This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          /HLZPmgVV0TTQi1oq1bbPtchULC5GG1KHu3iI1jjQAc=
Subject key identifier:   70:04:66:22:2E:96:1B:E4:A6:F5:D5:B2:2F:20:48:9A:1A:87:47:D0
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019AF68A5F04D6C31E72F5978C51F2054D79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          17AD
Signing time:             Sun 07 Dec 2025 02:00:54 +0000
Manifest this update:     Sun 07 Dec 2025 02:00:54 +0000
Manifest next update:     Mon 08 Dec 2025 02:00:54 +0000
Files and hashes:         1: 0gM9nO8aCfkT81wAB6FtCesEwDg.roa (hash: Lfwi2k/qzNFayxWwQOnJuaS4g7hdO3qEEZMxYRqe+is=)
                          2: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: hxS/doLBudihWKrgO14YEjt9pSJcfTq+JWQ4SM2yHRQ=)
                          4: ETcH2IvsrV9frQQAiGHCydePvXc.roa (hash: vnxbYaqSpCvvPsvgeAGAJuaPg4alEmcLbxdQJvK4GFI=)
                          5: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          6: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          7: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          8: WWtCrJTOa2fdz1x4NrejDaidA4c.roa (hash: bNRJCU/5ggmed8Sa2EXYIbSVMg5Nfmrhzw8GYsZOcgY=)
                          9: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=)
                          10: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          11: f7e24_kc_woNPGchU49zRaiPPtg.roa (hash: rsVGF94CsaYZyejnnB2G7Jx9MOV3cb8+8hyyFUvoFDk=)
                          12: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          13: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          14: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          15: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          16: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          17: w3JXIRcbr6KwnMwme1orx9slU8I.roa (hash: VFCCyy87daugzyIA/V3roqMFDyUsgWDtMgKdLSeZBKc=)
                          18: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:8a:5f:04:d6:c3:1e:72:f5:97:8c:51:f2:05:4d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Dec  7 02:00:54 2025 GMT
            Not After : Dec  8 02:00:54 2025 GMT
        Subject: CN=700466222e961be4a6f5d5b22f20489a1a8747d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:c4:a7:a7:4f:0f:c9:87:c8:1b:eb:f0:e0:
                    99:81:a5:c4:44:97:35:3d:2a:a8:6b:28:2d:cc:2d:
                    0b:4f:7b:d3:03:d5:59:7e:16:df:e4:d3:cc:f1:03:
                    47:f8:82:1f:06:16:79:28:30:49:47:10:49:3f:0d:
                    f0:59:c5:2d:81:90:51:29:e2:a2:e2:f0:fe:8a:f4:
                    ab:bb:78:39:1a:b8:14:de:01:ea:73:9b:e3:cb:6c:
                    3d:21:5e:aa:ca:66:a9:fc:9a:2f:e9:f2:5a:41:3e:
                    d5:34:ea:9b:97:9c:b2:1c:79:9e:c7:3f:ba:1e:b9:
                    5b:fd:a5:21:f1:0b:aa:4e:e3:18:27:78:ff:f9:6b:
                    2b:a1:b2:01:70:43:44:22:ef:25:cf:e7:a9:c4:87:
                    d1:3e:bd:e4:06:48:71:b2:21:72:55:ca:ff:3c:4b:
                    82:e0:1f:04:23:d8:c3:88:66:3d:b4:6c:49:91:36:
                    1a:a9:32:d4:f1:53:77:02:51:6b:18:17:86:c9:52:
                    ce:a4:78:82:31:ba:bf:14:63:e5:5b:8e:81:68:94:
                    bc:1f:46:d1:b3:34:a3:20:a5:17:93:9f:84:c7:8c:
                    6f:15:93:74:e7:65:c4:b5:b8:76:cc:0c:8c:63:33:
                    b5:83:68:0a:4a:dc:59:c4:7e:90:2f:79:76:79:01:
                    06:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:04:66:22:2E:96:1B:E4:A6:F5:D5:B2:2F:20:48:9A:1A:87:47:D0
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:56:28:df:33:dd:09:77:ac:9e:18:d4:dd:99:de:cd:36:da:
         1f:1f:ba:0e:90:97:e6:14:12:3b:75:be:cf:3b:26:3b:0d:97:
         8d:87:93:39:c5:3e:ef:94:08:cb:40:ed:23:7b:7f:cf:9b:56:
         da:d9:f8:21:35:55:de:24:16:ef:e5:2f:00:09:e6:97:05:4f:
         b7:78:cf:04:53:38:88:dc:05:a6:5c:8f:55:a9:ed:5c:1c:21:
         af:30:1e:fb:4e:80:06:b0:42:06:02:b2:54:8d:52:1e:90:c0:
         5c:0c:0c:f4:20:41:39:77:b0:40:4f:21:67:48:c4:90:54:2e:
         1d:7f:9e:ee:b0:db:2d:8c:12:e0:20:06:c4:3e:5c:5e:bc:4f:
         b0:19:b0:d0:67:32:ad:57:d7:2c:2b:8c:92:54:69:f8:27:6e:
         c4:a0:2b:69:bd:88:fb:8a:cb:b1:e9:e8:4c:32:1e:b2:06:5c:
         f5:2b:66:b0:09:bc:89:6a:4d:f2:a7:f5:13:b0:35:11:35:19:
         96:4c:c0:ba:d9:27:cf:45:30:d9:63:64:91:36:77:58:c5:1d:
         5b:eb:ae:ac:db:97:b8:e3:90:42:83:34:1e:84:b4:49:0e:64:
         7e:24:ad:d0:52:19:18:ba:c5:7a:de:f4:05:63:d8:d0:b0:15:
         fb:0d:92:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2il8E1sMecvWXjFHyBU15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjUxMjA3MDIwMDU0WhcNMjUxMjA4MDIwMDU0WjAzMTEwLwYDVQQD
Eyg3MDA0NjYyMjJlOTYxYmU0YTZmNWQ1YjIyZjIwNDg5YTFhODc0N2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquPEp6dPD8mHyBvr8OCZgaXERJc1
PSqoaygtzC0LT3vTA9VZfhbf5NPM8QNH+IIfBhZ5KDBJRxBJPw3wWcUtgZBRKeKi
4vD+ivSru3g5GrgU3gHqc5vjy2w9IV6qymap/Jov6fJaQT7VNOqbl5yyHHmexz+6
Hrlb/aUh8QuqTuMYJ3j/+WsrobIBcENEIu8lz+epxIfRPr3kBkhxsiFyVcr/PEuC
4B8EI9jDiGY9tGxJkTYaqTLU8VN3AlFrGBeGyVLOpHiCMbq/FGPlW46BaJS8H0bR
szSjIKUXk5+Ex4xvFZN052XEtbh2zAyMYzO1g2gKStxZxH6QL3l2eQEGzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAEZiIulhvkpvXVsi8gSJoah0fQMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlYo3zPd
CXesnhjU3ZnezTbaHx+6DpCX5hQSO3W+zzsmOw2XjYeTOcU+75QIy0DtI3t/z5tW
2tn4ITVV3iQW7+UvAAnmlwVPt3jPBFM4iNwFplyPVantXBwhrzAe+06ABrBCBgKy
VI1SHpDAXAwM9CBBOXewQE8hZ0jEkFQuHX+e7rDbLYwS4CAGxD5cXrxPsBmw0Gcy
rVfXLCuMklRp+CduxKArab2I+4rLsenoTDIesgZc9StmsAm8iWpN8qf1E7A1ETUZ
lkzAutknz0Uw2WNkkTZ3WMUdW+uurNuXuOOQQoM0HoS0SQ5kfiSt0FIZGLrFet70
BWPY0LAV+w2SeA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:26:00 2025 by rpki-client