This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          ALWLIWa3MIKdQaeqYbSHg4xwL20INvKEm6dxY2IIoXg=
Subject key identifier:   C2:E9:95:FB:BB:56:CD:7F:A5:56:F3:79:1F:5B:7C:13:C6:10:5D:CB
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019B1125F87BA911DFBCE826DD905C8AF12F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          1787
Signing time:             Fri 12 Dec 2025 06:00:59 +0000
Manifest this update:     Fri 12 Dec 2025 06:00:59 +0000
Manifest next update:     Sat 13 Dec 2025 06:00:59 +0000
Files and hashes:         1: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=)
                          2: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=)
                          3: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=)
                          4: DN12qBzUGkVhRMYHW6P-wHN3H-Q.roa (hash: x2S5h7iauxlMwn5C36mbaOnEH7ELW/M3cT6pPWGqdXw=)
                          5: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=)
                          6: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=)
                          7: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=)
                          8: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=)
                          9: HbeQRoxPpDHCAC-nA9_3-JrPAeM.roa (hash: G4sQzJXdS6O2EylSl79XWh9ZSYXUAtP0Wp4/fBYIKYg=)
                          10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=)
                          11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=)
                          12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=)
                          13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: BLGvQxTP6Ht4vy/0H+NDXC0ufcII0Yw6lp/5NUO/Dpc=)
                          14: _Flf5DnTwHuT82uk-rjJ-aUZBWU.roa (hash: QPTNTyL8Zldulvvmt2UMxQpz2Oe0nqDM6jKT4JF5VAA=)
                          15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=)
                          16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=)
                          17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=)
                          18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=)
                          19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=)
                          20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=)
                          21: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (hash: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:25:f8:7b:a9:11:df:bc:e8:26:dd:90:5c:8a:f1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Dec 12 06:00:59 2025 GMT
            Not After : Dec 13 06:00:59 2025 GMT
        Subject: CN=c2e995fbbb56cd7fa556f3791f5b7c13c6105dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:9c:e7:e1:b0:4b:a4:87:ea:e4:2d:4e:1f:
                    85:d7:f4:70:87:ea:cb:29:ab:2c:4f:33:99:31:db:
                    b3:63:bb:ac:a7:d8:13:97:37:bb:85:73:48:77:cd:
                    5a:ed:ed:bf:db:26:37:56:99:22:2b:5c:8d:c6:82:
                    8b:a7:69:3b:bb:89:8c:d8:55:4a:a4:4c:f6:fc:6d:
                    09:b6:3e:c9:ed:f5:09:86:77:73:26:b7:29:a8:1e:
                    26:a7:3e:da:ba:62:9a:33:03:46:ca:e2:58:35:98:
                    0c:f8:4f:e3:47:b1:2a:9d:32:8f:56:25:ee:e0:e5:
                    c2:db:bd:07:6c:27:5d:78:52:af:ef:c5:c3:9b:2d:
                    0d:e4:ac:5b:70:66:fd:bf:67:e2:6f:7e:8b:7c:a4:
                    6c:5d:3c:99:cc:f7:dd:80:4f:bf:ea:fb:54:85:3e:
                    db:a7:df:d9:b0:d3:03:d3:39:b6:23:c7:0e:5a:f3:
                    25:e7:2c:31:b8:a0:85:12:dc:87:7f:ef:2b:3c:26:
                    a6:db:8a:0b:1e:b3:75:04:3f:5e:c6:c7:f2:da:10:
                    10:63:f7:a9:a0:50:e4:16:6b:68:eb:4c:ea:83:93:
                    2d:e2:d4:62:fe:fd:19:7f:d5:87:5d:0a:89:83:9e:
                    46:b0:7d:12:7b:ed:f2:da:e1:dc:ba:5d:d7:a1:90:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E9:95:FB:BB:56:CD:7F:A5:56:F3:79:1F:5B:7C:13:C6:10:5D:CB
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4a:b2:1e:20:07:4b:65:d3:c6:1a:25:68:d8:d3:ae:ec:1a:
         14:dc:ae:53:30:39:6c:48:a0:5b:c4:87:d5:92:04:9d:66:99:
         6a:8e:d2:c2:1d:93:cf:a5:cf:32:75:af:f5:fc:4f:a8:1b:3e:
         03:3d:53:5c:3e:0a:ce:fc:07:c0:de:17:4e:16:d5:90:a8:67:
         d7:b7:2b:30:24:c7:b6:6d:4b:c4:26:55:da:3b:09:9c:f5:3c:
         16:0c:c6:63:f5:6d:78:be:d9:93:61:a1:75:63:df:dd:5f:12:
         30:3a:19:ff:a5:a1:65:e3:c3:d9:d5:00:3d:ee:6e:ff:71:09:
         89:ad:a7:96:43:5f:79:d3:26:d8:94:62:95:64:2a:50:70:b8:
         80:48:55:c4:48:6a:f2:c5:87:87:ba:7e:d3:50:a4:65:98:d1:
         e2:54:50:ce:9a:31:b7:f3:50:bb:93:0d:dd:39:e8:31:d1:10:
         30:fe:cd:66:dc:2c:66:ac:fd:eb:2a:c8:e0:01:7d:f8:a0:0c:
         d0:20:a6:38:4b:d2:b0:95:dd:51:98:59:ae:03:41:44:25:9d:
         86:7f:5b:a6:ad:54:ea:70:98:73:00:89:1d:f4:7b:1c:5e:41:
         00:16:02:f5:9d:90:59:05:b4:ca:7d:a4:0e:4a:11:e1:1e:0d:
         79:5d:cf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 07:58:59 2025 by rpki-client