This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          ZcWTjmv4x/axtxM9uZZRptdItaE7i21a1A3nj98mZWY=
Subject key identifier:   A3:72:5A:FC:AD:12:A8:43:AD:68:CB:88:AB:86:6A:63:B7:DF:05:33
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       019B37C56C8DC8524AC15F94BF7871BE4C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          17E2
Signing time:             Fri 19 Dec 2025 18:00:43 +0000
Manifest this update:     Fri 19 Dec 2025 18:00:43 +0000
Manifest next update:     Sat 20 Dec 2025 18:00:43 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: J2u-WNebQOND5pQrDIUacy8j8l8.roa (hash: Vvd0TjXjR9FhkBvtO2YJqbWdHXAU/GB3ZQoXK3zVnls=)
                          12: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          13: V-iBWNvDzOjE3oj3ZsxRXOFIkLI.roa (hash: bJv9u1JtLOAJLodQfH0YKSj356adakaFHXlAlJZDi/w=)
                          14: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          15: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: dhlldkiPp5juSaQ00zTbH0Nl4MBkPv6tU/DZVrBzNK8=)
                          20: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          21: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          22: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          23: qlRuFgW9QpSZ-B-QqBWtqwtHSbQ.roa (hash: NvSiolrhWigq47yPhLr31U+7NECb9us+yowLt16g6Mw=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          26: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          27: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          28: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          29: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:6c:8d:c8:52:4a:c1:5f:94:bf:78:71:be:4c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Dec 19 18:00:43 2025 GMT
            Not After : Dec 20 18:00:43 2025 GMT
        Subject: CN=a3725afcad12a843ad68cb88ab866a63b7df0533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:72:cc:8c:cf:09:2e:ea:3e:79:8f:da:c4:8f:
                    82:21:3f:ae:e9:91:d9:18:1f:57:30:54:86:e2:29:
                    18:cb:57:44:88:04:56:ae:dd:80:4f:2c:91:3f:14:
                    73:df:78:d7:9f:0d:34:c3:4e:78:ea:25:d0:b0:0c:
                    a6:fd:5a:01:83:6a:1d:0b:8a:60:25:a7:d5:61:48:
                    ac:5d:0f:52:04:71:20:44:8b:85:26:0a:84:25:23:
                    6a:82:03:28:50:e7:2b:40:c2:94:5a:00:bf:d0:83:
                    7b:26:a9:b0:e2:b4:7c:fc:82:7c:de:ff:a4:9d:83:
                    28:1e:05:f1:d0:03:8c:be:da:ce:7d:c0:ac:77:c1:
                    64:20:1c:73:62:c3:0e:02:3a:79:83:75:50:27:d5:
                    35:e7:7d:7c:43:f6:2c:a0:5a:d3:a2:bf:1c:87:b3:
                    b8:30:0b:1f:c9:39:f9:3d:a9:59:7b:46:90:ef:b3:
                    e8:f0:e1:a8:a3:04:a3:90:2e:e3:17:81:62:3c:01:
                    19:86:14:15:eb:94:5f:09:ff:54:1b:44:03:64:a1:
                    8f:76:23:97:a3:9c:01:da:98:0f:2f:7b:2d:c8:70:
                    52:3e:6a:0a:bf:05:95:cf:4e:8e:fd:c8:d5:7e:93:
                    a9:98:8f:09:30:ad:99:80:86:9f:46:b3:f1:c4:79:
                    ff:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:72:5A:FC:AD:12:A8:43:AD:68:CB:88:AB:86:6A:63:B7:DF:05:33
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f9:3c:54:c8:59:63:5e:ac:26:55:0b:1b:c7:59:03:8f:52:
         6b:92:1e:73:67:4c:ed:1b:4b:dc:df:bd:90:86:53:29:10:47:
         30:bc:17:8c:63:f6:29:f3:06:33:ba:23:0c:e3:4d:1a:e7:38:
         d2:1d:59:8b:db:3e:6f:4f:2b:fc:1d:4f:30:87:4d:11:4b:6d:
         76:56:6a:8d:b6:aa:47:f9:13:a1:87:ff:3a:59:28:77:2a:88:
         44:b0:1f:ed:3c:7e:c3:54:dd:7d:e7:ab:7f:0c:32:70:60:af:
         de:7a:d0:88:e9:21:8c:8c:3e:df:59:a1:e4:8e:ab:b9:cb:a4:
         c4:4f:3e:07:48:e4:da:6b:36:bb:95:36:d5:d4:f0:e6:80:79:
         34:d4:35:d0:9e:95:57:2f:6c:a9:7c:ce:58:ea:03:fd:1b:49:
         cf:9c:40:ee:82:c3:88:9c:75:5c:54:ec:77:a9:b9:94:71:be:
         f4:e5:e3:ab:61:1e:9a:b5:a4:fa:bb:9c:fb:67:c0:47:d5:64:
         2d:2b:e9:14:ee:e2:ee:2e:55:1c:52:a6:8b:b6:07:e0:7d:c1:
         42:de:a3:29:5a:f3:a3:fe:f6:76:c5:8d:88:99:68:aa:3e:4b:
         a1:47:e0:19:94:a0:8a:73:4c:54:03:56:a0:de:47:59:51:da:
         1f:6f:92:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:00:10 2025 by rpki-client