This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File:                     Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier:          +9R6q6m1VxBOE3mXwjdZ1KrapT9XxMdgfZ7XXW2e+tY=
Subject key identifier:   B1:62:E0:B7:F9:9D:C9:82:78:4B:06:6A:13:D9:2C:B9:46:06:02:20
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       019B1BE08A6DA54FA690AAD667D8AEA6F171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number:          0B9E
Signing time:             Sun 14 Dec 2025 08:00:58 +0000
Manifest this update:     Sun 14 Dec 2025 08:00:58 +0000
Manifest next update:     Mon 15 Dec 2025 08:00:58 +0000
Files and hashes:         1: 0CT1joEXXqHn7ApZderh8oz-6X8.roa (hash: BvOsPrngGNiLcDK7gBcQWH9QFWAThZP/Rzb+/PLbPTU=)
                          2: 1syvLvZNw4oAM-YcaPxmJP31bEQ.roa (hash: LPtgL6Q40OCE7W48yA4YQ85j1wM296i1AWyNKAFeL24=)
                          3: 2eiy-_16euZlcY312olF09W31s4.roa (hash: IUh18w7P0P6a+lmEiR7StlwVEgGLtk0s4vBFZb7XO5A=)
                          4: 3EbDHVpUGPClmvm3J9iIFuXcrd8.roa (hash: cSc8UvFvDER4vb0XGisijdGU9FyUobR1/SMTyehQLHQ=)
                          5: 3cwOhtgSXhi4ajb5tZo0Xfs-k6s.roa (hash: JPBKuPq7WE9CFKFDDLjhI9Isd03CJ2NF4DCcSMyCJjc=)
                          6: 45wSdKS9u-kLwBER9DAdp0dOdgk.roa (hash: fvR/mlJedJy8x4zrL0etfG0pS/sgz873Mc4ixjc+vyg=)
                          7: 4hsvXB1iTRQzBfKiak8pW2I8BF4.roa (hash: XAp414dDwa28MtvplUV/sn7g1yns68g20QzpT6TX080=)
                          8: 9RqjWLw5HPxJzuXKXhGXXmyVkAE.roa (hash: 16h/SJTNr54l9qICOmuHkNeVLrt+8pmYa+3yNFUR3qM=)
                          9: D8tDS5afEI55b3ob8NG1ZTIaLQQ.roa (hash: HR9k0vtrdM5wK2sftLGXjSwvC6aqcZVjRpaEL6hcsrk=)
                          10: D9x1CTV8F_4B-wx1zITSO-EMubE.roa (hash: HbzAlStX6f56p1esX7YT4omJKAR7bHh229e0ejlC5Eg=)
                          11: FG5pNQ5_c3TjGvqm7drNqjAtp_0.roa (hash: pcv1sQ3cPr8Z5RqoT1cS23yqOKHpxM+1wRoitpX9AAY=)
                          12: H72gujMCMAZpLRg2cNnbawNMi2A.roa (hash: mc2ktHWkVm4x7yx+zpHQ1y0JVlLOdpVbGYpYAwP02X4=)
                          13: HIuQQFKgSBuAKuZ5NFV39UWdk-0.roa (hash: 6EaFRuDYvhQ4ZsTUqzReAUxLoig1ZR4YO2BpnNtxZIo=)
                          14: IYyyhMB1ESxGlLx1uYqNqrIgR6U.roa (hash: 4+KfJiZUKyrNHi/Wrz4kW/2Z3KBOulRvE66Y7Dq4jLQ=)
                          15: LbcVeiuDUugzhWMtPmYqNrGtC38.roa (hash: 17lM/1TLk5NwhqbTHI9QcyIG0e9IHDWy4YL3CEcB+EE=)
                          16: LgEojSSWxqPQSa07ze94dva_jUY.roa (hash: bgXznWdGQZcKwK/PhDBEr8V0fAhdejJIL6EFj3ITnqs=)
                          17: MGapW0vbEsDh07CObJqBM_xk66k.roa (hash: P8snUlMzN8SD1TPId1VEZe9Ri9QxtvHOJ9QJWot9Jpw=)
                          18: MrSOOhfdgSDu8DQamecQZPxYswE.roa (hash: mfmpNUSQT/f2SOWnIgX00XuCSJAj/TdvBXwWPhwJxA4=)
                          19: Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa (hash: 5jYKkFvljl/sNCuuK9Ccg8C+9QQrnGFhMRE89ePvdFM=)
                          20: O0wQkTberJBGf616XMSFIFD7KBs.roa (hash: 17n6+YLzt02MURVWqCyG+6B7DEgjzFUFOHL19KG1glw=)
                          21: OX5WGRMzsMc_dGpoOLVRfny2bxo.roa (hash: 8X3DRCHPDRRM7fXfOlVxxkg/aG8D1XcXWTqt5pAok5c=)
                          22: OufG3sBDvZI7hwG4WyzIc-Z0xOI.roa (hash: i/Y4cgjlSFEZdmlvRCXLNV99JlvYX2KAZ/g9aNaovag=)
                          23: PEoeENAheHgzP-nL_A9MPW80L0Y.roa (hash: iWOMsN9mK7Qviawj2/fUT70nqm31lGZIYRGadWpH1II=)
                          24: PGRCK_988SWzktKeQMe19aO2XTA.roa (hash: QsLivLGV0/DhneRFQo4vdA6cUJRH1asxl+VSehvXl8g=)
                          25: QNAvqEtOtUfMbDmfsPFEe603WNU.roa (hash: 1LcNY8ab58yNfN182kfxAkp7IB4n+zASQa1ST2WM24w=)
                          26: SBzgWhSF_OyJTG2wd8o-Ulr1nmk.roa (hash: 6nfYexvO1Kc2k+mD82GVF9WHZYMyGMTF3rCD7nDSq6c=)
                          27: SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa (hash: K6b6z9i944Syq+ZCWjptF5NFMjXs/+RPvy8K9zsSPCc=)
                          28: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: c7oO0akJvJlgoLaMf9Y/RdOmSR3Kd9s3ER/bWfWCKE0=)
                          29: TwoNGVXfFwHv00p0hl1agjjAKh0.roa (hash: EnXnb3QTXsz/G4VrSLiwLMRbpZkmAexWJqS5QR8p6FI=)
                          30: VkgHoc_Rx9LO0thb-KJrhy8aQQ8.roa (hash: zIBkV8AorlkbljaZ5zOpi/5kWq6s1363XBg2GvdQ8pE=)
                          31: W81rCzQb4TbKxPTooSlXa8XN4QI.roa (hash: CtqqoCzBFYTr59fu6lgBm7DIo8Hs2FvwBTe1ZDr7Ngk=)
                          32: WCelWbxY_ryT25IoQyob9TjveSo.roa (hash: bnYBgUb483TxMKFPkryTdkRUhsIN0EWfbbSv1I4sQIU=)
                          33: XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa (hash: wucX+GJutPw3tDOpsoQ6MWs680eTe2mkRw2xXYGRGbY=)
                          34: c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa (hash: W9CgyAiS0YOpvUOhIebxxS0z/0teFH9NlJCz2jTE+zo=)
                          35: cMU8VvUmjbwv8fW28N13UafJfMI.roa (hash: r21tLs/TiTIXMMK7rlbmRyjsYlaJyqFWP02tJ2yQ+5o=)
                          36: cTM_wPu67RVLbAM3nD6sWnqniqw.roa (hash: Ate7PK/dPf9sl6jT2ZlxKjCFiwliYg6RScR5spCNLF4=)
                          37: dgRDsleizFFiXe9DaqQOkGqkv1w.roa (hash: 5SxZOgkCgjuwwOmw1bmV20/4QSWRJ59FbX4T3oudoSo=)
                          38: khtbiZZNtdravP-MConYlqJTYmY.roa (hash: xXo87eImVPHif3j6yLOoXwcVidIvdHpygsCrdgfHCM4=)
                          39: kzJROGRJyZHBGTjoX7TVF70t_uI.roa (hash: Jj+yaaYYgzB6tRgd4hOyiggZphR9XS4OGfW8KoSDVmg=)
                          40: l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa (hash: 1gYcxOTK35gAGaMUX4XHHZe6la72rr7YynYRUMDnuCw=)
                          41: p3ROJ266o2pF0nOiR0HBZYzO_HM.roa (hash: ROb/DIruAz/5oHca7U7nr4QK7Ki0POfWjiHizu/y8lE=)
                          42: pLRMCkjbhFiMNh52TnBAspU8Hjk.roa (hash: U1FUmpIZB70rTHNhu4UV38Kt+GlWp4EPp8i4yoOh8xY=)
                          43: pS3QOZ2wypZ71SVvS4_yCNQwDJE.roa (hash: ftQJDmKbzx9RdLUMravYt2oMuiMTqqjLnLQ/z0Jk1Gg=)
                          44: rWSnUoFSizQeONQqtbmoxgRXQLg.roa (hash: WRwAsaYm/Kcb4E7MVkOhb4dnAP9wdxMUgAV7X/La5Vs=)
                          45: rxk8aFkOeWjK91_TW-WX0ASv1Z4.roa (hash: 13VThZFeUCr48FxuuPNHQvJ0Fk0X//zMlJyzyJOre9Y=)
                          46: u-s_IvRi_d2uT0pVGYggJ-9vf_w.roa (hash: xE0k9qkP4J77FkjGvlKk6uMwrXPnBnaccpHmcue4AWY=)
                          47: vJD-DSmwOkOOJFuZzauASqUSruo.roa (hash: auuNNDBDYVXVMGfixRK8lih+GV92mCYSoacO6fybksg=)
                          48: vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa (hash: 5j5FVAZ4CeKUoBwfFPNsI7WH45FNyhDbv1/sr4ayZcY=)
                          49: wha7fcogtd47YRJWz6jr2K_oy9M.roa (hash: 7bzvo+VMMMPCXskKWF1nzlRo2MigQF9srzUNxlr/2Hg=)
                          50: zzDzNokLDw5fB_iBSLdcgwToZfI.roa (hash: 9Ii575Yb0QHWdHvqaclZEqxxCr5HLB5JkEBBY/yv0gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:e0:8a:6d:a5:4f:a6:90:aa:d6:67:d8:ae:a6:f1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Dec 14 08:00:58 2025 GMT
            Not After : Dec 15 08:00:58 2025 GMT
        Subject: CN=b162e0b7f99dc982784b066a13d92cb946060220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:10:8c:22:14:3b:f2:d5:e5:c6:ef:3e:95:
                    24:e6:e6:e8:39:b5:fe:b2:eb:aa:a3:1c:93:61:cd:
                    dd:ec:c6:0e:3a:cd:5d:4a:e7:15:66:1e:85:97:20:
                    30:28:7a:0e:65:98:1c:28:cd:62:7c:40:d3:a2:58:
                    b4:7a:df:0d:15:a7:6f:74:60:b3:79:2b:ab:00:7a:
                    5f:88:a9:af:f7:22:e9:9e:d1:d5:79:98:5b:e9:19:
                    08:65:2b:dd:3c:36:85:6b:67:09:2d:78:63:fa:dc:
                    92:69:ab:20:42:dc:67:f2:df:09:01:fb:76:f2:61:
                    3b:37:e8:51:6e:75:aa:88:05:5f:58:a1:e9:fc:f3:
                    8c:1f:02:89:1e:df:97:43:da:4b:3e:2e:5c:6c:62:
                    75:e3:88:75:f4:2b:cf:91:44:cc:bf:8e:50:d2:82:
                    e9:2a:7a:64:a5:19:3e:16:4e:83:17:ee:23:13:34:
                    e1:a5:d3:eb:41:c9:53:ae:6e:d5:0e:87:0a:51:13:
                    46:27:bc:60:6c:c9:42:0f:4e:0e:ac:1b:d9:d9:fc:
                    78:5d:91:dd:83:32:04:07:8e:6e:e4:77:dd:d3:f3:
                    08:e6:de:5e:37:a8:53:4e:eb:fb:16:4c:02:b3:38:
                    ac:65:9e:90:51:3a:70:d2:bd:b8:82:a9:fb:5c:ed:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:62:E0:B7:F9:9D:C9:82:78:4B:06:6A:13:D9:2C:B9:46:06:02:20
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e2:53:30:72:2e:04:a6:be:71:44:5e:fc:6e:89:10:ae:a6:
         9d:80:a5:c0:a0:86:42:2f:7b:ea:e2:7b:19:6f:1f:42:c2:2f:
         cd:34:32:f4:a8:31:5a:ab:b5:02:74:4d:e7:bf:13:02:41:ee:
         46:89:90:e5:d3:c9:1c:bf:28:f5:d4:d3:8e:db:26:e0:3c:7a:
         ec:fd:28:df:74:e5:5d:69:83:89:0f:ff:ad:b8:2e:0a:e3:eb:
         8e:64:c1:58:b3:1a:ba:ad:28:11:d9:b4:a3:5a:b4:34:57:e2:
         f8:da:f4:98:c1:bd:64:74:86:6a:a3:c9:c9:6e:d1:87:7a:3c:
         f9:fb:52:51:57:af:4d:24:24:55:dd:ba:a9:6d:11:e5:d8:ac:
         e3:8e:b9:a8:b6:e0:d5:b4:56:ed:a3:ae:4d:17:ea:66:ec:8c:
         26:8c:c9:cb:76:20:7a:88:5d:89:9f:f4:1c:27:a1:20:ad:82:
         3f:f9:b2:6d:6a:33:9c:d5:bb:70:4a:e6:6a:2c:0f:7f:12:0a:
         40:1a:83:ce:df:a7:75:1c:e5:41:fa:08:31:31:36:49:7a:c5:
         57:17:42:37:4e:02:74:5b:ac:4c:93:27:2d:ed:25:c4:d6:ec:
         0e:97:62:83:60:22:cc:57:8d:65:69:82:9c:3b:7f:43:fe:ea:
         57:57:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 09:36:08 2025 by rpki-client