This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
File:                     ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json)
Hash identifier:          Gv0t/h5ovRgfU928UG8D7rVssIQiXCV33Af5Kq2kgF0=
Subject key identifier:   2F:2D:3E:6B:F7:D0:36:F6:5A:43:77:BC:DA:28:BE:25:3D:8E:17:B9
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Certificate issuer:       /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial:       019AF19B4600A2FD2D1518C872709C4C25FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
Manifest number:          14DE
Signing time:             Sat 06 Dec 2025 03:01:16 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:16 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:16 +0000
Files and hashes:         1: 2cIKXah99bs326V7_K2_ATU1wCc.roa (hash: 8U7vy7F8tH1dtIEl5RJoquiwlVH7Dw2C2urkmS/8Z1s=)
                          2: AjBp57cbFRBUIwIaXhNlUU4xc9Y.roa (hash: ZV9AX+FvWa4YVP0u/DD5byIthcNtHTveftQNUrL/KbI=)
                          3: C5aQpvui4sZoextRorOM2s4-tus.roa (hash: +uHoqMeakur3FJ2A7KIKBKK6VappFgcU8wtIWqkzb60=)
                          4: H6VCMPZt4N3Kunln9a3Mlo4bXvg.roa (hash: VEp5C+2m6nUwD5BidsWoXkpCNXESmRUDyLPsmQbse48=)
                          5: JDQj9MbTTWM28K2fRdnc3kN_2V4.roa (hash: kD8K4tnW+sM7R4yZ2QD5nngHRsUkDppGXIncS1P3Rag=)
                          6: LGaXWPb8sVewbeAiqsjliqHS5FU.roa (hash: rDB26YuQ2ovWQGE6oyw5Ta3692pcrg+OO7rhpjHQcXk=)
                          7: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (hash: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=)
                          8: Mtd4Da3by6MR0jbcbO89ZqbHwwc.roa (hash: qQjeGqI+gA1pVRqlFtpLmxtJsL8q91td/UWxeWGBR0k=)
                          9: QKcoYAaJb23ZnXst6hgn7ySA-U0.roa (hash: qHE3PD2iuMaPhAYn0jfh4DoEvgzMz/5P8LlWCkJ6xjM=)
                          10: WW6N0nsC2pVQw7M3pHrlWJbBGXw.roa (hash: XS90Xu8sWkUM1Fcl71wR/SDIDYfHwCcW1jjcYUuog9M=)
                          11: ZhNjsK3qGx79yZGFRV0IIr5BWys.roa (hash: XjESf3qPOABw+cPOUx99zL6bBm9trjDaxXdR6jLRmVM=)
                          12: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (hash: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=)
                          13: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (hash: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=)
                          14: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: bTywskcQ5O95o87Ak7soa8Z3UYzXbCHn/puD0vxNIY0=)
                          15: fQYAcL0-rJq_uMdZWclON1VTkrY.roa (hash: ARia2lYdqm6oJPEr5DbQrZ/JEissTWN7HQPGdNA4UYY=)
                          16: hEZZKQJ28Km_5UhH3cpxvYkLLZU.roa (hash: +vaYxbzQEi6M9mf3DyKNxFAOI6eLzddsZf7cVFe2WCE=)
                          17: hUM0lQ0ODj8Qil7w4D2sZvQVB4w.roa (hash: 8bKnMQhqygeFZmPwESYE+kESImBLAc2qmeTscpnWZ2s=)
                          18: itqdYmGsrfepmyYSKCd1c5R77js.roa (hash: W2/G8eoM3IFmeLBvMWU5XzC6g/z37f1zNFuZs/37yXE=)
                          19: lUA4Psv--QayOhT_SsZZvDZxilM.roa (hash: YGf2R2IX409XBgVvc7ca6dAQRj+o7jLte4H3tVm4ZpY=)
                          20: rEgjdxJnZ-zHy1QRT4lOvV8Olc4.roa (hash: 0WxvMUb8qg8Tz1QSnr0ZUyXVEegXbnK3FjK5nuLkzUc=)
                          21: uWnBYjlDT-EHIr2cPRZc1mertTY.roa (hash: ZGIgStgXIAihMerE9Ow0ch/sCGbCo1zrXLSrSykkugM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:46:00:a2:fd:2d:15:18:c8:72:70:9c:4c:25:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
        Validity
            Not Before: Dec  6 03:01:16 2025 GMT
            Not After : Dec  7 03:01:16 2025 GMT
        Subject: CN=2f2d3e6bf7d036f65a4377bcda28be253d8e17b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:0f:fc:bb:3d:b8:f4:81:7d:7d:5a:33:2c:
                    c0:72:64:78:a9:f1:fc:84:26:f3:70:a5:bd:39:31:
                    48:ff:af:0d:29:e3:82:6b:8f:b8:bf:8f:c8:b8:c2:
                    36:bd:16:2b:76:0c:ec:8c:57:e2:75:0a:db:82:d5:
                    cf:1b:49:89:6b:02:04:a0:e0:57:4f:84:97:32:fa:
                    06:d6:b0:6f:33:6b:68:8b:53:31:da:51:5a:d3:67:
                    80:4a:9b:30:90:c2:36:76:aa:0b:20:11:d6:7c:83:
                    d5:b2:52:75:11:70:0e:a0:42:71:39:2a:9d:a2:d3:
                    a7:50:1f:56:c3:94:8d:68:cd:66:d2:b1:32:dd:1b:
                    70:d7:6c:f9:6f:ee:67:27:c7:ca:ae:4a:5e:f1:f5:
                    18:ea:f2:a1:13:d6:59:c4:ad:e3:67:24:6c:77:b9:
                    3a:9e:61:b4:c6:46:4a:f3:e1:c2:7b:b6:33:07:82:
                    68:75:8a:7a:30:f5:06:70:85:67:01:4d:6b:fe:c6:
                    ca:ab:8c:76:85:1b:f0:95:fb:4b:6d:6c:3b:87:f7:
                    8e:d3:98:ff:9d:82:58:6d:ed:94:b5:95:ea:f0:91:
                    6b:04:e9:ae:65:10:d0:92:1f:aa:58:86:5e:bc:c7:
                    1c:f6:72:f5:27:23:65:97:f5:16:10:2b:b5:f0:a1:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2D:3E:6B:F7:D0:36:F6:5A:43:77:BC:DA:28:BE:25:3D:8E:17:B9
            X509v3 Authority Key Identifier:
                keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1f:37:a3:b3:31:03:6c:5b:cf:ea:96:ae:0d:0f:ec:37:29:
         c9:29:1d:2e:6c:a2:d9:66:ac:c6:59:10:b4:2f:10:21:d8:e0:
         74:f8:dc:b5:0e:e1:33:f4:5f:b6:4b:01:ce:55:ff:08:e2:a6:
         b3:63:a8:7f:50:34:d5:f4:d1:67:b2:b9:3f:6e:e0:59:7b:6d:
         c1:dc:6c:cf:a0:9b:9b:be:a2:a4:a4:8d:c4:73:87:f2:62:0f:
         23:35:ee:2a:62:ac:ce:af:0b:62:0f:0a:bb:ce:01:1c:e0:a3:
         0d:43:b0:96:c2:7a:dc:c9:77:2d:7f:81:99:39:fb:fe:f6:32:
         3c:65:aa:03:b3:68:9f:a5:05:43:19:16:af:36:7d:b4:09:f0:
         ac:cf:09:48:04:d5:38:4a:e0:b1:c9:96:e1:37:24:b7:07:6f:
         c9:5c:86:35:56:57:dd:4e:47:3b:49:5d:16:87:f4:9b:16:25:
         7b:df:2a:4f:c5:c8:1f:d1:eb:2f:ab:70:c1:70:b4:70:a0:6d:
         57:b8:a6:34:2f:20:15:8f:5e:e8:69:2f:72:94:28:e0:08:0d:
         fe:7d:a8:5f:8a:40:94:77:25:a1:5f:03:48:c9:24:a4:bc:ef:
         0a:6c:28:a8:6d:c7:09:3d:a6:89:b4:11:dc:73:5a:d9:0b:2a:
         15:ba:f2:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm0YAov0tFRjIcnCcTCX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD
EygyZjJkM2U2YmY3ZDAzNmY2NWE0Mzc3YmNkYTI4YmUyNTNkOGUxN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIMP/Ls9uPSBfX1aMyzAcmR4qfH8
hCbzcKW9OTFI/68NKeOCa4+4v4/IuMI2vRYrdgzsjFfidQrbgtXPG0mJawIEoOBX
T4SXMvoG1rBvM2toi1Mx2lFa02eASpswkMI2dqoLIBHWfIPVslJ1EXAOoEJxOSqd
otOnUB9Ww5SNaM1m0rEy3Rtw12z5b+5nJ8fKrkpe8fUY6vKhE9ZZxK3jZyRsd7k6
nmG0xkZK8+HCe7YzB4JodYp6MPUGcIVnAU1r/sbKq4x2hRvwlftLbWw7h/eO05j/
nYJYbe2UtZXq8JFrBOmuZRDQkh+qWIZevMcc9nL1JyNll/UWECu18KHzPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8tPmv30Db2WkN3vNooviU9jhe5MB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgR83o7Mx
A2xbz+qWrg0P7DcpySkdLmyi2WasxlkQtC8QIdjgdPjctQ7hM/RftksBzlX/COKm
s2Oof1A01fTRZ7K5P27gWXttwdxsz6Cbm76ipKSNxHOH8mIPIzXuKmKszq8LYg8K
u84BHOCjDUOwlsJ63Ml3LX+BmTn7/vYyPGWqA7Non6UFQxkWrzZ9tAnwrM8JSATV
OErgscmW4TcktwdvyVyGNVZX3U5HO0ldFof0mxYle98qT8XIH9HrL6twwXC0cKBt
V7imNC8gFY9e6GkvcpQo4AgN/n2oX4pAlHcloV8DSMkkpLzvCmwoqG3HCT2mibQR
3HNa2QsqFbrySw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:13:11 2025 by rpki-client