This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          MZks9f+WPMgGPQtaEajUD/r0Ruxj4zPiGOOZZMzWRjY=
Subject key identifier:   C6:89:F8:02:B0:3E:2E:2F:C9:88:EC:EF:C9:19:C9:8B:67:E3:F4:0A
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019B1983DFAFB55396E33D2E5FF4A932B966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          182D
Signing time:             Sat 13 Dec 2025 21:00:31 +0000
Manifest this update:     Sat 13 Dec 2025 21:00:31 +0000
Manifest next update:     Sun 14 Dec 2025 21:00:31 +0000
Files and hashes:         1: 0aa8_BKnq_2uEeu2lZ7-yjbtvuM.roa (hash: Ddp/LlQBMX46rH0IPNaZHNYeFIB8RtssPveBvjz8aL4=)
                          2: 1-xc1srblKkWVrQxPbJNDAqQ3mpc.roa (hash: ZzynvVG+bTIyDr7NXUASXUZ28E+DC5j8UwHhzSApKyk=)
                          3: 2a9Z4MiFWUxUqmTNMuUVscHb0hE.roa (hash: gobSMYv3Krt8vXt9XFdC11nQ+nS6jtG46MKfF14gNHU=)
                          4: 4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa (hash: iwJ60t6RgAb6kap7YpqbSewI5ktaDdebMpnk8DNCEn8=)
                          5: 891CpnOYIk69iKnDpiqfcEZzfPI.roa (hash: Cl3FQjh7xo9Vv8l6G/85YiDrEYQtz+6HMhEUm9eKhPA=)
                          6: 8BDwtg4WogHr_t622bk6AZLxHf8.roa (hash: jGu8B7Udmymq+0EP+ky2AfA0GK/9z6xL7Kug80+RJkA=)
                          7: 9hgStchHD6fvUu7MaI3ReZLaWPo.roa (hash: gNkHPXuUrNhImnSBNKFWxQAcOMo7axTMfis85TltsTA=)
                          8: AeRW2IzzHa8sgYjrW7QogaL1WWo.roa (hash: mOgxIrog/AxUhk6U2thPlE/gzaz0gGobQDleoJHGSnw=)
                          9: Al2KaWomFf8GhcORE3K4q4R9IR8.roa (hash: pVm7PEjI3+WRx03gEcy+oA8b2HM+FqL4qCoE1gIpZnU=)
                          10: BT4HTe3oG2Sg-qKbCzfhjsWspIs.roa (hash: tr2IEWG8nbhwgOgVOSWuTH9VHkQ1QiViO3lhhSkyHIE=)
                          11: BqYGoMadTRg3PGzK7Xh_am0n1Go.roa (hash: scY6lS1Giu5fZ5nMiXdTZLdzDy0AADhVUX6qd+QhFlc=)
                          12: EG51x3PSsQJffbhsgLz-YN7F5Ms.roa (hash: vPVCEyfjYjq/nMq+Cp9rXdERC9dDpo/nTCQmu9ZFszE=)
                          13: FYSyCWfo5Zjk1tVKOpfE2KZczw8.roa (hash: YoIR3hrJMwWnChJUFr3nzw+4wNvFz1FFruFWrR+owFA=)
                          14: JWFrACGqXAEPwk5yERzaH1k3xEE.roa (hash: eRkSlBoh54+iXz4l+cuyt8uCJGHuQx8lExR+xSC6BSg=)
                          15: MgJgYL9l6eKJ0Kmwl4y3YpthS-M.roa (hash: igpzPJYbXYIv+C9ih5BbtSw1dZ2mBgNdp+reY422/cw=)
                          16: Pf8ZT4Y8uAHBJk4IvL6CTiul6Qo.roa (hash: u+Yzk3JpAwQ1sKYO8qin8N8gxyReMldlGNxfGvAoYCU=)
                          17: Pwb-T7CDIcPW5g6EIjv7rI1hOY4.roa (hash: +uQK2AEnqPBoHu/xep/tQLvYp/ULstsLl2Xj5X9veFc=)
                          18: Qvclw3p6GBEwfed15US4eMZDssA.roa (hash: UWEN+eEsjGRM3fqsL5cJc7RQBWKq6NxYbqkBONZx9Ds=)
                          19: RX8x7NBqKqNqrHjY3RrZOIwmw84.roa (hash: qG1pxlwKH3SmnTU8k1NPrDe+8libzJhE26dpkDKjPb0=)
                          20: SSxw2UyTdh8TO_sMC0CZq7SWuwY.roa (hash: ATIxE9LR3RhyZ9vnBXUPCYZRNgLXIwXduwukGiza/E8=)
                          21: Ts5s6R-h-7a7r-DkQTNs3dqIoqU.roa (hash: 6FBW+7wKlFhVsfYtAAGEeciTYk/P+FI5nTEi81UvzA0=)
                          22: Vedd31K36BW0FtFdJmgu7RtebZ0.roa (hash: UL6Hnivw/B+oxS5q55F7qNNs7Ynb0wMF1mBZUl4ggtM=)
                          23: XD5lyN3IK2UsJeObMTBY2xot5DU.roa (hash: p5taUYH4AVBdxVLeGOYvbtP0mpvx/YEGj8SIqMDS618=)
                          24: XO4d7Id2G1LEtArZwx3RzEkQ7hg.roa (hash: ogURT2KjU4HTxAtVdIiJTmcqfQTlAEEbsvpDQ/LABsc=)
                          25: X_-XGWHxiyT31XcsVcXztO1CAUo.roa (hash: h9fzXHeF6FN+NnLG9OWfg3VoICXbfHZUao+YO2BeTVI=)
                          26: Y0Jfvglhk12KRlx1qXrTTWIY1ZQ.roa (hash: OojwxcLLBQyxENv/409Gbc8GdADP7z6P1tN7CK7EnwM=)
                          27: ZbzlNVKf1eKK7KiivvZ1QujJRLo.roa (hash: JpHtVBVtqKHMUBQ5w8gmqDV0uY/Xo9NDIUCWtdbcBs0=)
                          28: a5UQ2z1RVywe791ih-JkkJe4oZw.roa (hash: z7MPhCjNypY3ndHfuAxQLWPw6x9rN6BVeFB92z9Vk4Y=)
                          29: aFRiQRnDB9TXgWRRIMtNARzxVn8.roa (hash: hWE8vTVKPZar03SzLtgbIuwLQ05FffNM309Sx4njq4c=)
                          30: bHXLulP8CUgt-JCJIqSM8hvlsCA.roa (hash: Mexso3pNidi3XstQ5hR0lM6Sn2w60SPQEvdapeY/VjQ=)
                          31: c8oXwnn5toTWitSJkpA6DmPs01c.roa (hash: 6kqJ5YUqqDHudEG8e5AMvFWmJFH3ql97x6sFaUhLatQ=)
                          32: cdRkB7AVAsaCQza2C6eaLskeEHY.roa (hash: R3X0t9w4kaySZ1sZzxcJ1+mmA7WHRo/nLaZSV1WFUCk=)
                          33: eY6rIV9lpjNtRSgUsbjCu8KRO18.roa (hash: xARunhsXA/apYr93W8PheqPyL4HmYu/zzT8xJmEV+pc=)
                          34: ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa (hash: wC0JV8jUHfPLAhBEwBEM+LxR4vaNiTk9CGptUwCWnjs=)
                          35: k0KEFHW4fL4Ef8MopdylpfXrtX4.roa (hash: b5DhgBm+P5R0/x6SS6V5aLIs9QaubKbpXVVnCYru10M=)
                          36: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: zPgZQLETinsb49yUjxxjaVWRKRhAr+COE58I0qP3TfA=)
                          37: lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa (hash: BB6MmQH+rCEmTn2b4vV8K++LviBSGKSxEZC17nRtmRE=)
                          38: n7A9iNcydEM0dF7od9K9kn6dOlw.roa (hash: Q9nTEs63rW/GSV52zGEUvJPOGvhBCV1t2N9qF9Q1Hb0=)
                          39: nDXZwdByAxuzdwf0ZXt_ehfSJJI.roa (hash: 4eNmWGzY3LU27cy4MOpIuF5JDu6Bi58le7fddIW+ow8=)
                          40: ujdLXoXrvhVfjksNi3jvUUhxPZQ.roa (hash: M1NGr3Kp/N5WVzCoJ45GNTOp19udI/hDhcVdgHkpFVQ=)
                          41: xh7RSUwiBVANXtMMIBZXlrsg2mQ.roa (hash: TMp3z2IynO2xSEsC3bAli7G13qod/n7CAd4pIOr904w=)
                          42: zEdOf00V8YpbfdbuVh6edhLFxOc.roa (hash: xw2nGcLzNzC2781DBhmqoJCxxw5fW6F+mjQBcvq6T2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:83:df:af:b5:53:96:e3:3d:2e:5f:f4:a9:32:b9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Dec 13 21:00:31 2025 GMT
            Not After : Dec 14 21:00:31 2025 GMT
        Subject: CN=c689f802b03e2e2fc988ecefc919c98b67e3f40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:41:33:e9:1a:a3:77:94:5a:c9:53:36:06:
                    75:e0:27:f9:30:73:9d:45:b3:78:75:56:97:b7:90:
                    40:09:7d:7c:a8:2a:26:1e:55:4b:83:2f:76:92:95:
                    ad:26:cd:64:ac:25:44:b1:ba:ee:64:a2:25:48:29:
                    94:3d:f1:a5:94:ef:fd:5c:fd:a2:2f:05:c3:64:dc:
                    27:fe:4c:9f:cf:15:24:35:44:16:8e:6d:23:98:2a:
                    36:b4:f2:b7:ce:77:24:38:a1:aa:0c:c0:f2:47:df:
                    5e:8d:23:e3:d2:8f:a1:fc:75:3a:43:aa:66:76:d4:
                    db:32:75:76:61:20:83:18:0c:bc:7d:14:fb:ae:74:
                    03:62:d7:38:5e:06:a2:ce:dd:c4:78:2c:e5:40:29:
                    5c:b2:f8:99:ee:95:31:e8:3b:d5:e5:91:74:76:ae:
                    93:54:f4:1c:c0:ce:8c:b7:5d:52:ba:e0:1d:d3:a4:
                    76:a9:87:54:79:33:07:54:13:47:42:5c:34:ac:23:
                    62:89:e8:0c:7c:56:2e:73:50:b6:c3:dc:c7:66:00:
                    78:c3:5e:1c:e3:37:c2:73:4b:20:93:34:4b:b0:71:
                    b2:ff:f3:eb:fa:e4:cd:19:8a:8f:48:15:6b:8e:b5:
                    68:5b:a0:4c:77:74:6d:a5:c1:24:78:6f:27:77:24:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:89:F8:02:B0:3E:2E:2F:C9:88:EC:EF:C9:19:C9:8B:67:E3:F4:0A
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ea:1c:b6:0d:3a:4b:28:ac:d0:46:d3:f0:bf:d4:fc:57:e0:
         9b:7f:68:cd:b1:79:1e:d4:96:85:23:3c:eb:b3:67:f4:93:6b:
         f8:c0:db:60:df:4c:1f:21:09:70:a7:16:20:d9:99:c0:5b:a5:
         e5:7d:8b:ba:69:24:58:2d:c5:39:6e:48:b8:f4:39:cd:ee:79:
         c8:1e:ba:16:8e:ec:53:03:05:1d:08:7c:75:f9:a2:75:7a:32:
         10:0f:27:9f:95:64:58:00:ed:0d:09:4d:ff:82:38:b2:2b:d9:
         77:1b:20:2d:f3:ac:79:6e:1d:b1:7d:a7:65:e6:b2:03:d5:90:
         32:84:5f:0b:dd:5e:5a:93:fd:4d:b7:72:aa:37:81:bc:c8:fa:
         29:db:e4:85:07:2d:97:7d:86:19:85:e7:43:7e:3c:05:38:a7:
         97:3a:46:4f:cd:a8:f2:53:a2:b2:c4:0e:7b:c7:74:ab:71:cd:
         2e:12:7b:39:78:15:20:22:e6:fe:23:51:17:22:c8:09:3f:89:
         ef:98:ef:e1:e7:47:2f:54:a6:b4:04:22:16:ba:aa:a7:ef:08:
         13:da:2d:fa:40:a2:e4:8f:06:73:7e:cc:ff:5d:e3:d2:24:a4:
         9d:b8:c9:e0:00:b5:fb:70:8f:f8:13:90:6a:ca:da:75:6b:ba:
         14:7e:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----