This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
File:                     b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json)
Hash identifier:          +yiCVTfi+OIKIlaxuTBxwt+A8fFoVhqkJqAseSShjTI=
Subject key identifier:   62:ED:FD:0E:58:17:42:C2:F6:FB:82:E2:4F:D7:6D:B8:02:C4:87:6E
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       019B24E3A1439D0807D930BF78121396B6A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
Manifest number:          17B2
Signing time:             Tue 16 Dec 2025 02:00:56 +0000
Manifest this update:     Tue 16 Dec 2025 02:00:56 +0000
Manifest next update:     Wed 17 Dec 2025 02:00:56 +0000
Files and hashes:         1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=)
                          2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=)
                          3: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=)
                          4: 4deFTq_ZGU6j5Wvv1x7sF95jtLY.roa (hash: 2TrrPS30sWSSBNdC0ytp9VKstwP0OWe2UIx3Dtm2/JM=)
                          5: EYPDvxacKnqAiwCcH_eLh5D-wzo.roa (hash: SGm3Pfgt15u6hgkLS+1eCeSmFoagCG2dGfjKmmJu+Tg=)
                          6: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=)
                          7: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=)
                          8: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=)
                          9: PYK2EWVjncskVSm_Hdlre_awIFg.roa (hash: VWAN/Yr75jkjvzOpnYs2pejQXpvZbkMRMFEQFcncIVo=)
                          10: Q0S0vKeH1qE3DztlQsaMZcL_rdM.roa (hash: EfiDKy3AvswJNKh8pdzYyd3VC1uN6AzI3TYPRG8NcaE=)
                          11: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=)
                          12: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=)
                          13: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: f2TV38qDg5ZhnwIqyrpx1SW7bk3nFerTJNsT7wi7W5A=)
                          14: fzWiDXbeNLJ9JqEUr2_LAAphcxw.roa (hash: MN7pdOMu0NZSssuxNIUp3oYg8Z0kz03GZzmjzEWZlBE=)
                          15: lzITf7bmOdvZVA80AcSS1I3NVAY.roa (hash: F1iqFLHu9e7lwpyQGB41+XBSS3bALDr+grcLwGFs4dw=)
                          16: mxHk_x4_7-pXmkuBflFU5C_xuDU.roa (hash: gtzHct2NI5Df3c0cYS0pdqVMvUN2VqKpHBWx5S3TAmU=)
                          17: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=)
                          18: wOU9aMdER98sPekS4MEPyEOSZUM.roa (hash: fyP1+WfbQMjBodG1sjfQbuHrnmZod0aoG3fzD6DGcYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:e3:a1:43:9d:08:07:d9:30:bf:78:12:13:96:b6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Dec 16 02:00:56 2025 GMT
            Not After : Dec 17 02:00:56 2025 GMT
        Subject: CN=62edfd0e581742c2f6fb82e24fd76db802c4876e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ee:75:92:17:31:f3:12:05:a1:34:b8:38:1d:
                    67:a5:8c:af:80:b6:3b:89:5d:1f:7a:f0:2c:e7:b9:
                    00:17:0c:74:6f:c6:67:55:22:b8:3c:a5:07:80:54:
                    85:76:27:06:74:9b:5c:76:6e:ff:43:a1:de:17:70:
                    54:d3:93:c9:09:04:ff:1e:74:3f:5b:1a:e0:ca:64:
                    67:bd:96:08:0d:25:67:0f:41:9f:3e:ac:28:86:3a:
                    95:d3:25:97:4b:90:a0:7c:d2:13:02:bf:2a:aa:3b:
                    d2:65:be:24:ce:09:87:2e:b6:05:c7:17:03:37:cc:
                    c6:ab:74:3e:f9:ae:50:42:08:02:06:b0:48:91:70:
                    9f:53:44:94:fd:fb:03:fb:d3:ff:91:ca:cf:d9:2e:
                    ef:8e:b3:d1:bf:9b:25:f4:cd:37:3f:5d:ef:3f:f7:
                    2b:10:0c:b1:80:ae:46:dc:8c:b8:4f:40:79:c8:67:
                    46:10:21:27:ce:df:d5:d8:5e:dc:55:b1:38:4b:22:
                    94:30:41:3f:e3:cb:6b:e9:04:7a:99:dd:02:b6:6b:
                    05:78:e2:76:64:b3:d6:cf:2b:35:60:78:98:0d:b3:
                    43:fc:aa:73:67:3a:55:03:37:de:89:28:97:0c:da:
                    69:1c:6c:97:07:57:77:54:6c:0c:95:7e:35:78:16:
                    88:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:ED:FD:0E:58:17:42:C2:F6:FB:82:E2:4F:D7:6D:B8:02:C4:87:6E
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:34:35:74:1d:57:2b:db:8a:83:17:07:ed:5c:0b:1b:c8:98:
         4c:52:78:8f:cb:2f:33:ed:75:7b:e8:df:5a:0b:b9:84:2c:26:
         87:ed:2a:d6:f3:47:30:a1:74:f3:6d:16:ce:8c:4a:21:af:a2:
         f6:1f:71:c3:54:7b:7a:ea:bf:1f:2a:93:aa:66:c4:71:b0:a6:
         60:24:2a:99:db:26:73:ac:a3:41:66:de:e6:72:fc:e7:5d:49:
         eb:dc:a8:94:eb:48:3a:3f:f0:98:ca:c3:3e:d5:fc:2a:00:83:
         b6:2b:c4:dc:55:0e:b7:4a:de:cc:2d:99:8a:ab:aa:51:12:fc:
         19:a7:36:df:52:24:d2:4e:dd:d2:c9:cf:28:63:fe:c0:43:0f:
         d9:26:37:83:6e:59:11:89:94:28:95:f4:05:d8:52:6e:84:1a:
         ed:66:ee:55:c1:d5:66:4c:8b:ca:9c:36:48:6a:1c:52:03:6d:
         07:23:7d:a2:f7:92:5e:e0:58:c4:65:49:3e:5b:c7:b0:e1:8b:
         74:47:cb:a3:90:0c:c6:73:5a:1f:a0:e4:d4:1b:51:a4:ab:f9:
         f4:99:fc:7c:10:01:18:fc:cf:3a:8f:e0:3f:57:2b:de:cd:19:
         1b:5a:2b:0d:b2:c8:36:a8:40:65:ef:cd:8e:12:1a:2c:6f:d7:
         d0:45:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:25:49 2025 by rpki-client