This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
File:                     TxQRLQXp2HYUnSd41I7aqjJNsKU.mft (raw, json)
Hash identifier:          SpTjfjU/dXuDCqBQBxBQht5KrjQM1jB8+4GZUiulnVU=
Subject key identifier:   14:A1:1F:0A:20:6A:E2:EA:06:E8:B5:DF:93:A9:32:D6:22:D2:22:28
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Certificate issuer:       /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial:       019AD736F95488C65777FCA4D929E55E1280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
Manifest number:          0A81
Signing time:             Mon 01 Dec 2025 00:01:35 +0000
Manifest this update:     Mon 01 Dec 2025 00:01:35 +0000
Manifest next update:     Tue 02 Dec 2025 00:01:35 +0000
Files and hashes:         1: 1q15TtXvytVHjStfX_lL9tV9DVs.roa (hash: w5d7SYBHMqnm/Qqyb8nFvT3J808OFmfopT33zLcfmNQ=)
                          2: 2xyfwpZuyS8FfcxbjFGzpEC1S80.roa (hash: ph5pFid7hQN2/J8cBKGByUr3gkDLCxIRBEgEgJazIvY=)
                          3: 3dgwdFBn2PXVI0JsrotAUEKLYR0.roa (hash: 7HuR03EpVzgap8e4ae91gdyjM/onEIpLgtNf42Acqus=)
                          4: 4_eWVTbuyBWFWXmZsgd58LozWxA.roa (hash: VcywCNJAu5x4K91o4zk/dsIIOQy3B1o5AtQtJM+7WGg=)
                          5: 781Y7WR74KP16bfjYN7x7qbjXUo.roa (hash: JLjFmALQamBcUTpdq5w7UO7gABpC9Lprod8kcbZKktE=)
                          6: 9WzcISpJ-uTJXJpGPWImaJ1ZGbA.roa (hash: tuHJkUiGT5lmE9PFCGcxYDgAaDUdZDVU1o04BRBCM5w=)
                          7: 9l1LU6vhxehP_pQUKOsxdDCtk4c.roa (hash: M9SdlMffEUjd/9zAke6Pbv9btXlDRe6+PWs1O7KZTbI=)
                          8: BJCX_WggKmBE3-H5I34ldv6fLZ0.roa (hash: ZCzS0PTX3qe/6sYXUo5G6g055d8TtdLeIKIWCmgswxk=)
                          9: CFH3tDV6CjVHTRuE0yBcRo2-IaQ.roa (hash: ac5Eyl+9TSmSCBTLI0o39IsF1z2SYP3dsWgJcZrSzGQ=)
                          10: D7_j71WlNQbJSaNR8h4l7oOWSxU.roa (hash: NIejWpZS6g33TTIHATPaLnEB2XPdA2izYQUXBac0DZo=)
                          11: Ed4loudndsjYSXqY4Q8xs6ER8Q4.roa (hash: Lr3T5aakdnBMwcWrCBXcMU2w7PGSM6aH6wthEb/gTIw=)
                          12: F5Ytjlg1FWsdxSwJLOPD5DQhDJo.roa (hash: rB0GXP4P44L/glh/m3ADF7lSZ634cO8s/N8lvh7pZrw=)
                          13: FNPtX1z6-Gt7jQ44UvWNFSRbm-g.roa (hash: nguWIGGL61WB5iPidKnsdqS+gmUzKRAINT8EDHat7dE=)
                          14: GekOQSRgaOq2ZMppSTi9JC4xr5c.roa (hash: +xllFqhGaEr3x2j2aZdOO9FiBxWmNKtqHeZi5tWloaU=)
                          15: HzB5_mrhdxqK3tHemRYqJUrCWoc.roa (hash: c97N2Ld9NhkRwBwjJDypJuWc2rnmxKN1z4mc5oDIaFc=)
                          16: Jf_p-1GWcr7ryXYkVaXP-mq5LrY.roa (hash: B5E/QZm1FWuwr9aSwFJceJ1D9xRlja/oZuQDsxojUik=)
                          17: Jx6sf754-VYd5Og5nvcp5unrAyk.roa (hash: D3DLgP5OFULjC1PpELSPiJrkZ1hR2NUXXRL/5u3293w=)
                          18: KtlnfW9_h7_MyW-j9TcGiC0HAu4.roa (hash: 104LifrnYp7wohFkNN5zsIKvsi2D4tpUsJX89f3PFT0=)
                          19: LzdMGu0OcRYHQY1HlpwxQLBRuSY.roa (hash: 8UTPwSHPxxCJvAY5ZTsxLYAysZ1uLF0MwZ9WftvyUs4=)
                          20: NdhPKGIZH_MNEMgUukoxGilRd4g.roa (hash: oG0/Fo7mBIi0X4IrdXas78jFDzdGU3jGiruJ+gMVCZA=)
                          21: O0YkX4qTSSZSsOFa-tmk41Ndtdg.roa (hash: kPmdgzP5KpLEZJZzI9YnBU9KMJ0ksoUVrclQTKF1Oi0=)
                          22: OAkrSqfZjROgM8oZN4ddqwaUIFY.roa (hash: njs/k7l0yWQH9Tc0wN0u7gMoEWInaliFjlKXNYgF0Kg=)
                          23: SmBWFs2JZp-Kija2c7xPvzisjqY.roa (hash: hKlLzT2Dg4Xh1iL/3d5i5HLxDI7Ai252L90EvULpFjk=)
                          24: SmKw7AOI9JUtfz6HkGV4t9qJQqE.roa (hash: GwxaToKhMxog5Qb6KLB212ESabEWepvnGaUrIpVp2N0=)
                          25: TxQRLQXp2HYUnSd41I7aqjJNsKU.crl (hash: aI+W1gfxfELsLRchgXo7z5Pysu7K6M6wbvAiI7zTGaU=)
                          26: WNki2D2sSC41bbhAU0tR4_2oRHE.roa (hash: /ZiEvxSCYUwIn7nqoQmWj7skMdyF225W4GePEefqS1Q=)
                          27: WYsGEQYq-064ncik3p6ueM-7xVg.roa (hash: zVzrmUA+nDyzCbHUJnNFHw5HV+KZpljQJupjwkywgGY=)
                          28: X33Nuee0w6GTBtZodhIbCfryLHg.roa (hash: q4lpuwTTRU669YBE3yh5vrkAgExUqfjgBFzui/pDGDI=)
                          29: X57o2syzPbfznAEnkuFPfTQEZsQ.roa (hash: GQSc4ByVQqn+QttMMb4JY7U3gZxngdNYLtw1PJpJuC0=)
                          30: aI2NYqmkcYv2KKww0cSjGySGxgg.roa (hash: KQ/nFDjAaOgdJNR5OHss0Kd7IzAM9h3KUzyzVYa2qPw=)
                          31: cZSQ8R7-65vAwJO-FT96chJrUGw.roa (hash: 9tzcRSPinXlO3L9oDrIRigxx9j9+0/c5jg3Nd12dBaI=)
                          32: f7ptg3vdm2RgdD3iP1J5JBwbuAo.roa (hash: N4rUxBlNqRiwZcSHmZeJl28Kw95VKLe/3xyx00W8iKM=)
                          33: gD4s9HSc5p2am1oaqm92KyZ6rNc.roa (hash: uwwSmxA3VyFu8q7qjQqWimuyakFaRyg23jDDeJ5VJyc=)
                          34: gILMbtpqEFA62JoaeYu1K5LSJW4.roa (hash: yqHQtUF3utDdJ9J+Q83C8R4pXPlN44ovUCcpIL/CHjk=)
                          35: iO2XymkwIF7WlUW5qz2qQNgB2Ak.roa (hash: L1lYpnfPbbUaWlpO5SVeEau2RnCcWEeITZOvJxCDImc=)
                          36: jKJZGttVpd2zbPn5oh1yZ1pxZRk.roa (hash: /ybO8+Gcl/0Baoo97KPi0aH4uqVdzayZm5LOJa3MJ/I=)
                          37: jOulq9wQPJB_K34gHf7uO6xhDfw.roa (hash: ir9xDKYoEAdzfQ8CoBLgJ34BLcy8NxqnVn77vnV7lOk=)
                          38: mAliMArUmeDltoxHl02OqrxoCJY.roa (hash: +m9SPyFh2km+SGU6TDB8gaIZJAfCsZcIjO6U8dM+w8Q=)
                          39: mOjHMHlJNxxJBysxWsOSgCfJbsA.roa (hash: VQ2RDJHlSUvA0D8d5A3JuXxTffzuCIHvTqw3n6jvJDg=)
                          40: pcOsOCoBsuL7OjuzRuZAWMvl6mc.roa (hash: +7ELHnUi27cewsZpM+owlK2DUPXW1s4Jgo5ehxXa18A=)
                          41: q937SjjKh4bSHLGWOKtTzauz6gg.roa (hash: hKewiwM2o9iLcNmuDfv4h1CgAcsdjepWhZKtPxlqSnA=)
                          42: qLDWr5FRCRwk2RMS3WcB3B53rjQ.roa (hash: hl3kBvxy5HeRGUZ/+JI94lwbfr4n0ciKRIwo3aDRXTo=)
                          43: qZRUKhtlwXj4OrWA8MBU_mzQqJE.roa (hash: m4ExbXP9WfcgqmfcRkXxxoPJRBeGpqPuyhVZmNOMFB4=)
                          44: qcESyJho236kkRbvaWCAhX-miAs.roa (hash: 1LWxs4g+I2yFIL/no7/kIY/0PMOjmSNdV+jfd8hn5rg=)
                          45: rYLcFx5z6G3F0c8E2CLYI2ft2xQ.roa (hash: v8HpMK/XYo2dITbm51u44Lg6YUMfXWJ1/7II3z+WDLc=)
                          46: rcteLidFERvpW3aicyZGo9zBq-k.roa (hash: cGt1yTW6OGCqQEjIYjL7yNvwob0EaCMvI1+m70PBnvg=)
                          47: tV54uU3ZmCsg6sSy89lMnHmRMgw.roa (hash: xeN+Px8JR54zMIfmkNo/HGATdW5+cpBSYt40vhmLq5g=)
                          48: uD2BNoEUFo8Zqs2piGNRNmvsiCw.roa (hash: 8UHPHglR5u1SfVoLg9SM698CdCn1mJj97ywMXYEzWLw=)
                          49: xMasQceydTZcZsjJ0G1xqv22RS8.roa (hash: Gn3d7yAyEC2mSWuItAA/HIsql3a3gI/aK5D90tUYS+A=)
                          50: yKr-lbxbewyIbYXmFRw2mMNuLTo.roa (hash: Z3aYRDydfDmgj6e8LtjA5XA3RM4olFdMgIZ5SEEf7Ao=)
                          51: zrYBef1QK-dLallM9PjcSjGpymI.roa (hash: cRsj5gQpAcfkjpl2JMJWNvqgYv7eA6VvFL+ielOPLC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Dec 2025 00:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d7:36:f9:54:88:c6:57:77:fc:a4:d9:29:e5:5e:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
        Validity
            Not Before: Dec  1 00:01:35 2025 GMT
            Not After : Dec  2 00:01:35 2025 GMT
        Subject: CN=14a11f0a206ae2ea06e8b5df93a932d622d22228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:24:ca:19:84:9e:2c:fb:bc:c6:9f:13:b8:
                    13:b2:be:51:bd:37:84:8b:12:62:ae:6a:cc:0a:16:
                    ba:0f:46:35:4f:3a:40:97:c2:e2:1e:a5:2a:69:7a:
                    25:02:d8:a4:3f:f3:6a:ae:a4:89:47:88:c9:a3:92:
                    00:fc:58:61:6c:1a:4f:29:7b:1d:db:fc:8b:8b:15:
                    83:57:1c:cf:c5:39:18:6d:4b:43:98:31:0a:93:1b:
                    7c:71:6a:77:8d:9c:cb:58:91:6d:af:a9:76:5b:68:
                    10:77:03:4e:10:0e:e9:f2:4a:8f:a7:c7:ac:4f:ad:
                    3d:8a:b4:89:c3:e6:3b:6a:76:a9:92:7a:b9:c0:ca:
                    72:c8:a7:c1:c3:38:a2:d5:f2:37:64:de:fb:7e:73:
                    69:00:8b:55:91:9a:d4:a3:40:ff:0e:b1:e7:48:dd:
                    f9:97:2b:1f:cc:49:74:46:78:df:30:67:3e:53:c8:
                    db:c0:9f:d4:03:06:35:d4:df:17:19:1b:f0:88:58:
                    3f:f5:2c:10:56:5b:4e:fc:ee:dd:5f:ed:a8:02:4d:
                    5e:ef:6b:78:71:a1:a6:44:61:12:83:c0:df:61:02:
                    7d:3d:0f:0b:6b:ff:e5:18:02:3f:a9:04:dc:f2:ad:
                    0a:13:db:cf:d0:ed:0d:35:5a:56:2e:1b:db:49:92:
                    1b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A1:1F:0A:20:6A:E2:EA:06:E8:B5:DF:93:A9:32:D6:22:D2:22:28
            X509v3 Authority Key Identifier:
                keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:b7:a5:58:2e:21:4d:cc:43:77:d5:aa:8e:8a:52:ce:61:bc:
         12:ec:f5:df:ff:65:84:6f:d9:7c:77:54:bc:fe:6d:ee:c6:79:
         9c:91:c5:38:95:7a:e4:c3:69:b1:46:f2:52:fe:65:8c:1e:08:
         10:fe:b7:8d:8c:ef:9d:d9:fe:b3:ee:39:1b:d2:03:44:3a:ba:
         fd:c8:f3:d1:0f:0e:3b:bd:8f:1b:cf:b5:c9:0a:7c:c9:2c:1a:
         ae:92:76:d1:54:f6:99:34:96:75:e2:15:a5:fb:a1:ef:18:76:
         23:00:67:9f:22:d9:64:9c:5e:43:dd:f5:3f:dd:bd:03:d1:94:
         97:23:49:77:ff:d9:08:b3:94:67:94:71:ce:38:ce:64:5b:d9:
         6e:01:49:02:55:e4:d6:73:6b:7d:ca:4d:38:e7:37:cb:86:6d:
         3a:2f:54:22:7c:e2:3c:37:95:01:f3:20:92:b3:79:7c:20:89:
         57:79:38:8a:31:94:fb:b0:cb:ad:b7:c5:7e:f2:28:b9:56:b4:
         4b:da:7b:30:a3:50:7b:6b:b8:bd:c9:48:ad:85:bf:5e:8f:75:
         b7:59:5e:76:d3:b6:b4:e8:ff:65:50:82:31:b2:e6:37:d2:58:
         70:08:78:dd:11:fb:d8:0a:f0:43:c0:af:8c:42:04:73:67:b2:
         1e:a7:98:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----