This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
File:                     s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json)
Hash identifier:          pr8J3hWcDKKrOPNYy0Dr6PtFMjz/IV5LzkoKSj1YmtE=
Subject key identifier:   F7:B3:B4:63:46:5F:32:52:80:3D:D4:CD:3F:CA:61:6D:BA:44:5B:B6
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Certificate issuer:       /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial:       019B3D5972887AAF701BA4406660EDE0F2DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
Manifest number:          1798
Signing time:             Sat 20 Dec 2025 20:00:30 +0000
Manifest this update:     Sat 20 Dec 2025 20:00:30 +0000
Manifest next update:     Sun 21 Dec 2025 20:00:30 +0000
Files and hashes:         1: 2mMFFVEf9RI7laeK707TbUw9w1o.roa (hash: lJtAZDZI6kWuia4ewbwmh2H0Ib7YOsmGLnMGMcXt0g8=)
                          2: 63AfX9tGzLI8rOFx7JtlMNOTY9k.roa (hash: MhOy0HHNjwbzh6TENPcem2eo6wIFhE2BTgKzC1N8oTk=)
                          3: BqnvofScUisQsUQed2MQ6B18GAQ.roa (hash: aF/iFUXhalT+tHSvHf/i2jdL4yddWHGSdcJZMfIy3uE=)
                          4: DV3PY9YU5zk2EaQYZkZq4p-ZUYM.roa (hash: iyl4yZuKkTsrQs+Y4JJy2vYNDSKm0/gIBzJQSKVyBGM=)
                          5: FeALzwmlHVBsdnrHTXpUuCdKMKk.roa (hash: LOwvL3odoyBFINMdFWH/VCQRIEFy3WTnNyeQKYYbRfU=)
                          6: H1-xrUolZhz6fzzg_UIN6T3DPWQ.roa (hash: qIZY0TolKgREye8GEvOpwQsSjnvpT07vwo6n55/XGY4=)
                          7: TyV9-G3EmDmxesG6kytX3N3gsKY.roa (hash: 5ZTWb+G4Smvs/SR1cTUZYD6dnJkngJRJoyw2KmVLYwM=)
                          8: UDyJk4Oy_-L1Te8H_oQucf6YjW4.roa (hash: RtdvCTTWOI7dE+z50k0BiFUEbUEH2UCgRme1pMQy/3s=)
                          9: WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa (hash: yqIxBJiLiShm8irHVY2/sGIwoQoJ1y3znhIp9whAo54=)
                          10: dKsN1qGwEKIQpUTURYKT2umZW2w.roa (hash: tA8mIaQttFCg4VHXuxLgiMZWDalN45RLcJgG64coFpw=)
                          11: hmD_gbHlASML2ltcjVZUWmwvSYc.roa (hash: 7BK9fS2pKl/VxlRPtn0r5sqSpL1lbttsGsNK/TVCOlc=)
                          12: kskh1ZO_la7WXFGA4d2IKKXIwWc.roa (hash: PSi/1bSx17DcwOcX0aGn17oACEy8dwOziOStHczOl68=)
                          13: m4H483z2P-zcC4ubnNBjNvxbHMo.roa (hash: b3Rm8ItHdOPM68urQcBIHMskc29iL1u/gZHs0ce3q8I=)
                          14: n4LrIW3mgA8G3axl4csgyTpsp8Q.roa (hash: LNegLtDN4y1dMd1RyuVmBjmyfpzTDjWVARTw/3voBLo=)
                          15: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: kY+DMGMwxauXN9IA3XSOSiRxY1KRkSa/yFy8K36GkT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:59:72:88:7a:af:70:1b:a4:40:66:60:ed:e0:f2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
        Validity
            Not Before: Dec 20 20:00:30 2025 GMT
            Not After : Dec 21 20:00:30 2025 GMT
        Subject: CN=f7b3b463465f3252803dd4cd3fca616dba445bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b0:87:ee:63:ea:7d:f9:21:a4:cd:04:8c:c7:
                    8e:eb:11:fc:13:94:5d:51:e4:a5:3f:36:91:de:d2:
                    00:c8:c1:02:6e:64:d2:d9:78:b2:60:a1:4f:bb:50:
                    c7:5b:38:2c:1a:6f:32:c8:47:01:59:94:8b:cf:1d:
                    99:a5:2c:b2:2f:40:04:c0:c7:d2:7f:f2:dd:07:3a:
                    5c:f9:77:f1:6b:91:0a:a8:09:00:18:9f:ab:99:03:
                    ff:6d:bf:18:06:08:ab:23:b3:64:38:63:c4:90:4d:
                    61:c0:ca:72:d1:17:09:fe:bd:9f:91:42:93:82:c5:
                    fe:9b:0f:6c:dd:37:af:53:8e:50:21:35:40:9c:dd:
                    45:ea:46:6d:c0:e1:12:13:7f:3c:46:e8:f5:a4:54:
                    10:a4:b6:17:9d:f0:1f:98:18:a6:20:ad:b8:06:6f:
                    af:c4:e4:58:6a:c2:48:20:44:b7:49:16:ce:2d:ac:
                    09:1d:2f:84:6a:71:97:19:f1:0a:0d:9b:99:94:d0:
                    21:db:05:7b:37:7d:a5:ea:85:85:d0:c2:a0:e1:fe:
                    3c:cf:cd:6f:58:a8:5c:c2:4e:f0:90:ee:04:0a:07:
                    0e:bd:5b:86:f3:62:6c:db:0c:24:4d:0a:7c:43:d1:
                    9d:a0:4e:51:54:d5:0b:eb:e5:4f:bd:0c:7b:a4:b1:
                    97:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B3:B4:63:46:5F:32:52:80:3D:D4:CD:3F:CA:61:6D:BA:44:5B:B6
            X509v3 Authority Key Identifier:
                keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:b9:cc:3b:2d:3b:8d:33:85:6a:e2:b3:68:9a:c6:34:66:
         23:b4:f1:ed:d7:93:e4:66:c7:ec:18:7d:97:32:e0:d4:4f:36:
         c1:ed:fc:9e:70:18:04:94:e7:2a:eb:8b:85:f3:c5:2c:0e:80:
         57:b6:cf:e6:5c:ff:56:fd:4c:55:b8:29:c4:0f:65:4e:9f:f2:
         d1:c6:cc:5f:49:e4:4e:bc:57:9f:9c:36:b9:91:f1:78:92:f8:
         b2:6a:15:97:06:6a:4d:6e:9c:6b:2b:8b:c8:e6:07:54:c6:68:
         0b:99:b4:50:e5:ba:b0:8d:35:58:75:b2:25:8b:43:e2:bf:d8:
         9b:33:c5:30:88:3c:0e:63:69:f5:0a:ea:f0:2d:97:5a:c7:91:
         7f:fa:06:40:dc:72:b3:86:09:ca:77:eb:52:e0:0f:62:85:54:
         d9:1a:e0:c5:b3:7c:25:67:ca:d9:0f:1e:2b:5e:bb:ac:d7:eb:
         2f:a6:29:62:75:e8:0f:b8:fe:0d:28:9a:55:38:54:30:29:ad:
         0d:2f:c8:db:52:71:a8:0e:21:cc:6c:3a:ec:0d:c8:eb:b3:ad:
         ec:e0:aa:c9:b9:07:1a:10:0e:35:af:c9:99:7c:58:3d:0a:07:
         bf:3e:18:04:05:b2:bb:5e:36:4b:38:d9:ed:6a:eb:41:90:e8:
         01:d9:1c:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9WXKIeq9wG6RAZmDt4PLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm
NmVhYWUwHhcNMjUxMjIwMjAwMDMwWhcNMjUxMjIxMjAwMDMwWjAzMTEwLwYDVQQD
EyhmN2IzYjQ2MzQ2NWYzMjUyODAzZGQ0Y2QzZmNhNjE2ZGJhNDQ1YmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bCH7mPqffkhpM0EjMeO6xH8E5Rd
UeSlPzaR3tIAyMECbmTS2XiyYKFPu1DHWzgsGm8yyEcBWZSLzx2ZpSyyL0AEwMfS
f/LdBzpc+Xfxa5EKqAkAGJ+rmQP/bb8YBgirI7NkOGPEkE1hwMpy0RcJ/r2fkUKT
gsX+mw9s3TevU45QITVAnN1F6kZtwOESE388Ruj1pFQQpLYXnfAfmBimIK24Bm+v
xORYasJIIES3SRbOLawJHS+EanGXGfEKDZuZlNAh2wV7N32l6oWF0MKg4f48z81v
WKhcwk7wkO4ECgcOvVuG82Js2wwkTQp8Q9GdoE5RVNUL6+VPvQx7pLGXpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeztGNGXzJSgD3UzT/KYW26RFu2MB8GA1UdIwQY
MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt
ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2
LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdy5zDst
O40zhWris2iaxjRmI7Tx7deT5GbH7Bh9lzLg1E82we38nnAYBJTnKuuLhfPFLA6A
V7bP5lz/Vv1MVbgpxA9lTp/y0cbMX0nkTrxXn5w2uZHxeJL4smoVlwZqTW6cayuL
yOYHVMZoC5m0UOW6sI01WHWyJYtD4r/YmzPFMIg8DmNp9Qrq8C2XWseRf/oGQNxy
s4YJynfrUuAPYoVU2RrgxbN8JWfK2Q8eK167rNfrL6YpYnXoD7j+DSiaVThUMCmt
DS/I21JxqA4hzGw67A3I67Ot7OCqybkHGhAONa/JmXxYPQoHvz4YBAWyu142SzjZ
7WrrQZDoAdkc4w==
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:47:00 2025 by rpki-client