This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File:                     6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier:          b0W0JgkSpX28W3fMly3ED86jqt5b0F843QcwlpJL6B0=
Subject key identifier:   AC:26:5D:8A:61:83:90:DE:F5:65:B9:84:20:65:EB:33:D5:8C:75:5B
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       019B390FE91A88EB7DDE90D44099511D1291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number:          033A
Signing time:             Sat 20 Dec 2025 00:01:42 +0000
Manifest this update:     Sat 20 Dec 2025 00:01:42 +0000
Manifest next update:     Sun 21 Dec 2025 00:01:42 +0000
Files and hashes:         1: 11abjUECt78CI4jG-uBZrzou2to.roa (hash: 1RiuteOkDQKooCQrx3e6Wy4U2IWOs71FVYA/JTBz8O8=)
                          2: 1qiR31b7CdS9Trli9AVTHEeogq4.roa (hash: MOeY3wjDcl6db4aacGkO8F1pX14sP/Futaitk3A7SnY=)
                          3: 2X78Dh7C7IK9HQpIdvex6cBM1zY.roa (hash: wipecr4RWsrjr1LobZ27g68/o0lGoPvjX6FqbG4G5vg=)
                          4: 4xVy8n1nhBpAya1KevWUaTI2tB8.roa (hash: 20aLYH4n1FuIXOWrztzrtcCxRBgx6WLXVkqg5CHqw0k=)
                          5: 52yRIEJtEfgFBpWr58fadnScoJw.roa (hash: YmNixuazA5Vsqwop7vZiylftf51KooRSucAzjd1m6wI=)
                          6: 68M2owrwonGUKTmptsMxSICxvzc.roa (hash: Oa0fedQajgDxkwDeccQyxl6+5J3W6s2tK5cH8eMToVk=)
                          7: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: l/ehLAw/+2CUIE+6p02tADHh6KcEM7PJ0stnrpa41i8=)
                          8: BtaWKpewp0t-jzKE-k6lFnfI0_c.roa (hash: DCOoNIe4oBMll7PycXcrB8Q8Pxkmj5k38ygxgzs+uLA=)
                          9: Ck51eA081sqLICziway3EXtym_k.roa (hash: 2MWWtOANjJSmkcfpJCe5Dn7HPUNug/jW3r3pG5kbs+E=)
                          10: GzCf6eer-0KJGSOeGO_GMefOjZo.roa (hash: JaQqkGT/EuzyZjXMN8QEs56lhsj8e8xWE4PqIQSZNSY=)
                          11: I5RmTjKFYz79KqLmMtO2U-JhAFA.roa (hash: B1+cDeSVZwC0LcfXe39/RIErdfHZS7Ts0F3A1wzPQzw=)
                          12: LMMZZ3U_VXbcFd48owkZmwcU1hE.roa (hash: CfbUK0Fwv8dagnk4QuCJP/+wm0mVrn+IK19LJoG4Pqk=)
                          13: OyEHyocNzfaASvSX9ghIhZoK7Vg.roa (hash: LVpmM0BObmcCqdx4fHr+ScoOKewYgjGRBFNNC7CN86o=)
                          14: SJtR9yDFalD5cZd0JaUHeuQjWF4.roa (hash: o+pZOrweCiX/ZW2TkzQ2pD2uz9mIgJjpPK75RQvDCsY=)
                          15: TY1tMo6tOg_O_qX52JL8Xemg9g8.roa (hash: Bz2CovzXfyyPj3QPdMAOpdOAtHKJmJn5Jkl4FY1jBW0=)
                          16: Uf97m6kYdOXrlHNRhRLKJ5_P1k4.roa (hash: G6Mo4Fb6Yxuyx2Ff+8yi06BQ3oSfvk91WpYQtAwtKvc=)
                          17: VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa (hash: VRDLvebsgzN2IopaBRSitbLUQukOe2HbgDWn6E5mzfg=)
                          18: WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa (hash: PgvSeWtg+mLsxBE/P2tTl00AaGi2pSNp8OAj3D57rx0=)
                          19: WjMtWaWVlsclmFUeATa0Rgoi2JE.roa (hash: aFMptd/iDTRFNCht4XhxbuJoCK35XgXERP97iKChGWA=)
                          20: Wpl0Yt0x1L3KBUxClULYQuLnyT8.roa (hash: K3WptT/yayjU6HHi7nsq5z1bNovUoyWHXAuTPT3IyY0=)
                          21: YrxACLZvZRg2bWV9SPIgfQ7aQBY.roa (hash: n+69ldcsTqnSoYz82PvwpUY1wbaPkzBZbNKCKxXKKXk=)
                          22: bnbO6YG10PCmqlCsmyP50Fd_o4g.roa (hash: FN6GI1Kp7T9KjFIMw11eQNYoSIQT81c+97qaaX9eCCg=)
                          23: btpZBI2XWHAKS63fnL73LqvVNfk.roa (hash: M2QuBhhoZDDE/3+2mzs7vceIBE782dg62RnFjR+wfWw=)
                          24: dx58yh-dSv2JgPIFomDm2gd-Re4.roa (hash: xlQAPIKpbZbxvxscJLu/dA02W65rF8gyeeFSGhxfjxo=)
                          25: iuyN3NwXdsZlXThiwcR0LWVmoX4.roa (hash: 6R/JhKvtjb4C81R377gB5uUKDJijkYxAPU8kK0mmRJQ=)
                          26: tVKsAN2rTN42zUGNS6XPmpZYmYI.roa (hash: hdI/aplbbGIaTBD4tkGNasfJop68VutRTr3fAJnKpNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:0f:e9:1a:88:eb:7d:de:90:d4:40:99:51:1d:12:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: Dec 20 00:01:42 2025 GMT
            Not After : Dec 21 00:01:42 2025 GMT
        Subject: CN=ac265d8a618390def565b9842065eb33d58c755b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:5b:22:1f:93:96:da:51:ae:3d:67:ba:de:
                    2e:8e:f6:9b:74:23:9a:ac:e7:0e:64:74:c6:2c:1b:
                    44:12:d4:88:0c:b6:0a:07:ae:a1:b7:7a:20:8d:fe:
                    08:f0:e5:04:7e:d5:11:33:b2:c8:81:35:81:1c:ae:
                    b2:fb:26:28:87:44:08:99:db:6f:97:c3:20:e7:80:
                    1b:3e:ad:63:ca:ff:52:dc:17:1d:7d:f9:44:a4:d6:
                    72:c8:54:3f:39:fb:63:40:07:80:ad:99:9b:63:69:
                    7a:b5:33:8b:b7:77:bb:d5:e3:8b:a1:5e:7c:f5:81:
                    43:6d:8b:4c:a0:1c:a1:a5:76:a8:5f:5f:50:26:dd:
                    ee:49:42:a7:9a:56:91:fe:a4:66:2e:fe:f8:9f:b5:
                    07:1b:76:2f:f4:b5:e9:98:0a:45:d0:17:0f:73:10:
                    50:08:ad:bf:a4:55:db:a8:0d:d8:40:e9:25:0a:4f:
                    52:b2:1d:21:1b:ce:2c:09:c0:56:3a:f0:b4:d6:5c:
                    94:1f:89:e4:94:c0:09:b3:57:b4:79:ac:97:c7:66:
                    87:92:18:f6:0b:45:27:19:71:b2:e7:79:94:0f:ab:
                    fb:68:d9:d8:90:0b:e6:ee:3e:a2:b8:60:85:ee:95:
                    fe:46:b0:c0:c7:74:28:22:59:44:d3:e0:7f:e7:0c:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:26:5D:8A:61:83:90:DE:F5:65:B9:84:20:65:EB:33:D5:8C:75:5B
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:33:d8:20:01:95:3f:62:da:f9:30:e2:e9:77:fa:cc:5a:66:
         6c:44:f7:60:be:53:51:36:fe:2a:5a:b2:f5:1c:aa:cb:d1:6c:
         cf:47:f8:80:dc:af:ea:09:1c:a0:91:16:d4:4a:01:98:7e:2a:
         65:ea:09:86:83:45:7c:21:4e:22:f4:91:c9:75:bd:ad:47:26:
         89:ec:3a:f4:60:2d:48:64:cc:22:9d:5c:cd:20:87:49:6d:0b:
         85:43:28:9f:7c:a0:26:d5:6f:f0:60:5b:fd:af:2e:01:13:41:
         20:e2:ba:4d:ae:02:12:e6:40:d2:43:21:b0:38:b9:89:84:dd:
         08:38:55:eb:c3:1f:6f:ce:41:db:05:ff:99:fb:fb:f8:ef:b0:
         be:b5:9a:f7:68:67:35:fe:f0:b7:fc:c7:9a:a5:38:fb:31:68:
         6b:53:3e:23:ca:bc:00:ba:d8:93:6f:32:8f:cb:ba:29:c7:f1:
         19:65:62:57:65:a6:51:65:b6:c1:6c:3d:96:b7:4c:d7:0d:19:
         d3:bc:52:e6:e3:da:ed:95:69:bd:56:49:72:a8:d4:86:61:d5:
         5f:b0:a0:2a:eb:0b:14:35:3d:1d:2e:f4:f4:ab:6a:f9:ec:a3:
         bb:75:f3:67:f4:84:24:04:1f:a9:76:82:71:3d:cc:68:78:c3:
         c8:bd:23:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs5D+kaiOt93pDUQJlRHRKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjUxMjIwMDAwMTQyWhcNMjUxMjIxMDAwMTQyWjAzMTEwLwYDVQQD
EyhhYzI2NWQ4YTYxODM5MGRlZjU2NWI5ODQyMDY1ZWIzM2Q1OGM3NTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7tbIh+TltpRrj1nut4ujvabdCOa
rOcOZHTGLBtEEtSIDLYKB66ht3ogjf4I8OUEftURM7LIgTWBHK6y+yYoh0QImdtv
l8Mg54AbPq1jyv9S3BcdfflEpNZyyFQ/OftjQAeArZmbY2l6tTOLt3e71eOLoV58
9YFDbYtMoByhpXaoX19QJt3uSUKnmlaR/qRmLv74n7UHG3Yv9LXpmApF0BcPcxBQ
CK2/pFXbqA3YQOklCk9Ssh0hG84sCcBWOvC01lyUH4nklMAJs1e0eayXx2aHkhj2
C0UnGXGy53mUD6v7aNnYkAvm7j6iuGCF7pX+RrDAx3QoIllE0+B/5wy55QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwmXYphg5De9WW5hCBl6zPVjHVbMB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjPYIAGV
P2La+TDi6Xf6zFpmbET3YL5TUTb+Klqy9Ryqy9Fsz0f4gNyv6gkcoJEW1EoBmH4q
ZeoJhoNFfCFOIvSRyXW9rUcmiew69GAtSGTMIp1czSCHSW0LhUMon3ygJtVv8GBb
/a8uARNBIOK6Ta4CEuZA0kMhsDi5iYTdCDhV68Mfb85B2wX/mfv7+O+wvrWa92hn
Nf7wt/zHmqU4+zFoa1M+I8q8ALrYk28yj8u6KcfxGWViV2WmUWW2wWw9lrdM1w0Z
07xS5uPa7ZVpvVZJcqjUhmHVX7CgKusLFDU9HS709Ktq+eyju3XzZ/SEJAQfqXaC
cT3MaHjDyL0jkg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 03:29:29 2025 by rpki-client