aa:16:8b:67:3c:67:
         2f:ae:a9:45:f8:33:cf:ae:dc:a0:bc:0a:7f:36:e2:8c:90:5a:
         44:07:0b:42:19:91:07:c4:1f:28:32:88:5c:37:23:6c:b6:e9:
         42:97:fe:25:65:5b:f9:31:07:dc:1b:61:90:d0:8a:50:9b:d2:
         7e:ff:07:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:44:56 2025 by rpki-client