This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
File:                     _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json)
Hash identifier:          0giM1ypJuzhIXxsgvrTgwp89+DylZsMman3XxhMmkR4=
Subject key identifier:   F9:93:58:A8:02:03:59:A5:76:E7:E0:FE:D2:87:B7:25:CC:CF:C4:2E
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Certificate issuer:       /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial:       019B096C29423A89DA38AFC192E864875BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
Manifest number:          17BA
Signing time:             Wed 10 Dec 2025 18:00:41 +0000
Manifest this update:     Wed 10 Dec 2025 18:00:41 +0000
Manifest next update:     Thu 11 Dec 2025 18:00:41 +0000
Files and hashes:         1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=)
                          2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=)
                          3: 4PQhz7MOxuhGtS_nPubpyXMJOcI.roa (hash: BnJSvsApOD8luZipfIRx4R+p7IT8Z+rfRgGtpM8nPhY=)
                          4: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=)
                          5: AlQ9s5QZK2NSuAym9BFFOrJaC0g.roa (hash: QAchfxqcPxu44vFEqxRKf6wyg72hfH4/rebn2BcHbus=)
                          6: Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa (hash: tJ0CFUjWGpQHeBJKiYedBkhtxvRYSIaLu2u0ULfF3Dw=)
                          7: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=)
                          8: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=)
                          9: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=)
                          10: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=)
                          11: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=)
                          12: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=)
                          13: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=)
                          14: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=)
                          15: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=)
                          16: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=)
                          17: XXAYfqUHP9nZBwlGSXcDJmZr7gM.roa (hash: lTHokh5dlYVtVzphYfMaxHP19CTq5FCkid0Lic2Aukw=)
                          18: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=)
                          19: ZyYK-k77F1xgjjVfUFKWc3u5FMg.roa (hash: A8osarOaXuQWeZx8KQYjMoJwdcPiXJPczE87ARsfRqI=)
                          20: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: O2cFySSbJxDVKXCuXyRj7t2Jdsjochcjy62Vh8Drn4o=)
                          21: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=)
                          22: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=)
                          23: fBlvBTMJM3ddqp2rUiQB8ldjkd0.roa (hash: ETihZGojVJlaCJwQ0UQbamp7h1DxH8Yq4UnyjKrHjTY=)
                          24: k1RkiO-oYIsdIxPMb4yp4wi06vw.roa (hash: MCgag/nnrriwvetJZ3hm9uP9KJjRl+UaPWHYQ89ULn8=)
                          25: oBKt6fMr87e-rFOhXitc_DWZtdg.roa (hash: qJjvrPZfU1anKZ4X1zOc4+1vwatadPrAJ6kaez7yYks=)
                          26: pKg9Eulzznq_Xmusn2tCljsUFm0.roa (hash: ZV91D/vMdBvdabbs6xfKbOYCwCqfj4mEA5NzU3QNIzA=)
                          27: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=)
                          28: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=)
                          29: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=)
                          30: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=)
                          31: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:09:6c:29:42:3a:89:da:38:af:c1:92:e8:64:87:5b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
        Validity
            Not Before: Dec 10 18:00:41 2025 GMT
            Not After : Dec 11 18:00:41 2025 GMT
        Subject: CN=f99358a8020359a576e7e0fed287b725cccfc42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:58:b8:38:d6:cc:28:b1:9a:56:0b:b4:20:22:
                    f9:7f:a3:b0:60:25:3b:4c:e3:e4:55:62:45:88:ae:
                    bd:f7:da:2d:aa:30:91:0d:ab:54:fe:29:fc:2e:fc:
                    3c:d6:77:9b:8d:8e:45:a6:e8:08:e9:56:41:48:e6:
                    2b:e4:a7:99:a5:29:5e:22:42:51:12:ec:e3:6f:04:
                    90:10:2f:11:f7:a5:ff:6f:18:10:78:81:c2:1d:ed:
                    b3:2c:e1:48:51:97:2c:53:c6:7a:61:3e:ed:a2:13:
                    66:e0:12:92:9a:7b:6c:d1:9b:4f:54:5c:c0:17:5d:
                    51:c4:11:7d:34:b9:83:24:7a:9d:03:18:d2:8c:38:
                    a6:0e:cd:dd:e7:45:08:f5:d3:2d:a9:62:2a:b4:95:
                    83:76:44:93:e2:6c:5f:b2:4b:02:ce:66:d5:ca:61:
                    8a:c4:94:fc:c6:d5:9d:04:17:42:d5:cc:09:98:82:
                    3e:35:80:a3:dd:63:85:58:24:8f:56:52:0e:2f:5c:
                    d9:5e:74:0a:c1:6f:90:52:77:08:b1:97:87:43:f2:
                    98:f1:e8:e2:bf:79:46:ee:94:fb:b2:02:9e:42:61:
                    9f:d6:ca:e8:61:5e:b5:7e:97:c3:f7:a4:31:7a:6c:
                    f8:e9:d9:6b:a3:96:f9:3e:c7:93:25:eb:76:1f:d6:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:93:58:A8:02:03:59:A5:76:E7:E0:FE:D2:87:B7:25:CC:CF:C4:2E
            X509v3 Authority Key Identifier:
                keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6b:c4:7d:16:d3:db:7b:60:d5:2c:76:52:8a:5d:c5:3e:15:
         c1:cb:c9:7f:03:6e:f5:e7:1d:94:9c:5a:f0:ee:1f:25:77:a8:
         cf:b0:5d:9a:5b:8a:fd:98:23:4a:ef:aa:c2:b5:0b:4c:74:bb:
         b5:51:23:d8:c8:50:fd:5f:ed:7f:51:ee:fd:c8:15:4c:12:3c:
         af:8c:26:64:80:b9:68:64:64:f9:2d:3e:af:19:d2:e5:92:16:
         cc:ad:e2:45:76:f6:27:d7:57:3e:0d:3e:4c:2f:b7:75:6a:8b:
         4b:ce:94:4c:bc:fb:3a:05:a5:ff:28:b1:ef:4b:88:21:83:dc:
         6c:81:12:9a:8d:8a:b0:2d:9c:99:03:01:20:34:89:b3:1c:28:
         32:b0:3a:d1:02:ad:0d:22:a0:13:a7:c6:27:0a:2e:ee:bf:53:
         86:b2:88:10:d0:55:16:55:42:85:3b:3d:0f:99:6c:4c:c5:9a:
         bd:4a:1d:b3:30:84:ce:3b:58:b1:c5:1c:be:44:df:52:71:1c:
         70:33:29:09:f0:60:2d:5f:5a:47:a0:91:82:a3:b9:82:4b:f8:
         dc:c5:19:a7:86:45:01:fb:cd:da:af:5a:bd:fa:65:21:82:0a:
         8b:4f:b1:e8:91:8c:39:02:bb:ea:db:be:73:ca:5f:eb:25:e6:
         82:87:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 19:55:32 2025 by rpki-client