This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
File:                     2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json)
Hash identifier:          McX7LxO8SieTi6nQUbGZFgS0YGVeSb97aJNR7ozZRog=
Subject key identifier:   6D:44:28:F7:F3:27:94:91:21:B6:A4:56:57:09:B6:1A:E0:A0:FC:22
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Certificate issuer:       /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial:       019B39B3ED40DF88500E428C3BADDEEC91BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
Manifest number:          17A5
Signing time:             Sat 20 Dec 2025 03:00:51 +0000
Manifest this update:     Sat 20 Dec 2025 03:00:51 +0000
Manifest next update:     Sun 21 Dec 2025 03:00:51 +0000
Files and hashes:         1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=)
                          2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: KGKmg6okg3+sjENEsoHVvs9CVH1LO80Gsq3IXiTe5bg=)
                          3: 28-uwfDVLpaahAp5_g4gOqonJRE.roa (hash: ZiFvqyNcFNQjj1MRiXrgYLhWSDf2EOuub9eyPgFwZ5w=)
                          4: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=)
                          5: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=)
                          6: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=)
                          7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=)
                          8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=)
                          9: Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa (hash: yHJbvycQTABXHTmwKw5e8PRSEFVUISxjCDtnqSPXNps=)
                          10: czt3GQhHtSmOo6RJuvFMFQAKSGo.roa (hash: XJWzfiETobcimR26X1Pa8klzjoq9ZGkjfUnqI+42fs0=)
                          11: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=)
                          12: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=)
                          13: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=)
                          14: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:b3:ed:40:df:88:50:0e:42:8c:3b:ad:de:ec:91:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
        Validity
            Not Before: Dec 20 03:00:51 2025 GMT
            Not After : Dec 21 03:00:51 2025 GMT
        Subject: CN=6d4428f7f327949121b6a4565709b61ae0a0fc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:7b:b7:a9:57:c5:6e:e9:56:d8:45:76:5c:
                    b2:de:f8:a4:53:25:3e:8d:85:5f:d9:73:f1:18:1f:
                    c2:0e:12:11:fe:6e:42:86:2f:4b:d1:9c:80:5b:9a:
                    bc:00:7a:96:36:f2:42:b3:7c:a9:e7:f1:f0:69:24:
                    91:c7:d9:d4:91:4b:1c:09:73:c7:58:a2:56:7e:07:
                    b6:d2:bc:2d:04:0d:0f:12:54:ac:37:2f:17:6f:b8:
                    77:c8:db:6d:a8:c8:8d:68:93:37:fc:89:ff:76:50:
                    d4:9e:f4:1a:cb:ca:72:e8:f5:90:63:6b:b4:db:07:
                    2d:b4:ba:a6:d1:6e:bb:2b:96:b0:9d:22:f3:b3:b8:
                    f6:13:fd:97:c6:c5:66:e5:4b:02:80:ea:bb:68:65:
                    de:af:97:36:74:d2:33:83:16:4f:3b:ae:bf:c3:ee:
                    de:89:8e:6c:d2:21:91:2f:cf:6a:1d:d9:6e:ce:5e:
                    57:7a:5c:dd:b2:6c:cf:7e:c5:34:91:ec:67:5b:b8:
                    1f:6b:07:40:83:55:78:ad:71:dc:f8:07:2a:04:1b:
                    cb:bc:c9:d6:2e:7a:40:53:f5:17:75:6a:1a:f4:99:
                    f0:cd:09:70:6a:66:c1:e9:73:2e:44:d6:cd:9c:c2:
                    75:af:49:2d:5d:46:2c:c9:29:80:73:78:3c:35:3b:
                    d3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:44:28:F7:F3:27:94:91:21:B6:A4:56:57:09:B6:1A:E0:A0:FC:22
            X509v3 Authority Key Identifier:
                keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c8:67:2e:92:0d:11:33:c1:4d:23:58:40:ff:55:e7:3a:60:
         29:b0:2a:ed:1a:fc:a4:d4:4a:c8:12:32:1e:c4:e3:09:02:46:
         49:45:42:2a:aa:d9:87:cf:17:f6:0c:a0:44:be:42:e6:11:df:
         f5:5b:82:fe:98:11:06:4d:8f:9d:4a:d3:65:94:bd:a1:94:9a:
         f3:3a:d4:1c:7d:63:d7:ca:05:95:6c:b9:a7:7e:06:52:af:d1:
         c9:86:f7:c3:24:2a:b2:5a:39:e8:ae:f9:0c:d8:ac:4a:1f:fa:
         fb:50:20:da:c5:87:c0:55:2b:37:cb:73:ff:2f:a5:00:42:07:
         be:1e:49:ec:f2:6e:a4:57:14:1c:49:ea:e7:8d:75:0e:ce:26:
         8f:11:da:84:01:5c:32:2d:13:07:cb:c7:e8:22:17:53:47:af:
         3b:d6:90:f8:92:73:32:ee:e6:fd:5d:c4:82:84:6e:98:93:fe:
         93:93:2c:11:ea:ad:6e:fd:b4:0b:72:45:48:0d:b9:4a:d6:d5:
         37:d4:7a:ed:25:44:91:79:2c:12:4d:1b:3e:38:b8:9c:81:6e:
         45:71:7c:7a:57:e0:5b:cb:43:c6:8b:b8:04:81:2b:e6:ce:96:
         d1:99:53:e1:2f:07:27:03:43:98:7c:81:e2:89:c2:f4:db:b9:
         68:57:b0:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs5s+1A34hQDkKMO63e7JG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2
MjFkYjEwHhcNMjUxMjIwMDMwMDUxWhcNMjUxMjIxMDMwMDUxWjAzMTEwLwYDVQQD
Eyg2ZDQ0MjhmN2YzMjc5NDkxMjFiNmE0NTY1NzA5YjYxYWUwYTBmYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeF7t6lXxW7pVthFdlyy3vikUyU+
jYVf2XPxGB/CDhIR/m5Chi9L0ZyAW5q8AHqWNvJCs3yp5/HwaSSRx9nUkUscCXPH
WKJWfge20rwtBA0PElSsNy8Xb7h3yNttqMiNaJM3/In/dlDUnvQay8py6PWQY2u0
2wcttLqm0W67K5awnSLzs7j2E/2XxsVm5UsCgOq7aGXer5c2dNIzgxZPO66/w+7e
iY5s0iGRL89qHdluzl5XelzdsmzPfsU0kexnW7gfawdAg1V4rXHc+AcqBBvLvMnW
LnpAU/UXdWoa9JnwzQlwambB6XMuRNbNnMJ1r0ktXUYsySmAc3g8NTvTTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1EKPfzJ5SRIbakVlcJthrgoPwiMB8GA1UdIwQY
MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt
ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3
LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoshnLpIN
ETPBTSNYQP9V5zpgKbAq7Rr8pNRKyBIyHsTjCQJGSUVCKqrZh88X9gygRL5C5hHf
9VuC/pgRBk2PnUrTZZS9oZSa8zrUHH1j18oFlWy5p34GUq/RyYb3wyQqslo56K75
DNisSh/6+1Ag2sWHwFUrN8tz/y+lAEIHvh5J7PJupFcUHEnq5411Ds4mjxHahAFc
Mi0TB8vH6CIXU0evO9aQ+JJzMu7m/V3EgoRumJP+k5MsEeqtbv20C3JFSA25StbV
N9R67SVEkXksEk0bPji4nIFuRXF8elfgW8tDxou4BIEr5s6W0ZlT4S8HJwNDmHyB
4onC9Nu5aFewBg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:49:11 2025 by rpki-client