This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File:                     IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier:          6CmjCmfdW+WUG7x73CHM4ySCLkbmfwAVTX/Md/xDISg=
Subject key identifier:   BA:42:63:C0:2F:12:92:14:4F:98:DD:42:17:4D:AE:98:B6:09:A3:30
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer:       /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial:       019B353229F20506B0237D32DC01AEF7AF1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number:          17A9
Signing time:             Fri 19 Dec 2025 06:00:38 +0000
Manifest this update:     Fri 19 Dec 2025 06:00:38 +0000
Manifest next update:     Sat 20 Dec 2025 06:00:38 +0000
Files and hashes:         1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=)
                          2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=)
                          3: 78DP4JpO0GuLDhxFNhulhhaTqUo.roa (hash: Rh5+zMkCGInI8zzqysJQHxpiQCSJBnW+Xod+B9PdrOs=)
                          4: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=)
                          5: AbjHdO_ih7eu4AB0MD87DSrEVyg.roa (hash: K/wxvuWNfZCed3xovqP1ilL+Dg1htCygooCGyG2tXuA=)
                          6: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=)
                          7: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: nQrzUhnUoMdHcHDJPronjaxdYYlAuAk4q1uxMrcH6sU=)
                          8: OQwatOOKNts1l5QciIRYlIrZrUA.roa (hash: /WVw3A1izDTxQhVDT4B9DMpIDCfh/f6b1AgbmhKnBE4=)
                          9: TsT5WaKHHZB-JvTLxHzgqzbC7j4.roa (hash: nhQWYMu3qPydKoRyyFbgvaQmgpO09CG2cC8eGuvFdmU=)
                          10: VM7NBzljc-wtTrqP56M9539lbgc.roa (hash: vBQyHiLXkYiKjrIGh1q5dMs6KoS64i4gV+QTksQfMRY=)
                          11: XACDzW2DvJtXZqh32shSyTGpMfo.roa (hash: 7jDJaTEf/pbjfn/nXaVKj3Ipty/13MWGNhQwOBvO9uQ=)
                          12: dxfXnbx8g-ueseuqILyAyDh00Qs.roa (hash: vb8oCBCazuh1bfgy8OwyPqKmC8xg0hB0ISse4SKyWgE=)
                          13: eBMU47RJAdEYTPzla1b8mlhhl6A.roa (hash: M/ja1MMxsAp21s/DGBsjHZmAiVCmpwTnVIxkdI37Uso=)
                          14: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=)
                          15: j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa (hash: 6UjU1Ddii7Tnr8YP+8IBQJ3W1ScDEYLrt5AGNeYkw7w=)
                          16: oFmlzP6ML3vgrJzYKtoah3Clk-k.roa (hash: w9hGd8N7afhoyUOGmiu3kSdi4CKMYM8sitELfKuLv2k=)
                          17: pL3i2ZZ9emPHPv8_low9IJJ1mqM.roa (hash: RjovUh5nlh9maakqrR1LT9Y7/iHkn9blWZ2NzRVi0JI=)
                          18: zK-byoszE4NY6E1kzAerRlMAkRw.roa (hash: rU/ovIRGgstJt6kwx00cqegZjBk/AcsVlza0mM2AauE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:32:29:f2:05:06:b0:23:7d:32:dc:01:ae:f7:af:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
        Validity
            Not Before: Dec 19 06:00:38 2025 GMT
            Not After : Dec 20 06:00:38 2025 GMT
        Subject: CN=ba4263c02f1292144f98dd42174dae98b609a330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:11:98:33:14:cb:fc:2f:f0:3d:3a:40:27:
                    c2:f5:86:5f:b1:4a:93:3b:e2:15:84:bc:3c:c9:26:
                    23:1f:86:c1:d4:73:e6:2f:91:66:c3:de:a2:e5:18:
                    1d:27:5c:ae:1e:d4:0a:b2:6a:7d:99:41:41:43:fe:
                    42:2b:8d:2b:64:a5:fd:5b:af:c6:ed:0c:60:6b:d3:
                    0b:40:85:da:37:27:9e:b4:73:a3:43:f2:f6:cf:5c:
                    29:ab:b3:f9:16:db:ec:e2:07:37:6c:7d:4d:6d:bf:
                    79:8d:71:d1:37:8d:50:21:29:67:da:d8:c7:64:b3:
                    72:9e:ec:6a:c3:96:93:18:9a:6d:57:23:eb:b5:16:
                    f2:2c:29:6b:80:1c:27:7a:1d:fc:23:5c:92:eb:ae:
                    7c:04:17:14:5e:e0:84:92:59:bd:9b:5b:b0:b0:5e:
                    2a:62:56:a0:e3:3b:7c:fe:6c:5a:64:fb:a9:17:b7:
                    cf:74:e4:60:7a:f2:51:15:0a:27:93:08:f3:ae:67:
                    31:9b:0a:7a:0a:c6:9f:f9:e9:bd:f5:72:b8:65:1c:
                    cb:29:ae:80:ec:ae:71:31:14:3c:2b:e2:a2:c3:7f:
                    95:99:f3:b9:0d:39:60:b0:ec:53:e3:c8:33:ef:3a:
                    a5:8c:13:eb:58:5f:86:cd:62:ef:a9:58:72:76:d4:
                    ee:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:42:63:C0:2F:12:92:14:4F:98:DD:42:17:4D:AE:98:B6:09:A3:30
            X509v3 Authority Key Identifier:
                keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:47:0d:65:72:7b:9c:1a:5b:7e:f0:40:60:10:b9:8b:2b:65:
         35:d0:48:69:ba:e5:cb:4b:ed:f5:e6:15:ef:04:3a:f5:09:2f:
         59:d2:73:fb:22:41:c5:ba:fd:22:19:53:48:b1:c9:03:0e:74:
         5d:77:ec:cc:e7:38:c8:fd:3c:d0:b5:3f:a4:d7:11:89:b6:5e:
         91:d0:e6:01:5e:0b:9d:e5:b7:1b:4e:9b:db:54:8d:7e:86:a3:
         0d:65:65:f9:da:c1:3f:66:7d:f4:95:4c:bf:98:d8:dd:a0:4f:
         84:b9:42:01:de:5b:3e:60:3b:dc:66:5f:96:b4:69:f4:b3:82:
         42:32:10:7b:4e:46:cf:39:ae:bb:db:cd:c3:34:6f:6e:84:ef:
         3f:6f:a5:a2:c3:cc:e1:4c:13:4f:6a:0d:54:cb:24:40:20:23:
         e8:51:e4:69:92:3a:1b:0a:81:ea:de:3a:00:75:d3:b9:5a:e4:
         12:3c:ad:03:78:24:a5:88:da:fe:fd:c5:11:bc:ff:b2:ea:52:
         a6:04:11:10:7a:c0:c2:82:45:16:dd:9a:07:4d:ba:c4:c2:de:
         01:16:95:58:06:d8:3b:43:42:ac:e7:79:f6:ef:45:56:06:10:
         69:3e:ff:c4:99:f4:31:d8:98:07:70:fb:ed:dd:05:eb:02:56:
         50:62:58:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs1MinyBQawI30y3AGu968dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj
NGM4ZTgwHhcNMjUxMjE5MDYwMDM4WhcNMjUxMjIwMDYwMDM4WjAzMTEwLwYDVQQD
EyhiYTQyNjNjMDJmMTI5MjE0NGY5OGRkNDIxNzRkYWU5OGI2MDlhMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeIRmDMUy/wv8D06QCfC9YZfsUqT
O+IVhLw8ySYjH4bB1HPmL5Fmw96i5RgdJ1yuHtQKsmp9mUFBQ/5CK40rZKX9W6/G
7Qxga9MLQIXaNyeetHOjQ/L2z1wpq7P5Ftvs4gc3bH1Nbb95jXHRN41QISln2tjH
ZLNynuxqw5aTGJptVyPrtRbyLClrgBwneh38I1yS6658BBcUXuCEklm9m1uwsF4q
Ylag4zt8/mxaZPupF7fPdORgevJRFQonkwjzrmcxmwp6Csaf+em99XK4ZRzLKa6A
7K5xMRQ8K+Kiw3+VmfO5DTlgsOxT48gz7zqljBPrWF+GzWLvqVhydtTumwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpCY8AvEpIUT5jdQhdNrpi2CaMwMB8GA1UdIwQY
MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt
ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3
LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEcNZXJ7
nBpbfvBAYBC5iytlNdBIabrly0vt9eYV7wQ69QkvWdJz+yJBxbr9IhlTSLHJAw50
XXfszOc4yP080LU/pNcRibZekdDmAV4LneW3G06b21SNfoajDWVl+drBP2Z99JVM
v5jY3aBPhLlCAd5bPmA73GZflrRp9LOCQjIQe05Gzzmuu9vNwzRvboTvP2+losPM
4UwTT2oNVMskQCAj6FHkaZI6GwqB6t46AHXTuVrkEjytA3gkpYja/v3FEbz/supS
pgQREHrAwoJFFt2aB026xMLeARaVWAbYO0NCrOd59u9FVgYQaT7/xJn0MdiYB3D7
7d0F6wJWUGJYLw==
-----END CERTIFICATE-----
Generated at Fri Dec 19 10:35:05 2025 by rpki-client