This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
File:                     Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft (raw, json)
Hash identifier:          asCAm2+UGPdwzeE+S9XeC1tGuSM8h+S2ldJqzlPEYnE=
Subject key identifier:   D2:3B:46:77:43:53:75:F5:58:AB:4D:61:60:DB:84:A9:05:6B:D8:F6
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Certificate issuer:       /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial:       019AF163DB52E594E089B7B1BB65AAB5E9AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
Manifest number:          06D2
Signing time:             Sat 06 Dec 2025 02:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:44 +0000
Files and hashes:         1: 4ASzv8VWMQYFKDY_-XGCbimJW5s.roa (hash: 4zLzwFIqB9q7XlogNn2GDLJVXFyYSxghGw7cNNnYtt8=)
                          2: B4_oxATnGbDyQRnpDFsFel2qJro.roa (hash: Eu+Z19cukHF/X5BwY4vJJ3PD89GFZl84ZrwWgUf0Sdc=)
                          3: B627jyelsOrc-4KEk9rr5UX-6bs.roa (hash: emvror6oG2+K4wO+RDr3+Uj+3eP2vVbV6xrjlFdUiWQ=)
                          4: BI1SH6cdFsA5GEGW8SQ3lGHnj2g.roa (hash: PKKSpBd/xQ5aGIm6aWWymFvyFPnqDkVShXjROLOevvU=)
                          5: FJERd9vUT0Kg_8tCO27uUpQBaGo.roa (hash: 12MUnTHhtFQGoQwHqPv1crFdaIeFV1soA/yVgXeNaTs=)
                          6: FY0PnzgS2EpiVOcfFbS9jXQ_rQs.roa (hash: SBku+C0JKoyJVJcQo1U5CGwXGTxRsDeNLCykfjm3tsM=)
                          7: Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl (hash: 49nA0ykep2i/MfxGrF5dbkkirHFdgg18/qzCesgALVs=)
                          8: K6GiiZJ71L0lYgovFnICdAk-1Ks.roa (hash: 6qHwOyZ8UfE4rkOQqwwP70JdW41FclRsGgCcII3xOE8=)
                          9: M1aqRzQAx0u0GH1aXLjObYZ4Q7k.roa (hash: mN6UichsOlqnG+M84GTpzNqXCEcMKcyFp6FqDGDV0E4=)
                          10: MSXSTFKnAwZwbqobS5_FZAQrg-M.roa (hash: D45Ar0ZBYy4iC6UD1t5qGymD/cKcsHTZdI0FaRgD4/k=)
                          11: PDIQfwBM2G7ffsnUH2YvcCfE3MM.roa (hash: sG/brPxpBzyg1NKJzaV3PK0r4VawovV+khB+BUBPlqs=)
                          12: Qp9jOusZCBN0JXag2WA7VjJEhAI.roa (hash: GJotYqe5jBcfcWp978k42Cmmc8wElAK5JvzmSSlWE/E=)
                          13: Sw2GbKoJ8rfrZjEQTkFwYz2FnOg.roa (hash: vokvJGT+Pa2Ai2Kj9IpjJzrJytLkCCqfTkYZIe2tcyQ=)
                          14: VT6si4kLyd6zpNaqVEXQZbgj2Gk.roa (hash: wBULHsK9N7KoZlhMck164GyLKkfZrvnuLnG6dNTvUtU=)
                          15: VyPRPElyLMa64hjFDMtKRmA01ZE.roa (hash: +7F5UqAf5wUUZwuFkWwjFywpzFhfs0Yb0eBzU06/pPY=)
                          16: fL9K7tZGGZ0rxKtEuSAiWj4Rpjg.roa (hash: m3RbbbRnXoZDyJVx1OpTbKRsiAgJOpn/2JivbbReHo0=)
                          17: fmODc7MENEc14rO10yX01KjqK28.roa (hash: uJCEf4lpY599iRYVqaOAvP8jY7fLqVDXB1BusGXHNpw=)
                          18: kvTlBi_B8QrdRGJqo_C6nAXRdfc.roa (hash: 6MLCaYZkCCpTI+u5625D24+Iiiya7eil7hcGEmC1dUY=)
                          19: lU9bl4hVEw5hzibuRIs13xmbj9M.roa (hash: ZUdsZ2gex8weJr9deejWFGIwiEepSjgNX4ZZr24MPDg=)
                          20: moCjhy9MjqXiFgMnAR9Fy5SDHgo.roa (hash: LUnUKR1Zotqdb56mM7OX5qPTEb698XgNZZiSiK3MEOQ=)
                          21: o41yDBZggn4lr9NsPB_Gp8GKfBM.roa (hash: KRnKN0lrEk1hL6MxXIHkfLYCNSrhlEIODabcvB9s1Rk=)
                          22: rW9xL-Blor3a7KeOFcdz4MZUIZ0.roa (hash: m4NWziBJ7p7f8NFdds1mBjp8BH+ppFVvWoMG+PNQoc4=)
                          23: tWCaBWq3ZgV3-7XX1cWsxbC1zrE.roa (hash: 1GYVtpcVNjgzgm/oYqnREnTQrGZnX2ki31par69caoA=)
                          24: u0kiBRm7lPy40aL5Utg1OzaItA4.roa (hash: dKGxS0Em7PGdI3BmuuAWqogEozKj12mYiRlt25Q1BKw=)
                          25: wu6ek6l2NBjXAnMwXL9G8HfYrWQ.roa (hash: RWycgtixOxP0odIoomQLaZ/UwguMZfM+nPBcfd6lNvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:63:db:52:e5:94:e0:89:b7:b1:bb:65:aa:b5:e9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
        Validity
            Not Before: Dec  6 02:00:44 2025 GMT
            Not After : Dec  7 02:00:44 2025 GMT
        Subject: CN=d23b4677435375f558ab4d6160db84a9056bd8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a0:f5:ee:7e:e5:c5:78:fc:a5:48:fa:ae:ef:
                    0a:bc:3a:8e:cb:e9:09:46:92:5f:1c:c4:c4:f3:ae:
                    b2:c4:dd:a2:bb:18:ed:e5:94:ac:38:88:ab:1a:aa:
                    1d:af:81:4b:7d:a0:9b:e2:be:9b:3d:47:16:0f:72:
                    d8:18:ff:ec:f4:22:08:0d:65:87:09:b6:6c:cc:77:
                    73:1b:5e:8a:42:53:0b:f7:06:bc:a1:fc:f8:26:c3:
                    4e:f6:5d:43:bf:0b:9d:2c:17:fe:ee:db:f6:c1:7b:
                    61:20:cb:ed:9a:b9:e8:4e:2c:3f:61:b3:5d:ef:af:
                    e4:ee:2a:0a:69:1e:ac:46:10:5f:c6:32:b1:1f:4e:
                    5c:40:55:5b:b3:f5:8d:f3:0c:3a:69:13:76:49:03:
                    1b:65:f7:c8:75:a1:df:e4:ec:05:8f:ad:b7:6a:14:
                    bf:53:a0:e8:c8:92:ba:35:5d:de:15:55:36:fb:cf:
                    47:a5:83:1b:35:2a:df:c9:bc:ae:05:c3:bc:c8:7b:
                    78:07:bc:31:70:70:16:93:f1:1c:87:b0:80:83:7a:
                    00:8a:ea:59:76:fd:cc:40:75:76:9e:a6:64:b8:6d:
                    d1:a7:90:fd:2f:f9:ad:4c:2d:82:66:25:82:9c:6d:
                    ee:a9:2e:68:1c:ca:91:53:bf:af:41:84:66:05:bc:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3B:46:77:43:53:75:F5:58:AB:4D:61:60:DB:84:A9:05:6B:D8:F6
            X509v3 Authority Key Identifier:
                keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5a:60:73:d4:5e:3b:7a:1a:a5:70:0b:af:7e:bb:31:6d:94:
         10:96:3d:4b:d7:97:94:6a:33:2b:26:10:f7:fb:a8:3f:76:aa:
         63:2f:64:5f:a3:f8:37:56:4d:f3:fe:b8:ec:49:32:22:69:7a:
         4a:2c:f0:f3:a9:e6:b3:a2:70:87:5c:bc:ce:1b:b2:15:01:e9:
         7e:27:8a:eb:ce:53:09:e6:45:76:6d:2b:db:0e:d6:f6:e7:0f:
         ab:10:07:4f:22:17:ce:8d:1f:23:a0:e2:47:7c:0a:db:2d:17:
         ed:45:75:e5:aa:1c:ef:19:62:90:25:cc:86:4c:99:8b:d5:4b:
         57:22:f7:eb:dc:ca:3a:37:d2:43:9e:94:db:13:9f:91:ab:62:
         1e:5d:97:44:2f:cb:a3:8b:6b:1a:17:f8:bb:6e:86:48:6b:ef:
         a6:35:59:94:e1:e6:45:55:05:80:cc:ec:31:c9:75:e3:03:00:
         49:f7:35:7d:d3:4b:b8:71:72:bc:5e:5f:da:11:30:55:a6:ae:
         c0:5f:f6:62:76:d2:56:0a:b8:6e:18:ea:fc:94:ae:37:5b:f5:
         7c:32:40:1a:5f:0d:90:0e:32:60:7c:e3:4b:8b:1c:1f:d0:3d:
         b9:57:8d:73:c0:44:43:52:6a:ae:6a:b6:b8:b4:76:1a:85:a1:
         91:fd:0a:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxY9tS5ZTgibexu2WqtemvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD
EyhkMjNiNDY3NzQzNTM3NWY1NThhYjRkNjE2MGRiODRhOTA1NmJkOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKD17n7lxXj8pUj6ru8KvDqOy+kJ
RpJfHMTE866yxN2iuxjt5ZSsOIirGqodr4FLfaCb4r6bPUcWD3LYGP/s9CIIDWWH
CbZszHdzG16KQlML9wa8ofz4JsNO9l1DvwudLBf+7tv2wXthIMvtmrnoTiw/YbNd
76/k7ioKaR6sRhBfxjKxH05cQFVbs/WN8ww6aRN2SQMbZffIdaHf5OwFj623ahS/
U6DoyJK6NV3eFVU2+89HpYMbNSrfybyuBcO8yHt4B7wxcHAWk/Ech7CAg3oAiupZ
dv3MQHV2nqZkuG3Rp5D9L/mtTC2CZiWCnG3uqS5oHMqRU7+vQYRmBbxcgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNI7RndDU3X1WKtNYWDbhKkFa9j2MB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclpgc9Re
O3oapXALr367MW2UEJY9S9eXlGozKyYQ9/uoP3aqYy9kX6P4N1ZN8/647EkyIml6
Sizw86nms6Jwh1y8zhuyFQHpfieK685TCeZFdm0r2w7W9ucPqxAHTyIXzo0fI6Di
R3wK2y0X7UV15aoc7xlikCXMhkyZi9VLVyL369zKOjfSQ56U2xOfkatiHl2XRC/L
o4trGhf4u26GSGvvpjVZlOHmRVUFgMzsMcl14wMASfc1fdNLuHFyvF5f2hEwVaau
wF/2YnbSVgq4bhjq/JSuN1v1fDJAGl8NkA4yYHzjS4scH9A9uVeNc8BEQ1Jqrmq2
uLR2GoWhkf0K3Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:54:29 2025 by rpki-client