This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          jpO9qBEmikLzHAdYixOpZ1Q0j4OzF1BCwIx0G3kpYoE=
Subject key identifier:   59:D4:01:8A:C9:35:40:5B:D3:7E:0E:4B:72:34:9E:41:1B:E6:DC:66
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019AF31C9EA7395BC44AF4E854260E9705DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          182E
Signing time:             Sat 06 Dec 2025 10:02:10 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:10 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:10 +0000
Files and hashes:         1: 2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa (hash: G6zKwZ9ARfBcNvqeMifheKtZPq8hpO3XrWu/vbDqSnc=)
                          2: 2qlsylzgqXhlEayXE9wkcK5qmug.roa (hash: uhfOGYd80G0548JpMljPb9TBOvg2gxGmo4JHGRdJP94=)
                          3: 45tL-NSBHodaksRDpK2BnTL6Pg0.roa (hash: 9aD/cGsEDm3tuWSuuFsHXgYn2a7J4uwCri2o7lDx6TU=)
                          4: 8nzdRByXa6_8dlrWgKf9ECgVADs.roa (hash: VxQagbxVGwG1Dz0dUi7W2+z8A42U9csxDOJUyvPq1/Q=)
                          5: 9GIXqcmPDOQCe6OcRi8fYZeIDJA.roa (hash: LALysLYk2cUV8ywank9MaIcyv6Luq5IysC+FHpnCFCE=)
                          6: 9xAImfJODTs2zsrACx9eeEsMp4M.roa (hash: gSkZqCfSwfOJL0b2bYeZUGWxUdiYjnYulJENp5XdAs8=)
                          7: Ahr84eZNjYWY2iLRQSZih5fyo8U.roa (hash: Wy69yidMg4yOPUxtA5o5maFsZL4vm+hEqwKZHQwSUzk=)
                          8: ArAhICSanbkeXehKoKQd1V5tguU.roa (hash: 8+a9w0L+HOX6KtVQT5sEhoZJ7WpUWjL5KHUsIh1x6Pg=)
                          9: C2GrQzBO3vl5T105EzYHvBqFqSY.roa (hash: JsqpwBb8513EA82J6T2Eh579nv6JIkErIIaCpTYKtxo=)
                          10: C5neA90kjVHnDPfO-djUn4i2zAA.roa (hash: 6roTXs09K6iOJG+sNAF1RcACFRNOxhrWD6dzp7AoLnY=)
                          11: E5lP18ybHMTHTnPo0M0LIgPaYUo.roa (hash: YCZh/ekLx0cpTY4qWcdCoc57O+gA2agdNfcO7UjD4OY=)
                          12: FdGsnJ5FLSOd35QGWiCkxWoyevI.roa (hash: f01f4w0Q6I/PDdhyj4RbTWC73/Jl9COa4MGDXGsL49E=)
                          13: Fl_ha6ZRrcj7LNabFfiIvy4PXBQ.roa (hash: rGTu/eBvREBIS2YrmRECHoO4Fq6M0d9n2xt5c5qKdlE=)
                          14: GKwqF0OXF5vx1vi3kjXqC_qDYz4.roa (hash: lLtKncTZA2NWJ2KxQ5FTNadrcCKtcyHuvexVTxDDl6w=)
                          15: JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa (hash: OK9ChmoGjGac52vxxGBWAKkSK/ouBl0i27ZM3by8gJo=)
                          16: LNoNmGDFQklAar5TnT_a2DeUWek.roa (hash: wgI395g0pDizwgkf8Jbw1xgOK75FIU6UUEcPX6ofaYk=)
                          17: O8pEm_-zc4a3l2oOmaPytNy4TWg.roa (hash: 3g6cRnV9tCnYa+2wT7Y16qVT2YK1kvB1yvGTbTRzptI=)
                          18: OkV10ej4i1aWkWynfHxAfefl68k.roa (hash: 5dmrYmVBIjHF14pmICYPZDuHTrGireyhaa0Od9fQBWk=)
                          19: QBmp01no0zozc61oJgZgkFLuCRM.roa (hash: Qn8BLHhUaOBThtjWeeHJIXBsVvpchtYykKu7xJstcZY=)
                          20: R0HpmWnfk67q4Dq1iqO8vwpWAYI.roa (hash: wziNGqeAwzyFoCjoElw3SGFz2e33vQDW2HjZjdtvkaY=)
                          21: SyIG9NJxGW9KUTgjUx79TlL5O30.roa (hash: EGPh6In0bkdx7KM76oGtCsHkMFmct6zVay9ocJ+HUSQ=)
                          22: TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa (hash: qgQJ65sybbMwGBkmkMyc9apxITp5UjZu3/AIRYjPkjQ=)
                          23: TTkmvvK-JdTZC6C7UNOuEGH0KnY.roa (hash: 8l6xkNYUvsiiGkoEUdLgLlUC3G7J5Ykm9qCMqOzTgnQ=)
                          24: UNPMxUTpN6F_pgC91vCmD1HFspw.roa (hash: jTsyj9nrkYHMCYAdHXNg5BbHNZmwI4fUMjG/ubMSE0Y=)
                          25: UV6qvkU7uEdukz6I3mbVkpLmqK0.roa (hash: 0A+8ttGoev/2nYj8rEiQJKPOhjsFNaPs3a8ni/KoTvs=)
                          26: UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa (hash: ZqrOUq2ygIXaHriNfA42kKbOZNd/4pARULEQqbGvaMU=)
                          27: WcIw6N44wqFmTSYqs2SA02NfAMg.roa (hash: dr9+lLa9vHheKAcwgnQXvyLdvzdSym8f7D33KNvf/iE=)
                          28: XDlyJBFwdLFezb6RcQm4nzRzf7s.roa (hash: 9MqmiX4xDXaJiAH60iCJjk+VCTx/eFVEhHuHV+pr81c=)
                          29: _0v8B3PHRVD7yYQcASHCL5uWyOY.roa (hash: pu+m41bbVsvu3wkqU3+YbKOTAB8KfYUq9S8Plxm7sds=)
                          30: _6fk9u3GMpi14RhY0Vpqi7RoUuY.roa (hash: 8J+04Jyy5QLdgaXHvTT5XyET/UweE7ZvDXWvk66tOH0=)
                          31: bp9itvd4xpX6vi30qXgEwi5j_Uo.roa (hash: /dew31w6ckgUH8lXPNZF+UTwUD9TWS47g5E5HbIVbQo=)
                          32: d83pqeKiLQhLliuN6pcj5rdzr8I.roa (hash: w/WdVJXy4ZPvV9vYHP3UeCe1IyTQx7yuPgXNPi29GH4=)
                          33: dY03HFRy1RllCenKPrieGUzQXmc.roa (hash: Whvf/7UBVmwJMgZJVFUghC//K+ikEuNaWx2rK86SYdI=)
                          34: fDEuib_mZ3qZfkE1az0EDj_NR3E.roa (hash: 73YMuFd+/YUrXpnrlnZ9kLlZaPNZZkHXycwBv8GSkpg=)
                          35: fsOnaX4tr6VeXJENVam_r7FGZAQ.roa (hash: hHwUXFYP1l9gP70QmfIy18+VkKqbCEzGkYH7C8X8l0A=)
                          36: hWeemcuAMFd0TiPHK8padYtmPOI.roa (hash: m4qFC3qaxfb5JeQfmU+wC2Sy0np3M3w+mxPZ3dJbjcI=)
                          37: l63y35hRh82nc-qWk3eB9bHn_KM.roa (hash: b11mcWefxXYA/2pWdJ3fnWeAI5cFgL/vQOg3VNqp9sg=)
                          38: mNova3WsqOD86eozlCah8ixo0-U.roa (hash: tawcqw6hUcWGQX2dsRM+1JiLekafnjb7jkwLDon7tHg=)
                          39: md7lCwgk9LJmputWOklSB9z83hg.roa (hash: Jb5j3kqdV51LDdKirCOVD1xlgB1FSCucCnzGZEOy8wA=)
                          40: nobXS_EDX1u5OLuM3jnkQJc5t54.roa (hash: 735lQDz4Vu7mXLkQ1OEt71c9RAs4JRSb3jvCDTUy3KY=)
                          41: pD9YdY0kZIyV4tT8Grm6rpRjhMg.roa (hash: iWFl3KeSrkOlRwk9579ovrOA2IUp/1Q3ethXhdT5Cjw=)
                          42: pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa (hash: OzOY0OrVWczErs4fuxcA3h4F8Ql7jZ/JPJpASVv2l9A=)
                          43: pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa (hash: URJHpCopeVtbF70/Rhbrt1/lAiesGtyfYnYjTgM042E=)
                          44: qyphdMRg48o4QmPXSk_OaaQIYw8.roa (hash: lkUqQM+hYiYzJgtpLKYB/0YXPUyEtY/oiN8P3e71gro=)
                          45: sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa (hash: yFiBP614tqQIG+YIYZyTbqGdVwZv4LBDmT23q0+YqFE=)
                          46: uJACdV10EKYjDPAt6fI1jvPKsi0.roa (hash: SqSn3v0aLoH5HzHbohXSEzvqOPRzwdhqN+JqUGBBEF0=)
                          47: uNIkw6t3uZZfjC7mwfO-RlvNdzs.roa (hash: gNASkgszeaveacGmk4j2FCwMOxhgqDVQXhG0Sb6l+bU=)
                          48: vkuL6lPvBwnsGG2zqXJ0dKlsd_E.roa (hash: LAjlqkzhQBZUdmq+rtYjKPdKSPlnRizG/dxEUgNDRm0=)
                          49: weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa (hash: SYYKrJWHItEf708CTIE6RnrGdiSwFYKJxi86yfIO4Oo=)
                          50: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: aGYJR74D7AgTA5e672htL7oV9tMRYJOGWU7Pc475TDo=)
                          51: zUVPzFFhR9J5knJHAZ9lhdp0_ok.roa (hash: /TspGM70/yRXNVHKhWj5smL/PZUzQoqRLk1Lpb2lDmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:9e:a7:39:5b:c4:4a:f4:e8:54:26:0e:97:05:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Dec  6 10:02:10 2025 GMT
            Not After : Dec  7 10:02:10 2025 GMT
        Subject: CN=59d4018ac935405bd37e0e4b72349e411be6dc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:5b:a7:2e:b7:f9:aa:d4:cf:77:3b:4b:d2:
                    11:e2:9a:4f:e9:4c:ae:a9:df:9a:09:fa:ed:3b:9c:
                    96:24:47:32:a0:a6:ea:7d:14:79:53:c1:63:3d:ed:
                    4a:e4:c2:37:54:e6:40:4d:76:9f:9f:3d:7e:2d:5f:
                    af:90:e1:07:1b:95:d6:f9:fe:97:e1:57:12:28:14:
                    98:0e:ee:bb:ae:e1:97:33:4f:87:16:47:c6:3c:b9:
                    f2:09:5f:e2:09:4c:78:d2:3e:13:d4:24:fd:50:f2:
                    26:44:a8:8b:be:c4:4a:ae:87:41:4c:5e:22:31:fa:
                    cb:d8:5d:48:8e:7d:a0:d8:73:15:da:63:45:11:56:
                    31:ed:89:1f:fe:1e:a0:66:ef:f1:6f:5d:66:56:02:
                    f5:bc:61:a4:b0:59:6a:46:50:8d:d7:ac:b7:f1:d4:
                    fc:35:3b:7b:49:41:17:59:2f:e9:2b:67:b3:a6:5c:
                    7a:c6:67:9f:8d:af:0c:17:75:f7:d1:28:3b:62:94:
                    dd:4a:74:52:4d:fa:03:6e:e9:f7:c7:63:fc:df:9f:
                    f7:72:8b:93:e3:12:d1:c1:89:1a:0b:c7:f4:01:82:
                    99:20:fa:1a:8e:ea:29:a1:8c:95:54:24:c9:95:bf:
                    40:44:cc:e5:82:d0:6f:06:05:09:d2:4a:ea:94:f6:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D4:01:8A:C9:35:40:5B:D3:7E:0E:4B:72:34:9E:41:1B:E6:DC:66
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:29:b7:f2:c0:6d:63:5f:dd:92:cc:64:92:05:21:55:00:04:
         7c:18:7d:98:f8:d3:9f:db:ee:2a:3b:2f:15:49:ed:32:fb:21:
         4d:0e:b1:e4:b2:ef:8f:b9:9d:92:49:2d:78:4d:28:ae:b7:40:
         46:80:fd:9a:6c:69:72:4c:5a:4d:4f:05:2b:ad:fd:65:73:eb:
         1c:18:0c:be:98:ce:1c:69:01:01:a3:f5:f0:bc:5a:3b:60:d8:
         a9:80:48:1d:c4:c8:b0:30:56:0e:8b:38:15:a0:39:81:89:81:
         66:51:94:ae:3e:9d:69:04:41:8c:72:cc:e0:02:c5:3d:b0:dc:
         d9:7c:d2:9c:dc:dd:9f:c4:eb:b1:b6:45:68:e0:71:95:51:ad:
         58:38:b0:bb:2a:79:15:77:df:54:8b:3f:8c:9e:15:c1:05:48:
         ef:72:cb:ff:14:63:f8:0d:24:ef:04:a1:12:74:df:5d:fa:16:
         1c:5e:83:2a:30:35:d6:ea:af:e7:5c:91:c0:56:78:2a:f6:23:
         9b:10:c4:3a:04:f1:b6:20:3b:ed:8f:46:76:f2:e4:20:a6:90:
         e0:64:27:6d:8e:b4:83:63:93:35:97:0a:79:25:94:20:54:c7:
         0f:b3:72:95:7d:1f:a3:ba:c0:99:c1:92:66:58:8b:02:0b:52:
         e6:f8:99:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzHJ6nOVvESvToVCYOlwXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUxMjA2MTAwMjEwWhcNMjUxMjA3MTAwMjEwWjAzMTEwLwYDVQQD
Eyg1OWQ0MDE4YWM5MzU0MDViZDM3ZTBlNGI3MjM0OWU0MTFiZTZkYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vlbpy63+arUz3c7S9IR4ppP6Uyu
qd+aCfrtO5yWJEcyoKbqfRR5U8FjPe1K5MI3VOZATXafnz1+LV+vkOEHG5XW+f6X
4VcSKBSYDu67ruGXM0+HFkfGPLnyCV/iCUx40j4T1CT9UPImRKiLvsRKrodBTF4i
MfrL2F1Ijn2g2HMV2mNFEVYx7Ykf/h6gZu/xb11mVgL1vGGksFlqRlCN16y38dT8
NTt7SUEXWS/pK2ezplx6xmefja8MF3X30Sg7YpTdSnRSTfoDbun3x2P835/3couT
4xLRwYkaC8f0AYKZIPoajuopoYyVVCTJlb9ARMzlgtBvBgUJ0krqlPbCOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnUAYrJNUBb034OS3I0nkEb5txmMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSm38sBt
Y1/dksxkkgUhVQAEfBh9mPjTn9vuKjsvFUntMvshTQ6x5LLvj7mdkkkteE0orrdA
RoD9mmxpckxaTU8FK639ZXPrHBgMvpjOHGkBAaP18LxaO2DYqYBIHcTIsDBWDos4
FaA5gYmBZlGUrj6daQRBjHLM4ALFPbDc2XzSnNzdn8TrsbZFaOBxlVGtWDiwuyp5
FXffVIs/jJ4VwQVI73LL/xRj+A0k7wShEnTfXfoWHF6DKjA11uqv51yRwFZ4KvYj
mxDEOgTxtiA77Y9GdvLkIKaQ4GQnbY60g2OTNZcKeSWUIFTHD7NylX0fo7rAmcGS
ZliLAgtS5viZuA==
-----END CERTIFICATE-----