This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
File:                     J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft (raw, json)
Hash identifier:          vQFbTKnJg2mx2iHgmxhbUC2Wu5CX5WGWTRnmmHQXi2o=
Subject key identifier:   03:82:C7:DD:85:EF:54:16:19:EF:C1:93:9C:C2:A2:34:52:AC:32:A2
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       019B063423ED39B8C12366FBF64D560ABD88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
Manifest number:          1889
Signing time:             Wed 10 Dec 2025 03:00:38 +0000
Manifest this update:     Wed 10 Dec 2025 03:00:38 +0000
Manifest next update:     Thu 11 Dec 2025 03:00:38 +0000
Files and hashes:         1: 1eUzZitDZ013U4KoMXhLsZt-Ouw.roa (hash: onauJHUcj3/Gk42IQtCwNxPA1GwGcTPdZF4tzNU5Cic=)
                          2: 3eUT08I9fAP3Rh0UE9FbfxsG1bc.roa (hash: akr8fvq3b1MRJAZxmdxssOux5X/sXZanMRkztgAfzHg=)
                          3: 6kvBNM7QxzqNFUQY6UJAUSlEXG0.roa (hash: VzytZI3MZIGD76NTvtSVMrgwhYYU4KZfB6J50PMrkLQ=)
                          4: 7vYSmlk2u5zvZg_3ArmbDEY_sNU.roa (hash: Jq4Qzcnido1Bc85YICom1I+PBuMze7LAU9Wcp1OqdNY=)
                          5: 9CecUJWAhyUbD-JEeW3t7Q_bT3I.roa (hash: Ql1G0HHXMA7dM1rPg1JGzT0qhMxhyvoFIN+xbPIAbQE=)
                          6: 9TOpmOFT85FoIQt7VW00tnNSDyc.roa (hash: SCLGJPJrvLPHM3t4jGt50TpAdXlieT/PBKVM3GuTOz8=)
                          7: D9kReuUfnqK0y7nk-I74tRESYYU.roa (hash: onEFa0+ErZ1aSjQk8E05b4+s3hg4ZO35purvDEgyF2w=)
                          8: F4LyibxUyKDWiTWokbR8Nu9dwFg.roa (hash: ls3OOX8CUo2Fe8GCCqRqasL5CwSJNwzKwm1rIE9s2yA=)
                          9: GAOT9zYxLw8oZDIwUIGywpBcjB4.roa (hash: hUanzkdOKXITITs1YgDbKjXXABKxTMzchE87QAQ0bYE=)
                          10: GS2XVRqZpeDdiCx3T0QMEG4okfQ.roa (hash: c+r+fHHe/APmANIkQRbs62jauEl4PzEDrWx2I+B9cis=)
                          11: GeTD2FnRC1JSiACi7Zc6xwpLCFA.roa (hash: VeVaUKTcdEDW2fRzvPABtIyMQZZZ9rNn6xJNVY7+2r0=)
                          12: GvXRVawHzzCi7pgsF39SYGKOL1c.roa (hash: IOKiIV1qdEfGlMmS/WoO8wBdPAZPaBqF8Ff8rokjp5c=)
                          13: Izq6UW8aiBdLHfPlUH5V5DG8V8o.roa (hash: TLUWXWRi4AZLzT5qqRNMDM7ckp1Ovx1osuct9u8/ySA=)
                          14: J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl (hash: tHRZsFfnP16IxOVxzjdU3QazSFGMalznnnZ+05Bb13s=)
                          15: KKuykAsgSlfU2_ah3gPApjpa_bY.roa (hash: lDZxYhBz6e/2Gw3mx1uSU5ra67aA2s9x9ASpcPzvb6k=)
                          16: Md7YZ-d1Y1XheM9ry7B9sgz4YA4.roa (hash: Ih78eioWDLIJh2FdRhV0xY7L6/wFxYgEtTJFDLMZDFU=)
                          17: NHulc4Xr5UTDZcaKywtBQBKjze4.roa (hash: XJgO5TSUWtITNdkmTiFR6yAsuz/yfG1PVcms5HB/rmg=)
                          18: SI6JcMkAdXeahj7NGt32DCzk_N4.roa (hash: XmnPzPSkO2n35usGEIRF1Qz4ke4WyZ//abuJ7KDgxxQ=)
                          19: SbU6Wu3VYL_xJUdthJTMBSanghY.roa (hash: 0SfBRTqaFb3y7K9XYOO4Yq/M+ASPHTLlHQOS0a7mCG8=)
                          20: TthjPRR5wXxsEh-6VCqYJXzgbKE.roa (hash: qNNifR39ahZ3yfEWA6+o5w3ku4jFU0k6pJdFlQXCAdc=)
                          21: Vbp_L2hdFxTdfzdKLSX_zbLl_mk.roa (hash: 4m7gesb3gkf55hVL1cOVKzNKguAUApHfmA6sJrKWwxA=)
                          22: W7QzaER1vR-s3Pj4KyrMCvE0NVo.roa (hash: ZgPuCeX9vl95FC5nGpWcD3MQhmHO62QrHuHCGcZ3dQ0=)
                          23: WRheQN0amA9-_VCQME57u4bK-ks.roa (hash: blzydWxPl2ahI62ziLjMaHt088mTMKIJq9ZUkNAzqD0=)
                          24: YZm_xLtmsH08Bas2THq1RxLz81g.roa (hash: qHMBbTPBGSfjxU8aJsAB/XiYXwHHASUN+b5Hn+g/xts=)
                          25: _mea20OFuYFsi2iTbTW6kjzayQ8.roa (hash: 15vxvAMXVj8o1NZa+nAjbC1U25nrqGTHLYeckcnvDkE=)
                          26: bjGyoAnqbJlTY8yxoW8Vw9QTKXY.roa (hash: KkR9uPlQKsAZ2pDuHous5MwgFIvneEVZmAg7v37TsdA=)
                          27: ghdkEXOYieGGhOcxGRo9LY6w5LY.roa (hash: 4cdu+XE7YUzkOZIE2VvcRY1Ie1MDvn7w+dAFcHrze/w=)
                          28: oGAN-qdYZCv1jnbn30aPOHF3XnY.roa (hash: AwnPvaCiq2S1Iw7Y9tew2bDgRzQqA5x8pF/iVdnfXyw=)
                          29: p45g5foq91zKggpm9xOru9V5Ta8.roa (hash: aescxVeG95+vLWeERAq4yBUOFPEiqWqdLL4rR3/2YL0=)
                          30: rGkstG6DmG4B7cdYh3EO2voHOpA.roa (hash: SmsIhLLPmjYgcUx7ha4qQmd2o5KZk8x1FvvtQ8LvAQs=)
                          31: sPN4MQOyS-s_riyCy93fzpeT-34.roa (hash: yENIXfYPwcHSIXCDZ9TP6nlOKTHnb7yHcks9QDKcNxs=)
                          32: sbm57hbO9DMhZVoyKG3SdA-duFk.roa (hash: 6anRwGUA22JIE2yI5cX9sKlVcBQWgTcUOS+5xTEbTcw=)
                          33: uFxKkTJ2FS-YadWkkiFDxhg46zw.roa (hash: CKurhe6gxcartqAcpNhLJ0w752vEmApcJaVpSiuG5Lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:34:23:ed:39:b8:c1:23:66:fb:f6:4d:56:0a:bd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Dec 10 03:00:38 2025 GMT
            Not After : Dec 11 03:00:38 2025 GMT
        Subject: CN=0382c7dd85ef541619efc1939cc2a23452ac32a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b8:d3:bd:7a:48:0d:89:c5:71:8d:3a:90:ff:
                    5e:59:1c:c3:76:80:3b:e2:b8:fe:5d:2f:ce:c7:4a:
                    3d:69:8b:1c:17:ce:cb:df:28:20:f6:ae:03:d5:d1:
                    5f:91:04:0e:14:24:36:3d:61:b0:1c:d0:15:07:dd:
                    fe:c3:87:bf:03:41:2a:9a:23:32:41:8f:8a:f6:3b:
                    31:dd:ec:5a:81:24:2c:0b:88:a1:6f:35:1c:d5:4e:
                    d8:f2:8f:9a:9d:9c:d7:e9:5e:8d:22:35:97:e1:44:
                    cf:fe:6a:10:43:ff:79:ae:fd:5d:9a:fe:f8:20:be:
                    f0:6a:83:28:f3:ba:ba:14:fa:d4:0a:7b:09:d7:0d:
                    50:0a:6d:4a:5a:79:74:b0:21:55:8d:dc:9b:53:8c:
                    24:5f:90:b6:aa:17:c6:a3:bd:61:31:d7:a9:ec:82:
                    b0:05:66:f3:ff:40:e9:5f:ba:8a:5b:dd:2e:8a:e3:
                    db:9d:2c:a9:a1:b1:1a:5d:fa:04:bb:e1:93:8c:56:
                    f4:6e:38:a5:fd:a6:70:fb:8b:bf:08:b2:52:0c:f7:
                    b7:e2:dc:fe:ae:99:99:7a:04:e7:2d:31:d0:6b:f5:
                    9a:45:c5:66:29:49:0a:61:ba:87:77:11:89:01:3d:
                    45:1d:d6:9d:dd:d1:c1:ac:c1:a0:5e:be:cc:a5:6f:
                    1c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:82:C7:DD:85:EF:54:16:19:EF:C1:93:9C:C2:A2:34:52:AC:32:A2
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:54:0e:1c:ff:9e:42:53:e8:7e:29:74:e4:01:35:48:5b:f5:
         0c:26:a5:1a:03:74:b4:49:a6:cf:78:e6:7e:bb:ee:3c:16:b8:
         21:90:c2:d7:b9:ee:25:66:6d:95:cd:12:c4:18:fb:a7:f2:46:
         eb:76:00:c4:f3:f2:20:94:7f:a9:71:05:6a:52:7c:b5:d5:30:
         29:66:31:15:ce:c0:86:1b:14:ac:5e:c5:d5:c6:b5:9c:50:c8:
         22:92:5a:51:6b:30:0e:e4:06:88:db:ef:47:2d:11:06:57:93:
         f9:fc:d8:88:14:5e:ef:51:3a:a6:d3:4a:59:45:0b:f9:55:8b:
         23:4b:29:0c:f7:79:cc:40:28:c1:06:38:21:48:cd:21:99:d1:
         ee:48:1a:3c:28:d7:98:7f:91:95:e3:9b:89:4e:4e:67:f1:ca:
         7e:a4:0d:a9:e2:31:e1:49:4f:f1:01:5d:34:f1:0e:6b:30:e3:
         db:57:aa:9f:e6:ce:d1:04:8d:c9:be:17:fb:04:53:cf:49:c0:
         bf:ab:e8:fa:36:7a:88:87:32:8a:ef:f1:f1:41:a5:2b:8e:42:
         26:b0:46:8d:55:56:e4:8c:c5:ed:fc:72:0c:f9:72:44:21:d4:
         ad:7c:4e:1a:af:6c:5a:85:81:c0:7d:b3:0d:a5:e4:ea:0d:71:
         d6:a2:0e:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsGNCPtObjBI2b79k1WCr2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjUxMjEwMDMwMDM4WhcNMjUxMjExMDMwMDM4WjAzMTEwLwYDVQQD
EygwMzgyYzdkZDg1ZWY1NDE2MTllZmMxOTM5Y2MyYTIzNDUyYWMzMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LjTvXpIDYnFcY06kP9eWRzDdoA7
4rj+XS/Ox0o9aYscF87L3ygg9q4D1dFfkQQOFCQ2PWGwHNAVB93+w4e/A0EqmiMy
QY+K9jsx3exagSQsC4ihbzUc1U7Y8o+anZzX6V6NIjWX4UTP/moQQ/95rv1dmv74
IL7waoMo87q6FPrUCnsJ1w1QCm1KWnl0sCFVjdybU4wkX5C2qhfGo71hMdep7IKw
BWbz/0DpX7qKW90uiuPbnSypobEaXfoEu+GTjFb0bjil/aZw+4u/CLJSDPe34tz+
rpmZegTnLTHQa/WaRcVmKUkKYbqHdxGJAT1FHdad3dHBrMGgXr7MpW8ciwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOCx92F71QWGe/Bk5zCojRSrDKiMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFQOHP+e
QlPofil05AE1SFv1DCalGgN0tEmmz3jmfrvuPBa4IZDC17nuJWZtlc0SxBj7p/JG
63YAxPPyIJR/qXEFalJ8tdUwKWYxFc7AhhsUrF7F1ca1nFDIIpJaUWswDuQGiNvv
Ry0RBleT+fzYiBRe71E6ptNKWUUL+VWLI0spDPd5zEAowQY4IUjNIZnR7kgaPCjX
mH+RleObiU5OZ/HKfqQNqeIx4UlP8QFdNPEOazDj21eqn+bO0QSNyb4X+wRTz0nA
v6vo+jZ6iIcyiu/x8UGlK45CJrBGjVVW5IzF7fxyDPlyRCHUrXxOGq9sWoWBwH2z
DaXk6g1x1qIO8A==
-----END CERTIFICATE-----
Generated at Wed Dec 10 12:51:53 2025 by rpki-client