This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          u5CGBixf0O3kNH6SOq0MVtN/m4IjR7iTmCEBHr5GNT8=
Subject key identifier:   AE:65:04:30:8E:B8:DA:EE:DB:CD:27:C1:29:14:2A:08:B1:E2:17:AD
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019B299C273DA53C97F4CC538F00598046FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          1837
Signing time:             Wed 17 Dec 2025 00:00:57 +0000
Manifest this update:     Wed 17 Dec 2025 00:00:57 +0000
Manifest next update:     Thu 18 Dec 2025 00:00:57 +0000
Files and hashes:         1: 0aa8_BKnq_2uEeu2lZ7-yjbtvuM.roa (hash: Ddp/LlQBMX46rH0IPNaZHNYeFIB8RtssPveBvjz8aL4=)
                          2: 1-xc1srblKkWVrQxPbJNDAqQ3mpc.roa (hash: ZzynvVG+bTIyDr7NXUASXUZ28E+DC5j8UwHhzSApKyk=)
                          3: 2a9Z4MiFWUxUqmTNMuUVscHb0hE.roa (hash: gobSMYv3Krt8vXt9XFdC11nQ+nS6jtG46MKfF14gNHU=)
                          4: 4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa (hash: iwJ60t6RgAb6kap7YpqbSewI5ktaDdebMpnk8DNCEn8=)
                          5: 891CpnOYIk69iKnDpiqfcEZzfPI.roa (hash: Cl3FQjh7xo9Vv8l6G/85YiDrEYQtz+6HMhEUm9eKhPA=)
                          6: 8BDwtg4WogHr_t622bk6AZLxHf8.roa (hash: jGu8B7Udmymq+0EP+ky2AfA0GK/9z6xL7Kug80+RJkA=)
                          7: 9hgStchHD6fvUu7MaI3ReZLaWPo.roa (hash: gNkHPXuUrNhImnSBNKFWxQAcOMo7axTMfis85TltsTA=)
                          8: AeRW2IzzHa8sgYjrW7QogaL1WWo.roa (hash: mOgxIrog/AxUhk6U2thPlE/gzaz0gGobQDleoJHGSnw=)
                          9: Al2KaWomFf8GhcORE3K4q4R9IR8.roa (hash: pVm7PEjI3+WRx03gEcy+oA8b2HM+FqL4qCoE1gIpZnU=)
                          10: BT4HTe3oG2Sg-qKbCzfhjsWspIs.roa (hash: tr2IEWG8nbhwgOgVOSWuTH9VHkQ1QiViO3lhhSkyHIE=)
                          11: BqYGoMadTRg3PGzK7Xh_am0n1Go.roa (hash: scY6lS1Giu5fZ5nMiXdTZLdzDy0AADhVUX6qd+QhFlc=)
                          12: EG51x3PSsQJffbhsgLz-YN7F5Ms.roa (hash: vPVCEyfjYjq/nMq+Cp9rXdERC9dDpo/nTCQmu9ZFszE=)
                          13: FYSyCWfo5Zjk1tVKOpfE2KZczw8.roa (hash: YoIR3hrJMwWnChJUFr3nzw+4wNvFz1FFruFWrR+owFA=)
                          14: JWFrACGqXAEPwk5yERzaH1k3xEE.roa (hash: eRkSlBoh54+iXz4l+cuyt8uCJGHuQx8lExR+xSC6BSg=)
                          15: KytpCVKCeCWJxaC4a7hhDMjICE4.roa (hash: qpX1hsz4N1aVbQnjTC1/LhdiYlriVHEuhmRD7DIMIf0=)
                          16: MgJgYL9l6eKJ0Kmwl4y3YpthS-M.roa (hash: igpzPJYbXYIv+C9ih5BbtSw1dZ2mBgNdp+reY422/cw=)
                          17: Pf8ZT4Y8uAHBJk4IvL6CTiul6Qo.roa (hash: u+Yzk3JpAwQ1sKYO8qin8N8gxyReMldlGNxfGvAoYCU=)
                          18: Pwb-T7CDIcPW5g6EIjv7rI1hOY4.roa (hash: +uQK2AEnqPBoHu/xep/tQLvYp/ULstsLl2Xj5X9veFc=)
                          19: Qvclw3p6GBEwfed15US4eMZDssA.roa (hash: UWEN+eEsjGRM3fqsL5cJc7RQBWKq6NxYbqkBONZx9Ds=)
                          20: RX8x7NBqKqNqrHjY3RrZOIwmw84.roa (hash: qG1pxlwKH3SmnTU8k1NPrDe+8libzJhE26dpkDKjPb0=)
                          21: SSxw2UyTdh8TO_sMC0CZq7SWuwY.roa (hash: ATIxE9LR3RhyZ9vnBXUPCYZRNgLXIwXduwukGiza/E8=)
                          22: Vedd31K36BW0FtFdJmgu7RtebZ0.roa (hash: UL6Hnivw/B+oxS5q55F7qNNs7Ynb0wMF1mBZUl4ggtM=)
                          23: XD5lyN3IK2UsJeObMTBY2xot5DU.roa (hash: p5taUYH4AVBdxVLeGOYvbtP0mpvx/YEGj8SIqMDS618=)
                          24: XO4d7Id2G1LEtArZwx3RzEkQ7hg.roa (hash: ogURT2KjU4HTxAtVdIiJTmcqfQTlAEEbsvpDQ/LABsc=)
                          25: X_-XGWHxiyT31XcsVcXztO1CAUo.roa (hash: h9fzXHeF6FN+NnLG9OWfg3VoICXbfHZUao+YO2BeTVI=)
                          26: Y0Jfvglhk12KRlx1qXrTTWIY1ZQ.roa (hash: OojwxcLLBQyxENv/409Gbc8GdADP7z6P1tN7CK7EnwM=)
                          27: ZbzlNVKf1eKK7KiivvZ1QujJRLo.roa (hash: JpHtVBVtqKHMUBQ5w8gmqDV0uY/Xo9NDIUCWtdbcBs0=)
                          28: a5UQ2z1RVywe791ih-JkkJe4oZw.roa (hash: z7MPhCjNypY3ndHfuAxQLWPw6x9rN6BVeFB92z9Vk4Y=)
                          29: aFRiQRnDB9TXgWRRIMtNARzxVn8.roa (hash: hWE8vTVKPZar03SzLtgbIuwLQ05FffNM309Sx4njq4c=)
                          30: bHXLulP8CUgt-JCJIqSM8hvlsCA.roa (hash: Mexso3pNidi3XstQ5hR0lM6Sn2w60SPQEvdapeY/VjQ=)
                          31: c8oXwnn5toTWitSJkpA6DmPs01c.roa (hash: 6kqJ5YUqqDHudEG8e5AMvFWmJFH3ql97x6sFaUhLatQ=)
                          32: cdRkB7AVAsaCQza2C6eaLskeEHY.roa (hash: R3X0t9w4kaySZ1sZzxcJ1+mmA7WHRo/nLaZSV1WFUCk=)
                          33: eY6rIV9lpjNtRSgUsbjCu8KRO18.roa (hash: xARunhsXA/apYr93W8PheqPyL4HmYu/zzT8xJmEV+pc=)
                          34: ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa (hash: wC0JV8jUHfPLAhBEwBEM+LxR4vaNiTk9CGptUwCWnjs=)
                          35: k0KEFHW4fL4Ef8MopdylpfXrtX4.roa (hash: b5DhgBm+P5R0/x6SS6V5aLIs9QaubKbpXVVnCYru10M=)
                          36: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: +JplYCQATE+yUJyGGGwzrDqi7Jtz1Ti4pX8GFCXmmTA=)
                          37: lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa (hash: BB6MmQH+rCEmTn2b4vV8K++LviBSGKSxEZC17nRtmRE=)
                          38: n7A9iNcydEM0dF7od9K9kn6dOlw.roa (hash: Q9nTEs63rW/GSV52zGEUvJPOGvhBCV1t2N9qF9Q1Hb0=)
                          39: nDXZwdByAxuzdwf0ZXt_ehfSJJI.roa (hash: 4eNmWGzY3LU27cy4MOpIuF5JDu6Bi58le7fddIW+ow8=)
                          40: ujdLXoXrvhVfjksNi3jvUUhxPZQ.roa (hash: M1NGr3Kp/N5WVzCoJ45GNTOp19udI/hDhcVdgHkpFVQ=)
                          41: xh7RSUwiBVANXtMMIBZXlrsg2mQ.roa (hash: TMp3z2IynO2xSEsC3bAli7G13qod/n7CAd4pIOr904w=)
                          42: zEdOf00V8YpbfdbuVh6edhLFxOc.roa (hash: xw2nGcLzNzC2781DBhmqoJCxxw5fW6F+mjQBcvq6T2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:29:9c:27:3d:a5:3c:97:f4:cc:53:8f:00:59:80:46:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Dec 17 00:00:57 2025 GMT
            Not After : Dec 18 00:00:57 2025 GMT
        Subject: CN=ae6504308eb8daeedbcd27c129142a08b1e217ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:d9:49:1a:71:b8:b0:05:b1:4d:82:6f:67:
                    57:cc:f6:f5:6a:66:3d:97:4e:e2:7e:f9:47:5a:06:
                    fb:c6:6e:b5:52:68:d0:a1:b4:81:d2:8f:23:98:9b:
                    b1:10:48:c4:f3:49:a6:ff:5e:95:82:60:9e:41:16:
                    f2:ce:84:f7:67:3e:94:62:86:d2:36:6a:b7:05:e6:
                    38:c6:6c:f0:c6:e1:21:a5:25:a7:35:2d:9f:5c:33:
                    a2:da:94:dd:3a:fc:14:6e:ab:7e:56:8b:15:b8:77:
                    91:57:40:c5:6d:86:ca:1f:5e:c9:91:7e:16:83:c6:
                    99:b3:d8:5b:53:73:90:4f:04:e2:80:95:22:18:d9:
                    b3:1d:aa:11:f6:7b:03:ae:4c:b1:ee:22:13:39:a7:
                    b2:00:d4:60:5f:55:58:b0:96:8a:7d:ad:b8:9e:56:
                    1c:26:99:fe:dd:cf:ac:47:ae:2a:6b:0a:67:e2:12:
                    92:65:ba:79:e9:8b:63:1a:93:77:c1:b0:7a:89:19:
                    f9:1d:08:77:2a:c3:10:5d:49:e9:9c:d5:2b:86:e9:
                    23:48:11:9d:23:1e:58:f4:7d:63:d7:1c:5f:b3:9b:
                    0d:cc:e7:87:7a:e8:a8:23:ad:90:52:49:ce:47:9b:
                    ed:af:cf:bf:2d:7d:5f:e2:09:da:b4:d4:68:b6:a0:
                    98:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:65:04:30:8E:B8:DA:EE:DB:CD:27:C1:29:14:2A:08:B1:E2:17:AD
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e6:77:7e:06:35:75:27:e1:45:88:bc:46:79:08:2d:93:fc:
         13:5f:32:d5:cd:2d:1f:77:09:eb:2f:df:19:ed:36:77:b4:9d:
         af:dd:a6:44:96:81:7d:88:95:69:75:b3:cd:c7:e3:65:38:e2:
         36:7b:a4:b4:8d:c4:0c:67:c0:95:93:d6:8e:89:db:54:bc:d6:
         c7:79:45:6a:33:44:26:ab:81:6a:77:e5:48:c4:8e:20:9a:6e:
         51:2f:18:5a:ee:6b:cd:93:0b:99:8f:c9:9e:a6:cb:3e:1e:82:
         a6:a0:83:05:82:69:f9:f5:a5:da:87:96:f1:a7:ab:46:97:1d:
         36:46:58:f7:53:a5:4b:f9:f6:d2:e1:46:15:60:bd:ce:5a:67:
         de:53:56:57:39:da:a3:f7:fd:2a:b7:ca:e6:cb:91:2c:76:2e:
         af:03:7d:c5:1e:82:0c:65:3c:fe:57:ce:dc:9d:49:37:2b:9f:
         7e:6c:cb:f9:14:90:34:97:a8:9d:ec:4e:e3:1a:01:f8:68:27:
         0a:39:12:b4:39:fe:67:ac:30:6c:24:30:2b:d5:25:f1:98:a1:
         a3:71:e5:d2:f8:96:12:f3:9d:4f:41:91:c8:76:cc:ec:66:16:
         3b:7c:c9:12:0d:60:eb:13:93:ba:a9:07:46:7b:02:10:47:00:
         7d:22:db:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZspnCc9pTyX9MxTjwBZgEb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUxMjE3MDAwMDU3WhcNMjUxMjE4MDAwMDU3WjAzMTEwLwYDVQQD
EyhhZTY1MDQzMDhlYjhkYWVlZGJjZDI3YzEyOTE0MmEwOGIxZTIxN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCXZSRpxuLAFsU2Cb2dXzPb1amY9
l07ifvlHWgb7xm61UmjQobSB0o8jmJuxEEjE80mm/16VgmCeQRbyzoT3Zz6UYobS
Nmq3BeY4xmzwxuEhpSWnNS2fXDOi2pTdOvwUbqt+VosVuHeRV0DFbYbKH17JkX4W
g8aZs9hbU3OQTwTigJUiGNmzHaoR9nsDrkyx7iITOaeyANRgX1VYsJaKfa24nlYc
Jpn+3c+sR64qawpn4hKSZbp56YtjGpN3wbB6iRn5HQh3KsMQXUnpnNUrhukjSBGd
Ix5Y9H1j1xxfs5sNzOeHeuioI62QUknOR5vtr8+/LX1f4gnatNRotqCYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5lBDCOuNru280nwSkUKgix4hetMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeZ3fgY1
dSfhRYi8RnkILZP8E18y1c0tH3cJ6y/fGe02d7Sdr92mRJaBfYiVaXWzzcfjZTji
NnuktI3EDGfAlZPWjonbVLzWx3lFajNEJquBanflSMSOIJpuUS8YWu5rzZMLmY/J
nqbLPh6CpqCDBYJp+fWl2oeW8aerRpcdNkZY91OlS/n20uFGFWC9zlpn3lNWVzna
o/f9KrfK5suRLHYurwN9xR6CDGU8/lfO3J1JNyuffmzL+RSQNJeonexO4xoB+Ggn
CjkStDn+Z6wwbCQwK9Ul8Ziho3Hl0viWEvOdT0GRyHbM7GYWO3zJEg1g6xOTuqkH
RnsCEEcAfSLbEw==
-----END CERTIFICATE-----