This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
File:                     IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json)
Hash identifier:          7cpDVth0FUl8JW5GjuL0jbpaA335PNelTSh5aOdaUfE=
Subject key identifier:   F1:4A:45:A7:05:69:14:DB:98:82:C3:05:5C:DD:21:1F:93:5B:F5:4F
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Certificate issuer:       /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial:       019AF2770A73926A08D88C08BB4BDBBA771A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
Manifest number:          12CE
Signing time:             Sat 06 Dec 2025 07:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:18 +0000
Files and hashes:         1: 0KbtCJykTY4f7nA0QJzqQGWoqYA.roa (hash: T5Ow7OsLV+eTW1oVpch0eqCQrMYUfj4kySVUiBzlsHs=)
                          2: 1ioN5dcfVbbcvdiMUenNAJRsRF8.roa (hash: LLwhiNyP/7V6w2Kt2BpGMO0L81bfKA5S/Ex0r1Yi3e4=)
                          3: 90wCTu_VG0cg3v518Jw-uQZKG0I.roa (hash: WGgublq3d4Yb/k0UHfCjetZRey/6UF8GGMjAYAWKBew=)
                          4: 9ustLRCmQrVjSomh2CSbiU8tgAw.roa (hash: iqcE7BuOcWgu3suvDSZKPBILDJpc9DfkSe4omHd7kiw=)
                          5: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: J0W62u5IyuJTbySqtFYuhmoz1Z2eeCuwZq6JwdPGTck=)
                          6: Kp4lqcWI2L_udI0vjyDZ3KKhNqw.roa (hash: dhMCiSDQZM4kurcanBYjwM08N5LUsyI+HR6PEcfZSs4=)
                          7: Nv82XPVAXh7i0NinV8op7cxSCkY.roa (hash: Gwu9owA9BpGL2Gb5O0jUF/4E4PLOvSLoDJSNHgY1Ne0=)
                          8: O49fEEmdduEDlmHjywBTe4hbUrI.roa (hash: QGPcl2jLSGRNH/NTf0tO+RhE6wtLBqqp92bw06oxNfU=)
                          9: OPHGk6u2qSFcpqNXDoRynwkxRPg.roa (hash: tKvHMnELV5VNPCPmJyRYPHGYeZPGGn54PcC8eCvYwUE=)
                          10: R4FmsnUoBv32hIQfOsFBIJAcy94.roa (hash: 6kCVXpptWnPUtqwzVF9W/MkzfoaZ3BK4usx4hMk/bHI=)
                          11: SGXEhyIKPmMOen6I1PkB3pLeCvY.roa (hash: 9EH2IzLvB2rKmrGF7xG6OifEC/3ZYYgbCersKE1ntGs=)
                          12: Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa (hash: AngxdPPy9+UbmPG/n/8j13gA9QjKCfwyDf6PucND4FI=)
                          13: Uj9f4IMBhaHqTrTKSiJPLOEuUXY.roa (hash: BM3naWIqw85ohaDvPSxO7Ut5OjuXGJkv4mwMyMN/UKg=)
                          14: YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa (hash: B6C4+KUjcPcxnfaU4l6MZpxuvV7eh3cyPcoK+0EeHe8=)
                          15: _6ri1KyGrKWa-tqTjRsqpyUSZCk.roa (hash: isLYHAJU5J3ZPuL1/UUePiNJm0MmjXaPrbTm1cYHTyQ=)
                          16: _CI5_4aNxKaEPWYHOcyZKAbyObU.roa (hash: X5MyuI8Ww88wubWEkkjHn57GLRoFZnT3Qc6Lwjl782U=)
                          17: cHMExnQg_NgXj9RSngWJiE0Ry9w.roa (hash: ccksNIEDmgp05yf3K+8vErJuvCl+xg8f85HZISEiov8=)
                          18: uPxOt98I1tBick-uHh01WFNrRvQ.roa (hash: /HibKZ31j64AXkabjb8asgWDIKN4DMb9TRIPZEdaXFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:0a:73:92:6a:08:d8:8c:08:bb:4b:db:ba:77:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
        Validity
            Not Before: Dec  6 07:01:18 2025 GMT
            Not After : Dec  7 07:01:18 2025 GMT
        Subject: CN=f14a45a7056914db9882c3055cdd211f935bf54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4d:f0:20:66:bb:30:40:8c:f4:dd:19:84:4d:
                    12:d1:93:44:3d:fd:9d:d5:7e:20:44:97:91:c1:a9:
                    e5:85:68:5d:2a:43:f0:e7:5e:3c:3e:39:fd:fd:ae:
                    2b:17:62:84:37:56:fa:7c:1b:50:56:50:4a:47:c1:
                    ed:50:c3:19:b3:0f:7e:7e:45:8b:28:bf:20:27:1c:
                    a9:b7:72:a2:23:5b:f0:a8:ad:c1:59:35:fb:9d:d9:
                    a4:ed:3c:2c:46:d5:7f:c6:bf:47:41:75:6c:33:55:
                    26:63:ac:7e:01:b6:3e:8a:c4:b2:36:78:0a:35:02:
                    c0:5a:be:ff:95:54:18:d8:17:7e:c0:fc:9f:f3:5f:
                    d2:fd:19:c8:fb:63:9b:75:87:fc:07:3a:75:d0:f2:
                    7f:dd:35:c2:13:5f:88:14:8c:26:9a:78:bc:5d:fd:
                    30:93:b7:6f:d1:ac:a3:13:8d:f9:82:35:be:d2:a6:
                    9c:0c:4e:4b:e9:97:6d:a2:da:13:61:3e:b6:d4:8a:
                    d4:86:ab:f8:7b:27:78:65:76:e3:b6:c3:a4:13:40:
                    6a:d9:a9:a3:be:82:13:f5:e2:e7:5c:01:6d:01:c5:
                    53:11:2e:64:5c:54:44:30:0c:a1:bf:e0:cb:37:2a:
                    47:3c:69:2c:d6:62:2f:24:5a:4e:3e:85:ae:49:7e:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4A:45:A7:05:69:14:DB:98:82:C3:05:5C:DD:21:1F:93:5B:F5:4F
            X509v3 Authority Key Identifier:
                keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ae:e9:aa:3a:7c:52:e4:4c:f3:7a:ea:5d:7b:bf:67:11:c5:
         c3:86:4b:04:d9:93:80:b2:72:c6:ae:29:5a:93:cc:e2:00:e2:
         12:2d:4c:24:a1:8f:ad:94:6f:5b:fa:75:4d:1c:10:38:9c:2f:
         2c:f3:a5:69:77:df:dc:80:50:18:b7:77:fa:1a:1c:2e:9c:67:
         44:82:52:d5:5d:2e:d7:43:ab:45:46:0e:7c:a3:84:50:13:5f:
         cf:a8:c8:79:8a:31:c1:fc:b4:e4:c8:ad:f2:6e:69:ce:d6:16:
         48:5a:52:d4:be:e8:b0:28:51:97:01:0e:ad:16:54:21:96:79:
         8a:3c:33:ed:83:be:4a:4e:6e:16:1f:a6:7b:78:71:28:8e:2b:
         9f:02:2a:c1:d4:fb:74:c1:80:13:93:6d:36:6e:08:e3:63:e3:
         cc:55:4a:a6:b0:4c:e0:d7:af:d6:91:33:36:fd:e3:64:48:c5:
         0c:8f:e0:04:7f:22:22:fe:5a:cf:02:f2:ac:31:0c:6a:8d:a8:
         f3:70:12:99:97:a6:02:00:d6:bb:c9:73:84:ad:49:5f:00:57:
         b1:0f:6a:d3:09:80:19:aa:a0:c5:df:b0:a8:be:64:76:e1:c3:
         e0:58:ad:a9:79:d2:66:30:4a:67:23:0c:9f:3a:cc:df:4f:2a:
         30:cf:74:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydwpzkmoI2IwIu0vbuncaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi
MmNjYjIwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD
EyhmMTRhNDVhNzA1NjkxNGRiOTg4MmMzMDU1Y2RkMjExZjkzNWJmNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E3wIGa7MECM9N0ZhE0S0ZNEPf2d
1X4gRJeRwanlhWhdKkPw5148Pjn9/a4rF2KEN1b6fBtQVlBKR8HtUMMZsw9+fkWL
KL8gJxypt3KiI1vwqK3BWTX7ndmk7TwsRtV/xr9HQXVsM1UmY6x+AbY+isSyNngK
NQLAWr7/lVQY2Bd+wPyf81/S/RnI+2ObdYf8Bzp10PJ/3TXCE1+IFIwmmni8Xf0w
k7dv0ayjE435gjW+0qacDE5L6ZdtotoTYT621IrUhqv4eyd4ZXbjtsOkE0Bq2amj
voIT9eLnXAFtAcVTES5kXFREMAyhv+DLNypHPGks1mIvJFpOPoWuSX47xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFKRacFaRTbmILDBVzdIR+TW/VPMB8GA1UdIwQY
MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt
MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx
LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd67pqjp8
UuRM83rqXXu/ZxHFw4ZLBNmTgLJyxq4pWpPM4gDiEi1MJKGPrZRvW/p1TRwQOJwv
LPOlaXff3IBQGLd3+hocLpxnRIJS1V0u10OrRUYOfKOEUBNfz6jIeYoxwfy05Mit
8m5pztYWSFpS1L7osChRlwEOrRZUIZZ5ijwz7YO+Sk5uFh+me3hxKI4rnwIqwdT7
dMGAE5NtNm4I42PjzFVKprBM4Nev1pEzNv3jZEjFDI/gBH8iIv5azwLyrDEMao2o
83ASmZemAgDWu8lzhK1JXwBXsQ9q0wmAGaqgxd+wqL5kduHD4FitqXnSZjBKZyMM
nzrM308qMM903w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:32:52 2025 by rpki-client