This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          kFUYYRp+HdtqKaJv3isaRU4PVjhaoVM5z3h2SkXLcng=
Subject key identifier:   BA:23:14:86:9F:95:F7:EA:ED:52:1F:BD:39:DD:57:6C:E1:14:51:1E
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019AEDF59F3382A8B6756B1219D19C49B502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0F82
Signing time:             Fri 05 Dec 2025 10:01:28 +0000
Manifest this update:     Fri 05 Dec 2025 10:01:28 +0000
Manifest next update:     Sat 06 Dec 2025 10:01:28 +0000
Files and hashes:         1: 0JHO1-X7wGcaGpl-pLpAVCz8aTM.roa (hash: zsfS+cyGk2xh2Z90DNVKJE65eHClSQHHZEU6AiR2qyc=)
                          2: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          3: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          4: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          5: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          6: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          7: 4C6SBkLAqoydNDL30z7KnDqMSWE.roa (hash: LxL9frw5C1z/wACOaJKO6nleNDsOIyIpKJqL+pn/ss0=)
                          8: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          9: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: IUbqCn2RGkMMBnsXdl2JmxsVxNcXNo3HiItZ3povMOA=)
                          10: 50HOfDq4SZhogdts0dPqVM4XTCw.roa (hash: gq9zrZ+BK3Nboc7ESH3T2C8md6IL3SSl/lnd4DTZjZM=)
                          11: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          12: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          13: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          14: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          15: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          16: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          17: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          18: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          19: Px5iLrMfAnahYW8d7Kf4sP5MQ7c.roa (hash: /X5EutEm7vdfoKklrEHO/rbL7vz/kb7MtLIMtv6Btbs=)
                          20: SbzKQ5ZuE5d10qtGejfj2ks01LQ.roa (hash: /IE77xZq/Zb+dfD/xh2uWpfIP/F+pigOIyzvCZv26Bk=)
                          21: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          22: UOw4kvzOzwctaQndLqAt1sv8qe4.roa (hash: qXueiBufxOI0tBPQ2snloT38d2A++KUpGiJMOc1dDIg=)
                          23: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          24: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          25: ZD6IQx0QGy15hp-snS4osazDoS4.roa (hash: Udr1AeGDcu95NbGnNGzt1ymxEOmuOSiOTJK7SDovbcQ=)
                          26: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          27: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          28: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          29: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          30: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          31: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          32: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          33: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          34: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          35: qXbTND87m9kq_oOHnJNLc8fg148.roa (hash: 2oi3EjBDp5VOcsS+jhxxC8jNjfjQeC4aw46ML+KCI9g=)
                          36: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          37: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          38: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          39: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          40: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          41: vEoakUYlpmTQIaLwpaXyp7_1UqE.roa (hash: eiYLucoZ9zchXIwhszUzBZ15EUScjN1eZIZfgJxOdfo=)
                          42: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          43: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ed:f5:9f:33:82:a8:b6:75:6b:12:19:d1:9c:49:b5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Dec  5 10:01:28 2025 GMT
            Not After : Dec  6 10:01:28 2025 GMT
        Subject: CN=ba2314869f95f7eaed521fbd39dd576ce114511e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:d2:34:1e:96:2c:76:3d:c6:1f:e6:33:ab:
                    38:73:8e:7e:ed:d2:c2:36:f4:49:93:1e:c8:50:98:
                    eb:0f:3e:ca:03:d2:6f:51:16:4d:42:e7:d5:e0:71:
                    e8:b6:f5:8e:ac:67:b2:8b:de:ca:af:ea:14:c9:ff:
                    43:78:98:22:c6:63:80:e3:ba:db:d6:7f:5d:6d:47:
                    bc:18:30:7f:fa:da:a3:b9:15:78:d8:ae:7e:c6:82:
                    38:5c:f0:1a:c8:05:12:86:51:4f:0d:77:54:03:ee:
                    d6:ea:2d:8b:cc:a3:f5:41:b1:eb:7f:74:ba:8a:94:
                    09:45:0c:f7:fb:ce:a2:fa:ae:f4:1a:89:8a:a0:b9:
                    c9:2a:e9:a5:4e:ec:98:6c:3d:f4:6d:da:f5:dd:53:
                    df:19:53:62:ab:dc:e9:b3:17:71:86:0a:77:b3:54:
                    dc:0e:75:ef:b6:51:e5:9e:67:21:3e:d9:74:43:9e:
                    2c:34:d5:6a:e5:10:da:57:0b:29:e8:e7:6c:74:56:
                    ba:cf:ef:ef:83:84:55:20:94:3c:80:14:7d:c4:59:
                    2c:5b:3f:7d:67:05:17:86:10:cb:82:ff:8e:b3:a5:
                    ee:34:91:46:e4:0a:b8:86:89:30:82:59:5b:a5:67:
                    1d:93:e7:fe:3c:67:98:49:50:7c:a6:fe:41:40:5c:
                    81:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:23:14:86:9F:95:F7:EA:ED:52:1F:BD:39:DD:57:6C:E1:14:51:1E
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:15:7c:9b:c2:fc:45:8d:01:7e:fa:24:17:6e:9a:5b:3e:9a:
         dd:a6:79:7a:5b:4b:73:06:e4:fd:d0:f3:a7:1a:73:ef:6a:b2:
         d1:68:1a:95:9d:36:09:c9:12:40:21:49:fb:77:b8:41:08:f9:
         6f:cd:b2:c2:19:59:04:e4:ef:0c:d3:91:55:8a:2e:cf:b2:1e:
         7d:c2:8e:16:78:98:62:26:61:4b:ea:e6:ea:65:99:52:bc:65:
         dc:20:9b:87:52:a9:09:dd:3e:14:f8:29:9e:9d:4a:9b:6c:7d:
         ce:49:f8:0e:1e:61:9d:60:3c:bd:46:83:a0:b5:93:2d:f8:07:
         b5:05:c0:c1:2d:86:06:56:8a:a1:4d:44:b6:87:80:e7:53:6d:
         65:d4:01:b5:f5:a0:d0:38:f7:cd:11:d6:1a:c8:2d:2e:55:4a:
         4d:e5:5f:a5:7a:4a:95:53:6f:f0:ca:7a:df:e9:73:fb:1b:e1:
         c7:d6:53:ee:55:0f:9d:2c:76:d9:59:bb:ab:c5:cd:26:49:07:
         70:58:3c:6c:b4:20:4b:be:42:1f:93:1e:cc:1e:36:11:51:48:
         54:67:08:a9:8d:6a:ff:34:a2:d6:97:96:b2:fc:46:cb:32:67:
         a3:0b:30:74:ce:2e:11:35:54:41:99:09:b7:0f:82:e3:6a:61:
         00:48:35:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 14:57:28 2025 by rpki-client