This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
File:                     YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json)
Hash identifier:          MIDfAnYVPgD5XTKoHTEUCbjocMm/JcM6qp3h0Y1klao=
Subject key identifier:   B3:E0:94:D5:06:03:71:DB:F8:8C:17:8E:CD:B8:91:7D:F2:E8:65:F7
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Certificate issuer:       /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial:       019B37C59336EF46EB1BCF7E5BEDD262899F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
Manifest number:          17D7
Signing time:             Fri 19 Dec 2025 18:00:53 +0000
Manifest this update:     Fri 19 Dec 2025 18:00:53 +0000
Manifest next update:     Sat 20 Dec 2025 18:00:53 +0000
Files and hashes:         1: 14-JdTDQixyApITNqhdKwPqjoLs.roa (hash: jFtHzV+d5bMii6p0qHWnhKbX/FNP5Vm2yJo2XEy8kbg=)
                          2: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=)
                          3: 568PBTNOog5zQd02Gzfw8j53pp0.roa (hash: 9zEg7rD8+zhtCTeBHh1OB7HwhHMIZEI66k67FO3erWc=)
                          4: 7dayy-ue9GUJpzyclEIimtif3_w.roa (hash: 4JgYJRahEh68+u63kEGGgHtYOlGh91xC0Hb+kdcP4aU=)
                          5: 9RxTwcsio1S5_RkC0WTrzOMaZhc.roa (hash: 9h7l9iTJhi27U8gTTfYmIzbUUM7p2Wt+DSj4crg7JCc=)
                          6: EQCLJlgmcNp6Np7zuKBQeJ1HMBg.roa (hash: k4j2l8243gZl27loBQC1srNx3SmtQxfanDuXrBBIDpw=)
                          7: F_MAkVYxg9sMiP5DEGVHwbfzSfQ.roa (hash: iU2Rw86scVC9KCfvNVqgxn5Cd8K9bQngyGzzAmh4vQU=)
                          8: JP-S2o0I_nUtLAOKPN3MfRIN6RY.roa (hash: JfTdIpHmF4T1dIihVESOhyJNGp+NKyB+FhmpQnwIZKg=)
                          9: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=)
                          10: LECXwwOJkYXSvoEkkhVQqcZQMCw.roa (hash: c2nAj2MsaYNhv7IXToz+zt87p0StOKZqVhSYKT3pEAI=)
                          11: OL4z3_AH2R5VKDmV76KA4N0_DRs.roa (hash: RWSBH4V8NDE1BblMnSOrVq+idcHxW7APF8wIlUcgVPY=)
                          12: PnKU_Q2HHtCU1pCr_1KaGPkN2ek.roa (hash: GbYc2B1qBjTyAVup6jSWAzMh9yA2HZhkMGLtK25rTiQ=)
                          13: TSChuoUoxhH4RDl93vItxLbWmjA.roa (hash: Yt5QjTI9IjJMsTBQGdHqIoHSZWBchoO0b+jSiGXzfpY=)
                          14: VuRbCRzNdVj7Da31s78PgUjiOl0.roa (hash: Fj03uhLkzjcI1YlWFMwWHT7H1EslNRIoLpvbqQ7YVcY=)
                          15: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: 68mgWwJOtOzC7Bk1AMkEW+Ffaaoq+XQQygH7u5Py1Yk=)
                          16: YQ9Y8mt0ihX-1hkt028wgnIveVM.roa (hash: 2Za3dQMpt5hHnoKCpKq9CmdrcwegpUJWhl7wmxiI9U0=)
                          17: ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa (hash: 4TTQ/eXadulSIhoVzB1gQqr9voOBbcYnz7UwH2X8rJI=)
                          18: dn1rb2wCUiJjbUP99kG112Kz0Pg.roa (hash: diw/B/vJL3e9UDmx8mv3lXrrXjVhjfIy0Zaa+4GOCSc=)
                          19: jC0_OBlWrEljET3kitu_u4UMuGI.roa (hash: 1xtlBlnH8pKeA/LPN7gJ0+ahhITWUKhm73SYRTl4heQ=)
                          20: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=)
                          21: kJU-KgD8cYtkfeivKCJEB0DdEd8.roa (hash: 5IehEg28rjh+Szw0jXY9Pro/E9tT/kZUcz/KhGmkIUc=)
                          22: qNG0NYBaxNnb4tvED5blrbZaQm4.roa (hash: kx0filtmJdFwdMqR9tMIqBohoW63H61VsrxnAdch0ZQ=)
                          23: qmJe_5PAVbEyU3Hz9mqWWayqxrg.roa (hash: 4j7w+emJPvjo8IC4c65G1J9dI6AZT4RULSbnACF02rM=)
                          24: vI0U7fkAkt3cTATzOlCKhJuroAc.roa (hash: 5B6VWqHRTBuf463R5V8OHEKJoYOEzFD7hCy/PBP0gEw=)
                          25: vm8G1CJtR8NoqwuLLwSubFgOmS0.roa (hash: lZ9XUGMQa5iMmI7NjUpdLuwQ8xNfL1R8duvU6nNgaek=)
                          26: vy2Tim2DO-ewqTW5JiC-wljnBqc.roa (hash: kUL4TPorWNhT03Pu7RvQiDQUgMW7VI5SJDKSj38x+BY=)
                          27: wVIN0cBImlfNWFOz4IT7aYaexqE.roa (hash: BV94o+pd1hE2+f5obJYSJgfF2TueBCqdTmVe9yx/Lfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:93:36:ef:46:eb:1b:cf:7e:5b:ed:d2:62:89:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
        Validity
            Not Before: Dec 19 18:00:53 2025 GMT
            Not After : Dec 20 18:00:53 2025 GMT
        Subject: CN=b3e094d5060371dbf88c178ecdb8917df2e865f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d2:e5:da:ec:fb:46:ae:a4:a3:05:f1:cf:ff:
                    a3:b5:de:e4:ed:56:54:cd:ed:27:7d:60:35:d7:2c:
                    bf:06:7f:5a:a2:ff:2e:b0:0f:fe:62:85:6d:18:1a:
                    26:2f:a9:6e:89:6c:1e:c7:f8:34:bd:1b:f6:3e:f3:
                    a0:f9:d3:39:7d:07:da:6d:21:27:64:6a:ea:37:ee:
                    27:33:69:30:3b:db:d3:bb:5d:12:6a:4e:94:78:01:
                    62:e3:72:4e:c6:82:04:33:28:f1:a0:2c:9d:46:4a:
                    c9:90:34:dc:7d:eb:58:7c:87:3c:f2:b3:36:bf:cb:
                    57:f2:f3:b1:fe:ee:a9:c0:50:f2:c0:b6:b2:48:77:
                    bd:ed:bf:97:1f:0e:91:ac:19:83:bd:a5:75:08:12:
                    17:67:1c:98:10:ea:57:b3:b9:ae:83:cf:b3:37:1c:
                    db:ea:00:b5:5d:a3:4b:b7:27:0d:fb:06:9d:1a:0a:
                    7b:3b:c3:36:0c:95:ae:e3:6f:a4:ed:36:d5:a7:55:
                    8f:40:77:64:58:95:30:d6:47:47:05:6e:2f:8d:ab:
                    60:56:2b:cb:9c:b2:5a:5a:67:9b:24:98:d5:a7:62:
                    cd:8e:5c:51:9c:19:8e:98:86:4d:9c:8e:70:18:a4:
                    aa:40:44:2a:10:58:0b:90:2e:ff:72:ee:ad:28:19:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E0:94:D5:06:03:71:DB:F8:8C:17:8E:CD:B8:91:7D:F2:E8:65:F7
            X509v3 Authority Key Identifier:
                keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:81:f5:7e:ad:af:02:26:e2:08:a2:bc:79:e5:0b:d8:2d:a2:
         8a:19:69:1f:19:a6:f4:94:90:a7:b4:d5:a8:8f:73:99:f7:87:
         fc:8d:31:85:72:ae:a4:3d:c9:1c:c6:77:5f:cf:87:42:ae:61:
         d3:57:f4:ff:8c:a0:82:ba:02:3e:13:34:91:60:a9:2c:ba:c3:
         5c:73:be:57:c3:1e:d7:15:33:57:14:29:9d:a7:b6:0f:28:54:
         2d:8f:4f:82:e6:06:7b:ab:f3:09:08:26:5b:c5:84:1c:4b:0e:
         bd:ce:c5:05:fd:f1:bb:a3:a5:fb:6a:05:0f:c7:c1:9f:11:03:
         57:a9:9f:c6:80:99:08:49:a1:15:8b:2f:66:bb:bd:f6:38:7d:
         a2:a7:d5:25:4c:16:b8:3a:25:e9:69:fc:a6:d9:b7:24:a1:99:
         16:cf:98:68:fc:56:21:de:41:68:82:4e:ed:80:7a:17:cd:5b:
         90:b7:0e:63:e6:4a:78:81:14:66:ae:e9:98:fd:ca:ce:14:a8:
         2b:4c:ed:67:0b:b5:ed:20:f6:29:a3:b8:71:e9:3f:cf:e4:35:
         90:d2:29:4a:83:4e:f4:93:f7:1a:40:c4:84:bc:cc:ad:73:83:
         79:d6:c5:7e:08:5a:9b:b2:48:94:66:fb:1c:17:4b:d1:68:0e:
         e7:3d:e8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:28:41 2025 by rpki-client