This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
File:                     Vo_jXMliYzonV68QoOboq20B9Mk.mft (raw, json)
Hash identifier:          113y2KB+U/0kfKn0hTve/1ZWJtH98J5a0Bu2oMUMTtc=
Subject key identifier:   F6:80:FA:C2:C9:0C:1C:E6:F0:F4:E1:E6:59:2F:58:C9:02:AA:0C:78
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       019B06342CCD14A51E66411C4A3A0B79BA99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
Manifest number:          17F3
Signing time:             Wed 10 Dec 2025 03:00:41 +0000
Manifest this update:     Wed 10 Dec 2025 03:00:41 +0000
Manifest next update:     Thu 11 Dec 2025 03:00:41 +0000
Files and hashes:         1: 00NF96d-dOF2R-sgDmx7SF7E4DA.roa (hash: 2kpq15gaRBQ+O1CnsoIPK/y+/hQJxoJIQJu3v6gmr5I=)
                          2: 1nnAsF_X5LfrkXzPCD6govZ1YrY.roa (hash: EXCtrwxOha0FCmP698dUJ0iUjdlA32zelEheOOj8WrY=)
                          3: 7HQ_1EAe_1IX7rDF-TdfN822BVQ.roa (hash: vxC6quYdceeyESFYcI+ecz9PBbv66IlrZRnCAuS1UOg=)
                          4: 866qtzUw3r2JYGCZI8bcPe03RJE.roa (hash: 3l2oIi8PZ7WzWh0CnE9LWxq+OpYH212Z+BoOJAaryMQ=)
                          5: 8en3JrS9o4QRtuuuwzZdTyG5Vh0.roa (hash: UCP/0ZQutL9d2SrTL9jG3hX65oul+/tjNqqWKX/P8ok=)
                          6: 9WBHWeF0AALAS2LaPR182-cvOAM.roa (hash: Zn/5ahBGkIXjCN5QHytKBdBBAFYJv7n9tTPyMX3nI8I=)
                          7: A-NLOGTV2UkdDvVfzefoigOELXk.roa (hash: Ow7CHRQxwi9p0xLBhEOy8rv3MLYW56VAuyBIVj/0KZE=)
                          8: AaG8Def6w4BiK3J3qdnjmerS3cM.roa (hash: d8yyhZCQzv3iOvJzFFd2S/p8T4yCXrCyNRr96Ii/wuM=)
                          9: CTvzKYuavAXPQrA0BsbRPbX0CgI.roa (hash: 6AUy7OVDmglmaCZCA5TauI1Rw9HuOKH9yejf2rQneKs=)
                          10: DUD5tEp0B51Vf84fwyHGaG3r_bE.roa (hash: 8DCcwFCeSl+vO3g5PjAb1wLRUgeuuGIiQ0gwSYwHtWQ=)
                          11: DrnIGKszAW1ZbQNKSkEregTfhb4.roa (hash: Z/zgq/mvlLhjLNnsmm9yXyxlV8o9imFyGkPeSoTx6+s=)
                          12: Du7F2RJm5agz3daFo9PURGnmsX0.roa (hash: kCTzkj1FmMV2xudTVUUI5L4uvZ5KjanxMR579BAs7bE=)
                          13: E3UrBAInZkpcjAQ4fPb-zQzwEwg.roa (hash: 2EVUw1vx9q4Jgfbf89KhsWHm/Xwt/iLvHeTQOp1xQII=)
                          14: E3zOQgSE0CFiFbyTws_KFO4SVPY.roa (hash: TmlzicIbbCAyLdaBCNwSdoyOF8SiGxWXxk8+YSXd0EA=)
                          15: EPFyPd6mJXsltRLVDtXcpS2caWo.roa (hash: bc+DvNL0kvqZ/wN04b1Ytp+wKVgVxg+XlNL7sqxB8uQ=)
                          16: EqvJ7znghs9RHDW0PyHlazG165s.roa (hash: Jg9RQl0tB2+f/sgwkNuxN1g2oHizK5dZZ/6mKmAJi8E=)
                          17: Hjju8v2jEZmSCDJ-bNXrMk0-hXY.roa (hash: JjBdFSUA3yQy4g9d5+Y+B+xakNjF1Ee8c1zoYnDTEvA=)
                          18: I_VctA8CCHUYTMQz8Tr_vsRaXCc.roa (hash: e+w5CRwaj72Tbcm1Vi4aqzPrCMc7o16Q2Vm73EGSFbg=)
                          19: KBkPEKuHor0zBj6YpAJGkxud1Fo.roa (hash: aRB52wqhCKyk+lFn/X5ts6PNhQ/KcaoodBx+csqadVI=)
                          20: L-O86ZBSaMC4Hudef6Osmyl6Km8.roa (hash: te7/ETw69+h9QNpLO+l3JQ3GRKWx2IKyfKw/0+177Vg=)
                          21: OdusVMGeqNaOPkYoEAxeCVjXPdk.roa (hash: 6GqKrgAHmxXQWf13TcbN4PY3us+Ia5NmNQbOS83v5JI=)
                          22: QcaMdf8wN_oKrUKKjQDaDCG3nLU.roa (hash: eiv+LUkW2mCzBfv89ZxOhPY004Yp10lyTQAV2IGZ1m0=)
                          23: QsLvEx96RjvRlQJYm9855IcfN1s.roa (hash: hOgbB8MBxcebp+xpozXSPiL48SB/8JuLkNg0TGu94TU=)
                          24: QzkaU5PeUOyG7zE42GOEmTvgRqA.roa (hash: zZ4VgdYz8AUJnIf/QxJmzBX5ifr5x8OIk60FhVPxWdc=)
                          25: SAErMn910QcsjZhMZn2xF6Hedt8.roa (hash: m0heJy2RnMYv+s0k0IbcIoFZhmwcKXlBwC48PIe+ALA=)
                          26: UIPIzF0BiXqBLPZaAgstEuHyTTM.roa (hash: IR5uYctE85yBeIGELjOhGZexjXdNlPVx3vr/SuOJIN8=)
                          27: Vo_jXMliYzonV68QoOboq20B9Mk.crl (hash: eMnOxeX98L8B3np10y+G2A4KhSV9yOUVHFPVySgUbrw=)
                          28: WZKwaTpn0ejLJdCb1MV-HYV83xA.roa (hash: VeowTPlZiSf+LwnuET/ince4iVSMAPnoleisv0QZXoQ=)
                          29: YBHwa8V11c5qzA0UPwfMfypHCcg.roa (hash: CuoK3u9YojcDSoTy/wRVt4JDPALAvwVfnZ3WWSE/eNo=)
                          30: YESZZ8z4_iDXCDClXUIKUbF3S7I.roa (hash: /591PoGTJq2Uys8opsPw9OBZqlJyvSm915TprmPu19U=)
                          31: _YoSAm3lcbi756fxblV3ZfZrhI0.roa (hash: ute7toKDg9faNDGXI79EvogsCjtOm93xLjXKKvEk2do=)
                          32: cOmvEG7PuYuwByoeSLbyieR7YHg.roa (hash: HEFOQWN0UDdmfd3xIciXkcTYL/AKVCBT6696axC+El8=)
                          33: eMH6m6XUK6vkYmGRwXg0yjvpN84.roa (hash: bW1HU8dnlDE8px80oIrQP6atTebTqY3gMIb4TSDVkT0=)
                          34: eU1vFBTpVnEsvVlr3LB4QXMLh38.roa (hash: vKIpytDNZhzJKHCY0MlPTl9ba7AnMVpi/nYWDnjvGpQ=)
                          35: f5Ho3akgKmzjlMiu9k3MEwxgpfE.roa (hash: w7wkP3SoIISV8wD3GVBDY5Bg3VOKaV91+ogwxeEjZVY=)
                          36: fohhFTzC1iM9QOPrvht9x9um1EQ.roa (hash: Dpxbw0i80dmo9QdceY9WEM8XM32oM2v3vYFAP5bAxrs=)
                          37: iXlJ104KuqxV5REEAJHbWARC02c.roa (hash: rfE/ATgZ8g0z0CqiMjyHr9PZkrSgbAylH3f2j8r3KJQ=)
                          38: ibOmWmMkqZptyIuLMKX80ndnCrU.roa (hash: lK/5cBo1mj7Pjjk5vQIZJ9djzYGqcKAUUssU73joL2k=)
                          39: ieakcGoIiHFkmiV8wxWtgk3UGf4.roa (hash: eU0NDIB3a2rYpJJtub5haewQQHkz0eOOXtRaNtZWpKs=)
                          40: jLROnK8cMHatX0Ltfjcz2oxrTxw.roa (hash: GQKygxnQbwwMNSZLYXT9rUA9DxvpzQNszZcDuUSnn/4=)
                          41: jZC9EYSq9SyBUGX-5WVx9GvaLXw.roa (hash: Jseu/0PcA9oMIWHKxCIwHR9fu1mxnuvGK6PX9V3w88I=)
                          42: jiO9Mdn-HsWm7BVsZElm11YkZV0.roa (hash: APIn7pxRvbYuoSqnbdSM+pOhDIsDQNgLH1nEhUYtL2Y=)
                          43: mv7rc-hqsI2Lagrq0YUIl8s0aOc.roa (hash: UebGe6t5Su1GKezXT74P6nFKUm0pG4M/DYy4n3k7Ug8=)
                          44: o_vPKp-yya5cSSqO1lhAf5-yu5U.roa (hash: E6uA6lZ6vd1G5UfqzsNySuj5rqIPT/m1yd1RyvfXfrA=)
                          45: peZ9leIKvtzaEIB0WUANE3zMc_o.roa (hash: ihPt5ZcWXXJa1kFjUJyi/XxvoXO5SF+IotGDhTxVKIQ=)
                          46: rbCzMepC-MxIQV2lGwDQGFpMA_E.roa (hash: ntNK7wjYdip0X1iwgAD1yt0PHIqUmW2l27tBxfG1GMs=)
                          47: sgoYeQNtFnh12FV-ZwGviu0rJg4.roa (hash: 2Vn+m+ijRNITjJPoC4Uhp6Js9ds/J9KOP+oHIgtb3es=)
                          48: tBT7AhJxolPXiJzucm9LCU5J5kU.roa (hash: D2cQGAA5bQKmVKxq46YVwmET4+7g1UaAG+vOC8lSiKw=)
                          49: tyaYl5YiFR3mBp3dE0Z7qqSxJ-4.roa (hash: 1oOfsGz2G4JZrKzX/nD0zBodH4uCjpfY8iZX8tHeLNY=)
                          50: wLN3myAi5FHIgidXi2ZFfeK2zhA.roa (hash: Is7r3lXrGXrQ9R7HkhJRLTlHy8dhLBmgwx27pXJaQBQ=)
                          51: wQuk9uFJ0SkIQWVKCCsdmry_bdA.roa (hash: Ja4EOwo2UjKhTtN2qFrRg4e5sqYWU3VT1jaSt80MLRM=)
                          52: wTXNCobmVd94tU2BHf15dM_wmUs.roa (hash: XeXe1lrR7H1lmm283TcWTxGv41BCBjM9i+00xX3UQ7M=)
                          53: wv6zFblQLZj4fNsmUhW_NVbiHeo.roa (hash: 5nFGP9PJ1NNpQvR8+yESzQg+hj92aC7vu1K3PrOJpt8=)
                          54: y4wMf6JquxYLED3eA1SuJ4LGjU8.roa (hash: 8drr3QLe4cfiUTMUz5YEnRF35MrW6ti9QvCJH6BnDeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:34:2c:cd:14:a5:1e:66:41:1c:4a:3a:0b:79:ba:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Dec 10 03:00:41 2025 GMT
            Not After : Dec 11 03:00:41 2025 GMT
        Subject: CN=f680fac2c90c1ce6f0f4e1e6592f58c902aa0c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a2:21:ed:f2:40:dd:af:a8:9a:1c:bd:e5:ba:
                    b6:29:e1:b8:ff:de:a8:e1:c8:0a:2b:74:64:53:84:
                    a0:e6:c7:35:68:78:cc:e7:a7:9f:1d:e0:cc:77:43:
                    fa:38:35:a5:b4:e4:2d:bf:62:25:bf:ac:09:4d:57:
                    fe:78:e8:73:65:69:1b:a9:6c:0f:43:4f:0e:90:a7:
                    65:40:02:23:53:dd:c0:09:95:e5:d2:f9:4b:af:40:
                    c5:fc:cc:27:cf:3d:9f:ce:ba:11:3e:67:ef:87:28:
                    73:b1:0e:a1:fc:ca:21:f4:75:65:4b:3f:ab:3a:2a:
                    2e:c7:be:39:fb:d3:9a:ce:49:e2:52:17:be:3b:e4:
                    34:9b:cc:45:b8:3c:8e:a9:9a:f2:ae:4f:c4:7b:34:
                    42:ab:b5:b0:0d:8a:ba:bb:9f:8d:6f:bc:38:65:19:
                    63:c6:0d:75:20:31:99:fa:4b:33:36:5f:b8:97:f1:
                    df:55:fc:66:b0:25:4a:98:0a:cb:fb:37:5d:79:f0:
                    a1:24:d2:4a:b0:ca:28:b4:61:e1:2d:ca:32:67:0c:
                    e3:b4:1c:48:47:a4:6a:6f:e8:83:4a:ee:b4:c1:50:
                    98:c7:1b:0b:e7:14:57:99:3f:d6:5c:43:8d:ba:e5:
                    3f:02:db:9a:b1:da:07:57:66:07:14:34:69:2c:eb:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:80:FA:C2:C9:0C:1C:E6:F0:F4:E1:E6:59:2F:58:C9:02:AA:0C:78
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b5:66:03:39:6e:dd:c9:7f:7e:88:d6:aa:3b:0d:51:14:c1:
         b3:0c:2a:a7:85:00:5d:0f:70:d7:46:7b:3b:a8:ac:31:39:5f:
         aa:ca:80:de:c2:17:ac:cc:f9:7f:f9:34:d4:7b:ec:4e:17:be:
         00:a0:3b:4d:bc:45:e4:51:d7:3c:b8:f4:40:dc:f7:67:8e:29:
         e8:a1:e1:54:11:9a:96:05:b8:22:f5:f3:d8:25:c4:fb:87:40:
         25:d5:0c:de:35:2a:31:af:3d:e7:a0:a6:46:2d:72:a2:ad:fd:
         62:b1:8a:d7:1d:35:bc:87:1b:3f:81:be:26:fa:68:2c:0b:f1:
         80:96:ea:44:27:1a:f0:1a:c9:a0:66:21:99:b7:69:08:c2:75:
         74:b8:c8:a9:33:71:40:be:d5:e9:cf:87:59:7d:0f:ce:4d:5c:
         6d:dd:20:39:57:b6:12:49:44:b6:92:23:a4:c7:07:6f:f7:73:
         af:b1:51:0e:42:94:d2:b3:db:6d:b7:e6:dd:89:d2:d8:19:6f:
         64:2f:ff:9e:b1:b1:6a:65:31:5b:7a:54:2a:cb:4b:2f:72:9a:
         01:31:b9:3d:74:51:59:bd:d8:04:dc:e2:0b:bb:b9:10:6f:22:
         2f:88:cf:ec:56:cb:2c:70:fd:c1:ef:57:e9:28:2a:be:0f:1c:
         27:e8:ce:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsGNCzNFKUeZkEcSjoLebqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjUxMjEwMDMwMDQxWhcNMjUxMjExMDMwMDQxWjAzMTEwLwYDVQQD
EyhmNjgwZmFjMmM5MGMxY2U2ZjBmNGUxZTY1OTJmNThjOTAyYWEwYzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qIh7fJA3a+omhy95bq2KeG4/96o
4cgKK3RkU4Sg5sc1aHjM56efHeDMd0P6ODWltOQtv2Ilv6wJTVf+eOhzZWkbqWwP
Q08OkKdlQAIjU93ACZXl0vlLr0DF/Mwnzz2fzroRPmfvhyhzsQ6h/Moh9HVlSz+r
Oioux745+9OazkniUhe+O+Q0m8xFuDyOqZryrk/EezRCq7WwDYq6u5+Nb7w4ZRlj
xg11IDGZ+kszNl+4l/HfVfxmsCVKmArL+zddefChJNJKsMootGHhLcoyZwzjtBxI
R6Rqb+iDSu60wVCYxxsL5xRXmT/WXEONuuU/AtuasdoHV2YHFDRpLOuUQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaA+sLJDBzm8PTh5lkvWMkCqgx4MB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrVmAzlu
3cl/fojWqjsNURTBswwqp4UAXQ9w10Z7O6isMTlfqsqA3sIXrMz5f/k01HvsThe+
AKA7TbxF5FHXPLj0QNz3Z44p6KHhVBGalgW4IvXz2CXE+4dAJdUM3jUqMa8956Cm
Ri1yoq39YrGK1x01vIcbP4G+JvpoLAvxgJbqRCca8BrJoGYhmbdpCMJ1dLjIqTNx
QL7V6c+HWX0Pzk1cbd0gOVe2EklEtpIjpMcHb/dzr7FRDkKU0rPbbbfm3YnS2Blv
ZC//nrGxamUxW3pUKstLL3KaATG5PXRRWb3YBNziC7u5EG8iL4jP7FbLLHD9we9X
6Sgqvg8cJ+jOUg==
-----END CERTIFICATE-----