This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File:                     izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier:          nDhTPMN0JyxO+49ShrDXO/nCpN8FBYT5pIY+y4FSgAk=
Subject key identifier:   CE:D8:27:41:B5:ED:70:12:B4:E0:6C:5E:CF:8F:96:82:FB:79:A7:F5
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer:       /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial:       019B3C7F9925B3981091176ABA641512AF21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number:          042B
Signing time:             Sat 20 Dec 2025 16:02:33 +0000
Manifest this update:     Sat 20 Dec 2025 16:02:33 +0000
Manifest next update:     Sun 21 Dec 2025 16:02:33 +0000
Files and hashes:         1: 2Jpt_1ySpLb9WRqOyyiYnu_PAIA.roa (hash: MdM/wC7dTry3YHnV8Zu6hFD2x4pd0q3/gDiM/ZzZGdU=)
                          2: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=)
                          3: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=)
                          4: 3dUk2t_pPl5WdUVwPr_SzoQLFsI.roa (hash: PH0lnE0uN3wnc8tlGu7b2U0ixCX+3/LdiDburPkYelk=)
                          5: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=)
                          6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=)
                          7: E9Jwdio8wX_xqnKuXI9fZ_oHtDc.roa (hash: ECAIS90IaPHlQjI+lVlWinjaB8CNUQFfSBH/sS9eBjs=)
                          8: HXbd8YE3koobug8ONVH1l3Tkvu0.roa (hash: coLH6jx8YkTdalarRq46o6EBhv+pN85X5wLOXfVjseY=)
                          9: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=)
                          10: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=)
                          11: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=)
                          12: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=)
                          13: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=)
                          14: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=)
                          15: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=)
                          16: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=)
                          17: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=)
                          18: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=)
                          19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: VeE6+TrgjOjXoj02EcY1lb+gi/eCpqT7acFRIErgTy0=)
                          20: lFi_2CDHgTPSR-Xxo-U5ohxluu8.roa (hash: u4qJFUu2v9DMBJmArLe+Y/Q/WiHYmJsHB3rpShxcurw=)
                          21: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=)
                          22: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=)
                          23: qGrAC8V0MwPDUhgXopiuZtK9w3k.roa (hash: QGRwQP2ZkVZAbpmeLKIkEFdzvxw0GO536GTjtTQacHA=)
                          24: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=)
                          25: uHsUP9ITNumWBnivSrpnKA1c8sk.roa (hash: RggRwkd0IhdYIM5cTJqQm6e1Y1oQR3G4Ep6Nth1HpWk=)
                          26: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=)
                          27: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7f:99:25:b3:98:10:91:17:6a:ba:64:15:12:af:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
        Validity
            Not Before: Dec 20 16:02:33 2025 GMT
            Not After : Dec 21 16:02:33 2025 GMT
        Subject: CN=ced82741b5ed7012b4e06c5ecf8f9682fb79a7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:9f:2e:e0:07:40:b7:f0:df:5e:03:d6:54:
                    b5:60:c1:30:31:33:06:02:d9:29:fa:c4:f8:24:d7:
                    0f:60:0b:94:fe:65:2b:d0:84:e4:39:9f:c6:dc:f8:
                    3d:b3:5b:0e:e0:3a:e8:b7:4c:17:40:a8:51:80:79:
                    f9:5c:93:0d:d9:2b:fd:35:89:f0:59:f5:45:f0:ac:
                    5c:30:7a:39:99:85:df:c6:b4:a8:2b:e8:c6:a7:ed:
                    47:cc:98:1b:eb:ce:40:b6:4f:76:ff:8f:49:22:2f:
                    0c:32:dc:e4:61:d5:fc:62:eb:0e:2f:6a:9d:5e:75:
                    1e:d9:b1:b7:09:22:dd:e2:3b:05:2d:a6:c2:45:09:
                    ad:ca:fa:de:f4:88:3e:ac:dd:eb:ad:fc:37:5d:c1:
                    84:bf:04:53:e8:d6:a3:a0:1d:c7:0e:36:0e:93:bb:
                    41:09:7f:7e:a6:c6:38:1e:ad:3d:84:5b:71:5b:84:
                    96:2a:f1:db:50:6f:7d:32:a0:c0:6b:6e:22:b5:7d:
                    08:ee:0d:8e:2c:83:72:f9:3e:84:a2:04:77:51:56:
                    5d:e5:0f:c0:dc:71:1b:8d:f5:c5:74:87:af:17:13:
                    84:0a:52:81:65:b8:ef:19:b8:93:e9:71:dc:86:6b:
                    ca:25:dc:cb:e5:8a:d2:be:a0:6a:c6:87:7b:e8:78:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D8:27:41:B5:ED:70:12:B4:E0:6C:5E:CF:8F:96:82:FB:79:A7:F5
            X509v3 Authority Key Identifier:
                keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:db:73:ac:e8:0c:8a:49:bc:fc:7f:1b:be:f2:2b:68:0d:11:
         83:43:e9:fa:04:73:70:9b:50:87:ed:ee:f7:4a:f9:88:96:6f:
         2b:dd:50:64:3d:4a:70:b0:2f:57:36:f5:b3:62:2c:0a:a0:a6:
         69:42:6e:25:72:d0:a5:79:52:eb:78:9c:50:0c:ad:05:7e:42:
         ab:2c:57:11:be:a7:50:35:d9:cc:c8:93:b5:25:46:b2:1b:4e:
         b3:1e:9e:8f:7a:d6:e9:54:70:13:e5:c1:08:a7:ba:b3:65:79:
         16:21:93:b0:a3:07:f5:d2:3e:3b:ad:34:b4:1e:f2:37:d9:db:
         8f:0c:a1:f1:9d:03:d0:da:98:01:6f:a6:ca:f8:86:83:04:8c:
         2a:49:af:44:d0:65:bc:3c:99:6d:54:55:e9:e1:1d:02:6b:11:
         ca:5b:e4:4d:58:af:68:39:a6:bb:cc:31:9e:1f:f3:87:11:8f:
         06:29:85:34:b9:e2:2c:cd:65:fa:dc:25:92:ac:68:1d:19:b0:
         27:e3:da:a4:6f:45:dc:69:ef:a0:53:f7:61:e6:f2:80:78:df:
         f9:a0:fd:50:b7:0a:59:af:41:66:6e:df:65:f3:2c:0e:51:8b:
         0d:70:b4:5c:e2:5a:f5:02:8e:f1:43:6c:49:1e:cf:07:bd:be:
         ad:1d:65:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:48:59 2025 by rpki-client