This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          HTE9yQIXHsS/vUyW6fit8iWFtxZ09RSBbqfEb/c8Cug=
Subject key identifier:   58:5C:75:35:C8:12:A3:6D:6F:0D:D2:38:49:71:8E:0B:E2:92:C4:0E
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019AF19A8FAB16A0896F4C3EADFA267BDC2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          1817
Signing time:             Sat 06 Dec 2025 03:00:29 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:29 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:29 +0000
Files and hashes:         1: 0aa8_BKnq_2uEeu2lZ7-yjbtvuM.roa (hash: Ddp/LlQBMX46rH0IPNaZHNYeFIB8RtssPveBvjz8aL4=)
                          2: 1-xc1srblKkWVrQxPbJNDAqQ3mpc.roa (hash: ZzynvVG+bTIyDr7NXUASXUZ28E+DC5j8UwHhzSApKyk=)
                          3: 2a9Z4MiFWUxUqmTNMuUVscHb0hE.roa (hash: gobSMYv3Krt8vXt9XFdC11nQ+nS6jtG46MKfF14gNHU=)
                          4: 4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa (hash: iwJ60t6RgAb6kap7YpqbSewI5ktaDdebMpnk8DNCEn8=)
                          5: 891CpnOYIk69iKnDpiqfcEZzfPI.roa (hash: Cl3FQjh7xo9Vv8l6G/85YiDrEYQtz+6HMhEUm9eKhPA=)
                          6: 8BDwtg4WogHr_t622bk6AZLxHf8.roa (hash: jGu8B7Udmymq+0EP+ky2AfA0GK/9z6xL7Kug80+RJkA=)
                          7: 9hgStchHD6fvUu7MaI3ReZLaWPo.roa (hash: gNkHPXuUrNhImnSBNKFWxQAcOMo7axTMfis85TltsTA=)
                          8: AeRW2IzzHa8sgYjrW7QogaL1WWo.roa (hash: mOgxIrog/AxUhk6U2thPlE/gzaz0gGobQDleoJHGSnw=)
                          9: Al2KaWomFf8GhcORE3K4q4R9IR8.roa (hash: pVm7PEjI3+WRx03gEcy+oA8b2HM+FqL4qCoE1gIpZnU=)
                          10: BT4HTe3oG2Sg-qKbCzfhjsWspIs.roa (hash: tr2IEWG8nbhwgOgVOSWuTH9VHkQ1QiViO3lhhSkyHIE=)
                          11: BqYGoMadTRg3PGzK7Xh_am0n1Go.roa (hash: scY6lS1Giu5fZ5nMiXdTZLdzDy0AADhVUX6qd+QhFlc=)
                          12: FYSyCWfo5Zjk1tVKOpfE2KZczw8.roa (hash: YoIR3hrJMwWnChJUFr3nzw+4wNvFz1FFruFWrR+owFA=)
                          13: JWFrACGqXAEPwk5yERzaH1k3xEE.roa (hash: eRkSlBoh54+iXz4l+cuyt8uCJGHuQx8lExR+xSC6BSg=)
                          14: MgJgYL9l6eKJ0Kmwl4y3YpthS-M.roa (hash: igpzPJYbXYIv+C9ih5BbtSw1dZ2mBgNdp+reY422/cw=)
                          15: Pf8ZT4Y8uAHBJk4IvL6CTiul6Qo.roa (hash: u+Yzk3JpAwQ1sKYO8qin8N8gxyReMldlGNxfGvAoYCU=)
                          16: Pwb-T7CDIcPW5g6EIjv7rI1hOY4.roa (hash: +uQK2AEnqPBoHu/xep/tQLvYp/ULstsLl2Xj5X9veFc=)
                          17: Qvclw3p6GBEwfed15US4eMZDssA.roa (hash: UWEN+eEsjGRM3fqsL5cJc7RQBWKq6NxYbqkBONZx9Ds=)
                          18: RX8x7NBqKqNqrHjY3RrZOIwmw84.roa (hash: qG1pxlwKH3SmnTU8k1NPrDe+8libzJhE26dpkDKjPb0=)
                          19: Ts5s6R-h-7a7r-DkQTNs3dqIoqU.roa (hash: 6FBW+7wKlFhVsfYtAAGEeciTYk/P+FI5nTEi81UvzA0=)
                          20: Vedd31K36BW0FtFdJmgu7RtebZ0.roa (hash: UL6Hnivw/B+oxS5q55F7qNNs7Ynb0wMF1mBZUl4ggtM=)
                          21: XD5lyN3IK2UsJeObMTBY2xot5DU.roa (hash: p5taUYH4AVBdxVLeGOYvbtP0mpvx/YEGj8SIqMDS618=)
                          22: XO4d7Id2G1LEtArZwx3RzEkQ7hg.roa (hash: ogURT2KjU4HTxAtVdIiJTmcqfQTlAEEbsvpDQ/LABsc=)
                          23: X_-XGWHxiyT31XcsVcXztO1CAUo.roa (hash: h9fzXHeF6FN+NnLG9OWfg3VoICXbfHZUao+YO2BeTVI=)
                          24: Y0Jfvglhk12KRlx1qXrTTWIY1ZQ.roa (hash: OojwxcLLBQyxENv/409Gbc8GdADP7z6P1tN7CK7EnwM=)
                          25: ZbzlNVKf1eKK7KiivvZ1QujJRLo.roa (hash: JpHtVBVtqKHMUBQ5w8gmqDV0uY/Xo9NDIUCWtdbcBs0=)
                          26: a5UQ2z1RVywe791ih-JkkJe4oZw.roa (hash: z7MPhCjNypY3ndHfuAxQLWPw6x9rN6BVeFB92z9Vk4Y=)
                          27: aFRiQRnDB9TXgWRRIMtNARzxVn8.roa (hash: hWE8vTVKPZar03SzLtgbIuwLQ05FffNM309Sx4njq4c=)
                          28: avgf1I0MlRwhkwtnvCFBve8cXuY.roa (hash: yaBWkyvgOOxbTnib2Xpd9vJky9B3kYKUvM6dRGhpzic=)
                          29: bHXLulP8CUgt-JCJIqSM8hvlsCA.roa (hash: Mexso3pNidi3XstQ5hR0lM6Sn2w60SPQEvdapeY/VjQ=)
                          30: c8oXwnn5toTWitSJkpA6DmPs01c.roa (hash: 6kqJ5YUqqDHudEG8e5AMvFWmJFH3ql97x6sFaUhLatQ=)
                          31: cdRkB7AVAsaCQza2C6eaLskeEHY.roa (hash: R3X0t9w4kaySZ1sZzxcJ1+mmA7WHRo/nLaZSV1WFUCk=)
                          32: eY6rIV9lpjNtRSgUsbjCu8KRO18.roa (hash: xARunhsXA/apYr93W8PheqPyL4HmYu/zzT8xJmEV+pc=)
                          33: ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa (hash: wC0JV8jUHfPLAhBEwBEM+LxR4vaNiTk9CGptUwCWnjs=)
                          34: k0KEFHW4fL4Ef8MopdylpfXrtX4.roa (hash: b5DhgBm+P5R0/x6SS6V5aLIs9QaubKbpXVVnCYru10M=)
                          35: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: G61oWJMbYP5/kZ5Gr9xCiyj/MPY33Fto9bJT7whzk7A=)
                          36: lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa (hash: BB6MmQH+rCEmTn2b4vV8K++LviBSGKSxEZC17nRtmRE=)
                          37: n7A9iNcydEM0dF7od9K9kn6dOlw.roa (hash: Q9nTEs63rW/GSV52zGEUvJPOGvhBCV1t2N9qF9Q1Hb0=)
                          38: nDXZwdByAxuzdwf0ZXt_ehfSJJI.roa (hash: 4eNmWGzY3LU27cy4MOpIuF5JDu6Bi58le7fddIW+ow8=)
                          39: ujdLXoXrvhVfjksNi3jvUUhxPZQ.roa (hash: M1NGr3Kp/N5WVzCoJ45GNTOp19udI/hDhcVdgHkpFVQ=)
                          40: xh7RSUwiBVANXtMMIBZXlrsg2mQ.roa (hash: TMp3z2IynO2xSEsC3bAli7G13qod/n7CAd4pIOr904w=)
                          41: zEdOf00V8YpbfdbuVh6edhLFxOc.roa (hash: xw2nGcLzNzC2781DBhmqoJCxxw5fW6F+mjQBcvq6T2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:8f:ab:16:a0:89:6f:4c:3e:ad:fa:26:7b:dc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Dec  6 03:00:29 2025 GMT
            Not After : Dec  7 03:00:29 2025 GMT
        Subject: CN=585c7535c812a36d6f0dd23849718e0be292c40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:cd:9c:7c:eb:0c:63:de:ec:92:26:4e:87:
                    ea:01:59:ad:76:eb:69:25:ab:00:e8:dc:f8:61:33:
                    f3:8a:7a:a8:47:72:9c:8a:5c:31:ad:56:17:ba:5a:
                    22:54:cb:9a:1e:80:33:49:a3:eb:49:b6:6e:22:88:
                    b9:88:b7:eb:39:2e:23:0b:ed:38:99:b0:b1:62:59:
                    90:6b:97:80:94:44:96:5d:c5:91:c4:ed:8b:0c:48:
                    de:4f:54:2d:b7:8f:4e:41:2b:7b:bc:92:c7:d3:60:
                    0b:b2:ca:7e:32:91:93:61:a3:e0:38:81:f4:16:e6:
                    99:d8:fb:fb:10:13:5e:29:f1:4f:7b:9b:c3:4f:3d:
                    4f:42:94:42:c1:e9:9f:9c:41:cd:26:8a:f5:b8:fa:
                    df:10:b7:70:cd:4a:61:4b:d0:d2:1f:15:90:51:bf:
                    02:e1:76:08:35:c9:4f:3e:03:c3:53:65:28:e8:5b:
                    d4:29:71:89:fb:1d:78:d2:54:07:e1:2b:c7:fc:0b:
                    dd:63:45:c9:36:d7:d1:5d:04:75:86:a1:ab:c5:4a:
                    f1:0d:2d:96:10:2c:da:6d:68:70:54:3d:bb:17:82:
                    3f:c7:4c:0b:c3:65:d0:26:64:7a:f7:08:e4:8b:8d:
                    50:7f:43:d8:fb:fd:1a:38:b5:5f:34:66:5c:ec:60:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5C:75:35:C8:12:A3:6D:6F:0D:D2:38:49:71:8E:0B:E2:92:C4:0E
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e5:18:87:40:28:79:fb:fe:ce:77:62:51:39:e7:7e:ac:9a:
         94:30:3d:a5:f3:c9:dd:f5:e9:e5:6e:f6:07:12:ef:5b:10:db:
         6b:7f:06:7d:07:99:f0:85:ef:a1:71:23:17:f6:97:c8:bb:4d:
         6b:84:c6:7b:0e:f5:55:ee:aa:83:b8:62:f8:57:d7:ad:83:f1:
         ce:1b:7f:f9:0b:f8:bc:fa:44:5b:5f:09:f5:94:82:ae:cd:ff:
         94:e5:24:ec:d2:6b:4e:3d:f9:5b:24:7a:10:94:86:b2:fe:e4:
         30:f2:ca:4e:20:17:b5:47:80:bb:4f:ad:e6:35:3f:5b:9c:8c:
         fe:1e:a0:d7:43:80:d2:f5:9f:ca:74:f8:d2:de:6a:2c:4f:13:
         7d:de:04:7d:e3:ed:5d:4f:d1:a7:e8:ae:61:c6:a5:a6:fe:8c:
         24:be:a3:85:13:8f:05:57:08:a4:fc:63:42:f8:b9:19:10:b2:
         9f:d8:6e:3f:86:d0:94:f4:ae:43:ec:8d:6f:82:84:80:cb:34:
         eb:8c:ad:95:6c:19:d3:7a:58:46:5d:eb:6a:bc:e5:34:63:05:
         d4:80:36:8c:e2:5f:9d:ff:dc:b3:b6:91:1d:e1:2d:a5:5d:0f:
         c6:89:b5:f0:ee:e5:9d:e4:2d:ff:56:f8:63:a9:88:73:16:47:
         f5:d8:9b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxmo+rFqCJb0w+rfome9wqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUxMjA2MDMwMDI5WhcNMjUxMjA3MDMwMDI5WjAzMTEwLwYDVQQD
Eyg1ODVjNzUzNWM4MTJhMzZkNmYwZGQyMzg0OTcxOGUwYmUyOTJjNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuzNnHzrDGPe7JImTofqAVmtdutp
JasA6Nz4YTPzinqoR3KcilwxrVYXuloiVMuaHoAzSaPrSbZuIoi5iLfrOS4jC+04
mbCxYlmQa5eAlESWXcWRxO2LDEjeT1Qtt49OQSt7vJLH02ALssp+MpGTYaPgOIH0
FuaZ2Pv7EBNeKfFPe5vDTz1PQpRCwemfnEHNJor1uPrfELdwzUphS9DSHxWQUb8C
4XYINclPPgPDU2Uo6FvUKXGJ+x140lQH4SvH/AvdY0XJNtfRXQR1hqGrxUrxDS2W
ECzabWhwVD27F4I/x0wLw2XQJmR69wjki41Qf0PY+/0aOLVfNGZc7GBrdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhcdTXIEqNtbw3SOElxjgviksQOMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeUYh0Ao
efv+zndiUTnnfqyalDA9pfPJ3fXp5W72BxLvWxDba38GfQeZ8IXvoXEjF/aXyLtN
a4TGew71Ve6qg7hi+FfXrYPxzht/+Qv4vPpEW18J9ZSCrs3/lOUk7NJrTj35WyR6
EJSGsv7kMPLKTiAXtUeAu0+t5jU/W5yM/h6g10OA0vWfynT40t5qLE8Tfd4EfePt
XU/Rp+iuYcalpv6MJL6jhROPBVcIpPxjQvi5GRCyn9huP4bQlPSuQ+yNb4KEgMs0
64ytlWwZ03pYRl3rarzlNGMF1IA2jOJfnf/cs7aRHeEtpV0Pxom18O7lneQt/1b4
Y6mIcxZH9dibMQ==
-----END CERTIFICATE-----