This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
File:                     6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json)
Hash identifier:          JXfSA3OqP8fZX6STCxoSzI+oHcRZ9bw+IcU4gL5zIH4=
Subject key identifier:   72:DC:9E:16:33:C9:59:52:E7:C6:D6:BC:60:52:2E:CB:6C:2D:15:33
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       019B3CB4FCE4D304B1B82F27C0AF937F7CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
Manifest number:          17AC
Signing time:             Sat 20 Dec 2025 17:00:52 +0000
Manifest this update:     Sat 20 Dec 2025 17:00:52 +0000
Manifest next update:     Sun 21 Dec 2025 17:00:52 +0000
Files and hashes:         1: 1vircYxh5-jeyCHncAB4LncMdwU.roa (hash: p5BRJtl/BpjLcefHJhkLBY5nuWy4Hh3HAdTW/vwAKSU=)
                          2: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: NSTg2RYNcMFV8rLfZVTN4JtSKMnC7Mb+Aojnn9vpvd8=)
                          3: 95YGR7GHxoOFHcl2kzYmYoOeSkc.roa (hash: UCf659KnzXrGdW4OTnX0fxXlcLNH7iiMM2EMLxA+qlA=)
                          4: Dfhtm3wnVobQG_cxKx6XV-YuVZ0.roa (hash: J7uIopIFjTtbgOcYcub/DlKdoJsUFsxhBk7dyA8dGqI=)
                          5: EAh3dWPr289o6WyhzUOp_EpUTdg.roa (hash: S3TcKfhPfL287wmxiB3jCkaKknNXhPzw/nzUaFFvi28=)
                          6: EjAka0Nzr4G9YVcHBXCc9BAnD0U.roa (hash: eLHkqv4PZmiqUU7M/MK8SYk9FgiJ3rm/mR9wo1lZiuw=)
                          7: NSnb3tUKAteQgCjg27tPwCtQsow.roa (hash: T1WF6yYvKdtCTApOo5YD7M1OyQOqRaWtXv4eJm96bms=)
                          8: OBs7tOHp2Wjn-4vQjiF3T1Tvdqo.roa (hash: fvlWOqKo6QA1tHDJxdBzRG65QuYwKPujIF/1V8LwtVw=)
                          9: PW-XBbZvdPD9m9eDPj0lHnb6ghY.roa (hash: N1LlPU0OyiEGm15myNdRDTryn/I5VsBGbIp8D8OMHY4=)
                          10: Q5uzwVr3JsqqF1VB2l7NbdL9dS8.roa (hash: gbm+jaDyZ+Up1EHj0sRexII0FFC9U6LrEEr0NdJ6pH0=)
                          11: R_eRE9Hzu0-n3Dhr3fxYVMZlZQA.roa (hash: c/3zxG6m5VgITlAWiDb9QKSgSjQqMCcCy/y2n6uMJws=)
                          12: SF8jPiMK97qA0wUKsSxJ6ujLOVw.roa (hash: o3uOJgGR58qSt76schRzqD9o0OrOy1y9nmZyqIHaek0=)
                          13: Tpzepq58z_aU3I05rjgHZjdSF4A.roa (hash: TQoun3PaU74elifnUAi84oWKWkBYuJXkGa74wDgLRTc=)
                          14: UMdq-Zir5QLhODQ2SocqfK_DdqI.roa (hash: 9KYFi2M0+hDmsmu4CibF8Ie9dS9iTV4W/JOWD9YR8Zw=)
                          15: WfSl-86_mfoIJuScKSbJnl76Jx8.roa (hash: PkkzLM5m04N+NZaQE6iPdMZ6dxz1m5m2zTeTZ1W/PGk=)
                          16: XatCcqLdyXV4mDDXl-bQhtm4cRc.roa (hash: /XWqpMBXURF/ynpvKs9v1yAxYQyLrEGEwYt1l5eri0Y=)
                          17: YLX2PpJC2jdo1UiXusO_3hzsXug.roa (hash: 8rbASZsr6aOYYISGy+IELA0dmKcsLlWy4ooK50nSGCM=)
                          18: _0Fsi7ExnvxZvUlBuBySlQdmmfg.roa (hash: jXEhTPkNTKh8qr7YJI+rU0aZtl6egvKgkBd6i4d7S/E=)
                          19: aZqrjg1nptDw4BL6wn0FWmNJwvo.roa (hash: 6z4ObLCuZw7zfOx69ROq9FyPUpV9T3VmKmi0WDHpUOc=)
                          20: bHy-mIa0N2PUBmcSaAbEEYNgoP4.roa (hash: iverEw7JZB7HHr8v7fULJa+xWlt0LPnIKcpn5P2mNxQ=)
                          21: btDg54MeJbXTPEtxucWKVoxBNaM.roa (hash: H3nemfeenmHgaltlyzaYjSQZrnYMiZ/c/aLfawo+I4k=)
                          22: d4YbeMmWmyXeBM8u68uKWF25nwo.roa (hash: qtZE6RS5BgKCqE6kopMvxaMLNpxuumjautrXypOIQx8=)
                          23: fIseoNpXyoIbe5wY0lSbaSP_4ic.roa (hash: mEMZgq2Ul7pASwqN+Q04bUDJ1OmP5qgM6LAFHmZqdn4=)
                          24: p9dINsaBxRj5ZfheZSHkUAbJr64.roa (hash: jntmT3waIC3WBZyzqGqLNCzc/4GI7KD2z6eLdZU4TJY=)
                          25: pGvZFqdJfVwAhNj34rEhjtwcqqs.roa (hash: xskFCPdKZw/j4SJCIetQoQZeZl6kQRAE9JdBqHbYOdY=)
                          26: pbTTnCLOLIjCLVBstBODbiFmGmw.roa (hash: 8YkIamAbQU3NMaTjWNl+EcrwO/p3qlC0IxQhIIQUrsg=)
                          27: z6yT1q0T7LBqZpy9PTiWdAbhrhU.roa (hash: n5dOrWVGmQ/SZ7Maa9/Hdiv5+rDt72g8LPCctbA9zS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:b4:fc:e4:d3:04:b1:b8:2f:27:c0:af:93:7f:7c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Dec 20 17:00:52 2025 GMT
            Not After : Dec 21 17:00:52 2025 GMT
        Subject: CN=72dc9e1633c95952e7c6d6bc60522ecb6c2d1533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:a9:15:49:5e:73:04:cb:30:d2:39:e6:39:
                    1b:fb:61:c1:15:de:11:d6:6b:9f:bc:76:3d:b3:fd:
                    91:57:78:78:88:06:09:60:47:ed:fa:4f:06:56:04:
                    3e:79:e2:9a:71:65:5c:62:06:5d:47:91:a2:ff:1c:
                    8f:e7:c0:e9:c7:ce:02:1d:a6:9a:de:3d:e4:47:39:
                    2c:75:02:6a:59:cf:05:3d:81:aa:88:8e:82:11:d3:
                    30:69:c3:cc:ae:13:97:9e:55:33:01:03:d6:4e:e8:
                    87:5b:56:d6:d5:88:fe:8f:45:a5:ea:e5:80:60:fc:
                    09:d5:9e:16:0d:21:1a:aa:83:16:2a:5c:2a:78:a1:
                    97:2e:0e:ca:cc:6e:08:64:51:fb:e3:24:75:ff:62:
                    d1:80:b2:e4:d9:0d:8f:6d:4a:cb:46:84:cf:4f:4e:
                    fd:b7:22:30:ff:b9:61:61:6b:54:4a:87:5d:6c:43:
                    ab:f0:ac:2a:42:c2:b4:66:a4:2e:9b:6d:64:62:f3:
                    56:dc:c1:5c:a4:a9:36:f2:4f:4f:78:e3:d4:0f:4a:
                    28:68:2d:39:7a:3b:0d:55:bd:0a:20:c4:00:a0:7a:
                    e6:69:f6:07:fc:7e:43:12:95:db:b4:bb:ca:11:c0:
                    cf:3d:51:97:ec:7b:64:c9:79:d3:e3:41:31:b6:f1:
                    82:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DC:9E:16:33:C9:59:52:E7:C6:D6:BC:60:52:2E:CB:6C:2D:15:33
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:cb:0c:b0:a0:2a:d5:7d:58:93:da:a7:44:b5:53:4a:21:db:
         34:16:1f:cf:3d:aa:f6:a1:de:7a:7d:82:93:cb:78:dd:59:10:
         6c:20:6a:bd:8a:e7:ee:06:fb:5b:2c:ce:84:74:8a:ec:b5:14:
         0c:53:45:44:06:95:5d:15:4d:3f:32:b2:72:42:c8:3f:06:38:
         91:06:2c:96:57:e0:ad:3d:44:d6:9d:68:b1:ee:a9:aa:db:93:
         f9:cc:30:2d:77:dc:36:8a:6b:a2:dd:8c:75:c0:b3:4b:d7:4d:
         cd:e1:3e:c1:91:77:e1:70:a3:8d:7a:13:29:bf:0d:f3:65:0f:
         ae:69:15:0b:5d:4c:78:f5:fc:6f:18:c8:aa:11:ad:b3:a2:a8:
         cf:9e:fb:73:6b:97:85:4a:7d:dd:ad:be:cd:89:18:67:dd:2a:
         f2:51:0f:5a:9c:be:74:12:ef:3a:91:46:44:f0:36:6f:d8:13:
         c9:19:75:94:5d:81:34:46:36:8c:b6:2d:21:5e:a7:5f:31:c4:
         da:44:33:81:96:85:04:63:49:1b:c6:67:ff:9f:7f:f5:39:f7:
         9c:fa:c6:f0:6b:fa:69:26:ed:46:ea:39:dd:1a:95:b6:2d:16:
         9a:9c:90:a7:c8:f4:44:34:e1:c9:23:93:42:d8:6d:e1:fc:92:
         0c:fe:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:55:37 2025 by rpki-client