This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          GjoiIY1vaUvRc4oKkSZ1zwXyrgiLv1S8qHG4/eMeMy8=
Subject key identifier:   3F:16:22:E3:DC:E3:F6:C1:C2:6B:8B:19:E6:9C:17:25:B5:F5:CD:55
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       019AF0514C5B216585D30D865A37DDBB9FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          17BD
Signing time:             Fri 05 Dec 2025 21:00:50 +0000
Manifest this update:     Fri 05 Dec 2025 21:00:50 +0000
Manifest next update:     Sat 06 Dec 2025 21:00:50 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: J2u-WNebQOND5pQrDIUacy8j8l8.roa (hash: Vvd0TjXjR9FhkBvtO2YJqbWdHXAU/GB3ZQoXK3zVnls=)
                          12: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          13: V-iBWNvDzOjE3oj3ZsxRXOFIkLI.roa (hash: bJv9u1JtLOAJLodQfH0YKSj356adakaFHXlAlJZDi/w=)
                          14: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          15: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: rJlDKy3jVa1TjCqRw6nM974I7i7fSxeUjFc2trV4bT4=)
                          20: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          21: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          22: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          23: qlRuFgW9QpSZ-B-QqBWtqwtHSbQ.roa (hash: NvSiolrhWigq47yPhLr31U+7NECb9us+yowLt16g6Mw=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          26: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          27: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          28: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          29: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 17:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:51:4c:5b:21:65:85:d3:0d:86:5a:37:dd:bb:9f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Dec  5 21:00:50 2025 GMT
            Not After : Dec  6 21:00:50 2025 GMT
        Subject: CN=3f1622e3dce3f6c1c26b8b19e69c1725b5f5cd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5d:cf:e3:b2:88:0d:75:08:86:63:d8:05:41:
                    fb:c2:4a:d2:43:76:2b:f6:35:7c:c8:3d:57:4e:78:
                    80:67:25:95:b4:0d:5a:cd:24:b9:d3:ce:6a:e9:3f:
                    a6:61:67:31:8e:93:03:5e:4c:5e:6e:4c:4a:b3:90:
                    7a:f9:d3:cb:0e:b8:6b:0b:2c:16:2f:47:a1:42:b0:
                    94:57:0b:c5:c1:36:a0:1c:35:7b:47:6e:0d:0d:4b:
                    2f:e4:62:65:48:a9:ed:ff:ac:59:05:e1:1c:7f:66:
                    3a:1a:66:2c:a0:0f:e7:f9:c4:5c:a8:c5:19:62:1b:
                    f5:94:a9:51:45:be:47:80:ac:2a:2c:eb:ce:cb:47:
                    c6:5a:32:c6:63:dc:d5:d6:2b:6c:66:42:59:15:7a:
                    3d:e8:74:31:5f:31:c3:d7:8b:db:39:7b:ad:3a:a3:
                    45:c3:e2:22:f4:7e:3b:ea:dc:45:de:e5:b4:83:7d:
                    fe:45:47:cb:b0:8b:39:1e:03:6f:a7:2a:50:99:1e:
                    2f:94:6b:80:24:0e:1e:c6:cf:17:9e:d4:aa:47:76:
                    0c:cd:c6:7b:4d:e1:76:c5:ec:fa:68:07:17:30:70:
                    64:8a:ea:91:71:d7:75:09:f2:01:d8:53:ef:55:b7:
                    21:ab:8e:24:91:fa:19:31:26:d8:2e:d6:76:5c:de:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:16:22:E3:DC:E3:F6:C1:C2:6B:8B:19:E6:9C:17:25:B5:F5:CD:55
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fb:f3:14:03:b4:ae:67:97:00:19:51:1b:0f:5b:00:c1:bc:
         80:90:b3:d2:5a:e1:eb:62:89:28:97:91:ff:64:5a:29:05:0e:
         50:b9:76:a7:bb:a2:64:46:78:56:48:70:1e:0a:f1:85:35:bb:
         90:db:be:1f:6c:ee:25:b2:cf:ef:29:23:9a:46:0a:27:e5:19:
         93:79:ac:17:1d:d1:2c:52:0a:3e:a7:00:9a:32:ef:4a:bf:26:
         f8:00:9b:b0:2d:3a:48:11:dd:2d:44:b3:83:61:e4:b9:bc:4c:
         fc:f7:9e:11:6c:98:84:6e:34:45:42:5f:1a:b9:e0:8f:ab:d8:
         34:e6:8c:87:a6:5c:79:f1:1d:f8:9f:85:17:94:01:51:1f:53:
         77:05:ae:7e:12:9b:ae:cd:26:da:80:2c:77:ff:21:80:63:8d:
         20:84:91:05:2a:d4:0e:6f:3c:69:6a:e6:02:df:d0:f0:f2:22:
         ad:e2:89:90:62:87:22:bb:d1:8a:98:fb:6b:be:81:4c:31:03:
         31:e1:89:00:20:f0:b6:ba:b2:8f:dd:ee:82:f3:78:47:5b:f2:
         c1:b6:51:61:e9:6b:d5:b0:dc:f2:5a:3f:d8:0e:ed:a7:75:50:
         9d:96:bb:97:1d:cd:88:b5:fe:5a:a7:eb:59:90:d9:ca:48:12:
         68:05:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 23:04:23 2025 by rpki-client