This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
File:                     _dbuAQuZCjNzV1a0_i89PCZx3Z0.mft (raw, json)
Hash identifier:          Yc0OizGrpxeQXkZ4fC7NpMDas1En90uCMmhuPx3zUcQ=
Subject key identifier:   45:BA:CF:26:83:B0:F5:87:27:3E:CA:E7:A0:64:3E:31:97:F9:53:E7
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       019AD81366FF69F1381367D9A9C734BF3CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
Manifest number:          08FF
Signing time:             Mon 01 Dec 2025 04:02:21 +0000
Manifest this update:     Mon 01 Dec 2025 04:02:21 +0000
Manifest next update:     Tue 02 Dec 2025 04:02:21 +0000
Files and hashes:         1: 1Y62m6PAoQN16SPF0N8wibWycfk.roa (hash: 1p+u2bM92AxaS116YPDdsceX61F9LlCG3iRgoyNwrMg=)
                          2: 4Btmo4X8P0Aavpp-nU0Yc8hYhVc.roa (hash: qDrq2XWyugrrzMadNyZODi+tYW3DV+sPLZzT49k0JrM=)
                          3: 4OWbmQvrbkxw_L6B6p_nfFL78Nk.roa (hash: D3I+4GLPQ8XjvI8vcfRpTGTXJnxkK7ZsaWQ3tzMa0FA=)
                          4: 637ySHaa7VPjeqlKlcPrhZ2yY2I.roa (hash: 5OCAk2cIQJcX+e/E05dY0NN7PiUYi4cdJimVcm3YI9A=)
                          5: 8_fakKxo1IWGgqQO4LSuBNgbX1A.roa (hash: mKTIf5Vhn/rPPi27Si4S/aAUjmxjU05O8m3X6BZqHi4=)
                          6: AaypEsEdVYUGBO9pIAcSnVHxcng.roa (hash: xIrmQSj5iiQlA0CWV5z6X22s4gAVeMqFSjtUBU0ngGI=)
                          7: Ct96xN1xgvlrzbLvxfSx_-BAtNk.roa (hash: lrSKsEpugh4eEEm3L2JaQTWeMJQdiHgI5ot+GMevkbc=)
                          8: F3cZKj6S-Z9_lD66DEX0vK-eKcE.roa (hash: ieI0ZKZHt/S3fOpvysP/zC/yEti8uFPoDMgtPhCFeKw=)
                          9: FN6eGuuI_wxSJwtVgTgHksuIU2k.roa (hash: lcwy4N23aWEQwNKLPfOGbzSMxuSa2S19+LPrrtBD9kQ=)
                          10: HrwzFbe3UtyoBM5z7CvSwNIy4p4.roa (hash: YrKgLZLOw/EtLShX/OiK2tyZzChYVExfgbBKDYbGseU=)
                          11: IzO07cDfXtxek4M2I1Iy4FbjBTM.roa (hash: SsoChbSg4dMYiRhLHZ+4qGEfaxOMUQB123/z9XrSJO4=)
                          12: JD1vyyywBHq_6Cew-ZwJSrZ4hFk.roa (hash: /te3H+VUTBpgy9VKLErG5yc6ITk4ZNAsCt35Sq14AnE=)
                          13: JtAsjQszicgAK_Bz09MaZjgSHRs.roa (hash: 3F49sCHbl/xh5CG+U8kddXehfQts9G+pawy1bD9ilGQ=)
                          14: MS4QM8pTgNvck47LJGrNRRzcx5k.roa (hash: /i8c7H0MjJPPqLbe4N1XbPH1LlsyGlITf8EjUGqqAxs=)
                          15: MTcsB7pau_sj7fShnl0hskf_g1I.roa (hash: ZEyHwS4yMVYuUul4z8MpSjD2WFJ72elktQ3XV6XEcfg=)
                          16: Mai3hO1570LXs6RLr6YGrktOd4s.roa (hash: 3YqQQd9kN82zwoLCu2RB4M6k5ODGSKxhrf7vMbNdzEk=)
                          17: NOmwGHNk4_h1lySGROFlVhhAvDU.roa (hash: eX/CLrHfnuQFtcityYzUzMtZK9FW0M25MGJ2LKFWOAE=)
                          18: NzVn53qodIDSWt0vOG1oqhpGi_E.roa (hash: Lyhkl4afO2r+5/N5rOlPypCReelqQa6ct1JAxr+7elc=)
                          19: OfgHImIcPU1qqfBsI9N5ZXsiPNE.roa (hash: fgJeoJ7zWqkp9sr1PNmklE2TKICiDxPgDxk46jWpq8I=)
                          20: PrwKv-LxClxDWPIzpmtd0SUVKOA.roa (hash: PB5nadJ7Zlp7pGWpzoHOMgtzMAgNvx2fppNEsfjJQYY=)
                          21: SLLUMAJKxJq045JCLVs9H5nC9nw.roa (hash: /PN9Q7dD2zRwVKc/oYOK+/gsSuS6rWI59nDYoZCCVJI=)
                          22: UMgG3wm0Wwabvb18BWgBPGTLUfQ.roa (hash: WJgBs9fu0EqbOTPPX09p13+s2t3z4+KFfuC6Uu5dHzg=)
                          23: UpxvyaO1w4UW5ThzZNiK11i8Iec.roa (hash: ts6x4xf+obI23cPBJb6wwaavJqR740WuylL0f/ZOTmA=)
                          24: Uy5UBlG1xVdNnKbZ7x-o60M7TVU.roa (hash: tk3tIBSeQBab5qYJNuQXuIHm0Fnq+pfGnO25obHRvCc=)
                          25: VZFGS-Fn4Kqjnwh23jee48-bApo.roa (hash: KDb7CTkFWG3SWfMMbnKx/BeDHCaf7g0U9ZYnth5W3TE=)
                          26: XhQy70S_UMvUlQqMS3Ri8w9Lzwg.roa (hash: pfzMfmapyb/YulZYQtRxTnmcCybmAdc60nKGcIcDJZA=)
                          27: ZGdAuUombv4vkBsPwiqPFlqYz8k.roa (hash: Vg0hs2FALGJK84oUteDgK6tbIxpNAMJc90q23NUJBvM=)
                          28: _BPKDl06S5B-WQij73gHPR1pC88.roa (hash: TpQi5kxvdYE7MlhfQqrq2bStKZhLcIZbpWTNfLLNzmc=)
                          29: _dbuAQuZCjNzV1a0_i89PCZx3Z0.crl (hash: 5/u3/OyJqLDCCjNLplYgBF9TPbOt1MfyTVer9rO9f5k=)
                          30: a_YSXRy0GEriEr_Yop65IVdtSPw.roa (hash: wLE2AzL6ZkOvLLE19J24Zeu03IrBHRQfEcPvlWi0nkI=)
                          31: gbpTeo0yP98ZSdgLmdpcLzdZzv0.roa (hash: CbsxGhJhoE8yvGtURZm7/5jfNWzpy2kZAlBuSWC42H0=)
                          32: h738lN5c3TyKcj8anxVMoHPkxGE.roa (hash: pjqnFNlGOHySNRAPtEKFXim6O4weYwyodx7laOQF5Og=)
                          33: jMa6gCTiwT7u6_nY7rYAamQhAvI.roa (hash: /3kWQVn9yQP77uBrM8AVQhX9Si46/u2UopM8CejUies=)
                          34: kCw9KW7g2WHXSaE7taxeZTizKC4.roa (hash: 0phDtsrapiUcNDcI7I3hyFhO2oK9iXRAiRoI4U9hIt8=)
                          35: kc_pAgwEMNSsLD08APOQDGvFE2M.roa (hash: r5V1K4scPTshGUo0mmQh0b/PvpghTBmlsV1I1dOUu6Q=)
                          36: lLgPzNrIYmtNfXY3WPp-fPMUEYU.roa (hash: OaGMS8N36o43A9RI4EoDlUQq50SWqO5qzGHhpWj7ufo=)
                          37: lPdDfmlD9RAxCyidA_ifam-2Uvk.roa (hash: sWKYz6K+L1Be8/sNsnQfCAv7/Dkkri5HUxz/km5Fw+o=)
                          38: lakNGIHUgcn6UKwdVo4OxV9sHyU.roa (hash: aFoG4y5uaHj/rfiT0o09JJpVEi7UfU1x/oN+QiewPRY=)
                          39: mR_wkM-dl3q5Zqavc8_wUxLBsck.roa (hash: mjWZ9wcnOPQZpY6H28O3iednkx7NStQEjrpDKJuynX0=)
                          40: nububswUFWNKZFUv1-WT-nusbw8.roa (hash: vJnbRRzz2QWrTYEfK7eqJvsQka1cyruMLjOKXSilJ8Q=)
                          41: p9UuQE7IxHiGiw_Tp8PySfk0XpA.roa (hash: Xqy9Em6AjRJ+I/gqlqDmb5niUls7eNf0tdPu3/cAQb8=)
                          42: rZwZbD_BSnHvyM26tCS0n-6jr8s.roa (hash: xlibK6LzsFxTtBrkroU3Mk7lzRkyAhSJ743saez43/A=)
                          43: sgXmikHZdaCmSd1V08WpxfXo-T8.roa (hash: KMsYSteYB1GHkuplXeSxd9o4LN0sSfty5BOhOvuqq1Q=)
                          44: smgQhR1WkDuLYZtnSt3KxLnFFME.roa (hash: Z1MOxUq6sxBXZipioFKdR/NpXqOoPsix9279r6reGW4=)
                          45: uHnUp8alk4kl7R1__u3juRedX1A.roa (hash: 2Hv2oFFIwo0j/kizpuCBjWy1nT4b1wl0hiQz103C3L0=)
                          46: wUKqgXn8I6QyKCOZp1fOP55CVHY.roa (hash: ZYh1IRJkBN+fN6othjda/ZeToNDoNn/k0haPoeVnCVQ=)
                          47: x6FbQ2O6qeigJ_DjZb3WHwNrr5k.roa (hash: b6Xbxc4B5PcQR/6u1pjeaDaXYfTGp9+tHTDdJzfSjXw=)
                          48: xQUI4-r4XjQLs0FjPM2WCfbBxWQ.roa (hash: 8AY4z5mbYOVzgbpSHBMZBweydiWSklrRLaeWro7dQDw=)
                          49: y_JsphXDGhtYIly7VDuihnNcQ5U.roa (hash: e2p81FmOY2QZWDBjWNf+vYK0z1VRG2fKaiv+Lz4SL1c=)
                          50: yqIKBNfi5omJAzcXnoCsrE6snzo.roa (hash: Opdk7PUfzB/ZuCfmlT3r82TvrvdyJuMBr+txoxstkgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Dec 2025 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d8:13:66:ff:69:f1:38:13:67:d9:a9:c7:34:bf:3c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Dec  1 04:02:21 2025 GMT
            Not After : Dec  2 04:02:21 2025 GMT
        Subject: CN=45bacf2683b0f587273ecae7a0643e3197f953e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:fe:a1:fc:5c:c3:b7:f5:1a:68:17:18:e0:
                    73:bd:f0:5f:e5:43:e8:bc:5a:3d:02:51:3e:f0:e5:
                    f6:70:6d:b9:c2:14:a5:42:04:90:f4:03:eb:e4:92:
                    6d:1f:06:36:07:c2:17:e3:1b:2a:20:26:db:ee:5a:
                    69:fb:04:8f:34:6a:d0:2a:4a:0a:38:65:7f:e2:5e:
                    76:98:31:f2:a9:a3:a5:c2:8d:0f:d3:2e:7f:1c:07:
                    90:69:95:2c:6b:1f:f5:db:78:bd:fa:47:11:19:cd:
                    4f:b4:c4:ed:af:64:a6:d5:57:84:cd:6c:b1:e2:7d:
                    52:4e:a8:38:ca:b1:76:a8:4d:6c:0a:95:01:7d:5a:
                    19:5a:93:98:38:30:04:af:b6:bf:35:91:62:5e:f7:
                    34:28:1f:ab:b5:e2:aa:7c:b5:00:cc:56:9e:86:22:
                    f1:5f:0b:86:92:9c:53:94:70:90:ce:46:c2:f7:14:
                    e8:74:f4:dc:28:ef:70:13:8b:95:4b:b2:7a:25:b9:
                    7c:22:2b:b6:c3:3e:c0:25:78:cb:df:c8:4f:88:8b:
                    6a:07:64:da:23:d8:be:3d:67:e4:a1:93:d5:4c:45:
                    10:11:50:b0:0e:02:75:b1:00:ba:d9:3f:82:65:ee:
                    ac:53:d2:4f:eb:c5:33:ff:b4:5f:27:50:39:de:d3:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BA:CF:26:83:B0:F5:87:27:3E:CA:E7:A0:64:3E:31:97:F9:53:E7
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2f:c6:62:63:fa:f8:6c:32:ed:5b:3b:d5:6f:b2:78:de:a0:
         53:d5:0b:a8:d7:8a:af:6d:14:3d:0b:35:65:6e:56:51:84:ce:
         1d:e5:6d:52:57:f8:c1:98:76:b3:75:0f:7a:f2:8c:36:31:4b:
         89:45:2c:0b:2d:65:4c:23:78:6b:1b:f4:16:77:36:78:f9:f2:
         a1:6d:a4:3c:ff:57:8a:6c:8b:be:fc:40:b0:b0:12:4a:cd:d9:
         f5:4b:be:5b:3a:a0:0e:a8:1c:f3:78:bf:a5:b7:88:ac:03:ce:
         19:d3:9f:53:03:9c:e7:ee:c1:33:b8:cc:93:06:08:e3:94:2a:
         9d:dc:6f:38:02:d3:a4:15:9e:f8:9b:57:82:72:04:d7:f1:c1:
         27:47:c3:cf:33:04:e0:20:78:02:06:70:ec:6f:04:7f:86:97:
         72:b9:ff:17:c7:1c:0c:a0:6e:c2:7e:35:1b:81:93:8a:4c:3e:
         95:5c:6e:e8:80:a9:1b:43:50:7b:a1:a0:8a:60:6f:e9:dc:38:
         7e:1c:a2:39:c8:e8:3c:2b:33:8d:36:c7:a6:e8:e3:29:9d:36:
         2d:82:69:c9:75:41:2c:e9:84:c0:6b:bd:b0:07:ba:ed:3a:29:
         a5:de:e3:e3:8c:40:e4:fe:54:a9:b6:ee:03:fe:bd:db:96:40:
         4c:22:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----