This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          KSid6uNtqQKJGL4yqyxDko+NJHYcPfNgucH7Dd4KNwI=
Subject key identifier:   3A:11:69:D6:49:04:24:D2:D4:88:EF:8F:A5:88:23:0B:D1:B7:19:53
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       019B3B6B4FBF2E880B616C9D61155EA9FFBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          17E6
Signing time:             Sat 20 Dec 2025 11:00:47 +0000
Manifest this update:     Sat 20 Dec 2025 11:00:47 +0000
Manifest next update:     Sun 21 Dec 2025 11:00:47 +0000
Files and hashes:         1: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: 8prV+b/wg3C+HBPvQlF/emoHLcjNR5WK7BFiMutgbZI=)
                          2: 7Cj5773Ww2G0LSY1fnydQfxQCM8.roa (hash: aUx5ljL2u1JfwzPAWHUuxa8lyiqbBKjx2VkYnyoKl00=)
                          3: 7KuWJBo9EkXJvaHhQEOW9ycaK_I.roa (hash: UiGaMWGSSCU/HAZ7GHDvtMdy2TyJGvHOCHWhEmd6728=)
                          4: 7w_UXb_9EuacQXaOkUvAB9t3GPY.roa (hash: BdddFhDjZUrdf5plsycRSqL9pb4uMD9DIqhfXxLsESI=)
                          5: 9Du2tHlplI8cqKMhQkDQrma7ABw.roa (hash: tHZwo/QnwGrZt6X37EyHYtZuWfqyTSrPiMBPcRX5QtA=)
                          6: Asu0DH_A5v7HQJH6cJ--acq6gs4.roa (hash: p83oT8k8StFZXPPk4WZFA6xLSJnWFONbnXX8tMyuY+E=)
                          7: DIIPkhIK2GpSY7ZT1zdEaY1N8S4.roa (hash: GZZtKk3KUtgI6t+m4e2aEMnaIKRSut5aw/uHqLEVs54=)
                          8: HkpMpgcE2miG9qn79yi3XbK_pOE.roa (hash: 0Rr449PN12HQpu7nIek/UBDMZP0dQl1SRcWWzh64TnM=)
                          9: Loa4kWXHd_gyVar7KKfuCbOTQSI.roa (hash: V+IAftZbMV1uaMDIpq8IX4vqfn+FazLdtHW0Gi6raiE=)
                          10: MhQOqJ6yO4vtkdZaJ529XcXplng.roa (hash: yV3s2AyGwCS79L9utxt/xv+dOsJ83DLEVBUZQJXDxnI=)
                          11: OiUKYkPvCpqnOXZ9zOVHLonU2AY.roa (hash: Lhbego4QvDRSaxc+Seq5OHB8z3WLSv1waMp2zJgiuoA=)
                          12: PwHMe4i6pz51Ahrp1W-49Rgc_vo.roa (hash: DVJmDnhZvnviJ4n66jT0o+c4DIjAzAehQrpeXl6SGUU=)
                          13: R0cDHc3n2qmMEAUS6woEeV4DrUw.roa (hash: QJ/g2HXWAm89HNayhA1QKb5SEB9BRX6t6S4vbuLEEGQ=)
                          14: RzWktUnWleyuAASpHpH94KSShkY.roa (hash: BoPLXDFgsIgaZzKNJy1XCZ2/akxih7lLoVGkf52tsHE=)
                          15: WfonxlLMZwy-HhCvndkmDlWeP1U.roa (hash: D2to2wlUfQBqZmE9EvBIj/W3y3+jGxVEf6JIb4l/qG8=)
                          16: Y1p8iN7vXVc5hkWklA-jsy2oDOs.roa (hash: TAYuH8YzwKdTZbEvh6nabM+xwxNAutYkky5c5hoWXrE=)
                          17: dIkGudwt-RR6RWXajZoxz1vlHzU.roa (hash: OKPlohfOihRtk51p5gTQk9DKoBwl84PalakI/wclgFg=)
                          18: fQowbtBwRpKjCzhE3ojDTNtTyaM.roa (hash: 5hmuOcmFlB2Eh4C339cOr4B957mNZCHeN0L/cBjITLk=)
                          19: gL8L6RZ2XqjaOf7a7aVACmgbZKI.roa (hash: kLhGxAypt99j/jO34VpwpOJzvqgyVsGY/56bargYYM8=)
                          20: lGSh8HAGsvLzJWijuCn5mOFbAtA.roa (hash: g6Sdp9SO3zguPzUUGeNhkKmFB7oPgHI90W+QRmIj6bo=)
                          21: q5t8pCbXocy8z93aEyQcoKIUr7k.roa (hash: SLK2Vlk0BOq5d8DR4zM41FXSCnTp47baUcSuvvAqgGA=)
                          22: vx0LBPGo6U2A4w4ADzD_udSk_bE.roa (hash: 1BQsFPNT0rTtzolZzu4KuR7RQiaLrcqqi5uIXl00aQQ=)
                          23: w1-75ZX9HBx8AUrVwUOKynI5k3I.roa (hash: hPTOiyA3+YJ83FFkcYpaKb35ER44DCXiwk4q5wNRhf8=)
                          24: wapfnXLlA7DvDqRs4g9z4YLu3L0.roa (hash: Hxhpn18vB/H4YZziS5GXimeo8mFzlErLcl0bPjfu1Vc=)
                          25: z6n_jUG6I_xYjDJHeip0DRFjTRM.roa (hash: /Wm48sS3g9Z/4zp/4yyUdkHbex7iTx088gxRDh1F6/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:6b:4f:bf:2e:88:0b:61:6c:9d:61:15:5e:a9:ff:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Dec 20 11:00:47 2025 GMT
            Not After : Dec 21 11:00:47 2025 GMT
        Subject: CN=3a1169d6490424d2d488ef8fa588230bd1b71953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:86:f4:45:bf:d9:5a:06:a5:27:fd:81:91:
                    7d:3d:30:c8:45:84:05:c1:48:06:70:73:44:76:62:
                    6d:ae:e3:df:7c:f1:e2:e1:c6:b6:ed:b1:6f:38:ed:
                    e4:e4:3d:ae:19:3f:d5:c6:94:06:85:4e:8b:ff:04:
                    ae:a8:5b:97:7c:9b:ea:e9:49:c5:c7:48:c8:0b:64:
                    75:2a:15:1b:42:c6:a3:7c:13:6f:08:19:b4:14:40:
                    55:fc:ab:2c:bc:e7:b1:29:10:c4:b5:c9:99:a1:33:
                    c1:14:76:05:ac:34:27:06:88:78:fa:4f:ef:44:45:
                    10:30:e9:d6:4f:23:ec:1f:f6:ec:4c:10:de:a8:e2:
                    97:12:d1:7e:fd:c9:bb:69:4d:fb:ed:10:aa:66:d1:
                    0c:7f:ed:92:21:7c:b7:30:fd:c9:cb:88:ec:f6:69:
                    96:f0:50:5e:dd:f9:f7:25:0c:4b:c4:f9:f3:1d:05:
                    2c:b5:b7:dc:40:aa:e5:82:b7:1a:19:b6:68:d5:ee:
                    fb:68:48:84:1e:f3:1a:e6:c3:84:34:d5:03:84:35:
                    47:64:e4:c7:85:79:7d:8e:4f:82:74:0e:96:9a:0d:
                    d5:be:5e:b0:42:0a:6b:fd:21:1f:d0:9c:ab:37:84:
                    0e:54:5a:25:3a:88:36:b4:b7:ee:e1:1a:82:aa:07:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:11:69:D6:49:04:24:D2:D4:88:EF:8F:A5:88:23:0B:D1:B7:19:53
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:3b:41:13:c0:46:c5:6b:d5:fc:c9:6d:1a:d7:aa:a5:8c:eb:
         54:03:b7:c1:8f:92:0e:9d:2d:2a:94:ee:2d:dd:62:1d:e2:f5:
         ba:dc:65:0a:79:14:51:5b:73:b1:ae:e8:a7:33:af:15:e7:0b:
         27:83:22:47:b6:4c:56:61:f1:09:16:e4:ed:72:83:28:fd:0a:
         dd:06:10:e8:3f:07:4a:ad:79:18:5f:86:32:9a:64:11:bc:86:
         27:4b:7e:96:0f:78:af:f5:72:79:c4:3a:0b:ae:40:71:62:4e:
         b5:dd:c4:50:05:af:56:e7:18:18:8f:86:cc:2f:a8:a9:7f:29:
         f8:e8:8b:85:d1:a0:42:bc:29:a7:b8:46:a5:4a:34:c6:4d:21:
         e9:ae:12:eb:83:84:90:b5:3d:12:ff:94:8b:c1:d9:22:26:c2:
         2b:9a:86:99:e8:51:be:29:0d:7b:8a:71:b6:d4:f5:cc:7b:99:
         55:1b:74:a7:7b:c4:3b:ec:03:f3:3f:f5:50:20:36:fb:e4:a8:
         10:4e:47:ce:44:1a:3f:f8:5b:5f:f6:dc:5b:7a:7a:d7:62:32:
         08:e4:3c:a8:50:d8:27:0e:b6:90:fe:4d:bf:67:70:22:50:0e:
         31:a4:b2:7a:de:7f:6f:75:6d:15:59:3b:fd:29:13:d7:7a:ec:
         40:f5:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:56:01 2025 by rpki-client