This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
File:                     MMQJYT_qCitELOES6cvbSF4BGI8.mft (raw, json)
Hash identifier:          u/ERkz0spIDqzh/14j116LL5472usHgywqNYPgLt8GQ=
Subject key identifier:   89:B2:3D:F4:C6:04:BE:21:A3:86:43:D4:BA:AD:36:2D:43:69:6A:A8
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B0F37DC01BD40C8E15A255AEC3B689EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
Manifest number:          15FC
Signing time:             Thu 11 Dec 2025 21:01:17 +0000
Manifest this update:     Thu 11 Dec 2025 21:01:17 +0000
Manifest next update:     Fri 12 Dec 2025 21:01:17 +0000
Files and hashes:         1: 0TcqWmBbS4pZwVBptkq4lqA5c5Q.roa (hash: SPYZBsTv2MNh1qyA2xq5tH1xrGTzoY0rK9rAvW0asOo=)
                          2: 1XXH5Tc2jjPAzQHYwkwVQAw_gHI.roa (hash: dcfuBWAVvDzz9GpSqGo/OZzT5vbmtFCpLz+pXMeuFkc=)
                          3: 3LgD2pWeokaJnu7AtKvUjtGF1K4.roa (hash: EUbwmkUwuSMcYd+jHYxrR2mUP8puunpDHahZx+0W+pc=)
                          4: 3cL278tMfhHRt0jMeGBsuK_6tdE.roa (hash: 9Jvsf+gu/Bz99BEJw/Qs3de4jjh1Gye98YTVVsGjiIs=)
                          5: 6QoOwa2ipaJqvrD7E2dbw1UcuV8.roa (hash: 2tOtZzMlaS8Y+/JP7ae7uNFPL8Y8C/sjWCJwPgz2D6M=)
                          6: A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa (hash: lE06Mjh97LJaUQ/w1auWux3C8TovlUNXB3RO85AG9OU=)
                          7: A49d_BeiTEUQG4p_3mJzcU9LAxc.roa (hash: Yk0iZpFyJXXMqGPy0ILeZNptWZYqa7K2r7Sh5AS5hIk=)
                          8: D-Xj-E8a8KpGmRlH8BwGif1kmI0.roa (hash: 7cRbUgZAzkqORhvBRcVH2i2M6t3Q6qZCnPwfq5AZPQw=)
                          9: DzFwKCs4SLbfq2s9Q7Y4hhddAlg.roa (hash: uVhqZq8hFXzpst7g4lUJZCwbTahSvmYx+Wbki8iJE20=)
                          10: FMEvE8lRSqQ-c4n53FDffBkErx8.roa (hash: GlA1THHMaPutrg5iNRsJwfVrQRoJ41Dni2qIntaImAw=)
                          11: Iv7XsxWXHnyoVpEd4DC_3XASFeY.roa (hash: RkiFvafvAi0w5FjSv5Z+cDcQDkhTTLcusqCEJERJr3M=)
                          12: J5Zl0e93w7Ouht3QTJQ8Agt_K3E.roa (hash: Ci6kg2a6GSjpPc9RFHsQWbp71+Q5BJmxJkaiYnBdvGA=)
                          13: J6jwomPMeZ1BKUT1HKADpUVqL4Q.roa (hash: ZT8/tzUWsV32mp8ODBnGUiawz3yA5cw8UBFbLvsiiBI=)
                          14: Kwu503K5TQ6mKB9wIlqJIRzuA5U.roa (hash: D2DY/gDYtav/Dsf8JETmsRPCOwdw9kpocKeFf8s9QAs=)
                          15: MFeBsVEFv-VXfJA4s0kbwDLrsao.roa (hash: EMCcoY2pdOJ/xwyHG39NdP4RUjuyAAIrDAvEM6JIEKM=)
                          16: MFuSjMaEcH_KfJOuOTM_egeHxuM.roa (hash: gSvthfvoW6hKh161OH6a/3I+TpE1mQXg8q3eHq/8gkU=)
                          17: MMQJYT_qCitELOES6cvbSF4BGI8.crl (hash: Ky7Zej5WosrSFC0ynIqZZRcIxvtcdlB6MqHUK3blYBc=)
                          18: PW87IxcR8NO4WUeOitQNh5EtNhc.roa (hash: abtoslPQuSyoMS7yrHdnRO9jo2QkBlO9JvhCml8oipM=)
                          19: Pevz6EWQXEb5yVp9lKenzNIdBdc.roa (hash: qGmkuDrxspXM+mBcJKKqEwtYtBwpIYoUjNRrKJA7ruA=)
                          20: RO_vqVjc-WToTVgA2LecnPN6dt0.roa (hash: jWGNKA1BOvpll3zjMK7kK32ayXj4dMaMQ6dbhZt9Q8o=)
                          21: RYzSxxWBkqoIYdDWQzrtXyD6HxY.roa (hash: 9uDtpLtRIp3Z50Qzu21CuIdk3zj29vKS3wKK9lm5Lyg=)
                          22: SRycxRgb7-ZLpEXgHls6Rg1GkZE.roa (hash: tgYoh8E5W71tyTIqSyUElR8mNX+J76OHaL8Cs33nYQs=)
                          23: S_pHPsCNWukS-WUFhIXy-OSJe2o.roa (hash: CgIqwLllc8CTWv043HB1kGIdlsthfsikGWfcwzjk14A=)
                          24: U2iNflEHT3HIL-S9ukQcbf1cEE4.roa (hash: CmjocmnsbLnvfp3fpATzHwZwgEQxqvdIsJxJ7LRGUnw=)
                          25: WHHJUFYWyKjhDOYk7Bkwtd_KEaA.roa (hash: WAiPSFNwflOwr12Zue1faOYw7xwtb69ioqP/IRmI9s0=)
                          26: XJn6uz5-oygXgu4ZAc2om2Be0WQ.roa (hash: Y9gNxCERt7wH5/baWKBp/m59FpcWgCGrLReBBXmd6l8=)
                          27: Xk5AYjoJKqpE6UbWJWl0e64Jdgc.roa (hash: Crv4Pgd3B0w5ftY7wmKEGbhnAr8LA9YDu34JHjjTqtw=)
                          28: YyzLMTt87Ecy3ghXnphVjvqquQ0.roa (hash: ZwuNLZzvOtpWGtNlX0gjt9977y68KkozP3OVholZME0=)
                          29: _kwy9bDSccd3Rtu2SHd2nC9AWHs.roa (hash: S0KPjYm8+CTV9bHwk2kn78YNa61JdUHm026b4f57gYU=)
                          30: a2QST08vhAuM6YzseDeOjRqXeXk.roa (hash: lMOk2f76mI5XqI13RnVVzTMO4e/gWq+iR4UTwWxTKW4=)
                          31: b1DT6ospwzst3YJkd_0LR059Sno.roa (hash: FX1wepEOkF8A9hAFZM7i5GnZPOJgUdJorm4d827ZEso=)
                          32: b5X1JzbTJUuqVfX0DehpNcJ_9kc.roa (hash: LmA3Cohl41GAEztGDTKc3Ga2ZxVmadMDX0gNG66wU94=)
                          33: g64IDCaPNJ9ZShV_l_bo46HmhJ0.roa (hash: 5+QoeL2CSfIj5AnV36tcPb8Se6mkOWP178b805IjUzk=)
                          34: gb13af6kKgtlfQFdYQtCupgkRjQ.roa (hash: WlJgR2c//WMYosfMkR2CJaWVw/G4EQYofJSeZrH4jNE=)
                          35: iYwPyGfodR503O-c7GXbrVrD7gQ.roa (hash: t+A2Ec5s6C/6NIyk0+jCzCtUWuwTw/vLmgLTTeId4fs=)
                          36: ipTg348ZUOHwTFCERWv85x5upVw.roa (hash: 16jKgCClYBo+eCIMwkt7ZjD/Ascu9zEJCZArBRFo1ac=)
                          37: jJ_1uHLWKiQkF1iVYcO_4bXIskw.roa (hash: MlNZfYRq0YeYuGTlp+S0bdyWWJDClUExqjVU2jALhT8=)
                          38: luhgkGvXoSBeo49IDDTu1_s8AjA.roa (hash: 9H2kNdWwK/olweSvXdAl8KgICVS+D/OaSJX7mmjuiAk=)
                          39: lyu6R4gm1GDGGWrprfi3lQB2gi0.roa (hash: SnWsapf5S+uAoqHYWK233NyQQsjjVYaX6QjiNNmT2oI=)
                          40: mErkWeU3I8mGIE7o-s9X2fk5o5s.roa (hash: VUpCAKhA9EiJ9ug9Oc5wXy4xs0jXv9yffBf1VGddEjc=)
                          41: my4k0_ivDuUGyBw3mHJZ8SCPZrQ.roa (hash: DJVXpvSVC65t6DyhISYYJXNS1LFS4kO5R9YQf3IOo4E=)
                          42: oZdG4eGf7a8nQ-LsuE-l7MTCS18.roa (hash: 5c15Pb7KH72jzhvecKBamgtcszwWgCVUEzSxuUMdHSM=)
                          43: qJ22okdD8cK_emCAng8rI9cPrbU.roa (hash: WUQnBOwIu5J+Q0plEqLVlVFpmBiC7eLrEJFqZ2HqzGw=)
                          44: rVRMkskBzwl9zi-JY6YFOAI1hcA.roa (hash: v08kT5N9ZXsSCeQYLs3P8oE3ZLKAofwCwujUwPJ72Pc=)
                          45: sAL7HV5u2GX7kRj70Q8iPk9F6Hc.roa (hash: PqlT19J8VExmo6WWORuzOl0PCbV635XVo/nu7AQxx1w=)
                          46: saL_JgI0PuLcRd2fgaRyuCRT4oQ.roa (hash: TKYq5bkvZmNzmAS5U9vl5b3QXUiEmUHsR8998Y8ephk=)
                          47: ssCZoEPZ62NS6Z7w7p7XHtYYBDY.roa (hash: Hgc/3TJtI5yynn7M0w0nfY5PZGQECx2OAgvuax5O8ME=)
                          48: xlkcSwD0mmtZPgi3xXKhycAWYyM.roa (hash: BAhCmE0YHR0xQbs06CAdD0yavtNQmtlINBJ1oX8Gqn8=)
                          49: yJts8iRe97z0LBku4nfeAAQmzuI.roa (hash: Kml13BMft8IVP0nzevzpw72P/X7Z+HrpFqQAw2Yg/rY=)
                          50: ydjj493UN6JAAmZf6D9xQrp5Fuc.roa (hash: r/+ra3gt0oRo1h5IYk68eH88kHv7hYOt8DrkYcFlWmE=)
                          51: zg4G9Al7ef2rgqcn_nM4kp9NKaI.roa (hash: YDgq8a39d8LckxrdlKsf3y4bYTg9xyEVGHD8tb4DwoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:37:dc:01:bd:40:c8:e1:5a:25:5a:ec:3b:68:9e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Dec 11 21:01:17 2025 GMT
            Not After : Dec 12 21:01:17 2025 GMT
        Subject: CN=89b23df4c604be21a38643d4baad362d43696aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:72:4c:2e:5d:e3:cd:23:7a:dc:e3:55:ed:
                    5c:1b:15:99:1c:f0:9e:58:62:30:2c:99:f1:d1:6d:
                    5d:d4:15:b6:29:18:64:24:64:b5:b8:c7:4c:28:01:
                    30:94:82:d6:1b:d5:55:f3:1a:37:60:97:37:65:a0:
                    d5:d8:b8:01:eb:e2:aa:c1:80:fe:cc:00:f9:90:62:
                    b0:ff:8f:59:ae:d5:a1:bd:6b:ca:d4:3a:bb:f6:e3:
                    27:57:ac:97:ae:75:3c:e6:e1:80:b8:75:7d:1f:6e:
                    cb:94:6d:16:3f:b4:84:78:11:0a:d0:0b:90:32:27:
                    25:f3:dd:52:1b:cb:78:9f:43:e8:15:5e:a3:d1:df:
                    65:a2:c3:98:72:4b:72:ac:23:94:be:32:4a:c7:f6:
                    84:81:11:15:33:dc:69:c9:1f:17:cc:83:75:44:ae:
                    8d:2a:12:ca:11:7a:5a:0c:6c:dc:ed:ac:9e:24:a4:
                    fa:68:cd:30:15:21:f1:5c:46:7c:14:d7:77:ac:bb:
                    38:64:e2:4d:fe:6e:90:5d:33:26:c9:b5:70:2f:69:
                    5a:88:3c:7e:54:b8:5a:bb:00:72:33:73:77:8a:7f:
                    0c:7b:a4:4e:cb:d4:7e:95:ec:79:58:4b:1e:aa:e7:
                    f0:80:f2:95:1b:58:ba:09:56:4a:46:ef:41:1e:73:
                    1a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B2:3D:F4:C6:04:BE:21:A3:86:43:D4:BA:AD:36:2D:43:69:6A:A8
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1b:f7:3b:b3:85:c2:bd:d0:e2:0f:8f:25:f4:e0:2d:70:73:
         04:21:07:17:45:e6:1a:fb:02:ac:3a:25:0c:dd:97:b4:b5:47:
         ff:d9:4d:0d:ec:51:d0:51:e8:72:89:d7:ae:71:66:58:0a:98:
         1d:a0:32:47:da:1b:f1:0d:35:8f:b4:89:ff:a0:5d:21:18:73:
         ba:0c:33:55:fc:b8:c9:1c:06:f0:1f:e4:38:6c:28:53:f7:41:
         36:51:2d:b9:9e:54:4c:5f:51:0c:8d:0a:51:3d:7f:d1:e7:35:
         3b:58:fa:e5:3d:55:8d:5e:59:15:43:f7:f9:98:59:7d:5c:29:
         f9:45:3e:35:6d:8a:b0:aa:97:08:40:1e:a6:ec:df:e7:1c:37:
         be:51:cd:b8:c4:47:37:07:95:59:31:76:32:1f:8e:2e:ec:b4:
         c9:71:9c:a0:f4:21:a8:ef:9b:87:76:54:9c:b1:c2:78:43:91:
         58:c1:d6:14:fa:30:5d:40:16:35:ed:6a:f1:5e:b2:d4:39:e2:
         06:bf:6e:b2:0e:84:26:62:f8:fd:a5:ca:20:a1:76:0a:d4:c5:
         a2:84:c7:f5:d4:4f:1c:8d:7f:db:87:1f:db:5e:eb:65:ec:80:
         de:3d:20:67:8a:31:aa:eb:b8:27:3d:e5:10:91:04:f9:b1:cd:
         bd:db:22:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsPN9wBvUDI4VolWuw7aJ73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjUxMjExMjEwMTE3WhcNMjUxMjEyMjEwMTE3WjAzMTEwLwYDVQQD
Eyg4OWIyM2RmNGM2MDRiZTIxYTM4NjQzZDRiYWFkMzYyZDQzNjk2YWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjtyTC5d480jetzjVe1cGxWZHPCe
WGIwLJnx0W1d1BW2KRhkJGS1uMdMKAEwlILWG9VV8xo3YJc3ZaDV2LgB6+KqwYD+
zAD5kGKw/49ZrtWhvWvK1Dq79uMnV6yXrnU85uGAuHV9H27LlG0WP7SEeBEK0AuQ
Micl891SG8t4n0PoFV6j0d9losOYcktyrCOUvjJKx/aEgREVM9xpyR8XzIN1RK6N
KhLKEXpaDGzc7ayeJKT6aM0wFSHxXEZ8FNd3rLs4ZOJN/m6QXTMmybVwL2laiDx+
VLhauwByM3N3in8Me6ROy9R+lex5WEsequfwgPKVG1i6CVZKRu9BHnMaUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImyPfTGBL4ho4ZD1LqtNi1DaWqoMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBv3O7OF
wr3Q4g+PJfTgLXBzBCEHF0XmGvsCrDolDN2XtLVH/9lNDexR0FHoconXrnFmWAqY
HaAyR9ob8Q01j7SJ/6BdIRhzugwzVfy4yRwG8B/kOGwoU/dBNlEtuZ5UTF9RDI0K
UT1/0ec1O1j65T1VjV5ZFUP3+ZhZfVwp+UU+NW2KsKqXCEAepuzf5xw3vlHNuMRH
NweVWTF2Mh+OLuy0yXGcoPQhqO+bh3ZUnLHCeEORWMHWFPowXUAWNe1q8V6y1Dni
Br9usg6EJmL4/aXKIKF2CtTFooTH9dRPHI1/24cf217rZeyA3j0gZ4oxquu4Jz3l
EJEE+bHNvdsirg==
-----END CERTIFICATE-----
Generated at Fri Dec 12 01:34:09 2025 by rpki-client