This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
File:                     dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json)
Hash identifier:          nWV3gPYDPfF9eEedTV0dyCecDDXpr+pizKctNTD0TjY=
Subject key identifier:   58:D8:6A:64:A3:CF:FC:8B:3C:70:A4:2D:DE:4E:34:4C:BF:1E:9C:FA
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       019B3B34E8FF1EE6B5833AB1026C1A66B1CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
Manifest number:          17F9
Signing time:             Sat 20 Dec 2025 10:01:21 +0000
Manifest this update:     Sat 20 Dec 2025 10:01:21 +0000
Manifest next update:     Sun 21 Dec 2025 10:01:21 +0000
Files and hashes:         1: 0Z8yTYlKjkqvKh6kY-kM6OXYfz8.roa (hash: fwm0Gtt1RFKV50/Ms+CgVe/rwlPJ9Q3VLzTFIW1v2aw=)
                          2: 4AhKQoLmAk1YQIBQspZfyfaiu0s.roa (hash: 1kEaOXNNkPEAuTvrZqrQmCGg/Uu08f1ofkHwiva1rBk=)
                          3: 4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa (hash: Xd7f6Is8VkQ7huxtuAE7hUXnUe/NIXlF2TbPODpbZHk=)
                          4: 8xmePB-pGcDcrQ-prX4UP_SBy78.roa (hash: OO9rzem914ccJuV3c6Pdstzz47bnogLMsoJtrFTJhQo=)
                          5: 9nwJkf06ywYV97ycnHX8xephiLw.roa (hash: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=)
                          6: G1nDGEYcV0zuKzKuOXzDx75r3GI.roa (hash: 41u/KL+MWJdDf84HJGznj8QmpQB0mJMrGBzkwlxjtIc=)
                          7: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (hash: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=)
                          8: JPWgfoIicBY7uqLCE-abW2DSU0c.roa (hash: A927JecYLMujCKzkMKtyVfZVMSoezFJjSy/bYsYd8SE=)
                          9: Kvx3aMKyyHxozL3U3ap2oLWDca0.roa (hash: Zz8Vm/BEn2VlT/RjADj2XxnM/3K7+ZuLbhNPkP9kcOQ=)
                          10: LMdQpYE9dBNTzanGIqV59og3G5Y.roa (hash: O9iBbYU6FJx61oOEQm4eZUxrBSFdJBoBF1RZ/jgTxRE=)
                          11: M7UMw75zEMferpyTZliqTtxFYGw.roa (hash: bhGEILsyYzSvD2gGTZix+BRHPPr9Z15A13HndBQFJh0=)
                          12: TQNP6hoAf66GZWfHy5k78DAiiCU.roa (hash: uABddS+djXpmQc7iz2KFGbyJ5oeYnTC/ey9Ec918mow=)
                          13: UMHCyN1PhpnvoYUbs1CT_48YLGk.roa (hash: i765qk64qL4Uog5FTQxpy5y2jivRwNCYq0ub5NcQaLk=)
                          14: UX21t3Eucdp3Z3xzsP-3n91_r9g.roa (hash: ZavW4AA+x7nFJ2Pn5B6nZ5RKsCyjyFrDNIaHmQXMEn8=)
                          15: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (hash: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=)
                          16: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (hash: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=)
                          17: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (hash: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=)
                          18: YUDnmz9puMgyWvhGgB34ZjiStI8.roa (hash: E+a3GmwZUOvycUf/ZwJRfa9qdpqQAYTsooVUVM9aAeU=)
                          19: YmJQTVDgl6pT6ifoZvYr6OgSo-4.roa (hash: IEA1sge5kazioWkKzPv9VfD2BEf9Xg5te8xiJRghijI=)
                          20: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: /TSIBJqqXI+j14R/RAnqB8BofCb0pZj9oXt/747JOQs=)
                          21: dc2g-kIH50S7LA2o26AVsv4LItA.roa (hash: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=)
                          22: hbkDGu-27NQwuA34KKvsthuBpoc.roa (hash: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=)
                          23: iHslhtFiuKaugZuIjgDSTM4F6Sk.roa (hash: 43DehRvyD4BSrfqUpPUdy+zsjmfPk1hQcSdYylB1zpo=)
                          24: jJYsZg4wnTyX9mV0JNA_riAb8aI.roa (hash: 2YSmon6Fik8vSjQAeDBGETPmH22iZ7Gu1aYziQraG2Q=)
                          25: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (hash: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=)
                          26: kMJn1HheqQ9Rsacjsd3PZ6CXhTk.roa (hash: QHx3y/n5TxjTD6iBbFsTYJr5O+YrfK0OyTuVkyzqTiI=)
                          27: lkYJ-_nXwt_j8sYXcXEPI8XjVSs.roa (hash: H5A3LLoCNjemShwdfzZoOLg2oRcQfw/qyX1Up4Fug7w=)
                          28: m095Z-7KR0K5gXucbWhKiz12Uqg.roa (hash: pKKUCvxcyqiDYUVY3jhLgvu4uMJ7RTYnDW2HPLpWkkY=)
                          29: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (hash: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=)
                          30: nyslHXPfyz0FM3udFOE-7tndyMk.roa (hash: gPoCAQJEwCTv4wbyGKoKpT/fwNV2im1/jc8HR0EwRAo=)
                          31: oEbBV7xx5_jwLtoklKva4-Dg2v8.roa (hash: i+aaCmiUXCVg0OPcM0SwO92pJsKLDZGoxx/fXdMrMgQ=)
                          32: oQY8Ggs-WHGozgLdlzn62PGvTmo.roa (hash: Rm3b27WZnppZmsClSvXbSesr4c+ogRwCEVrSLNbiwvA=)
                          33: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (hash: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=)
                          34: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (hash: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=)
                          35: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (hash: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=)
                          36: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (hash: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:34:e8:ff:1e:e6:b5:83:3a:b1:02:6c:1a:66:b1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Dec 20 10:01:21 2025 GMT
            Not After : Dec 21 10:01:21 2025 GMT
        Subject: CN=58d86a64a3cffc8b3c70a42dde4e344cbf1e9cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:b6:7a:c9:64:db:44:d9:0f:f6:28:60:db:
                    8d:cd:cc:46:60:43:c1:41:18:99:9e:26:b2:62:af:
                    a3:09:64:34:a1:37:93:f4:96:26:d7:92:f2:ab:49:
                    47:a2:ca:c2:ad:2d:15:22:b6:96:f9:81:fd:9e:0a:
                    75:df:32:45:b0:42:60:e3:bb:80:a1:d3:a1:e3:f5:
                    0b:cd:66:15:7f:15:3a:9e:71:61:58:6c:04:86:e0:
                    67:50:51:6e:fe:90:95:f1:de:1a:d9:4a:81:6f:7b:
                    e5:c3:3e:7d:ca:85:96:cb:b3:7d:7d:af:ba:03:a1:
                    87:60:db:e2:8d:82:3f:7d:94:41:57:d2:53:e4:25:
                    ad:e4:af:56:8c:9b:f9:10:70:d6:93:67:ad:23:c1:
                    6b:0b:be:d4:ff:ba:a3:ee:87:d2:a3:ad:10:d1:e2:
                    61:97:f4:74:eb:ca:fb:72:7e:07:09:53:a6:4e:d5:
                    31:de:f7:41:09:37:60:e2:e1:89:1c:43:76:53:7d:
                    f4:70:c3:64:9e:b3:cf:46:06:95:76:c9:a9:39:99:
                    3b:76:c6:5d:b7:23:8e:58:67:23:15:3a:d0:17:23:
                    09:be:6e:c7:50:e2:39:91:60:1b:05:55:a8:54:0a:
                    63:a7:23:87:92:1a:ee:44:a5:d5:5c:1b:27:77:28:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D8:6A:64:A3:CF:FC:8B:3C:70:A4:2D:DE:4E:34:4C:BF:1E:9C:FA
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f9:4c:0d:75:1c:8b:cc:29:ec:b9:83:db:fb:19:15:90:c8:
         88:05:90:33:6f:dd:9d:4f:9f:1a:83:ad:5a:63:00:11:75:ea:
         9c:aa:88:f7:93:27:fa:72:68:98:2c:f7:66:31:82:80:cb:fc:
         09:f7:f4:ab:ed:d5:0b:61:bb:c5:86:f7:d3:08:04:ef:fd:9f:
         3b:78:25:15:2a:17:db:c9:b8:be:9e:e4:c4:70:77:7c:78:18:
         4a:5e:6d:d9:a7:1f:f6:51:98:6e:30:57:ca:aa:ed:a1:15:c9:
         70:41:2e:08:a7:9e:a5:de:73:b6:6e:d5:66:9c:89:d4:37:72:
         21:e1:32:f3:d1:a4:ff:6d:f5:c1:f2:34:47:2d:c8:ec:c7:e5:
         d3:76:e4:ed:27:22:b4:28:af:79:22:19:18:27:d8:04:13:27:
         d3:49:da:26:3c:d3:17:c3:ab:c2:e0:23:05:be:80:28:70:dd:
         04:1c:48:d5:da:37:5c:09:28:06:8d:77:c2:ea:e4:70:8c:28:
         0b:cc:0d:85:b5:a8:85:3b:3d:56:c0:bd:09:a1:5e:f1:0c:22:
         d0:1d:24:78:b2:4a:52:bf:75:a8:2b:45:b0:6c:5e:90:7d:78:
         76:6f:77:35:2d:fa:d4:48:da:63:63:8c:be:34:00:f5:75:49:
         26:a3:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:25:00 2025 by rpki-client