This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
File:                     6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json)
Hash identifier:          +Be5NyHUT5+6OkaQMcqLQO4IJF106C6IqPOeLHAkm7M=
Subject key identifier:   CD:87:BF:89:2C:2A:2E:F5:2A:08:99:5D:51:1E:25:8A:59:3B:11:8D
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Certificate issuer:       /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial:       019B5FAE9F984AD9323F1101D56267F240BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
Manifest number:          17A4
Signing time:             Sat 27 Dec 2025 12:00:38 +0000
Manifest this update:     Sat 27 Dec 2025 12:00:38 +0000
Manifest next update:     Sun 28 Dec 2025 12:00:38 +0000
Files and hashes:         1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=)
                          2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=)
                          3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=)
                          4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=)
                          5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=)
                          6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: 0fmygK4hZknATvVLmdWWT5lsUD0bGwhKxIQ4KODj5Os=)
                          7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=)
                          8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=)
                          9: 9nB9xptebm_yqovp27eMXwv2Kj0.roa (hash: A6LbvNPZp+pkrahA14ukMartOC6uLxnoJIQUTgrBExQ=)
                          10: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=)
                          11: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=)
                          12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=)
                          13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=)
                          14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=)
                          15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=)
                          16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 08:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5f:ae:9f:98:4a:d9:32:3f:11:01:d5:62:67:f2:40:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
        Validity
            Not Before: Dec 27 12:00:38 2025 GMT
            Not After : Dec 28 12:00:38 2025 GMT
        Subject: CN=cd87bf892c2a2ef52a08995d511e258a593b118d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:f9:87:54:47:8d:8c:32:0a:5a:eb:31:18:
                    1b:2f:fe:17:67:d7:0a:8c:a7:7f:64:f9:07:90:18:
                    e5:f4:42:02:a4:b7:22:10:44:44:78:05:9a:d8:af:
                    78:4c:6a:e2:4a:d8:5e:bf:92:f8:59:c6:07:5a:c5:
                    1e:71:5f:cc:be:4d:9f:29:d3:9e:dc:1d:60:61:98:
                    e9:6e:08:d3:74:a5:20:e7:14:96:6d:52:00:7d:3b:
                    c7:e2:b6:57:4c:44:e0:b3:1a:e3:5e:e7:83:e0:8e:
                    02:39:cc:02:64:71:6f:b2:9b:93:aa:fc:27:d3:86:
                    50:d8:f6:e8:7e:26:95:8e:d2:c6:f3:e8:7c:d5:84:
                    f2:98:f1:09:5b:ad:c2:05:84:f1:15:28:bc:08:cd:
                    f6:f9:66:04:99:fe:33:f2:76:f6:9f:42:a4:2e:4d:
                    42:63:d4:11:b9:2b:b4:0b:f2:3f:1c:06:df:55:d6:
                    9a:cd:61:97:8a:d7:f1:fb:8e:06:58:04:67:1d:33:
                    08:d4:24:92:61:80:50:18:0a:5b:ec:43:10:70:4f:
                    9d:c6:06:25:6e:e0:47:81:34:0a:ef:28:b5:9a:75:
                    8b:ee:cc:26:15:24:e2:45:6c:a0:90:29:3c:c4:09:
                    67:bb:c4:d6:a3:83:65:ba:76:39:28:86:7f:74:f9:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:87:BF:89:2C:2A:2E:F5:2A:08:99:5D:51:1E:25:8A:59:3B:11:8D
            X509v3 Authority Key Identifier:
                keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:96:d3:31:d2:39:40:e0:09:ab:3f:56:3c:ce:05:89:4c:98:
         9a:a3:2c:53:c3:c7:e6:f7:d9:8e:b5:03:63:95:97:39:28:03:
         63:6b:17:e4:88:31:50:82:6b:7c:27:df:c9:91:68:b6:e6:81:
         ad:a6:4b:f7:8e:b2:91:1f:a0:f5:85:15:15:c4:31:4f:8e:fd:
         96:54:4b:a1:b8:a3:f0:3c:81:31:d1:eb:33:ca:a9:53:6d:96:
         9e:9d:8a:38:ef:9f:e5:4d:41:6f:33:0c:7b:46:90:0d:35:45:
         ed:67:fd:e7:f9:72:fa:a7:6f:a1:53:54:b8:16:b5:c3:a6:7c:
         a8:02:86:28:01:c1:3d:d5:54:cf:f5:60:55:2e:17:00:c1:f0:
         5c:6e:70:c2:e1:61:05:6d:cb:b5:1e:ef:2c:85:46:62:4f:af:
         bf:e2:4c:fc:4c:e8:34:36:1b:96:0d:7c:ae:fd:fe:17:04:6c:
         63:48:e3:7b:9a:28:a2:47:b7:05:c8:9b:65:d5:7b:42:9c:7c:
         02:72:9e:fc:26:28:03:eb:a1:d7:39:14:28:f1:dc:56:1b:a4:
         f1:13:68:20:41:6e:be:de:00:82:0e:24:cf:b2:81:39:45:93:
         31:17:ae:21:eb:b2:47:3f:49:a1:8c:7d:a1:90:c7:d5:38:2b:
         a2:81:d2:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtfrp+YStkyPxEB1WJn8kC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5
NGM1ZjIwHhcNMjUxMjI3MTIwMDM4WhcNMjUxMjI4MTIwMDM4WjAzMTEwLwYDVQQD
EyhjZDg3YmY4OTJjMmEyZWY1MmEwODk5NWQ1MTFlMjU4YTU5M2IxMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw35h1RHjYwyClrrMRgbL/4XZ9cK
jKd/ZPkHkBjl9EICpLciEEREeAWa2K94TGriSthev5L4WcYHWsUecV/Mvk2fKdOe
3B1gYZjpbgjTdKUg5xSWbVIAfTvH4rZXTETgsxrjXueD4I4COcwCZHFvspuTqvwn
04ZQ2PbofiaVjtLG8+h81YTymPEJW63CBYTxFSi8CM32+WYEmf4z8nb2n0KkLk1C
Y9QRuSu0C/I/HAbfVdaazWGXitfx+44GWARnHTMI1CSSYYBQGApb7EMQcE+dxgYl
buBHgTQK7yi1mnWL7swmFSTiRWygkCk8xAlnu8TWo4NlunY5KIZ/dPnFEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2Hv4ksKi71KgiZXVEeJYpZOxGNMB8GA1UdIwQY
MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt
NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4
LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpbTMdI5
QOAJqz9WPM4FiUyYmqMsU8PH5vfZjrUDY5WXOSgDY2sX5IgxUIJrfCffyZFotuaB
raZL946ykR+g9YUVFcQxT479llRLobij8DyBMdHrM8qpU22Wnp2KOO+f5U1BbzMM
e0aQDTVF7Wf95/ly+qdvoVNUuBa1w6Z8qAKGKAHBPdVUz/VgVS4XAMHwXG5wwuFh
BW3LtR7vLIVGYk+vv+JM/EzoNDYblg18rv3+FwRsY0jje5oooke3BcibZdV7Qpx8
AnKe/CYoA+uh1zkUKPHcVhuk8RNoIEFuvt4Agg4kz7KBOUWTMReuIeuyRz9JoYx9
oZDH1TgrooHSTQ==
-----END CERTIFICATE-----
Generated at Sat Dec 27 15:59:19 2025 by rpki-client