This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          +rc+WpdYzPDC2pk18FoE2EenkAUdRFVnec9nLNyCJQA=
Subject key identifier:   F7:B6:6D:F9:D1:EC:FD:9C:64:0A:EA:0A:F2:B8:1A:44:C5:E8:9E:54
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019B514E3E74A5AF5B36DE941A9615541C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          17DC
Signing time:             Wed 24 Dec 2025 17:00:40 +0000
Manifest this update:     Wed 24 Dec 2025 17:00:40 +0000
Manifest next update:     Thu 25 Dec 2025 17:00:40 +0000
Files and hashes:         1: 0gM9nO8aCfkT81wAB6FtCesEwDg.roa (hash: Lfwi2k/qzNFayxWwQOnJuaS4g7hdO3qEEZMxYRqe+is=)
                          2: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: Jr+h4ECwJ0daZ+SjOjLWJkm/cHI2G3S1zgUcK1NgLNI=)
                          4: ETcH2IvsrV9frQQAiGHCydePvXc.roa (hash: vnxbYaqSpCvvPsvgeAGAJuaPg4alEmcLbxdQJvK4GFI=)
                          5: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          6: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          7: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          8: WWtCrJTOa2fdz1x4NrejDaidA4c.roa (hash: bNRJCU/5ggmed8Sa2EXYIbSVMg5Nfmrhzw8GYsZOcgY=)
                          9: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=)
                          10: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          11: f7e24_kc_woNPGchU49zRaiPPtg.roa (hash: rsVGF94CsaYZyejnnB2G7Jx9MOV3cb8+8hyyFUvoFDk=)
                          12: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          13: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          14: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          15: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          16: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          17: w3JXIRcbr6KwnMwme1orx9slU8I.roa (hash: VFCCyy87daugzyIA/V3roqMFDyUsgWDtMgKdLSeZBKc=)
                          18: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 14:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:51:4e:3e:74:a5:af:5b:36:de:94:1a:96:15:54:1c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Dec 24 17:00:40 2025 GMT
            Not After : Dec 25 17:00:40 2025 GMT
        Subject: CN=f7b66df9d1ecfd9c640aea0af2b81a44c5e89e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:f1:40:16:72:ce:6e:e9:25:5a:f7:5e:73:
                    c6:89:b9:82:94:01:1a:3a:93:f9:f5:31:eb:28:68:
                    f4:2e:9c:c5:6d:71:1c:0c:a0:c5:f5:4c:36:ca:62:
                    cc:e5:ea:2f:69:36:b3:09:54:95:b4:0d:8d:aa:53:
                    2e:6f:d4:ce:a2:70:d6:8e:a0:48:72:6a:a6:1d:de:
                    2b:4f:ec:0b:97:41:f9:c4:f4:e0:88:72:32:ea:e9:
                    38:18:0e:8a:a4:cf:f0:2b:77:c9:5f:33:10:03:fe:
                    eb:70:6e:8b:0a:20:e9:29:a1:5d:b3:4d:39:80:77:
                    37:c5:09:4c:cf:ee:00:5b:54:38:b1:e0:e6:e7:4c:
                    11:36:cc:67:97:2c:3a:7a:2e:68:5a:3d:3e:00:bb:
                    fb:84:b2:61:63:2b:12:cf:a3:d9:fe:2f:b9:39:90:
                    a7:2a:eb:5c:4c:79:81:6c:06:2e:c0:32:e1:ac:22:
                    38:a2:62:4a:21:c0:92:8a:43:a2:a6:ab:7f:81:ce:
                    d1:ce:e5:98:69:ba:80:18:a6:99:c9:fa:46:66:f8:
                    b9:88:4a:e5:48:5f:86:a3:72:b5:eb:34:51:f2:d9:
                    47:80:53:e5:64:b0:67:04:df:f0:dc:fe:57:ba:e3:
                    b0:0c:05:11:00:ce:8a:7c:78:1c:98:7a:21:92:09:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B6:6D:F9:D1:EC:FD:9C:64:0A:EA:0A:F2:B8:1A:44:C5:E8:9E:54
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fb:4b:c8:58:99:03:26:ba:94:11:10:fb:ea:c5:79:0f:74:
         e4:fe:3f:05:d0:06:d2:47:4f:d1:96:63:02:95:55:88:f9:4c:
         1a:e3:95:25:aa:19:ef:f7:fd:ee:3b:91:96:17:4f:3c:a5:be:
         c2:17:ba:88:b2:fd:d6:d1:16:88:90:87:a0:2c:65:c9:1b:e9:
         72:f4:5a:e8:f2:07:16:42:2c:d7:7a:70:16:6d:6b:a2:5c:84:
         62:b9:96:f2:24:f1:91:53:49:88:b5:fb:bc:04:32:6c:50:2e:
         ee:db:64:19:5c:08:70:b5:69:06:f5:68:00:a6:c4:8f:3c:f4:
         d8:6a:c2:0b:8f:9a:d5:74:e0:64:43:72:ef:da:9b:75:72:50:
         e7:86:a9:ce:5d:b6:81:e7:a5:26:8e:93:67:d9:e7:52:2f:7c:
         99:58:25:e1:70:2a:cc:43:4c:41:9a:6e:b3:72:04:75:5c:0c:
         27:ba:6b:24:62:b6:65:38:47:dc:fa:b2:ca:3b:5b:0f:59:cf:
         8f:41:d9:3c:c2:96:63:81:4b:de:73:e9:b6:2f:cc:11:a5:54:
         50:b5:02:9f:28:7b:e3:7f:58:68:13:38:dd:02:b8:8e:a8:bb:
         2c:e3:24:3d:63:ca:b0:58:6f:6b:4a:2b:29:fa:8a:1c:c1:84:
         36:70:bd:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtRTj50pa9bNt6UGpYVVByKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjUxMjI0MTcwMDQwWhcNMjUxMjI1MTcwMDQwWjAzMTEwLwYDVQQD
EyhmN2I2NmRmOWQxZWNmZDljNjQwYWVhMGFmMmI4MWE0NGM1ZTg5ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SHxQBZyzm7pJVr3XnPGibmClAEa
OpP59THrKGj0LpzFbXEcDKDF9Uw2ymLM5eovaTazCVSVtA2NqlMub9TOonDWjqBI
cmqmHd4rT+wLl0H5xPTgiHIy6uk4GA6KpM/wK3fJXzMQA/7rcG6LCiDpKaFds005
gHc3xQlMz+4AW1Q4seDm50wRNsxnlyw6ei5oWj0+ALv7hLJhYysSz6PZ/i+5OZCn
KutcTHmBbAYuwDLhrCI4omJKIcCSikOipqt/gc7RzuWYabqAGKaZyfpGZvi5iErl
SF+Go3K16zRR8tlHgFPlZLBnBN/w3P5XuuOwDAURAM6KfHgcmHohkglTQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPe2bfnR7P2cZArqCvK4GkTF6J5UMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/tLyFiZ
Aya6lBEQ++rFeQ905P4/BdAG0kdP0ZZjApVViPlMGuOVJaoZ7/f97juRlhdPPKW+
whe6iLL91tEWiJCHoCxlyRvpcvRa6PIHFkIs13pwFm1rolyEYrmW8iTxkVNJiLX7
vAQybFAu7ttkGVwIcLVpBvVoAKbEjzz02GrCC4+a1XTgZENy79qbdXJQ54apzl22
geelJo6TZ9nnUi98mVgl4XAqzENMQZpus3IEdVwMJ7prJGK2ZThH3PqyyjtbD1nP
j0HZPMKWY4FL3nPpti/MEaVUULUCnyh7439YaBM43QK4jqi7LOMkPWPKsFhva0or
KfqKHMGENnC9dA==
-----END CERTIFICATE-----
Generated at Thu Dec 25 00:04:54 2025 by rpki-client