This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File:                     6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier:          vDzauH46WviiWfGaQP6qb54sRJsmbn7bFSzQmiGaRQg=
Subject key identifier:   0A:46:F4:35:BB:B1:7B:74:6A:F0:16:25:78:BD:2E:19:99:96:B1:3F
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       019B2B8AD496DE8298FCC4D181182966CA57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number:          0333
Signing time:             Wed 17 Dec 2025 09:01:17 +0000
Manifest this update:     Wed 17 Dec 2025 09:01:17 +0000
Manifest next update:     Thu 18 Dec 2025 09:01:17 +0000
Files and hashes:         1: 11abjUECt78CI4jG-uBZrzou2to.roa (hash: 1RiuteOkDQKooCQrx3e6Wy4U2IWOs71FVYA/JTBz8O8=)
                          2: 1qiR31b7CdS9Trli9AVTHEeogq4.roa (hash: MOeY3wjDcl6db4aacGkO8F1pX14sP/Futaitk3A7SnY=)
                          3: 2X78Dh7C7IK9HQpIdvex6cBM1zY.roa (hash: wipecr4RWsrjr1LobZ27g68/o0lGoPvjX6FqbG4G5vg=)
                          4: 4xVy8n1nhBpAya1KevWUaTI2tB8.roa (hash: 20aLYH4n1FuIXOWrztzrtcCxRBgx6WLXVkqg5CHqw0k=)
                          5: 52yRIEJtEfgFBpWr58fadnScoJw.roa (hash: YmNixuazA5Vsqwop7vZiylftf51KooRSucAzjd1m6wI=)
                          6: 68M2owrwonGUKTmptsMxSICxvzc.roa (hash: Oa0fedQajgDxkwDeccQyxl6+5J3W6s2tK5cH8eMToVk=)
                          7: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: RVA4o4d/RmDCa5RofPtIIU2bNJApTNvZYQU1YUZ+gww=)
                          8: BtaWKpewp0t-jzKE-k6lFnfI0_c.roa (hash: DCOoNIe4oBMll7PycXcrB8Q8Pxkmj5k38ygxgzs+uLA=)
                          9: Ck51eA081sqLICziway3EXtym_k.roa (hash: 2MWWtOANjJSmkcfpJCe5Dn7HPUNug/jW3r3pG5kbs+E=)
                          10: GzCf6eer-0KJGSOeGO_GMefOjZo.roa (hash: JaQqkGT/EuzyZjXMN8QEs56lhsj8e8xWE4PqIQSZNSY=)
                          11: I5RmTjKFYz79KqLmMtO2U-JhAFA.roa (hash: B1+cDeSVZwC0LcfXe39/RIErdfHZS7Ts0F3A1wzPQzw=)
                          12: LMMZZ3U_VXbcFd48owkZmwcU1hE.roa (hash: CfbUK0Fwv8dagnk4QuCJP/+wm0mVrn+IK19LJoG4Pqk=)
                          13: OyEHyocNzfaASvSX9ghIhZoK7Vg.roa (hash: LVpmM0BObmcCqdx4fHr+ScoOKewYgjGRBFNNC7CN86o=)
                          14: SJtR9yDFalD5cZd0JaUHeuQjWF4.roa (hash: o+pZOrweCiX/ZW2TkzQ2pD2uz9mIgJjpPK75RQvDCsY=)
                          15: TY1tMo6tOg_O_qX52JL8Xemg9g8.roa (hash: Bz2CovzXfyyPj3QPdMAOpdOAtHKJmJn5Jkl4FY1jBW0=)
                          16: Uf97m6kYdOXrlHNRhRLKJ5_P1k4.roa (hash: G6Mo4Fb6Yxuyx2Ff+8yi06BQ3oSfvk91WpYQtAwtKvc=)
                          17: VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa (hash: VRDLvebsgzN2IopaBRSitbLUQukOe2HbgDWn6E5mzfg=)
                          18: WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa (hash: PgvSeWtg+mLsxBE/P2tTl00AaGi2pSNp8OAj3D57rx0=)
                          19: WjMtWaWVlsclmFUeATa0Rgoi2JE.roa (hash: aFMptd/iDTRFNCht4XhxbuJoCK35XgXERP97iKChGWA=)
                          20: Wpl0Yt0x1L3KBUxClULYQuLnyT8.roa (hash: K3WptT/yayjU6HHi7nsq5z1bNovUoyWHXAuTPT3IyY0=)
                          21: YrxACLZvZRg2bWV9SPIgfQ7aQBY.roa (hash: n+69ldcsTqnSoYz82PvwpUY1wbaPkzBZbNKCKxXKKXk=)
                          22: bnbO6YG10PCmqlCsmyP50Fd_o4g.roa (hash: FN6GI1Kp7T9KjFIMw11eQNYoSIQT81c+97qaaX9eCCg=)
                          23: btpZBI2XWHAKS63fnL73LqvVNfk.roa (hash: M2QuBhhoZDDE/3+2mzs7vceIBE782dg62RnFjR+wfWw=)
                          24: dx58yh-dSv2JgPIFomDm2gd-Re4.roa (hash: xlQAPIKpbZbxvxscJLu/dA02W65rF8gyeeFSGhxfjxo=)
                          25: iuyN3NwXdsZlXThiwcR0LWVmoX4.roa (hash: 6R/JhKvtjb4C81R377gB5uUKDJijkYxAPU8kK0mmRJQ=)
                          26: tVKsAN2rTN42zUGNS6XPmpZYmYI.roa (hash: hdI/aplbbGIaTBD4tkGNasfJop68VutRTr3fAJnKpNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 09:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:8a:d4:96:de:82:98:fc:c4:d1:81:18:29:66:ca:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: Dec 17 09:01:17 2025 GMT
            Not After : Dec 18 09:01:17 2025 GMT
        Subject: CN=0a46f435bbb17b746af0162578bd2e199996b13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:15:4f:25:0c:98:39:64:8b:c6:a4:c9:5c:
                    7e:60:c2:41:ef:ba:a6:bd:d6:60:ef:bf:46:50:84:
                    d8:c3:a4:fd:47:84:6e:8c:35:92:2a:02:e7:ea:74:
                    e3:19:a2:1f:9f:5f:95:f9:bd:fc:a5:2e:4e:e8:5f:
                    23:2a:a0:9f:85:29:50:cf:88:12:f6:18:be:44:93:
                    68:a4:40:95:7e:c2:f0:38:9f:ad:3b:1e:92:a6:21:
                    cf:22:cc:0a:bb:03:86:f2:e8:0c:af:51:c8:d9:c0:
                    67:62:f5:41:bb:d3:bb:c4:93:a0:0c:e4:0e:36:26:
                    6d:fd:fd:74:89:1f:8a:72:6e:5b:02:df:41:67:c3:
                    6f:bf:a1:72:bd:ed:6b:a5:97:fd:04:bd:d7:19:25:
                    5b:19:85:0f:6d:63:83:20:a1:8e:13:3e:63:c0:5c:
                    a0:fc:e2:b7:3c:28:fa:9b:ab:ea:18:a9:72:fe:99:
                    dc:5f:1d:98:54:ef:c1:96:40:5a:66:2a:57:de:20:
                    7f:13:77:d5:92:97:97:14:5e:b7:c3:e6:a4:99:a0:
                    c1:3d:17:92:eb:94:94:b7:68:b9:87:67:83:92:79:
                    5b:38:27:2a:8a:b5:f7:42:45:4c:01:54:1e:f0:c5:
                    3b:6e:e2:91:56:d9:c9:3f:70:67:81:97:e1:5b:e9:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:46:F4:35:BB:B1:7B:74:6A:F0:16:25:78:BD:2E:19:99:96:B1:3F
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f8:03:9b:3a:7f:df:4d:a6:75:b9:ef:78:ce:18:04:12:fe:
         2b:ab:98:6e:c0:b7:d9:da:57:1d:c2:3f:98:f4:29:87:8a:24:
         a3:1f:59:c0:d4:09:14:dc:93:4d:1e:06:bd:4d:fc:2d:74:90:
         3a:f5:5b:8c:45:e3:52:be:bc:51:f3:12:94:e8:c0:38:c2:71:
         9b:0e:8e:9b:45:ed:c3:73:24:40:38:e5:2e:6d:51:ff:73:ed:
         0a:03:26:15:d8:83:3b:50:af:06:85:42:71:11:36:90:f4:23:
         28:66:68:6c:38:44:ed:f7:26:07:12:f2:b3:f3:f9:eb:ee:17:
         a6:c0:0b:8a:eb:40:71:79:c0:b0:39:ca:44:f4:48:9c:e7:63:
         34:04:6f:30:b8:43:c8:cd:94:6b:3b:de:af:6a:dd:1b:a2:44:
         83:df:9c:db:3c:24:f0:38:49:d1:15:12:58:c4:53:ff:43:06:
         b5:f0:9e:0f:d5:d2:82:fb:94:03:0f:8f:f2:04:b2:2c:75:bc:
         99:2e:4f:05:15:bd:ea:10:94:e7:74:b8:69:9b:31:f1:b7:a3:
         1e:e0:0e:38:02:43:32:a6:f6:26:d6:3e:7f:e6:ca:90:2d:9e:
         b7:4e:a7:20:84:a9:49:a7:81:f5:34:ae:92:6a:ed:2a:19:b6:
         69:d1:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:09:56 2025 by rpki-client