This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
File:                     ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft (raw, json)
Hash identifier:          /nrGlQzGTBwpJuoL5SWtiIkdL2+4AoDCvSz2CICYs8I=
Subject key identifier:   A9:D8:75:56:EB:DC:D3:F3:4B:8F:40:9F:08:26:2F:36:D6:18:91:8C
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Certificate issuer:       /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial:       019B2B8A2A94EF7C59EAE13E3C357257511B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
Manifest number:          1780
Signing time:             Wed 17 Dec 2025 09:00:33 +0000
Manifest this update:     Wed 17 Dec 2025 09:00:33 +0000
Manifest next update:     Thu 18 Dec 2025 09:00:33 +0000
Files and hashes:         1: EaL6Ix0Eou0QDLjCzFWl0ew8laY.roa (hash: yuhNShNhzz/MaGAXuOUPcECRlpw6IKQvZBq5XeXjSxM=)
                          2: MTEEbTxLhwcmIFVyPc3_83L2SWM.roa (hash: pPAVTHjE82w53qTWAl4KRukHgVB0WjzGZSXqRTGTWY4=)
                          3: gIOaHcti7t355LnXTtGCztKWtS0.roa (hash: Cn1RCEjcCDtykL3i8BWxXer7cpYHt86vURgQOr3lUzo=)
                          4: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl (hash: lTjJ9cBvr7HR+Ez5VSpm5UqTxUpEAuMyT9hI7yVdnio=)
                          5: xmPH32QYxN9sQH_6cI7fXoqHUEs.roa (hash: 1zn6wk2gZUPdlnR+sqdNWEYJ3GwxThzty4kNMpAjtSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:8a:2a:94:ef:7c:59:ea:e1:3e:3c:35:72:57:51:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
        Validity
            Not Before: Dec 17 09:00:33 2025 GMT
            Not After : Dec 18 09:00:33 2025 GMT
        Subject: CN=a9d87556ebdcd3f34b8f409f08262f36d618918c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:82:9e:c8:d7:b1:0d:65:f8:bd:53:c3:29:
                    81:75:7e:51:58:b6:bc:a3:eb:fc:86:c2:29:51:53:
                    02:bf:14:b0:62:f4:6c:88:cd:aa:b1:cf:8d:7b:bc:
                    aa:57:4b:06:98:5a:76:03:96:86:e6:55:e5:29:7d:
                    d5:e2:5f:10:b6:eb:5e:7b:8e:4d:b3:1f:e5:15:7a:
                    7b:1f:d8:78:d3:71:6a:65:9c:6d:f1:17:e8:bd:0c:
                    c7:9e:60:96:69:f3:40:d8:3c:df:2a:ef:2c:1d:43:
                    1e:e7:c6:bb:62:cb:78:d9:84:e6:17:e7:7d:19:61:
                    c8:f2:da:96:f8:0d:a5:5f:56:7b:0f:3d:d0:c6:ad:
                    4e:d0:d6:ae:d1:8e:2b:42:51:17:64:e8:a4:b2:82:
                    bf:e2:96:3c:5f:d7:dc:02:b2:06:5c:a7:e3:bb:33:
                    1a:3a:1e:15:40:12:27:78:e1:c4:e8:ac:d8:bb:a5:
                    3b:81:9a:32:22:3e:7c:7d:0f:37:57:9c:7e:98:aa:
                    dc:87:0f:2d:35:0b:33:ab:fa:29:86:06:58:2b:3c:
                    f5:98:91:3c:25:3a:a6:02:e4:61:f9:a7:82:a3:f2:
                    f4:20:9c:01:22:8b:03:e4:ad:ed:84:46:49:7a:1f:
                    e9:fd:bf:a0:15:10:97:64:90:64:7a:bf:7e:9e:e9:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D8:75:56:EB:DC:D3:F3:4B:8F:40:9F:08:26:2F:36:D6:18:91:8C
            X509v3 Authority Key Identifier:
                keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b5:b7:c7:0f:ec:37:13:cc:13:b4:2c:ee:c8:19:c3:2a:76:
         a6:92:ea:ae:e1:dc:69:67:05:7e:10:67:4e:a4:23:7a:1e:85:
         1e:fb:56:23:1c:ba:9d:e7:a8:b7:af:88:74:bb:ae:58:bc:c2:
         2c:cc:9e:50:a3:33:32:14:0c:de:cf:ba:f9:b4:ce:cd:94:6a:
         0e:9e:f2:66:f7:f4:2e:e9:37:81:a4:86:41:02:b2:57:6c:52:
         05:8a:2f:30:43:9c:44:3d:d8:66:74:53:dc:a3:a8:34:c9:9a:
         7a:cf:24:14:9e:55:00:a7:73:2f:29:ba:4b:70:a7:1b:07:dc:
         a5:52:47:9b:e5:58:8e:92:87:99:5f:3e:0d:d8:69:65:91:5a:
         d4:a4:ee:0e:ba:3b:9c:20:a5:51:b4:8e:70:2d:7c:61:90:c3:
         cd:25:25:a2:6c:e1:b5:e8:3c:02:6c:a9:de:a8:9a:f2:f8:28:
         83:99:80:6a:bc:fe:b3:91:29:eb:1e:6c:c9:05:e5:dc:87:d2:
         86:d4:8f:ba:0d:0e:c8:b0:a1:f5:4d:64:58:ba:66:0d:46:e8:
         66:a3:56:eb:dc:87:5d:b6:84:14:89:ce:01:80:2d:03:5b:90:
         80:44:bf:d4:45:68:93:95:b2:7f:0a:77:30:74:f9:71:aa:a3:
         18:1f:7e:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsriiqU73xZ6uE+PDVyV1EbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMmU4MDc4ZWE0MjBhZmMxYTc4YmY5MjJhOWEyZjI3NDY3
OWM4YTgwHhcNMjUxMjE3MDkwMDMzWhcNMjUxMjE4MDkwMDMzWjAzMTEwLwYDVQQD
EyhhOWQ4NzU1NmViZGNkM2YzNGI4ZjQwOWYwODI2MmYzNmQ2MTg5MThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nOCnsjXsQ1l+L1TwymBdX5RWLa8
o+v8hsIpUVMCvxSwYvRsiM2qsc+Ne7yqV0sGmFp2A5aG5lXlKX3V4l8Qtutee45N
sx/lFXp7H9h403FqZZxt8RfovQzHnmCWafNA2DzfKu8sHUMe58a7Yst42YTmF+d9
GWHI8tqW+A2lX1Z7Dz3Qxq1O0Nau0Y4rQlEXZOiksoK/4pY8X9fcArIGXKfjuzMa
Oh4VQBIneOHE6KzYu6U7gZoyIj58fQ83V5x+mKrchw8tNQszq/ophgZYKzz1mJE8
JTqmAuRh+aeCo/L0IJwBIosD5K3thEZJeh/p/b+gFRCXZJBker9+num3UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnYdVbr3NPzS49AnwgmLzbWGJGMMB8GA1UdIwQY
MBaAFJMugHjqQgr8Gni/kiqaLydGecioMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODkt
MzRiYTA3MzhhMzQxLzEva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODktMzRiYTA3MzhhMzQx
LzEva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrW3xw/s
NxPME7Qs7sgZwyp2ppLqruHcaWcFfhBnTqQjeh6FHvtWIxy6neeot6+IdLuuWLzC
LMyeUKMzMhQM3s+6+bTOzZRqDp7yZvf0Luk3gaSGQQKyV2xSBYovMEOcRD3YZnRT
3KOoNMmaes8kFJ5VAKdzLym6S3CnGwfcpVJHm+VYjpKHmV8+DdhpZZFa1KTuDro7
nCClUbSOcC18YZDDzSUlomzhteg8Amyp3qia8vgog5mAarz+s5Ep6x5syQXl3IfS
htSPug0OyLCh9U1kWLpmDUboZqNW69yHXbaEFInOAYAtA1uQgES/1EVok5Wyfwp3
MHT5caqjGB9+bQ==
-----END CERTIFICATE-----
Generated at Wed Dec 17 17:48:21 2025 by rpki-client