This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
File:                     _dbuAQuZCjNzV1a0_i89PCZx3Z0.mft (raw, json)
Hash identifier:          gixz0n+e4KPLlXg9jlDWg+nEBnuNKNKRuNwrUdHGWJo=
Subject key identifier:   17:4D:EF:6A:10:91:B8:DA:EE:13:18:20:E8:73:CC:33:0E:EE:FD:1E
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       019B70A36252F61F17480391F08D910797D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
Manifest number:          094F
Signing time:             Tue 30 Dec 2025 19:01:54 +0000
Manifest this update:     Tue 30 Dec 2025 19:01:54 +0000
Manifest next update:     Wed 31 Dec 2025 19:01:54 +0000
Files and hashes:         1: 1Y62m6PAoQN16SPF0N8wibWycfk.roa (hash: 1p+u2bM92AxaS116YPDdsceX61F9LlCG3iRgoyNwrMg=)
                          2: 4Btmo4X8P0Aavpp-nU0Yc8hYhVc.roa (hash: qDrq2XWyugrrzMadNyZODi+tYW3DV+sPLZzT49k0JrM=)
                          3: 4OWbmQvrbkxw_L6B6p_nfFL78Nk.roa (hash: D3I+4GLPQ8XjvI8vcfRpTGTXJnxkK7ZsaWQ3tzMa0FA=)
                          4: 637ySHaa7VPjeqlKlcPrhZ2yY2I.roa (hash: 5OCAk2cIQJcX+e/E05dY0NN7PiUYi4cdJimVcm3YI9A=)
                          5: 8_fakKxo1IWGgqQO4LSuBNgbX1A.roa (hash: mKTIf5Vhn/rPPi27Si4S/aAUjmxjU05O8m3X6BZqHi4=)
                          6: AYYBscc1vAX_s8siGpcGCunrJ-s.asa (hash: TsxOoPMew0FkeDrrQ9HwlkF2tqn3RjNXe4yMU59QasM=)
                          7: AaypEsEdVYUGBO9pIAcSnVHxcng.roa (hash: xIrmQSj5iiQlA0CWV5z6X22s4gAVeMqFSjtUBU0ngGI=)
                          8: Ct96xN1xgvlrzbLvxfSx_-BAtNk.roa (hash: lrSKsEpugh4eEEm3L2JaQTWeMJQdiHgI5ot+GMevkbc=)
                          9: F3cZKj6S-Z9_lD66DEX0vK-eKcE.roa (hash: ieI0ZKZHt/S3fOpvysP/zC/yEti8uFPoDMgtPhCFeKw=)
                          10: FN6eGuuI_wxSJwtVgTgHksuIU2k.roa (hash: lcwy4N23aWEQwNKLPfOGbzSMxuSa2S19+LPrrtBD9kQ=)
                          11: HrwzFbe3UtyoBM5z7CvSwNIy4p4.roa (hash: YrKgLZLOw/EtLShX/OiK2tyZzChYVExfgbBKDYbGseU=)
                          12: IzO07cDfXtxek4M2I1Iy4FbjBTM.roa (hash: SsoChbSg4dMYiRhLHZ+4qGEfaxOMUQB123/z9XrSJO4=)
                          13: JD1vyyywBHq_6Cew-ZwJSrZ4hFk.roa (hash: /te3H+VUTBpgy9VKLErG5yc6ITk4ZNAsCt35Sq14AnE=)
                          14: JtAsjQszicgAK_Bz09MaZjgSHRs.roa (hash: 3F49sCHbl/xh5CG+U8kddXehfQts9G+pawy1bD9ilGQ=)
                          15: MS4QM8pTgNvck47LJGrNRRzcx5k.roa (hash: /i8c7H0MjJPPqLbe4N1XbPH1LlsyGlITf8EjUGqqAxs=)
                          16: MTcsB7pau_sj7fShnl0hskf_g1I.roa (hash: ZEyHwS4yMVYuUul4z8MpSjD2WFJ72elktQ3XV6XEcfg=)
                          17: Mai3hO1570LXs6RLr6YGrktOd4s.roa (hash: 3YqQQd9kN82zwoLCu2RB4M6k5ODGSKxhrf7vMbNdzEk=)
                          18: NOmwGHNk4_h1lySGROFlVhhAvDU.roa (hash: eX/CLrHfnuQFtcityYzUzMtZK9FW0M25MGJ2LKFWOAE=)
                          19: NzVn53qodIDSWt0vOG1oqhpGi_E.roa (hash: Lyhkl4afO2r+5/N5rOlPypCReelqQa6ct1JAxr+7elc=)
                          20: OfgHImIcPU1qqfBsI9N5ZXsiPNE.roa (hash: fgJeoJ7zWqkp9sr1PNmklE2TKICiDxPgDxk46jWpq8I=)
                          21: PrwKv-LxClxDWPIzpmtd0SUVKOA.roa (hash: PB5nadJ7Zlp7pGWpzoHOMgtzMAgNvx2fppNEsfjJQYY=)
                          22: SLLUMAJKxJq045JCLVs9H5nC9nw.roa (hash: /PN9Q7dD2zRwVKc/oYOK+/gsSuS6rWI59nDYoZCCVJI=)
                          23: UMgG3wm0Wwabvb18BWgBPGTLUfQ.roa (hash: WJgBs9fu0EqbOTPPX09p13+s2t3z4+KFfuC6Uu5dHzg=)
                          24: UpxvyaO1w4UW5ThzZNiK11i8Iec.roa (hash: ts6x4xf+obI23cPBJb6wwaavJqR740WuylL0f/ZOTmA=)
                          25: Uy5UBlG1xVdNnKbZ7x-o60M7TVU.roa (hash: tk3tIBSeQBab5qYJNuQXuIHm0Fnq+pfGnO25obHRvCc=)
                          26: VZFGS-Fn4Kqjnwh23jee48-bApo.roa (hash: KDb7CTkFWG3SWfMMbnKx/BeDHCaf7g0U9ZYnth5W3TE=)
                          27: XhQy70S_UMvUlQqMS3Ri8w9Lzwg.roa (hash: pfzMfmapyb/YulZYQtRxTnmcCybmAdc60nKGcIcDJZA=)
                          28: ZGdAuUombv4vkBsPwiqPFlqYz8k.roa (hash: Vg0hs2FALGJK84oUteDgK6tbIxpNAMJc90q23NUJBvM=)
                          29: _BPKDl06S5B-WQij73gHPR1pC88.roa (hash: TpQi5kxvdYE7MlhfQqrq2bStKZhLcIZbpWTNfLLNzmc=)
                          30: _dbuAQuZCjNzV1a0_i89PCZx3Z0.crl (hash: 3jvDnwKsVedoXRyUIOzL4kTcvpOLgSSVAYrFA5w77AU=)
                          31: a_YSXRy0GEriEr_Yop65IVdtSPw.roa (hash: wLE2AzL6ZkOvLLE19J24Zeu03IrBHRQfEcPvlWi0nkI=)
                          32: gbpTeo0yP98ZSdgLmdpcLzdZzv0.roa (hash: CbsxGhJhoE8yvGtURZm7/5jfNWzpy2kZAlBuSWC42H0=)
                          33: h738lN5c3TyKcj8anxVMoHPkxGE.roa (hash: pjqnFNlGOHySNRAPtEKFXim6O4weYwyodx7laOQF5Og=)
                          34: jMa6gCTiwT7u6_nY7rYAamQhAvI.roa (hash: /3kWQVn9yQP77uBrM8AVQhX9Si46/u2UopM8CejUies=)
                          35: kCw9KW7g2WHXSaE7taxeZTizKC4.roa (hash: 0phDtsrapiUcNDcI7I3hyFhO2oK9iXRAiRoI4U9hIt8=)
                          36: kc_pAgwEMNSsLD08APOQDGvFE2M.roa (hash: r5V1K4scPTshGUo0mmQh0b/PvpghTBmlsV1I1dOUu6Q=)
                          37: lLgPzNrIYmtNfXY3WPp-fPMUEYU.roa (hash: OaGMS8N36o43A9RI4EoDlUQq50SWqO5qzGHhpWj7ufo=)
                          38: lPdDfmlD9RAxCyidA_ifam-2Uvk.roa (hash: sWKYz6K+L1Be8/sNsnQfCAv7/Dkkri5HUxz/km5Fw+o=)
                          39: lakNGIHUgcn6UKwdVo4OxV9sHyU.roa (hash: aFoG4y5uaHj/rfiT0o09JJpVEi7UfU1x/oN+QiewPRY=)
                          40: mR_wkM-dl3q5Zqavc8_wUxLBsck.roa (hash: mjWZ9wcnOPQZpY6H28O3iednkx7NStQEjrpDKJuynX0=)
                          41: nububswUFWNKZFUv1-WT-nusbw8.roa (hash: vJnbRRzz2QWrTYEfK7eqJvsQka1cyruMLjOKXSilJ8Q=)
                          42: p9UuQE7IxHiGiw_Tp8PySfk0XpA.roa (hash: Xqy9Em6AjRJ+I/gqlqDmb5niUls7eNf0tdPu3/cAQb8=)
                          43: rZwZbD_BSnHvyM26tCS0n-6jr8s.roa (hash: xlibK6LzsFxTtBrkroU3Mk7lzRkyAhSJ743saez43/A=)
                          44: sgXmikHZdaCmSd1V08WpxfXo-T8.roa (hash: KMsYSteYB1GHkuplXeSxd9o4LN0sSfty5BOhOvuqq1Q=)
                          45: smgQhR1WkDuLYZtnSt3KxLnFFME.roa (hash: Z1MOxUq6sxBXZipioFKdR/NpXqOoPsix9279r6reGW4=)
                          46: uHnUp8alk4kl7R1__u3juRedX1A.roa (hash: 2Hv2oFFIwo0j/kizpuCBjWy1nT4b1wl0hiQz103C3L0=)
                          47: wUKqgXn8I6QyKCOZp1fOP55CVHY.roa (hash: ZYh1IRJkBN+fN6othjda/ZeToNDoNn/k0haPoeVnCVQ=)
                          48: x6FbQ2O6qeigJ_DjZb3WHwNrr5k.roa (hash: b6Xbxc4B5PcQR/6u1pjeaDaXYfTGp9+tHTDdJzfSjXw=)
                          49: xQUI4-r4XjQLs0FjPM2WCfbBxWQ.roa (hash: 8AY4z5mbYOVzgbpSHBMZBweydiWSklrRLaeWro7dQDw=)
                          50: y_JsphXDGhtYIly7VDuihnNcQ5U.roa (hash: e2p81FmOY2QZWDBjWNf+vYK0z1VRG2fKaiv+Lz4SL1c=)
                          51: yqIKBNfi5omJAzcXnoCsrE6snzo.roa (hash: Opdk7PUfzB/ZuCfmlT3r82TvrvdyJuMBr+txoxstkgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 19:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:70:a3:62:52:f6:1f:17:48:03:91:f0:8d:91:07:97:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Dec 30 19:01:54 2025 GMT
            Not After : Dec 31 19:01:54 2025 GMT
        Subject: CN=174def6a1091b8daee131820e873cc330eeefd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:cf:d0:56:54:b2:a0:7f:e8:3a:fa:d0:c6:
                    c9:b5:35:10:5d:80:14:d2:97:10:d4:00:bd:d4:9d:
                    bd:80:5f:93:47:0a:dd:0b:05:60:71:3d:e0:3f:06:
                    06:4e:01:07:8f:a3:8f:9d:9f:d6:dc:ca:1c:41:fb:
                    0c:79:aa:a7:b2:5a:ea:b1:4a:c4:92:8f:1d:41:d4:
                    77:2b:66:af:ae:1f:62:ed:1e:fb:85:21:6b:31:1b:
                    42:0f:ef:b1:8f:d6:83:db:a3:a8:09:2f:82:38:8a:
                    27:cd:45:ed:89:12:0d:98:c3:23:35:84:44:a1:10:
                    2f:18:56:ae:5d:f2:90:65:1c:41:6b:ea:44:7b:63:
                    24:9f:b8:97:0f:eb:22:dc:cf:80:5e:4f:5e:5b:38:
                    a0:02:29:35:ec:07:f0:d5:c2:27:3c:e2:dc:5d:b7:
                    88:1f:7f:3e:c5:20:af:d7:93:18:ec:8b:6f:72:8a:
                    1c:ec:08:2d:4b:ef:fa:2a:7b:01:9a:70:1b:47:fc:
                    64:e2:6b:a6:44:98:61:fb:6b:3e:67:6a:57:92:34:
                    fc:ae:41:0a:bc:6c:9b:bc:a0:c0:33:86:0c:bf:c0:
                    f0:d9:27:ac:54:fa:35:ce:bf:a9:ad:6e:62:9a:92:
                    fc:e9:28:47:90:13:1d:9a:0e:a4:51:70:c0:0d:f2:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4D:EF:6A:10:91:B8:DA:EE:13:18:20:E8:73:CC:33:0E:EE:FD:1E
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:de:0b:ab:0c:4b:b8:21:4e:ba:c1:13:3f:73:6f:e5:43:fa:
         16:8d:a1:7a:22:da:e6:1e:d6:ac:1b:70:ff:4e:28:2b:2f:bb:
         b3:b6:06:6a:45:9a:05:a3:23:4b:db:fd:34:c7:09:61:e4:1f:
         50:8f:a4:d5:78:9a:b7:5f:6b:bb:a3:44:c4:5d:45:e6:31:1c:
         c4:08:28:93:2b:d4:4d:04:b2:00:61:17:55:92:6f:be:f6:e8:
         3e:56:17:9e:2f:f1:82:a8:03:6e:87:f1:6b:c1:60:bc:07:05:
         2b:74:84:1e:bb:3d:9d:1b:d5:44:d4:5e:bd:e0:20:e9:b5:8c:
         1c:6f:ec:26:f7:f2:71:a1:e9:4f:62:80:22:cd:02:98:ef:49:
         dd:6d:a1:2f:eb:fb:97:85:bc:cf:f5:82:32:b0:ee:b4:5d:2d:
         d4:81:87:85:ae:ed:a6:7b:20:58:6b:bb:fc:40:47:84:25:7c:
         40:5a:ec:85:6c:fd:84:4e:79:6b:ce:b2:de:f4:a5:e7:09:b1:
         e6:39:e9:62:4b:72:35:e0:2b:15:0f:ac:de:69:75:de:70:9d:
         3a:70:8d:83:4a:ae:05:df:82:df:63:68:2a:a5:f6:8e:b0:c6:
         4f:6b:b4:5e:dc:d4:ed:f9:b7:87:b2:79:7d:a5:52:76:08:56:
         52:a4:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----