This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File:                     1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier:          g7iJqdSSmXU46yx+RfIxZ6ORYXVJJaTj+94/lKSkQBs=
Subject key identifier:   6D:D7:2E:54:32:76:17:EC:02:C4:AB:24:AC:83:AD:F4:FA:29:72:19
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       019B38A165232DAD05C0D8E2CE8BB85567F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number:          0D99
Signing time:             Fri 19 Dec 2025 22:00:59 +0000
Manifest this update:     Fri 19 Dec 2025 22:00:59 +0000
Manifest next update:     Sat 20 Dec 2025 22:00:59 +0000
Files and hashes:         1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: BIIZneBJcDkzrFbWaN/OIUcr0zoliZid6L6cCcvO6Us=)
                          2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=)
                          3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=)
                          4: MPC4WGBwWzUKQ4MIf9vheq3ljf8.roa (hash: X1yT4PQqSCT8h7K1UyGvzdMze10lM3EBcX0jmIp7dhY=)
                          5: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=)
                          6: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=)
                          7: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=)
                          8: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=)
                          9: bFcZDGbJEt3C25QZpuOG1dcl73c.roa (hash: k66etaeQpibh+6ldsVEJ1epfT/mPN5OS3FzuNI+MZuc=)
                          10: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=)
                          11: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=)
                          12: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=)
                          13: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=)
                          14: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=)
                          15: sUUBdGAF9TJecEG5749G1YWJ5bU.roa (hash: GKDRtzmqCQRfHRzfpLrnvEf31pPDp4sPaetIcigYVig=)
                          16: wz-KZ5KX8jTmXScvr3XeQj04j3I.roa (hash: RxnlIvfwP2SpAoX0QlB2pLFsNqlUFCANi/oFyJ3SgAs=)
                          17: ycORncNA45mJd3RcVB4kkVyYyek.roa (hash: 73ViTZ9duoNfFxXb5BewNjClF8EYFoeTaVe/H//+q5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a1:65:23:2d:ad:05:c0:d8:e2:ce:8b:b8:55:67:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Dec 19 22:00:59 2025 GMT
            Not After : Dec 20 22:00:59 2025 GMT
        Subject: CN=6dd72e54327617ec02c4ab24ac83adf4fa297219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:e5:e0:cf:0f:6c:c4:da:ce:76:9a:4c:18:
                    6b:fe:92:e8:0f:fb:3a:80:3d:94:ef:d1:f3:0c:42:
                    f8:1a:57:0f:9d:8d:07:02:b8:4e:af:33:ef:92:c8:
                    c3:cf:63:02:42:f2:75:15:82:6c:5b:01:54:f2:41:
                    5b:1a:c3:af:b3:b3:5b:31:4a:c5:a8:f9:d7:54:98:
                    8f:0c:6c:df:b0:0f:50:8c:63:8b:1a:a4:22:5c:fe:
                    90:4e:d5:3d:29:e4:41:09:ee:21:33:c2:a4:15:5d:
                    93:51:04:64:53:90:f3:15:18:75:77:53:8e:8a:41:
                    74:28:00:70:c5:aa:d0:12:b5:4e:2a:b5:71:53:70:
                    d7:bd:c9:ad:7d:a5:ad:d2:d5:cb:0d:46:73:f0:27:
                    e3:e5:6e:e1:fb:3b:62:d4:9e:e5:dd:fe:8b:09:38:
                    10:82:e2:46:52:dd:68:47:0a:8b:63:76:22:23:c3:
                    ca:bb:d4:ad:66:d5:89:71:fd:7d:c0:22:6f:65:a5:
                    99:9a:c8:ee:0e:07:16:e3:7c:a8:b2:8d:31:70:06:
                    bb:25:7c:cc:71:27:4c:19:db:d9:c0:5f:fd:33:0e:
                    7f:54:18:f2:d9:7e:62:a8:3e:97:84:44:27:ba:61:
                    00:46:fa:ca:cd:e5:dc:43:16:9d:c1:47:d7:c8:f4:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D7:2E:54:32:76:17:EC:02:C4:AB:24:AC:83:AD:F4:FA:29:72:19
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:73:91:c8:3e:28:c8:03:b5:c7:09:51:d4:8b:7b:76:db:63:
         f0:74:18:85:54:12:21:33:d6:4d:f9:fe:77:d7:9e:ed:46:aa:
         2d:ba:2a:6d:c5:54:97:f8:8b:11:2f:28:cf:04:71:fb:51:cf:
         0a:1f:9d:74:a2:c4:38:fb:eb:d1:c0:6b:32:88:e0:89:be:bd:
         a7:e9:0f:6a:6c:e9:a2:32:e5:0c:eb:93:9a:2b:7e:0b:d4:ec:
         87:b1:48:57:24:b8:ee:36:61:db:a5:af:f0:01:f3:da:00:25:
         6e:af:6a:8c:98:a3:18:20:e9:8a:e3:f0:31:44:2a:06:4f:ce:
         46:ad:c5:de:6a:f0:b9:c7:dc:3a:26:2f:c7:25:36:b3:53:45:
         22:bd:28:c2:d0:86:53:e7:6a:3a:3a:c3:92:71:f1:b7:b3:cf:
         57:2c:a5:c2:40:78:63:d6:27:9f:39:4a:da:50:3d:df:7b:38:
         c8:5e:8b:6c:7c:e7:87:e4:9c:d3:07:e5:ba:fe:b1:14:e6:d9:
         90:0e:28:7c:b6:4e:a1:55:1b:93:7d:0b:de:46:73:c1:63:53:
         0a:30:6c:66:f0:7c:91:ca:d4:af:86:9c:cd:be:82:e0:5c:a3:
         52:3e:29:bc:57:71:cb:4f:df:74:6b:1f:61:da:5e:1b:4a:26:
         f2:d2:66:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs4oWUjLa0FwNjizou4VWfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjUxMjE5MjIwMDU5WhcNMjUxMjIwMjIwMDU5WjAzMTEwLwYDVQQD
Eyg2ZGQ3MmU1NDMyNzYxN2VjMDJjNGFiMjRhYzgzYWRmNGZhMjk3MjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg/l4M8PbMTaznaaTBhr/pLoD/s6
gD2U79HzDEL4GlcPnY0HArhOrzPvksjDz2MCQvJ1FYJsWwFU8kFbGsOvs7NbMUrF
qPnXVJiPDGzfsA9QjGOLGqQiXP6QTtU9KeRBCe4hM8KkFV2TUQRkU5DzFRh1d1OO
ikF0KABwxarQErVOKrVxU3DXvcmtfaWt0tXLDUZz8Cfj5W7h+zti1J7l3f6LCTgQ
guJGUt1oRwqLY3YiI8PKu9StZtWJcf19wCJvZaWZmsjuDgcW43yoso0xcAa7JXzM
cSdMGdvZwF/9Mw5/VBjy2X5iqD6XhEQnumEARvrKzeXcQxadwUfXyPSQ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3XLlQydhfsAsSrJKyDrfT6KXIZMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3ORyD4o
yAO1xwlR1It7dttj8HQYhVQSITPWTfn+d9ee7UaqLboqbcVUl/iLES8ozwRx+1HP
Ch+ddKLEOPvr0cBrMojgib69p+kPamzpojLlDOuTmit+C9Tsh7FIVyS47jZh26Wv
8AHz2gAlbq9qjJijGCDpiuPwMUQqBk/ORq3F3mrwucfcOiYvxyU2s1NFIr0owtCG
U+dqOjrDknHxt7PPVyylwkB4Y9YnnzlK2lA933s4yF6LbHznh+Sc0wfluv6xFObZ
kA4ofLZOoVUbk30L3kZzwWNTCjBsZvB8kcrUr4aczb6C4FyjUj4pvFdxy0/fdGsf
YdpeG0om8tJmEQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 05:48:17 2025 by rpki-client