This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          fZO6dVFw6KB4eqYRPkbioZXdrvKmEhpWQQRfZuMwI4k=
Subject key identifier:   58:02:37:19:F6:BC:7D:E2:95:75:E7:91:EF:15:EB:53:F8:D3:24:82
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       019B22BE274C77276B051B2208283713546E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          0FFD
Signing time:             Mon 15 Dec 2025 16:00:45 +0000
Manifest this update:     Mon 15 Dec 2025 16:00:45 +0000
Manifest next update:     Tue 16 Dec 2025 16:00:45 +0000
Files and hashes:         1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=)
                          2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=)
                          3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=)
                          4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=)
                          5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=)
                          6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=)
                          7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=)
                          8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=)
                          9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=)
                          10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=)
                          11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=)
                          12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=)
                          13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=)
                          14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=)
                          15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=)
                          16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=)
                          17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=)
                          18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=)
                          19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=)
                          20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=)
                          21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=)
                          22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=)
                          23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=)
                          24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=)
                          25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=)
                          26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=)
                          27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=)
                          28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=)
                          29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: 6ZWG/68nRCcJkRFzH7BsaBKxM51eo/cXV99Y2dordcE=)
                          30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=)
                          31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=)
                          32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=)
                          33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=)
                          34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=)
                          35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=)
                          36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 15:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:22:be:27:4c:77:27:6b:05:1b:22:08:28:37:13:54:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Dec 15 16:00:45 2025 GMT
            Not After : Dec 16 16:00:45 2025 GMT
        Subject: CN=58023719f6bc7de29575e791ef15eb53f8d32482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:21:b1:dd:d6:8c:3d:81:0f:ef:5c:46:87:
                    36:40:c4:7b:45:b7:82:21:5e:41:4e:a1:a3:38:72:
                    89:19:77:34:fd:f1:c0:d1:fd:64:db:45:fc:ae:bf:
                    85:6f:35:b7:da:f4:9f:7e:19:88:14:fc:62:8f:0c:
                    df:00:0b:db:43:d2:f7:d7:53:ba:99:55:2e:87:83:
                    fc:0e:b1:16:9f:e2:3c:9b:51:5c:04:84:61:50:06:
                    bf:4c:3e:c7:8e:3c:e0:bd:72:e2:dc:02:00:6b:f7:
                    a7:8b:6f:73:09:e7:9a:b6:de:4b:05:28:b3:3f:c4:
                    98:49:4a:55:54:88:a1:68:41:78:2d:33:0b:05:10:
                    33:58:93:04:a3:3b:9d:28:31:16:49:6e:cd:0a:67:
                    75:7b:60:6a:22:89:92:ba:ce:93:39:4f:ca:31:7f:
                    a2:10:6d:f0:72:48:47:f3:21:a4:9b:48:9b:e0:87:
                    2a:85:3d:61:40:7b:a7:19:b8:06:38:de:d4:11:e0:
                    68:a0:82:81:87:95:ab:96:e6:ac:8a:18:68:8c:23:
                    54:c8:23:fc:dd:f4:1b:e0:9f:7d:94:4b:09:21:98:
                    9b:01:93:4a:d1:44:9e:d1:bc:9a:ea:0f:bb:1b:7b:
                    ba:44:84:16:44:4b:16:bd:05:ee:cc:ee:2e:63:d9:
                    7b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:02:37:19:F6:BC:7D:E2:95:75:E7:91:EF:15:EB:53:F8:D3:24:82
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:22:ac:a8:4c:6c:28:17:cd:85:9c:1b:2a:ef:f8:9e:d2:2d:
         62:e8:0a:12:da:17:dc:f2:ca:89:6b:9c:71:3d:10:b7:2d:88:
         bf:ea:4e:ed:26:95:dc:12:f1:37:e8:8f:5b:fe:51:0f:86:cb:
         2e:a2:32:bd:95:46:f6:50:19:d0:04:78:9c:17:d1:29:c3:76:
         1f:35:68:9b:cc:1f:a5:ef:f1:11:0a:38:b4:77:22:3a:34:2a:
         39:5a:b8:03:e8:3d:6a:f4:89:70:81:db:c2:24:a2:a7:0a:e9:
         c1:99:4e:27:be:12:0b:af:a4:ad:f2:14:49:c8:1b:21:d5:bc:
         c3:93:28:78:7b:6e:65:09:81:b7:d2:0f:c8:86:c3:01:b4:dd:
         9e:c6:fa:0d:02:50:79:00:c6:1d:03:88:da:f8:20:53:bb:01:
         e3:88:8e:7f:6f:80:05:5b:d4:62:09:58:16:30:27:84:de:be:
         8a:0b:21:ae:2a:e6:2c:98:74:ab:2b:9a:8b:9d:c9:8d:98:e7:
         23:b9:7d:46:f2:32:d1:1e:58:89:ce:a7:e4:43:14:91:a7:a7:
         10:43:33:63:96:98:19:25:65:1c:b2:0f:f2:71:76:f8:bd:6a:
         e0:ba:27:96:90:93:2f:02:65:1e:c9:5b:78:0e:1a:7d:19:84:
         15:e0:5f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----