This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
File:                     kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json)
Hash identifier:          1aLXD+H7YHLvBRV7ly/dp+qAW1qHILkuRnlasiNe8Og=
Subject key identifier:   50:12:08:13:AD:05:14:C5:4C:59:5F:3D:CF:8D:C9:5F:40:AC:B4:F8
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Certificate issuer:       /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial:       019B058F3D326C1198165A2A33A84C4E0137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
Manifest number:          17BF
Signing time:             Wed 10 Dec 2025 00:00:31 +0000
Manifest this update:     Wed 10 Dec 2025 00:00:31 +0000
Manifest next update:     Thu 11 Dec 2025 00:00:31 +0000
Files and hashes:         1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=)
                          2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=)
                          3: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=)
                          4: Il-erxMI4M94_jrG5zUQVeoL7sI.roa (hash: k2tfe5PGNF5YTVczprADK+deYh+5lz2pJBVEO5+Hrkc=)
                          5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=)
                          6: WtirBgLdd1QDsDcFh1HdrsUIlWo.roa (hash: GA2Y0Eudc/59qW3vmpiDOm6qcDbR/NWl/VMU6tiADWg=)
                          7: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=)
                          8: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=)
                          9: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=)
                          10: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=)
                          11: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=)
                          12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: k1y/KlyhOEmRfHMrKec6E+r8TWhPCdy5cAswOiwqy80=)
                          13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=)
                          14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=)
                          15: vQeju5IXNjEoWBC9ET0ksVohAAw.roa (hash: vNUoX8dzp8vlCht08az7kkkn7Bm6tbtsihn+s5TebwA=)
                          16: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 00:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:05:8f:3d:32:6c:11:98:16:5a:2a:33:a8:4c:4e:01:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
        Validity
            Not Before: Dec 10 00:00:31 2025 GMT
            Not After : Dec 11 00:00:31 2025 GMT
        Subject: CN=50120813ad0514c54c595f3dcf8dc95f40acb4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:f0:c5:c6:eb:da:de:98:c9:26:eb:d7:e1:
                    d8:15:30:74:72:43:af:12:7f:4c:91:f3:f4:a3:b2:
                    e5:53:a4:56:23:da:02:5f:a4:dc:54:db:37:e2:57:
                    02:21:26:31:1d:78:f8:8f:2d:68:aa:f3:5f:b7:57:
                    64:6e:04:a9:f5:48:56:d5:40:81:3d:7e:98:14:95:
                    55:68:f4:bb:c5:a9:f3:2b:59:1e:ef:33:d0:08:e4:
                    9b:77:6b:f9:6b:fc:c7:a8:0c:08:b6:e8:90:3f:09:
                    94:8b:82:cb:2b:88:26:cb:99:2f:2d:db:d4:4d:38:
                    e8:1f:e8:51:8e:6a:f1:a9:9d:80:a6:6a:47:d9:ee:
                    c8:fe:7b:55:e0:9b:19:41:45:9a:0e:51:c7:3e:c7:
                    96:4e:52:00:62:34:9d:4d:d1:1c:57:f8:58:10:03:
                    2c:aa:63:6a:a8:ca:e4:f1:85:35:29:07:58:bf:c8:
                    f5:08:a7:db:8e:39:ca:24:74:7f:6b:20:52:94:56:
                    25:b6:29:4d:0f:9a:8d:15:51:78:fb:dd:25:4e:d0:
                    35:5a:e9:9f:6e:f1:1c:cb:b4:80:89:7b:a7:66:f9:
                    cb:e9:5d:67:1f:cb:66:28:a1:a0:15:37:b5:7b:1d:
                    83:b0:fd:df:f1:a4:ec:2b:74:7b:8b:ae:d4:d4:89:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:12:08:13:AD:05:14:C5:4C:59:5F:3D:CF:8D:C9:5F:40:AC:B4:F8
            X509v3 Authority Key Identifier:
                keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:88:9a:61:93:44:f4:59:2d:7e:8e:7b:86:0e:d7:20:3c:9c:
         dd:51:03:86:fe:e0:70:bd:eb:78:61:a8:7f:2a:51:7b:5a:98:
         c8:46:fe:d3:32:1e:b6:02:df:0a:51:d5:cf:f7:4a:44:09:bf:
         80:99:e7:ac:48:39:2c:76:9f:6f:7b:08:36:56:82:d7:fc:51:
         1d:4f:7c:68:a4:a7:ed:d1:b7:c8:57:f1:e2:62:a6:66:d8:22:
         87:e3:e7:69:e6:5d:e9:f3:a8:f5:6e:b6:03:7c:e9:cb:bd:c5:
         59:11:04:c8:a8:dd:0f:99:1e:38:e1:37:d9:56:1f:45:b9:b3:
         67:1e:61:1b:30:51:51:0c:da:01:ff:4a:1e:47:5b:98:23:b9:
         fe:e3:ad:0e:53:67:db:de:f0:64:16:b8:a1:5e:9b:4a:2f:ea:
         f1:a4:ab:9c:e6:00:61:e2:8a:51:c1:df:9e:55:f1:4a:8b:a5:
         6d:92:e9:16:14:ff:51:2c:c1:2d:76:7f:6a:57:8e:23:dc:fe:
         9b:11:b9:a2:8c:b7:0f:97:3e:45:e1:5e:cd:2c:05:cb:d6:41:
         0c:e8:13:d8:c9:60:8e:63:46:69:fe:c4:dd:1e:b5:56:80:87:
         35:4d:de:40:2e:84:bd:a0:2a:12:7c:44:51:61:82:79:cc:70:
         8c:3a:05:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsFjz0ybBGYFloqM6hMTgE3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjUxMjEwMDAwMDMxWhcNMjUxMjExMDAwMDMxWjAzMTEwLwYDVQQD
Eyg1MDEyMDgxM2FkMDUxNGM1NGM1OTVmM2RjZjhkYzk1ZjQwYWNiNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOfwxcbr2t6YySbr1+HYFTB0ckOv
En9MkfP0o7LlU6RWI9oCX6TcVNs34lcCISYxHXj4jy1oqvNft1dkbgSp9UhW1UCB
PX6YFJVVaPS7xanzK1ke7zPQCOSbd2v5a/zHqAwItuiQPwmUi4LLK4gmy5kvLdvU
TTjoH+hRjmrxqZ2ApmpH2e7I/ntV4JsZQUWaDlHHPseWTlIAYjSdTdEcV/hYEAMs
qmNqqMrk8YU1KQdYv8j1CKfbjjnKJHR/ayBSlFYltilND5qNFVF4+90lTtA1Wumf
bvEcy7SAiXunZvnL6V1nH8tmKKGgFTe1ex2DsP3f8aTsK3R7i67U1InQDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFASCBOtBRTFTFlfPc+NyV9ArLT4MB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIiaYZNE
9Fktfo57hg7XIDyc3VEDhv7gcL3reGGofypRe1qYyEb+0zIetgLfClHVz/dKRAm/
gJnnrEg5LHafb3sINlaC1/xRHU98aKSn7dG3yFfx4mKmZtgih+PnaeZd6fOo9W62
A3zpy73FWREEyKjdD5keOOE32VYfRbmzZx5hGzBRUQzaAf9KHkdbmCO5/uOtDlNn
297wZBa4oV6bSi/q8aSrnOYAYeKKUcHfnlXxSoulbZLpFhT/USzBLXZ/aleOI9z+
mxG5ooy3D5c+ReFezSwFy9ZBDOgT2MlgjmNGaf7E3R61VoCHNU3eQC6EvaAqEnxE
UWGCecxwjDoFpw==
-----END CERTIFICATE-----
Generated at Wed Dec 10 05:24:45 2025 by rpki-client