This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          nLCQs0yidi7gc9dDtn7GThwW1udXGOBI8pVjR+7IB+w=
Subject key identifier:   A9:FF:67:4A:2B:6F:D1:6C:EB:13:63:05:47:B2:B0:73:52:91:24:85
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       019AF1D2180F4644AFE330D2E8846153C33B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          18B2
Signing time:             Sat 06 Dec 2025 04:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:09 +0000
Files and hashes:         1: 1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa (hash: YOIx0vdDTm8aI5i6BKD8DQMTRGZfl2c7wVpH1Ojrc4w=)
                          2: 3WPaQaeTdmntK5izSsUGm25Ynd0.roa (hash: GyiWTK+w6u6ne5SVMQYVthIyhJqTA+ukFgOGPV6Rz7w=)
                          3: 4lyP_XtLW1h3NI-vGWGjLTNLSfs.roa (hash: wCaH//OrmPa6FcL1bsRu2GwqBfLRMK34kAaOY7fa6WI=)
                          4: 5frCTMLAAAivj5vAlLzU9tn9SZk.roa (hash: ydNqfms74WxpRDm6+VGy0or8AczawOAEsWbCcpbLY/k=)
                          5: AAaiTjB1saRdCO-SUj5QC9Vm8PA.roa (hash: TVIOe+KfCUmamQmBNTI3SRl/ZRiS77vHXqt/12Vyqio=)
                          6: BtUSMQYrMiXrz8PT4gbKkp8KMzo.roa (hash: MhygUK83+6wJufXl8GG1Zo7sHLD1N46TiaJVKQtyfzQ=)
                          7: CnrVk44x8LEg2LJBBNmgTNF07N4.roa (hash: zckqLTNfFO5ispQu4Kvw6x/6IysOO+RwRLoSfhJRWyw=)
                          8: DFF-bhqrnmujnLxRL9JYAVW6ikA.roa (hash: 21iR99fIbGqw3Or3piqGj+bIYtOK9kefBJ5EiWs9J8M=)
                          9: FKaeXb4K1EynagGRQjeatWAcqgc.roa (hash: CZiF18LL6QhQag7zI7FYHTRqJr5fp5LvZzS0BtjMKWg=)
                          10: H7riRd-N106KX0i1mDF2VRCYnEc.roa (hash: NA570He5c22fo1zyWpfXqctkYrqhzyDYex5XaIbuKFE=)
                          11: HhrLKxq_9UhdyBfdJAmRzYkDeMo.roa (hash: KUnWa29rPwH/NqnRPQIA4bZ+/tciU5Hf82XsQ0qlG64=)
                          12: JByCSmpT_tKaghi6acJ1P7xlxi4.roa (hash: n4th5ESL53N70/dB8aAk9IHNbtqU1MIcFTC5M6qY9SQ=)
                          13: OfvLe5P_EZDmvqktotnid8wbMRU.roa (hash: 2/CgTsIk8Ir3nK9Rb/T89lnIO2epsXKgeibAOiGCEkQ=)
                          14: P-xdH5szgMQXhP27nYN82uBlj4k.roa (hash: wErvIL1WI1egSnklkuRsLUz42g0IG42ATwZat+dtmP4=)
                          15: SEIGpFaUOT-3BhxD428wdHjXkF4.roa (hash: kYKeuNU0Tzp6sR1Dz16H7anhgJcD3fy7MV9jDArs3Rk=)
                          16: Td_tAB3CrVbfHcSB5AhDEVY957M.roa (hash: ag03Y22i3csGaCqrH3JCe57E7lAMqF8Kv55znGph8AU=)
                          17: UtFNVFUJ7GBINstaRtrKf70y5QQ.roa (hash: J3htDOGoNbFTYG4677s80h2F8nTfWvNlcL+CigE4XzQ=)
                          18: Y9mO9MZ0fPVTX27-DWY9Am_Zcdk.roa (hash: zUlf5je0QGwHf8Xgl4z7VcTV5+svpQrR/o96gVaDZyQ=)
                          19: Zpw5BQwIodYMXStEoStZw2m1NHQ.roa (hash: 3AF49qMbETv6M8T/thj5SbhbCaFt3ESECgrfcG0gReM=)
                          20: _Ml7engb2jNusfxP1g3QxlghsTI.roa (hash: z7v5eA1P6HWxQQD76qXFLt3kNtZpM4Pud12PAzlZxzU=)
                          21: b-kXBnz2enkupZbt8hmkaM9cRdY.roa (hash: 7JMUhGk/UNvBnPJ0huhw0y/oVgp7Khpe/Nkt2yoYqTo=)
                          22: cHBAN5b_AfIDbPujyHsSkHc32Vs.roa (hash: kB0iiFfoUEV5VdTxoB3sooXMHpBtuJNeYhAfJLbms9I=)
                          23: d3dmZhqZMBm8nnUwxeRipF31rF4.roa (hash: Wq9QYT7yZowYR4zvxJjwAu28e4Rc6FO3OCTrtL2HZ2k=)
                          24: dclTRK2P6H594KtMTB_oZkto_Lw.roa (hash: QnCTyiKf1w63AXb3PQfX/YBXqZywF6UWEuZsYZ5/ZA0=)
                          25: eA8UoDwbxwCMIcIoTT_iH0YvmjM.roa (hash: HxTrpLgbVmhVC/6Q+vCe8lPm961RPCDLoP9PL41CR7s=)
                          26: eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa (hash: uHJR6LBIUPmPWT2wzRksFGeaPTNwx6P1xGQDwF9JJz8=)
                          27: eemFnrFi3FTd3YyMwBZEzBIbg04.roa (hash: +5L3qkCSUqv0kjd+pXbTLZWrAQYU0acTMdwPqoNjgTE=)
                          28: lLZ5Io9qq5qjICXx9jv1SSbflTg.roa (hash: gaHQzxeVOCa2xWjBUWdAbn70cMT5ACXZ2OoKrZdMdSM=)
                          29: qOG6O2Te1Ux3CxPlWFWD_6a9Rgc.roa (hash: KIXE5IXYoEpi7KicobrnzlhjuHGnO16bqwVWIfJH930=)
                          30: r363Q1qsYQxBbhvSqPJLPh5DahU.roa (hash: JjtZM7LfR0UP5uN1iSohb3UO/TmdB39LPJkQd8VgySw=)
                          31: t8FNK2i0rMEbxc7JFCN8YTSfue4.roa (hash: TGDqC9aPRLO5Bs4rgvqauI1vjbtsLGhPLrnrECD+NJc=)
                          32: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: h5dI4TLT4Mt2VABTOoPDCQJhi5CgplV2t40hQpu6yNw=)
                          33: v3OGC84lOHYqgrdCw83-UxOxv3M.roa (hash: 5wTtmtxXrYwzJBtvZnwhrNSczGwxOm6FNH6e0UVFd3s=)
                          34: vALZjp3Y_8vzqJPszimC3tG6CYA.roa (hash: 3a6oqJrQjy+G/zx4bhAzAt1DS1UwmeP3dtTyF2RbQKI=)
                          35: vATMWnOROvqwj7Arlr6Fn1rGVzA.roa (hash: g+SOXxMEXOuyhniiidgY516t6TKGEEtZYtbh4vxG6wY=)
                          36: xwPdgKNx4fzmiwN9p2kqP8qdVM4.roa (hash: pSmFSPFPnvksBu4SvGKoZQ5volYSiLUkmE8oJVIgJnY=)
                          37: zlw4k3fz3hvPbvONN6narEdJwuk.roa (hash: whzFcKoxbF16kVv3V3GLTBI55imHzoHABjw7ZRaAHxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:18:0f:46:44:af:e3:30:d2:e8:84:61:53:c3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Dec  6 04:01:09 2025 GMT
            Not After : Dec  7 04:01:09 2025 GMT
        Subject: CN=a9ff674a2b6fd16ceb13630547b2b07352912485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2a:eb:c4:bb:2a:33:96:f4:fc:75:b0:d3:33:
                    6f:df:be:5e:72:75:00:8d:c0:6c:76:5c:bc:ba:50:
                    60:3d:1f:32:f5:83:d6:3b:67:d8:74:0a:3f:36:ae:
                    ce:8a:ae:11:72:d1:e0:9c:3d:3b:53:cd:25:4f:81:
                    53:60:93:d8:6e:90:cf:4e:21:ec:af:1e:97:0c:cc:
                    25:81:ed:09:2c:d7:f8:a6:2a:e2:62:ea:7b:1e:b6:
                    a6:84:4a:99:15:1c:44:04:e5:71:bb:13:6e:af:55:
                    0d:85:3f:c0:b8:64:40:20:4e:b5:ee:de:64:bc:03:
                    12:d7:91:1d:17:f9:88:49:65:03:f1:3b:9b:80:1f:
                    f8:db:1b:08:b1:a6:25:67:1d:16:53:17:7a:5d:ee:
                    93:d5:37:c3:87:4f:af:25:84:3c:be:1e:64:ba:a1:
                    1d:ed:48:52:18:b3:10:cb:79:e7:12:8d:0b:45:ea:
                    ac:60:e1:8b:aa:bd:d1:87:ae:3b:e7:b8:8c:b8:e9:
                    cf:3b:c0:33:d2:3b:1e:20:21:57:88:20:21:4a:b2:
                    59:f5:1f:ed:f0:c0:0b:d6:a9:01:e9:33:16:dc:bb:
                    97:ef:6d:fa:ca:7b:0e:e1:f5:cb:4e:08:03:05:f4:
                    57:e3:32:24:b0:37:11:97:a3:c7:18:26:7f:7e:3e:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FF:67:4A:2B:6F:D1:6C:EB:13:63:05:47:B2:B0:73:52:91:24:85
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:68:42:b2:87:85:d4:07:23:fb:78:af:c8:3d:01:d1:b2:bb:
         6e:a7:dd:4b:35:a6:ce:eb:02:34:8f:82:49:41:d6:f8:4e:8e:
         f4:1c:b7:77:0b:d3:25:90:e2:cb:5c:69:2d:eb:ac:68:fc:fd:
         49:7c:b3:a1:8e:27:2f:af:85:26:7f:d4:a2:0c:62:6f:11:90:
         44:78:5f:3e:71:ea:d4:f2:d7:b2:7a:7a:35:2e:e6:33:f1:69:
         c6:46:26:75:4e:fe:69:e8:bc:22:ed:5f:75:8f:63:d3:0c:ea:
         ca:16:e7:64:37:94:c1:1c:92:b5:77:c3:15:f8:87:af:3c:90:
         da:8b:58:dd:3a:80:43:2a:dc:35:5f:80:2e:7d:a0:50:6a:3f:
         25:2f:17:c1:23:20:4a:c9:e3:0c:1b:fc:92:80:1b:d8:78:5f:
         4d:6c:45:e1:ea:5a:72:72:a4:91:be:14:e2:c4:ea:a4:1e:2b:
         59:1f:8d:0e:c7:af:28:ef:27:77:c8:50:b2:27:ef:55:a3:29:
         75:71:7f:35:ae:38:60:89:d6:bc:18:43:63:be:1d:49:f8:8d:
         9c:95:21:70:c0:28:12:e3:9e:47:69:89:9d:9f:61:bf:6f:7c:
         e3:18:d3:11:ab:77:30:78:54:71:6e:14:cd:9d:92:67:90:4d:
         ee:fc:e3:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0hgPRkSv4zDS6IRhU8M7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjUxMjA2MDQwMTA5WhcNMjUxMjA3MDQwMTA5WjAzMTEwLwYDVQQD
EyhhOWZmNjc0YTJiNmZkMTZjZWIxMzYzMDU0N2IyYjA3MzUyOTEyNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCrrxLsqM5b0/HWw0zNv375ecnUA
jcBsdly8ulBgPR8y9YPWO2fYdAo/Nq7Oiq4RctHgnD07U80lT4FTYJPYbpDPTiHs
rx6XDMwlge0JLNf4piriYup7HramhEqZFRxEBOVxuxNur1UNhT/AuGRAIE617t5k
vAMS15EdF/mISWUD8TubgB/42xsIsaYlZx0WUxd6Xe6T1TfDh0+vJYQ8vh5kuqEd
7UhSGLMQy3nnEo0LReqsYOGLqr3Rh64757iMuOnPO8Az0jseICFXiCAhSrJZ9R/t
8MAL1qkB6TMW3LuX7236ynsO4fXLTggDBfRX4zIksDcRl6PHGCZ/fj7YDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn/Z0orb9Fs6xNjBUeysHNSkSSFMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWhCsoeF
1Acj+3ivyD0B0bK7bqfdSzWmzusCNI+CSUHW+E6O9By3dwvTJZDiy1xpLeusaPz9
SXyzoY4nL6+FJn/UogxibxGQRHhfPnHq1PLXsnp6NS7mM/FpxkYmdU7+aei8Iu1f
dY9j0wzqyhbnZDeUwRyStXfDFfiHrzyQ2otY3TqAQyrcNV+ALn2gUGo/JS8XwSMg
SsnjDBv8koAb2HhfTWxF4epacnKkkb4U4sTqpB4rWR+NDsevKO8nd8hQsifvVaMp
dXF/Na44YInWvBhDY74dSfiNnJUhcMAoEuOeR2mJnZ9hv2984xjTEat3MHhUcW4U
zZ2SZ5BN7vzjHA==
-----END CERTIFICATE-----