This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          Wx016UUNxJadXNEw50WdcEVUrVJsmcsWZUOQLeLAsSw=
Subject key identifier:   74:58:58:E0:9A:F5:43:FF:CE:EB:7B:35:4A:3E:1B:F0:8C:C2:12:37
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019AEE9A3D5B6F53AC8606F4127B08E34C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          1903
Signing time:             Fri 05 Dec 2025 13:01:16 +0000
Manifest this update:     Fri 05 Dec 2025 13:01:16 +0000
Manifest next update:     Sat 06 Dec 2025 13:01:16 +0000
Files and hashes:         1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=)
                          2: 2zSqcJ9Y-8gFEYLEn8boP0u6rS4.roa (hash: haGjzU6eyI1x756FuVAVNLEoh000mU3ZA/CDoJfpaAY=)
                          3: 3GpFaqQcQN9oMifABgrQUFoG0kE.roa (hash: WY/ivhDoFD/EbNKAvaxEqHPsDCFDZM/+fS+MHyM0i7w=)
                          4: 67Mxj3KpQWipNpMlLApfSyTCvC0.roa (hash: Fv9QcoJhLdt0inevu/XCAdGmMRCdZt4H9qb4Kzk/RZ4=)
                          5: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=)
                          6: 8eDdBsgY2IyhmucFkbHm5Vqa4dg.roa (hash: 4395eHok2K6kmkkM0vCUMdpi272lI5L2QlfvQJmQQ18=)
                          7: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=)
                          8: C5OsBMz5fQykWMCwQdFhSa-dVME.roa (hash: VBECbuwyUI1l/OYWc21n03EPHCXetAxOxte4Dp1kyt0=)
                          9: CcLRGj42YfBnS-DSMVQ56Ed1ds8.roa (hash: p6KK3vhNlRrVRpgQjaHC47rAMguNzRk9ILNOwRtTjlE=)
                          10: EWzjzTnMnun7dm42dJGmvnyBoZ8.roa (hash: U4usoWTWTzR00G3EMoi9wIZBlXX+/pCkgzxPh9oloGk=)
                          11: Eflo_3d0ikDGp7ukpVhOINTx3_g.roa (hash: mJ4gMIcu0+nxbTSlBEyuBzWv45URexFlpi8POVPz4Yw=)
                          12: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=)
                          13: FHDgepgQrMHgp6ZemKClHBnTyFk.roa (hash: 1wn4Qh5DiYSN72ZmOop87rF5mtepTFFlXdUD4HUb+ec=)
                          14: LsXYjrjtcFruHy0Xsx-YzdXSSk0.roa (hash: dkMfT/u2kIwaZXzUHMjpU4ARix+vR+H4IPW7qIHRzPg=)
                          15: M714mkyeLGecG3CxD57_mFs1bVI.roa (hash: sWZ4L0BbCyDSxcxQBSHqJ3/DS0RNI5BibcEqYwkAaKY=)
                          16: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: b5zKs+LNqB5HSinzIyMvN5nKQFxvPevrfneD7nIvDAA=)
                          17: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=)
                          18: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=)
                          19: PYrj6Q-UxHtJwUeb_m9R8cqHKEE.roa (hash: Jl1qDKOhIHPhckL0Pr5e3wh24QkNWmFXDCd6nvl0ew4=)
                          20: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=)
                          21: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=)
                          22: ZbSMtU36ykIrlVNp2VK8NgG5pVE.roa (hash: sH8ut9Rj+IdHM5ZsAXPpIAl8TDiv4KxH+jfISb7fbXA=)
                          23: _01k3y56cEMdQ42iOKunr2RMUeM.roa (hash: DGyUgtSPD/8CoWC86Wf/mLLAiyFkCUgpPiidGCEavaM=)
                          24: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=)
                          25: anRCvSGXJN-cP3l_C6L2k19y4zA.roa (hash: o5ciTWqaZzCbSMaIT6261kWGdGN0gxeTcqMlc5EBp70=)
                          26: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=)
                          27: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=)
                          28: dbqC1gfl12f35WYp8InH-gV02wk.roa (hash: EkpXoaMa0fy12pzt6OTS/PPrHhuvYU2fIVqKuLxv5vk=)
                          29: eks95w96IDU3y7FJtqpJE2ERD5g.roa (hash: L7xCEIYpGK6CRbHPIfP9mIdxc/3UabGk1gnSMBDQAsk=)
                          30: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=)
                          31: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=)
                          32: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=)
                          33: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=)
                          34: pOIWxKcdmhqjCV5w5POl9_2JyY4.roa (hash: n0yy3OyjCswMBJj55eSTCAuqwQeLoykODrZnbzLuaaU=)
                          35: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=)
                          36: rBr9G__yg--ybJi7KjL0Na3qRHA.roa (hash: ItHH13EhHo4OE288cMXg6GiOrDY96SUMCagz0YFt5LI=)
                          37: rvxwWdPBwUEDeub1SKW47DVWEmI.roa (hash: 5Fz4NipysVwhza6RRmS7qJbBV/XzxV+pB0l2qBalJ28=)
                          38: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=)
                          39: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ee:9a:3d:5b:6f:53:ac:86:06:f4:12:7b:08:e3:4c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Dec  5 13:01:16 2025 GMT
            Not After : Dec  6 13:01:16 2025 GMT
        Subject: CN=745858e09af543ffceeb7b354a3e1bf08cc21237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fa:a7:45:9e:42:07:6b:ea:da:8b:52:92:7f:
                    45:e3:ba:17:1a:cd:60:58:dc:d4:43:cb:dc:a9:f1:
                    a8:ef:9e:a4:e9:30:2e:5c:36:ba:95:b8:75:94:d0:
                    e2:22:50:7b:6a:e2:81:61:37:42:6f:74:86:c7:45:
                    a3:22:78:ca:09:77:ad:c1:ab:f1:ca:2e:be:98:7d:
                    de:a0:2f:34:3d:ae:bf:52:21:f3:27:b6:8c:e6:b4:
                    89:d4:92:df:80:48:34:d1:e2:dc:9a:46:8d:f2:74:
                    f7:e2:df:bf:d8:8e:ca:c9:98:4f:65:98:fe:95:c1:
                    e3:3d:7e:11:a6:11:57:7e:4f:24:aa:2e:5a:95:77:
                    dd:ae:15:ca:53:2c:b4:a9:d3:df:01:5d:9d:d6:5d:
                    a2:b3:9d:65:bb:07:d6:24:7d:4e:db:86:dc:93:dc:
                    3a:c6:5f:41:e7:b7:7f:42:a3:2f:83:67:65:1a:b7:
                    2c:1f:4c:31:b4:2a:7f:a3:22:a3:10:99:b5:b6:dd:
                    ae:c7:4a:dd:69:66:a1:45:9e:a2:81:26:df:c0:dc:
                    59:ef:1d:a7:3e:b8:b5:f9:70:ca:c8:55:fa:5b:e6:
                    9d:c6:42:6e:1f:4d:d9:78:45:3a:38:ac:c4:b0:ac:
                    2c:04:d2:f7:55:7b:61:52:b4:d0:cb:cd:79:2a:40:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:58:58:E0:9A:F5:43:FF:CE:EB:7B:35:4A:3E:1B:F0:8C:C2:12:37
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:fd:cc:a9:bb:bf:af:4c:b5:f4:12:0a:c1:78:c7:72:d9:
         da:b5:b4:be:e1:2d:a2:86:31:97:c4:36:50:c6:47:d9:54:f3:
         b7:87:1f:36:ff:bd:25:cf:b2:1c:a5:c0:b9:f0:3b:3b:fa:07:
         52:06:1d:63:30:f7:b9:09:4f:7f:20:ed:df:1a:93:91:7f:06:
         f0:11:ae:13:94:9a:64:f9:63:50:7c:db:30:e5:4f:f1:fc:f1:
         26:bd:04:f8:b3:39:db:f7:59:0e:8f:08:ab:fb:c3:ad:ff:f1:
         91:6c:b9:12:93:c0:e9:3e:69:85:ed:a9:07:9a:c0:be:c4:88:
         eb:98:fa:b0:f6:ce:b1:f0:cd:93:22:12:1b:0f:ed:f7:7a:84:
         65:6f:1d:11:66:e4:e5:e2:fc:8f:cc:73:20:3d:d6:87:ab:8b:
         29:99:f7:c4:8f:bf:05:bf:29:81:16:18:7c:dd:81:99:15:9a:
         2d:65:22:83:7d:4e:1c:98:3f:97:dd:ba:76:0d:df:cf:a0:b9:
         20:de:c8:a8:88:81:e9:47:2a:25:5e:22:fa:76:09:d0:73:53:
         20:8d:3a:77:02:44:18:e0:d5:d3:37:8f:97:df:d5:26:e0:5d:
         85:12:bf:9e:ce:1b:16:69:a2:c5:7e:88:eb:4c:cf:28:73:90:
         85:b7:8c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----