This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
File:                     _dbuAQuZCjNzV1a0_i89PCZx3Z0.mft (raw, json)
Hash identifier:          mDv0w/vNQgcoVrM5MYCJeiaB27J5wEA08JA3CseDa94=
Subject key identifier:   99:20:15:88:23:53:7C:C9:B7:46:7B:63:D5:3E:D1:BB:6E:8D:F3:33
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       019B53ABC7E9F9F82687BCCB38DF9561CFAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
Manifest number:          0940
Signing time:             Thu 25 Dec 2025 04:02:05 +0000
Manifest this update:     Thu 25 Dec 2025 04:02:05 +0000
Manifest next update:     Fri 26 Dec 2025 04:02:05 +0000
Files and hashes:         1: 1Y62m6PAoQN16SPF0N8wibWycfk.roa (hash: 1p+u2bM92AxaS116YPDdsceX61F9LlCG3iRgoyNwrMg=)
                          2: 4Btmo4X8P0Aavpp-nU0Yc8hYhVc.roa (hash: qDrq2XWyugrrzMadNyZODi+tYW3DV+sPLZzT49k0JrM=)
                          3: 4OWbmQvrbkxw_L6B6p_nfFL78Nk.roa (hash: D3I+4GLPQ8XjvI8vcfRpTGTXJnxkK7ZsaWQ3tzMa0FA=)
                          4: 637ySHaa7VPjeqlKlcPrhZ2yY2I.roa (hash: 5OCAk2cIQJcX+e/E05dY0NN7PiUYi4cdJimVcm3YI9A=)
                          5: 8_fakKxo1IWGgqQO4LSuBNgbX1A.roa (hash: mKTIf5Vhn/rPPi27Si4S/aAUjmxjU05O8m3X6BZqHi4=)
                          6: AYYBscc1vAX_s8siGpcGCunrJ-s.asa (hash: TsxOoPMew0FkeDrrQ9HwlkF2tqn3RjNXe4yMU59QasM=)
                          7: AaypEsEdVYUGBO9pIAcSnVHxcng.roa (hash: xIrmQSj5iiQlA0CWV5z6X22s4gAVeMqFSjtUBU0ngGI=)
                          8: Ct96xN1xgvlrzbLvxfSx_-BAtNk.roa (hash: lrSKsEpugh4eEEm3L2JaQTWeMJQdiHgI5ot+GMevkbc=)
                          9: F3cZKj6S-Z9_lD66DEX0vK-eKcE.roa (hash: ieI0ZKZHt/S3fOpvysP/zC/yEti8uFPoDMgtPhCFeKw=)
                          10: FN6eGuuI_wxSJwtVgTgHksuIU2k.roa (hash: lcwy4N23aWEQwNKLPfOGbzSMxuSa2S19+LPrrtBD9kQ=)
                          11: HrwzFbe3UtyoBM5z7CvSwNIy4p4.roa (hash: YrKgLZLOw/EtLShX/OiK2tyZzChYVExfgbBKDYbGseU=)
                          12: IzO07cDfXtxek4M2I1Iy4FbjBTM.roa (hash: SsoChbSg4dMYiRhLHZ+4qGEfaxOMUQB123/z9XrSJO4=)
                          13: JD1vyyywBHq_6Cew-ZwJSrZ4hFk.roa (hash: /te3H+VUTBpgy9VKLErG5yc6ITk4ZNAsCt35Sq14AnE=)
                          14: JtAsjQszicgAK_Bz09MaZjgSHRs.roa (hash: 3F49sCHbl/xh5CG+U8kddXehfQts9G+pawy1bD9ilGQ=)
                          15: MS4QM8pTgNvck47LJGrNRRzcx5k.roa (hash: /i8c7H0MjJPPqLbe4N1XbPH1LlsyGlITf8EjUGqqAxs=)
                          16: MTcsB7pau_sj7fShnl0hskf_g1I.roa (hash: ZEyHwS4yMVYuUul4z8MpSjD2WFJ72elktQ3XV6XEcfg=)
                          17: Mai3hO1570LXs6RLr6YGrktOd4s.roa (hash: 3YqQQd9kN82zwoLCu2RB4M6k5ODGSKxhrf7vMbNdzEk=)
                          18: NOmwGHNk4_h1lySGROFlVhhAvDU.roa (hash: eX/CLrHfnuQFtcityYzUzMtZK9FW0M25MGJ2LKFWOAE=)
                          19: NzVn53qodIDSWt0vOG1oqhpGi_E.roa (hash: Lyhkl4afO2r+5/N5rOlPypCReelqQa6ct1JAxr+7elc=)
                          20: OfgHImIcPU1qqfBsI9N5ZXsiPNE.roa (hash: fgJeoJ7zWqkp9sr1PNmklE2TKICiDxPgDxk46jWpq8I=)
                          21: PrwKv-LxClxDWPIzpmtd0SUVKOA.roa (hash: PB5nadJ7Zlp7pGWpzoHOMgtzMAgNvx2fppNEsfjJQYY=)
                          22: SLLUMAJKxJq045JCLVs9H5nC9nw.roa (hash: /PN9Q7dD2zRwVKc/oYOK+/gsSuS6rWI59nDYoZCCVJI=)
                          23: UMgG3wm0Wwabvb18BWgBPGTLUfQ.roa (hash: WJgBs9fu0EqbOTPPX09p13+s2t3z4+KFfuC6Uu5dHzg=)
                          24: UpxvyaO1w4UW5ThzZNiK11i8Iec.roa (hash: ts6x4xf+obI23cPBJb6wwaavJqR740WuylL0f/ZOTmA=)
                          25: Uy5UBlG1xVdNnKbZ7x-o60M7TVU.roa (hash: tk3tIBSeQBab5qYJNuQXuIHm0Fnq+pfGnO25obHRvCc=)
                          26: VZFGS-Fn4Kqjnwh23jee48-bApo.roa (hash: KDb7CTkFWG3SWfMMbnKx/BeDHCaf7g0U9ZYnth5W3TE=)
                          27: XhQy70S_UMvUlQqMS3Ri8w9Lzwg.roa (hash: pfzMfmapyb/YulZYQtRxTnmcCybmAdc60nKGcIcDJZA=)
                          28: ZGdAuUombv4vkBsPwiqPFlqYz8k.roa (hash: Vg0hs2FALGJK84oUteDgK6tbIxpNAMJc90q23NUJBvM=)
                          29: _BPKDl06S5B-WQij73gHPR1pC88.roa (hash: TpQi5kxvdYE7MlhfQqrq2bStKZhLcIZbpWTNfLLNzmc=)
                          30: _dbuAQuZCjNzV1a0_i89PCZx3Z0.crl (hash: 3E7X5nJP09PtTnLE09lFG+vUAHNnw3cVP5E4kTd8Zr4=)
                          31: a_YSXRy0GEriEr_Yop65IVdtSPw.roa (hash: wLE2AzL6ZkOvLLE19J24Zeu03IrBHRQfEcPvlWi0nkI=)
                          32: gbpTeo0yP98ZSdgLmdpcLzdZzv0.roa (hash: CbsxGhJhoE8yvGtURZm7/5jfNWzpy2kZAlBuSWC42H0=)
                          33: h738lN5c3TyKcj8anxVMoHPkxGE.roa (hash: pjqnFNlGOHySNRAPtEKFXim6O4weYwyodx7laOQF5Og=)
                          34: jMa6gCTiwT7u6_nY7rYAamQhAvI.roa (hash: /3kWQVn9yQP77uBrM8AVQhX9Si46/u2UopM8CejUies=)
                          35: kCw9KW7g2WHXSaE7taxeZTizKC4.roa (hash: 0phDtsrapiUcNDcI7I3hyFhO2oK9iXRAiRoI4U9hIt8=)
                          36: kc_pAgwEMNSsLD08APOQDGvFE2M.roa (hash: r5V1K4scPTshGUo0mmQh0b/PvpghTBmlsV1I1dOUu6Q=)
                          37: lLgPzNrIYmtNfXY3WPp-fPMUEYU.roa (hash: OaGMS8N36o43A9RI4EoDlUQq50SWqO5qzGHhpWj7ufo=)
                          38: lPdDfmlD9RAxCyidA_ifam-2Uvk.roa (hash: sWKYz6K+L1Be8/sNsnQfCAv7/Dkkri5HUxz/km5Fw+o=)
                          39: lakNGIHUgcn6UKwdVo4OxV9sHyU.roa (hash: aFoG4y5uaHj/rfiT0o09JJpVEi7UfU1x/oN+QiewPRY=)
                          40: mR_wkM-dl3q5Zqavc8_wUxLBsck.roa (hash: mjWZ9wcnOPQZpY6H28O3iednkx7NStQEjrpDKJuynX0=)
                          41: nububswUFWNKZFUv1-WT-nusbw8.roa (hash: vJnbRRzz2QWrTYEfK7eqJvsQka1cyruMLjOKXSilJ8Q=)
                          42: p9UuQE7IxHiGiw_Tp8PySfk0XpA.roa (hash: Xqy9Em6AjRJ+I/gqlqDmb5niUls7eNf0tdPu3/cAQb8=)
                          43: rZwZbD_BSnHvyM26tCS0n-6jr8s.roa (hash: xlibK6LzsFxTtBrkroU3Mk7lzRkyAhSJ743saez43/A=)
                          44: sgXmikHZdaCmSd1V08WpxfXo-T8.roa (hash: KMsYSteYB1GHkuplXeSxd9o4LN0sSfty5BOhOvuqq1Q=)
                          45: smgQhR1WkDuLYZtnSt3KxLnFFME.roa (hash: Z1MOxUq6sxBXZipioFKdR/NpXqOoPsix9279r6reGW4=)
                          46: uHnUp8alk4kl7R1__u3juRedX1A.roa (hash: 2Hv2oFFIwo0j/kizpuCBjWy1nT4b1wl0hiQz103C3L0=)
                          47: wUKqgXn8I6QyKCOZp1fOP55CVHY.roa (hash: ZYh1IRJkBN+fN6othjda/ZeToNDoNn/k0haPoeVnCVQ=)
                          48: x6FbQ2O6qeigJ_DjZb3WHwNrr5k.roa (hash: b6Xbxc4B5PcQR/6u1pjeaDaXYfTGp9+tHTDdJzfSjXw=)
                          49: xQUI4-r4XjQLs0FjPM2WCfbBxWQ.roa (hash: 8AY4z5mbYOVzgbpSHBMZBweydiWSklrRLaeWro7dQDw=)
                          50: y_JsphXDGhtYIly7VDuihnNcQ5U.roa (hash: e2p81FmOY2QZWDBjWNf+vYK0z1VRG2fKaiv+Lz4SL1c=)
                          51: yqIKBNfi5omJAzcXnoCsrE6snzo.roa (hash: Opdk7PUfzB/ZuCfmlT3r82TvrvdyJuMBr+txoxstkgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 01:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:53:ab:c7:e9:f9:f8:26:87:bc:cb:38:df:95:61:cf:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Dec 25 04:02:05 2025 GMT
            Not After : Dec 26 04:02:05 2025 GMT
        Subject: CN=9920158823537cc9b7467b63d53ed1bb6e8df333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:09:78:8d:f6:6a:8d:45:df:6b:5a:41:22:
                    52:60:71:12:a9:3d:b7:9a:b4:a8:f0:5f:3e:2a:e1:
                    6a:f4:22:64:ee:08:34:fe:7c:d3:f2:b5:2f:37:0b:
                    a0:33:db:0e:59:c6:2c:29:a2:84:f8:de:6d:c1:c1:
                    c9:e2:ff:06:be:c6:87:b0:20:31:2b:66:05:17:16:
                    4e:6c:11:37:27:dc:48:11:56:58:3b:04:1a:fa:3c:
                    87:91:25:5f:db:5c:87:eb:1e:4b:9f:0b:ff:ba:b2:
                    d6:a0:c1:14:86:94:d3:d7:3c:a4:01:5b:d7:c5:49:
                    67:5c:1a:b3:c8:c1:a3:02:f4:08:74:59:c6:8c:e3:
                    01:07:62:44:b5:c1:88:a7:b1:ea:22:f8:68:37:28:
                    a2:69:e6:0f:84:c2:e7:9a:04:c4:5b:11:0f:84:86:
                    e1:65:98:1e:ff:a0:49:49:ef:5a:c8:be:aa:55:83:
                    dd:95:df:a1:8b:17:1f:04:87:b5:58:f3:78:7d:2f:
                    f3:2c:80:60:14:de:5d:27:3f:58:96:55:92:9a:ef:
                    84:24:3a:07:da:2a:f1:91:a2:95:2f:2e:a2:1e:8c:
                    30:81:d5:6a:8d:0a:0b:15:ce:51:63:70:0e:f2:cc:
                    7f:f2:d7:aa:e3:37:a5:e3:94:b4:f4:61:09:59:1a:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:20:15:88:23:53:7C:C9:B7:46:7B:63:D5:3E:D1:BB:6E:8D:F3:33
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e0:aa:f8:32:fc:3b:9c:0a:99:d0:f9:7f:41:04:ac:23:8d:
         fc:f5:8c:8a:ad:c3:fc:0e:98:58:90:23:eb:b7:d7:83:90:1e:
         83:18:25:73:7a:bb:04:e0:0d:c1:f9:1e:71:9d:37:87:ba:93:
         b0:c5:d5:ef:dd:6e:58:c3:27:28:63:41:bc:4c:fc:c8:9a:44:
         a2:94:43:ea:4a:72:94:3d:9b:3a:3b:0d:7c:bc:a8:7d:d5:24:
         49:38:3a:b1:f2:32:ba:8c:0b:ab:05:f7:da:b7:21:64:55:01:
         45:8b:97:63:5a:4a:94:73:c8:54:31:e6:e6:86:7e:7b:90:01:
         0f:31:1b:a2:15:23:64:ae:d4:bf:06:23:b2:fa:67:18:28:24:
         58:bd:17:68:44:af:ff:44:a5:11:5a:40:8a:bc:4a:35:9e:3c:
         17:bd:31:1d:dd:fa:fd:a6:66:2f:52:d0:56:f3:05:c6:79:7a:
         77:f6:19:6f:bc:26:1d:e6:fa:a4:05:33:13:82:97:29:d2:1d:
         ef:49:9f:1c:3b:3e:0c:10:48:36:75:48:f5:5f:f0:af:91:12:
         88:ed:45:03:3d:97:69:3e:ae:61:69:c0:4f:25:be:df:44:1e:
         a9:00:8f:d6:0f:69:83:02:57:9f:0d:19:bf:c1:c1:e3:5f:48:
         be:c5:4a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----