This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
File:                     iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json)
Hash identifier:          xzWqO45uisq9ZyBt9ZABrRsyTu72U/OC/hs7wRgBD0c=
Subject key identifier:   6C:97:71:C6:45:93:BE:C9:49:3F:0B:29:57:72:36:20:78:8F:37:D1
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Certificate issuer:       /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial:       019B38A2005D318A5B8DCCEB5167C006BAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
Manifest number:          17B3
Signing time:             Fri 19 Dec 2025 22:01:39 +0000
Manifest this update:     Fri 19 Dec 2025 22:01:39 +0000
Manifest next update:     Sat 20 Dec 2025 22:01:39 +0000
Files and hashes:         1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=)
                          2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=)
                          3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=)
                          4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=)
                          5: I0JGk-vn4UlNwWznZgHQdvnCeHs.roa (hash: G/0kozk2QW1ygCyJusGL2SPSHBkcGDwXRq8941RZcrk=)
                          6: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=)
                          7: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=)
                          8: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=)
                          9: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=)
                          10: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=)
                          11: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=)
                          12: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=)
                          13: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=)
                          14: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: TDmS6/X808LDQRhI9xjCOYlCPF0k5Tpj73ICJCVod3c=)
                          15: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=)
                          16: p0veRdP0JvJvQmVsHebDlIAh9qg.roa (hash: ssgC4cmF6XkCdvwuhctAFAo9nU5G3XhQhCNdG/OjlGM=)
                          17: t9cMUxvikbT-puwHblOe9z97QHQ.roa (hash: r/s40Ua5KoUJDVObSaE57ggRULCLKWYn/PjeYW7Wd/k=)
                          18: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=)
                          19: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a2:00:5d:31:8a:5b:8d:cc:eb:51:67:c0:06:ba:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
        Validity
            Not Before: Dec 19 22:01:39 2025 GMT
            Not After : Dec 20 22:01:39 2025 GMT
        Subject: CN=6c9771c64593bec9493f0b2957723620788f37d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:da:bc:50:ab:8e:16:b5:13:40:95:6a:cc:fd:
                    c5:7d:03:25:d4:b1:32:9c:0b:d8:c4:3b:f6:8b:32:
                    15:f0:d3:af:34:39:08:54:8e:d8:8c:28:4e:be:4a:
                    bf:5f:c1:cb:a6:dd:4f:59:96:39:b3:a1:da:62:1d:
                    50:24:d3:a6:eb:38:18:9e:52:0f:0a:cc:b5:56:bb:
                    95:f9:59:80:31:57:59:12:a5:09:cd:41:07:c7:5b:
                    f0:d9:77:77:44:7a:eb:74:a0:af:82:e5:df:24:5e:
                    e4:8f:5c:00:b0:ce:72:b4:c5:93:fe:a5:69:b5:be:
                    ed:b6:9c:b1:52:24:6e:c6:c1:f3:98:b1:93:b4:7f:
                    08:88:6c:8d:37:b0:5f:fb:2d:78:e2:c6:9e:61:27:
                    9f:91:f2:7b:88:a4:93:3f:06:58:59:d4:97:bb:e1:
                    90:4f:4b:99:7d:88:bd:31:63:9f:2a:7c:ae:22:ea:
                    72:78:ef:23:b1:9e:12:9f:f1:4a:a9:83:a3:df:85:
                    69:15:01:ae:ff:e2:15:6d:f7:6d:26:a0:93:90:c8:
                    d7:58:69:d4:70:bc:c5:48:1f:c8:c9:cd:f4:5b:30:
                    e2:26:d3:20:9c:74:fc:5c:97:37:f4:bc:d1:b0:03:
                    14:ef:8d:aa:89:40:c7:d1:5d:96:45:60:f8:66:f1:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:97:71:C6:45:93:BE:C9:49:3F:0B:29:57:72:36:20:78:8F:37:D1
            X509v3 Authority Key Identifier:
                keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:5b:15:83:a8:aa:23:14:5f:aa:09:00:cd:19:29:4a:de:
         1f:6d:74:e7:81:12:68:12:3b:c4:db:07:74:c3:46:2c:1a:c2:
         1b:b3:f5:8d:d3:62:f9:a3:ec:20:88:8b:82:55:5a:2e:25:71:
         c9:b3:8b:32:ba:61:fe:cb:c3:c3:86:f5:cd:8b:5b:c4:98:89:
         ac:4d:e0:e0:2c:9b:cc:a9:1f:e3:bc:c8:a1:4e:20:75:51:c5:
         f6:7b:51:b5:a1:b4:05:67:94:c3:61:c9:97:17:18:66:52:fe:
         b8:15:07:b6:e4:21:1d:2f:80:a7:da:74:bd:ff:15:b8:1c:42:
         2f:e5:6a:7d:ba:48:c3:d9:1a:f4:a7:70:1a:01:2a:9c:0b:74:
         bb:02:69:c3:b7:2e:4c:6c:1b:9e:5b:12:3d:b8:47:62:c4:0f:
         9b:af:9a:fb:cb:48:cd:98:7a:ae:bc:9b:b3:21:a9:50:ab:54:
         12:48:68:18:2a:e0:d7:65:0b:50:df:51:d6:ef:00:0a:82:db:
         1e:a8:ea:43:d4:41:8a:ba:3c:87:6f:d5:01:32:56:a2:f2:46:
         d8:09:87:d5:b0:6d:c6:12:42:02:3a:1e:b1:1f:99:ae:6a:81:
         e0:13:2a:f3:78:d0:38:04:aa:1e:46:03:94:8e:ea:e6:8a:46:
         2f:d3:34:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:47:05 2025 by rpki-client