This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
File:                     dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json)
Hash identifier:          wJGmS0NzZgUkdIxmCKLZb+xUfIiYxXKJ+SVWwM8axWQ=
Subject key identifier:   9E:E2:2B:96:1C:DD:EF:AD:AD:74:3E:D1:9B:C5:C5:73:FE:E3:97:49
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       019AF1D1BDAC6925A12895AC6508CB83541E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
Manifest number:          17D2
Signing time:             Sat 06 Dec 2025 04:00:45 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:45 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:45 +0000
Files and hashes:         1: 0Z8yTYlKjkqvKh6kY-kM6OXYfz8.roa (hash: fwm0Gtt1RFKV50/Ms+CgVe/rwlPJ9Q3VLzTFIW1v2aw=)
                          2: 4AhKQoLmAk1YQIBQspZfyfaiu0s.roa (hash: 1kEaOXNNkPEAuTvrZqrQmCGg/Uu08f1ofkHwiva1rBk=)
                          3: 4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa (hash: Xd7f6Is8VkQ7huxtuAE7hUXnUe/NIXlF2TbPODpbZHk=)
                          4: 8xmePB-pGcDcrQ-prX4UP_SBy78.roa (hash: OO9rzem914ccJuV3c6Pdstzz47bnogLMsoJtrFTJhQo=)
                          5: 9nwJkf06ywYV97ycnHX8xephiLw.roa (hash: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=)
                          6: G1nDGEYcV0zuKzKuOXzDx75r3GI.roa (hash: 41u/KL+MWJdDf84HJGznj8QmpQB0mJMrGBzkwlxjtIc=)
                          7: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (hash: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=)
                          8: JPWgfoIicBY7uqLCE-abW2DSU0c.roa (hash: A927JecYLMujCKzkMKtyVfZVMSoezFJjSy/bYsYd8SE=)
                          9: Kvx3aMKyyHxozL3U3ap2oLWDca0.roa (hash: Zz8Vm/BEn2VlT/RjADj2XxnM/3K7+ZuLbhNPkP9kcOQ=)
                          10: LMdQpYE9dBNTzanGIqV59og3G5Y.roa (hash: O9iBbYU6FJx61oOEQm4eZUxrBSFdJBoBF1RZ/jgTxRE=)
                          11: M7UMw75zEMferpyTZliqTtxFYGw.roa (hash: bhGEILsyYzSvD2gGTZix+BRHPPr9Z15A13HndBQFJh0=)
                          12: TQNP6hoAf66GZWfHy5k78DAiiCU.roa (hash: uABddS+djXpmQc7iz2KFGbyJ5oeYnTC/ey9Ec918mow=)
                          13: UMHCyN1PhpnvoYUbs1CT_48YLGk.roa (hash: i765qk64qL4Uog5FTQxpy5y2jivRwNCYq0ub5NcQaLk=)
                          14: UX21t3Eucdp3Z3xzsP-3n91_r9g.roa (hash: ZavW4AA+x7nFJ2Pn5B6nZ5RKsCyjyFrDNIaHmQXMEn8=)
                          15: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (hash: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=)
                          16: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (hash: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=)
                          17: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (hash: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=)
                          18: XZET7dFa5OoJqf73WGd1UHo9Trs.roa (hash: FbxqvpbDfsQRYaW0n//PgGX2T+UQY1wiBpKlSWUYJQg=)
                          19: YUDnmz9puMgyWvhGgB34ZjiStI8.roa (hash: E+a3GmwZUOvycUf/ZwJRfa9qdpqQAYTsooVUVM9aAeU=)
                          20: YmJQTVDgl6pT6ifoZvYr6OgSo-4.roa (hash: IEA1sge5kazioWkKzPv9VfD2BEf9Xg5te8xiJRghijI=)
                          21: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: bhTJQP+meMjGC+ji/YbvXNKjJR/FYOYXfwJd5joIaUs=)
                          22: dc2g-kIH50S7LA2o26AVsv4LItA.roa (hash: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=)
                          23: hbkDGu-27NQwuA34KKvsthuBpoc.roa (hash: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=)
                          24: iHslhtFiuKaugZuIjgDSTM4F6Sk.roa (hash: 43DehRvyD4BSrfqUpPUdy+zsjmfPk1hQcSdYylB1zpo=)
                          25: jJYsZg4wnTyX9mV0JNA_riAb8aI.roa (hash: 2YSmon6Fik8vSjQAeDBGETPmH22iZ7Gu1aYziQraG2Q=)
                          26: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (hash: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=)
                          27: kMJn1HheqQ9Rsacjsd3PZ6CXhTk.roa (hash: QHx3y/n5TxjTD6iBbFsTYJr5O+YrfK0OyTuVkyzqTiI=)
                          28: lkYJ-_nXwt_j8sYXcXEPI8XjVSs.roa (hash: H5A3LLoCNjemShwdfzZoOLg2oRcQfw/qyX1Up4Fug7w=)
                          29: m095Z-7KR0K5gXucbWhKiz12Uqg.roa (hash: pKKUCvxcyqiDYUVY3jhLgvu4uMJ7RTYnDW2HPLpWkkY=)
                          30: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (hash: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=)
                          31: nyslHXPfyz0FM3udFOE-7tndyMk.roa (hash: gPoCAQJEwCTv4wbyGKoKpT/fwNV2im1/jc8HR0EwRAo=)
                          32: oEbBV7xx5_jwLtoklKva4-Dg2v8.roa (hash: i+aaCmiUXCVg0OPcM0SwO92pJsKLDZGoxx/fXdMrMgQ=)
                          33: oQY8Ggs-WHGozgLdlzn62PGvTmo.roa (hash: Rm3b27WZnppZmsClSvXbSesr4c+ogRwCEVrSLNbiwvA=)
                          34: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (hash: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=)
                          35: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (hash: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=)
                          36: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (hash: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=)
                          37: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (hash: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:bd:ac:69:25:a1:28:95:ac:65:08:cb:83:54:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Dec  6 04:00:45 2025 GMT
            Not After : Dec  7 04:00:45 2025 GMT
        Subject: CN=9ee22b961cddefadad743ed19bc5c573fee39749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:13:0b:a7:24:2e:c2:be:fc:1d:e4:4a:11:
                    00:6c:6c:ff:52:f1:41:46:63:f1:de:d3:95:80:1e:
                    87:ed:6c:0f:d4:ec:c6:96:d5:2a:4b:54:d0:8a:02:
                    6d:53:37:17:f3:a9:4a:9f:8f:11:af:13:82:7a:05:
                    5e:88:e8:a2:5c:12:72:29:b1:08:8e:a0:a0:60:89:
                    46:04:04:5f:56:45:e8:8d:8a:7e:31:6b:c6:e2:94:
                    2f:ba:a1:af:97:9c:4c:d4:6f:18:43:f5:02:32:8e:
                    1d:b2:91:d7:a8:4d:10:f5:1f:a7:ee:ad:10:fc:e0:
                    4f:18:0f:76:62:d3:a0:78:66:9a:e7:b8:f4:7c:d7:
                    bf:de:cc:a2:c0:40:0b:8c:5d:af:b5:55:05:e9:b2:
                    6c:9c:05:2f:a1:fd:b4:93:fc:9d:ae:d4:61:a8:22:
                    0a:ef:e1:69:93:5e:0a:7b:6c:b9:bb:34:c6:0d:b8:
                    fd:36:f0:03:ac:bb:87:cd:e5:5c:47:85:6a:78:62:
                    72:ed:fb:84:cd:71:be:58:3e:da:9a:b5:1f:a8:18:
                    8e:8f:73:0a:0e:8d:54:f4:50:27:cf:b1:c2:0d:fc:
                    69:da:83:fc:e2:e9:8b:00:b8:74:2b:a7:2b:be:f4:
                    e4:14:92:78:0c:57:b1:1b:80:b3:9f:07:36:a3:b8:
                    95:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E2:2B:96:1C:DD:EF:AD:AD:74:3E:D1:9B:C5:C5:73:FE:E3:97:49
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:5e:74:f3:b2:67:e4:a6:42:5b:70:6b:1c:2b:9e:a5:f7:57:
         04:47:9a:98:e6:e6:fd:ca:5c:6c:14:14:63:f0:32:c4:36:ff:
         b5:80:32:e0:5d:5f:07:38:2f:b6:78:91:16:fc:22:84:c1:44:
         64:39:de:f0:72:58:87:c0:88:db:a8:46:0c:f7:39:99:2e:fb:
         0d:b7:b1:3f:43:6f:3a:6c:ed:69:49:c8:58:9a:83:7c:75:1b:
         3f:0e:90:53:45:4b:c9:84:2a:ac:91:0d:9b:30:f3:24:3b:61:
         ad:72:9c:02:1e:c9:fb:0d:c8:5c:4c:71:25:c6:93:03:b7:cc:
         91:59:54:c5:98:db:12:55:6c:24:fe:60:af:65:e5:0d:60:71:
         9e:55:56:a2:7b:c8:d0:d9:3f:5d:be:0c:3a:ce:c2:be:dc:f0:
         29:d6:11:df:ce:b0:0a:cf:1b:37:bb:f8:2d:84:31:93:c4:4a:
         9b:06:14:7c:c9:86:5c:7d:32:ef:56:ea:b6:56:8c:49:bc:de:
         71:02:c2:da:fe:ee:c8:ac:c8:97:10:89:8a:36:6e:b9:70:e0:
         49:1e:fc:95:bd:f5:d9:98:65:ff:3c:3f:36:cb:d3:4a:c4:30:
         fa:df:42:5e:5b:c4:76:5b:ba:b0:14:02:d1:88:ba:be:32:9f:
         63:c0:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----