This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File:                     6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier:          EDVtRRoPoKPEXr54wPHpSYt3agAc3pnOYg4nwMekcQo=
Subject key identifier:   EE:42:C2:5D:19:B3:D2:85:B5:F5:50:F3:E7:EC:10:C9:5C:CF:26:51
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       019B07170CDA51A616A4B91E08849C5CB336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number:          031E
Signing time:             Wed 10 Dec 2025 07:08:29 +0000
Manifest this update:     Wed 10 Dec 2025 07:08:29 +0000
Manifest next update:     Thu 11 Dec 2025 07:08:29 +0000
Files and hashes:         1: 11abjUECt78CI4jG-uBZrzou2to.roa (hash: 1RiuteOkDQKooCQrx3e6Wy4U2IWOs71FVYA/JTBz8O8=)
                          2: 1qiR31b7CdS9Trli9AVTHEeogq4.roa (hash: MOeY3wjDcl6db4aacGkO8F1pX14sP/Futaitk3A7SnY=)
                          3: 2X78Dh7C7IK9HQpIdvex6cBM1zY.roa (hash: wipecr4RWsrjr1LobZ27g68/o0lGoPvjX6FqbG4G5vg=)
                          4: 4xVy8n1nhBpAya1KevWUaTI2tB8.roa (hash: 20aLYH4n1FuIXOWrztzrtcCxRBgx6WLXVkqg5CHqw0k=)
                          5: 52yRIEJtEfgFBpWr58fadnScoJw.roa (hash: YmNixuazA5Vsqwop7vZiylftf51KooRSucAzjd1m6wI=)
                          6: 68M2owrwonGUKTmptsMxSICxvzc.roa (hash: Oa0fedQajgDxkwDeccQyxl6+5J3W6s2tK5cH8eMToVk=)
                          7: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: o6OaUFl/0Kgv417KaxEgq9JDSayCxOIwq/va8Pcb+Fk=)
                          8: BtaWKpewp0t-jzKE-k6lFnfI0_c.roa (hash: DCOoNIe4oBMll7PycXcrB8Q8Pxkmj5k38ygxgzs+uLA=)
                          9: Ck51eA081sqLICziway3EXtym_k.roa (hash: 2MWWtOANjJSmkcfpJCe5Dn7HPUNug/jW3r3pG5kbs+E=)
                          10: GzCf6eer-0KJGSOeGO_GMefOjZo.roa (hash: JaQqkGT/EuzyZjXMN8QEs56lhsj8e8xWE4PqIQSZNSY=)
                          11: I5RmTjKFYz79KqLmMtO2U-JhAFA.roa (hash: B1+cDeSVZwC0LcfXe39/RIErdfHZS7Ts0F3A1wzPQzw=)
                          12: LMMZZ3U_VXbcFd48owkZmwcU1hE.roa (hash: CfbUK0Fwv8dagnk4QuCJP/+wm0mVrn+IK19LJoG4Pqk=)
                          13: OyEHyocNzfaASvSX9ghIhZoK7Vg.roa (hash: LVpmM0BObmcCqdx4fHr+ScoOKewYgjGRBFNNC7CN86o=)
                          14: SJtR9yDFalD5cZd0JaUHeuQjWF4.roa (hash: o+pZOrweCiX/ZW2TkzQ2pD2uz9mIgJjpPK75RQvDCsY=)
                          15: TY1tMo6tOg_O_qX52JL8Xemg9g8.roa (hash: Bz2CovzXfyyPj3QPdMAOpdOAtHKJmJn5Jkl4FY1jBW0=)
                          16: VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa (hash: VRDLvebsgzN2IopaBRSitbLUQukOe2HbgDWn6E5mzfg=)
                          17: WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa (hash: PgvSeWtg+mLsxBE/P2tTl00AaGi2pSNp8OAj3D57rx0=)
                          18: WjMtWaWVlsclmFUeATa0Rgoi2JE.roa (hash: aFMptd/iDTRFNCht4XhxbuJoCK35XgXERP97iKChGWA=)
                          19: Wpl0Yt0x1L3KBUxClULYQuLnyT8.roa (hash: K3WptT/yayjU6HHi7nsq5z1bNovUoyWHXAuTPT3IyY0=)
                          20: YrxACLZvZRg2bWV9SPIgfQ7aQBY.roa (hash: n+69ldcsTqnSoYz82PvwpUY1wbaPkzBZbNKCKxXKKXk=)
                          21: bnbO6YG10PCmqlCsmyP50Fd_o4g.roa (hash: FN6GI1Kp7T9KjFIMw11eQNYoSIQT81c+97qaaX9eCCg=)
                          22: btpZBI2XWHAKS63fnL73LqvVNfk.roa (hash: M2QuBhhoZDDE/3+2mzs7vceIBE782dg62RnFjR+wfWw=)
                          23: dx58yh-dSv2JgPIFomDm2gd-Re4.roa (hash: xlQAPIKpbZbxvxscJLu/dA02W65rF8gyeeFSGhxfjxo=)
                          24: iuyN3NwXdsZlXThiwcR0LWVmoX4.roa (hash: 6R/JhKvtjb4C81R377gB5uUKDJijkYxAPU8kK0mmRJQ=)
                          25: tPXv3Y07TRkvNT0UwtYD75YWD-k.roa (hash: pCoCWxJ7IW/lTddC/6xdHqN7mJJ4tYVMe/aXvCWWKXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 07:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:07:17:0c:da:51:a6:16:a4:b9:1e:08:84:9c:5c:b3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: Dec 10 07:08:29 2025 GMT
            Not After : Dec 11 07:08:29 2025 GMT
        Subject: CN=ee42c25d19b3d285b5f550f3e7ec10c95ccf2651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:e2:8e:11:38:7e:dd:db:89:d1:21:eb:a8:
                    3c:81:de:52:ed:4e:02:2e:36:69:60:a9:ae:ef:f6:
                    a3:0f:b2:ab:13:cc:0f:8e:e1:e4:88:f3:6e:a8:1a:
                    79:5a:f3:46:23:c4:fe:b5:81:d6:a8:b2:70:47:fe:
                    aa:88:0a:bf:49:23:e6:47:6c:f1:cc:07:77:0f:bc:
                    8e:32:2e:b9:65:4e:68:e2:b4:a3:ae:93:b3:16:80:
                    c9:c4:ba:1d:7a:8d:10:4d:68:cf:62:0b:82:1f:c6:
                    fb:c0:c3:ce:e6:01:4e:bd:b3:41:3f:e8:02:8c:19:
                    5a:8d:2e:2f:11:51:a7:0c:db:83:3c:68:ec:a2:24:
                    8d:8f:f5:a9:7b:24:99:8e:0b:a9:54:43:9f:f9:71:
                    c6:9f:d6:5b:73:24:47:63:45:15:fe:6f:d4:61:e5:
                    12:76:6f:fd:59:c3:54:d6:9a:be:0a:48:52:2f:2b:
                    1f:51:18:b2:a4:28:06:63:b9:41:e5:46:3f:da:0e:
                    b8:cc:ff:fe:6c:70:bb:5a:0b:c3:f1:fb:31:7b:2a:
                    0c:9f:ac:67:a4:47:90:90:f9:dc:0a:50:34:54:56:
                    3f:4b:ed:2f:74:ba:00:ee:dc:57:4a:bd:8f:64:83:
                    71:d0:f1:47:50:ef:d7:f7:e2:3d:fa:68:63:78:56:
                    03:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:42:C2:5D:19:B3:D2:85:B5:F5:50:F3:E7:EC:10:C9:5C:CF:26:51
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e6:30:f1:f1:07:88:0a:0b:1f:54:b0:4e:e1:73:d1:b8:6c:
         f6:88:67:e6:01:a2:d1:64:72:45:f8:e0:fc:88:27:42:e1:f2:
         a7:06:54:50:3f:d5:4b:af:ea:80:c3:ed:01:4a:72:48:b8:8d:
         08:b8:c2:82:15:e4:3b:62:81:23:f5:6d:15:9e:44:d9:91:cf:
         01:0f:ec:fd:25:cb:df:bc:16:d1:af:0d:d5:34:d6:45:78:a3:
         23:43:25:f8:7b:c4:c7:ea:4e:cf:b0:15:0a:f2:dc:2f:61:a4:
         40:e0:51:06:56:3e:8f:d6:b9:f5:bf:c4:22:b6:e0:72:69:73:
         98:4f:f1:65:a7:c8:a0:3e:c4:d7:df:b5:86:78:16:87:88:01:
         e7:9f:53:cb:45:0e:c2:ca:67:bd:b5:49:18:74:23:a2:c6:63:
         28:40:a7:cf:ee:e9:c2:2a:e4:81:f4:0c:44:72:33:a3:eb:57:
         ee:2c:27:79:74:43:f3:a7:a0:1c:3b:3b:dd:45:20:e8:6b:95:
         3d:2d:72:08:b8:38:6c:0b:40:f1:26:99:26:f2:83:3e:05:5a:
         6e:d6:75:96:31:04:74:3b:61:9f:bc:8d:89:70:c8:34:e7:34:
         8a:3e:2a:6f:d9:6f:2a:4b:de:96:9a:11:60:a6:05:a5:94:8e:
         f0:93:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 12:50:40 2025 by rpki-client