This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          U3PTb1V8QECttSvbhBzPUXtM116pStPUlBf+OEew/XM=
Subject key identifier:   2F:CA:EC:E7:7A:09:53:F2:2C:6B:1A:04:07:87:61:4D:92:05:6C:DA
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019ACCB330ACF484E8CAE5D635FA4BD96AAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          135D
Signing time:             Fri 28 Nov 2025 23:01:26 +0000
Manifest this update:     Fri 28 Nov 2025 23:01:26 +0000
Manifest next update:     Sat 29 Nov 2025 23:01:26 +0000
Files and hashes:         1: 1-I_hO5bt1QImQjkGfOoCWjz_EeE.roa (hash: yVOsoV3yJ2B3NS6xPJkpc/bYU0gh14t4/0w2H7T8rs8=)
                          2: 1im9hEU1Zy9gvDtniuhopIsSAfI.roa (hash: KW9osimLZTsfRmjZlDNM2cTfJYEvT/L6ZQhgwqfwXrg=)
                          3: 4iA6JSRt9iOXLjSJo4FPcvo5850.roa (hash: Y6iNsmOmNRn1t0IzHy7GGa6of/n7DvPOfcUdK5WYltI=)
                          4: 5T-uWj9twPgW88xOoqQzKkjJJ24.roa (hash: sqAIwpwqapzYO2+lY5/AGADk25rfARYCO45gc5xFmSQ=)
                          5: 5ViRj5UOP26C2K_cQDvWpvsGWtY.roa (hash: FTaUWpoFHfHOaNS+eZLYDwPpxcO9OpNzf+cUKjmhjJg=)
                          6: 5rXL0JsGBTdFgmilGhjy5ibNnPE.roa (hash: CGdxIHgH+xiIc8F/6l7wNpGL/7q47aq5LVwWjCCh0FI=)
                          7: 5sP9AUGchNWq9z-ewhSavIILNHs.roa (hash: AuCjYL0TN0EWfTEbYCBZhYsII9mCs+B7At3SazH6Kpg=)
                          8: 8DJ685XS7FFhXpTi96HwIs1c-E8.roa (hash: P3RV7SHn5Nd362yPOhJ1roOU2udG/g0q/278EWXSOPo=)
                          9: 8b5XsU_ykhlua86XBDQUS1Mo7FI.roa (hash: WWCuXlQD4j8DR63+O4KA60gHpfsjP5jXzLpDX6ZJvWA=)
                          10: AECbsIhKbWJ_Ff0F92F1-4KSX08.roa (hash: XeOu6WbkVXZWORsNFez3zH3cLGNSOvG9l/JIT9zyGeY=)
                          11: CCs7s7qtTwTA4v_cUzv1kNWH5cs.roa (hash: n9IEvGnZo2t/xTYkauWQNpybghOPxemj5Hqf6XCpTTU=)
                          12: CvYPnO9n9wAN8861pn_AlstUSmc.roa (hash: AhTYD+mPr3Q/UsUfGKJ2zJxIpB92wOFsAXppP+mD++w=)
                          13: D8XaxT7I5JFRJkvo3J2dhv_ELuY.roa (hash: C/8xNeqRzXC3cmESXdioUHl9JoWebCZTdFUNWemwOfY=)
                          14: E8a1_PGMprGsOEhvFqqS6i5Tdz4.roa (hash: df9z/ZIg8AUrgWm4WPTjfTwd5PEvval7nDbnweaPaGU=)
                          15: EHANXORuuFW-bF-qP_Ewlxhr-nY.roa (hash: zrxGCCVowaTZG19wQV3mSr3hCcJg9eM34gCGRKeKgvw=)
                          16: EjTg3FLoCqwMYSa2oVnLNKp7ATI.roa (hash: Zh9Sz85xAOxdRH/TSTK08WUiIZwDMKmp8n0eSS6ma5U=)
                          17: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: zgbGEa2HDM5kj8r7rnf3ETlIfsN7DFmXOWHWB9FSW9c=)
                          18: FhVVLOSaxxu76faY814MnjaKzto.roa (hash: 9AmDzH895DDiPDx+GJM625gim3dI0bqS449682uf9QU=)
                          19: HnQUzsHGqdLWhe9eJs25T-3zS14.roa (hash: YP146by7eQkbB1DmmOOCpv5/ycsCOlnjnTQYlXQrPFY=)
                          20: HxdiwSRUmgtfx_Kzpm8iakZlshQ.roa (hash: NuZmUPsYGQYy/Wq1HHdRs3azySlyhMaPIgb+Xua5Zqw=)
                          21: IBQePbUiBM5g94FVwIacCAEuPao.roa (hash: KLM5pCcoF2f0RYayCLzM4NVj30QUjygkx0XcB71JnNA=)
                          22: IDNq1fzegiVq3DfMODVoKXhXsXw.roa (hash: 9qsXkwmfg9GPCCRx/oqPNzp3M+SoGsIIkgThEWElfxg=)
                          23: IJxwgWeGeUFHv_7JmoeJXVPHKlQ.roa (hash: x1bR2iw79o2n2CiabiJSxb3FYLKksGeSqDdvgl7oOyQ=)
                          24: J8B9b5nFvg0BXqbPVc8DoON7oaI.roa (hash: ZBKlCuKxq+Fhxp6ngyIeTvrnOGmVjLjKODM2yKkJTGk=)
                          25: MR1g3BBi_xl1gx5Y0lGmfE-MYoU.roa (hash: H1hmCwZT9JBFGwEqv/yJBQon6hUn8vTsaw2M6wo0nSY=)
                          26: NySPVsdxhZ8CG1ciPcyrg5Y00Jg.roa (hash: eLBB/ryFtyh0U5kDNzJU01/rb6XqOa1SNpNvfukI4VM=)
                          27: OtfNIp_jb6HOI2uijeGzs2i4R7Q.roa (hash: x7yqlpuzOUYTjhI9koKYGYix8ZFmxFeUptiD8PTHtzo=)
                          28: P0zP1jJVbq5izuOS18FYTI1YHxs.roa (hash: s6fzct44ef1GEvO9VXyOMf9H83k5wEPaumVmsRJC6ns=)
                          29: RKiPm9TAvbuh_hM-_lIBxDZv6rg.roa (hash: wmQF1xmI2xLjnYrkheVh+QF2nwc1FwtPu4Q6cucZc/A=)
                          30: TKLwlj_hhD4ChnDkZIEH511OIGQ.roa (hash: d5LelJw+wBPleYzumiiB1DR6XbgaSt39j02f16QfxpA=)
                          31: UssQ3uaWIBR-jRSPRfVK4dqtyZw.roa (hash: jSCB75UJBI6CVBgbXnymkTQet8MviTNNi1b+iGWhqX8=)
                          32: UueWcU4Q00o_IZEjIn0tQkIZHVg.roa (hash: K04uztC+U5jxVpEpYWqdgCa99Lrsgi/1SgksZlSEIKc=)
                          33: ZE5HXP4DhKEPM6Gv1wOErPS1cz0.roa (hash: O/2TK/NX3+tm+RkMY/59BD1XnfP0CTYDGNxOF5SY9hE=)
                          34: _rbgiNGO-S27H5VBRvlSaosM5pA.roa (hash: F4Wzd0keTC9/E8Yr8BBEUoGpX4zOhFgL+3EUdrKLPwg=)
                          35: b9747bu6F3orHJcVTx2KhvjyqKA.roa (hash: H3wknujwm2p7sLOwETgecFsrpjupwjmW1r2yHz878yc=)
                          36: bDYS4al9maBekHp3cZ5w3zMia7U.roa (hash: pOCmKySw+Tb1sm3NtefhOmKXAvO+WJqWskvC+nl7KhQ=)
                          37: dhvrao9cqDtu4cNL7P7VwKji0UM.roa (hash: DXIuFC1u6zXUhH/posDaRLzzQjM/I3jLYYQrFJ8rMq0=)
                          38: ed1jORhWSi7ng65aRGJvId8bpXw.roa (hash: V1NGOKlYDvJUTPipPut4jDpgPnuzNxC4hJ0tFfqQYgM=)
                          39: g7XSFMyOFdfU8FCy9OGbf6MYoZY.roa (hash: n9yM7dyLNiBrfDvEbmkvhz7bFD53KNqtuiSWk/NDtDw=)
                          40: grkpzxJson0VO7xVFrMikGMv36c.roa (hash: YMm6A4zlYtaXgWVdkGysieoloVta9ggqSz989h7KXRQ=)
                          41: hRkfWek6x-vExSIgkwy_44n-0R8.roa (hash: Jw1jYBu4t1JSgiHUdnnTnbxfd7dT4zMqdCScHCXuMGo=)
                          42: iDsVGhUzM9wIiGAdd7UL3QbsAlU.roa (hash: CSbthrtDlT3wO3U8KcYsreaOD2U29zr8MXYvaDSeDTs=)
                          43: ilkQ7l85HQmR_JVmkd_hGC8Di00.roa (hash: TFb4vPDvFn3NHoDA2wS5sAtOgJMIPvQ/3QpJDKqOZjg=)
                          44: jHRs2CdaoDudTKV1UxeprvvPaJs.roa (hash: 1WGZ/i/Wlhh6+utA+tb7JAVK7IH3dTYaxIkabtzpM/w=)
                          45: ka9Kg1mP_UGoOXD67l2s092h9eY.roa (hash: gHOj1YrfYiq5kNzFwLUGBr3drQZHXZ/djO0mPNqlklo=)
                          46: lOXttIBfThT0VgY7ljjG4tEpJ7Y.roa (hash: fiZK9BjaPjO7qpd4ZBMfJGJpGVtukLbE3FtVCjB2QWI=)
                          47: pGVWe0w8lugoUQZ-979xl_-B-3I.roa (hash: LbElaUnKCk9Bg+fLyXmgBn+O2zSzwnYHINbqbS5NZdI=)
                          48: sVO_hwOUMLHjYiUFYzC6ZlJnNjg.roa (hash: A+S9gnFkAJ3wbXU2lCWRPwZRzZuYDwzqjjLfNzaAhnw=)
                          49: vpZ9pBlUZn9RHhWYszmcUSXh8xU.roa (hash: +lZGQ6hqM+WWBVf6jKaZ0gprTcSn3A0Dos8SvpePtso=)
                          50: wLoUUdSvg4mybpd990iExJeHUJs.roa (hash: eK4QhV/Upj6LcnsWEPnxaYJD29t58deZI0lM+T3uQOg=)
                          51: wRHBU_tIlHPadsLQLwBGJFuQGqc.roa (hash: HGZ2hfZbOO64qRGA+DNha/b0kQHhKQIKwFw+uvw3jek=)
                          52: xruqwNquafx6aZYM3D0DNR4CZPA.roa (hash: yyrCOymjfiU6NgJaKiuHu+t8xFK4YmgFc2F0WyQhZLU=)
                          53: xtowxRamwFXLEsXOBC5y8raNQsg.roa (hash: t/xR47ZdzknVJS1VuGL8SGn/NCyw9q5prCwcInTElro=)
                          54: yLcbHMgRfnm3GP6mvQgxG6m7W4E.roa (hash: Ezieh4C0OjR9hVJWQfbuNJn+pjhzzmPKBbae2Gg46+w=)
                          55: yaQ7VGjAsEQRr3MX_AiuNL7A9jE.roa (hash: io+LzSfCXNwPFD3txUCEZ0tHgOdPVC0wYWBLcgYdkFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Nov 2025 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:cc:b3:30:ac:f4:84:e8:ca:e5:d6:35:fa:4b:d9:6a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Nov 28 23:01:26 2025 GMT
            Not After : Nov 29 23:01:26 2025 GMT
        Subject: CN=2fcaece77a0953f22c6b1a040787614d92056cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:bd:14:91:c6:c2:54:1d:48:cb:06:c3:64:
                    57:41:22:23:c7:6e:73:3f:38:81:de:ec:7a:b4:6c:
                    d3:5f:ca:ad:e4:97:c3:57:34:9f:9a:b8:59:61:0d:
                    2e:a1:73:a9:3f:c4:29:7d:ba:26:f1:f0:67:40:be:
                    c3:a3:6f:09:e8:4e:d8:af:57:4b:9b:00:a6:78:43:
                    c0:23:20:3e:25:3c:36:78:18:0c:e3:09:bc:24:76:
                    f8:54:12:a7:a1:f5:c3:2a:c5:ee:5b:f6:1b:7d:17:
                    32:5d:63:86:88:a8:1a:34:06:0b:34:25:60:4f:db:
                    57:1a:60:c7:bc:6a:a4:3d:a1:e3:d2:89:87:3e:f6:
                    1a:aa:79:78:a4:be:40:4e:59:87:7d:f0:e7:65:fe:
                    eb:12:37:74:af:21:00:00:2a:7f:ed:6b:7e:69:5c:
                    61:78:dc:a2:6d:95:8c:3f:37:10:94:64:98:d0:23:
                    dc:56:8f:fd:de:31:73:09:73:54:d5:f5:3a:d7:76:
                    75:91:a2:2d:37:88:6b:02:0b:b8:a8:1c:e4:f7:ee:
                    8a:0b:32:7a:09:5c:92:35:11:01:3f:d0:b4:98:b8:
                    b5:11:72:d9:c1:f6:23:db:80:5b:3b:5d:aa:c5:84:
                    1b:3f:be:b8:dc:17:87:8b:a8:c8:d0:e3:b3:c4:c3:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CA:EC:E7:7A:09:53:F2:2C:6B:1A:04:07:87:61:4D:92:05:6C:DA
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7a:a2:e3:15:0a:c7:f9:fc:d0:c2:3f:e8:2f:f5:d5:c1:18:
         d7:8b:f2:9c:a2:16:a2:94:a3:a0:3c:1b:18:e8:c2:d2:6c:bf:
         b7:82:53:63:59:bc:d1:8a:f1:50:af:5e:12:49:af:8f:91:d2:
         30:58:b7:b4:b3:8a:8c:36:ba:cd:7c:5c:8d:ea:3e:4b:df:e9:
         03:bc:0f:9a:59:e0:8d:79:dc:84:88:c2:76:14:b1:94:00:7e:
         49:09:b5:a8:4f:58:ec:c9:50:de:f1:24:5c:55:e8:69:99:3a:
         8f:9d:40:fd:73:3a:d9:e8:50:b2:e3:69:90:7e:55:61:1d:14:
         bc:4b:8d:2c:af:26:fe:57:2d:b5:ef:f5:43:b2:5b:ba:7d:1d:
         40:85:24:65:01:b2:72:7b:de:ad:27:40:bb:51:91:3c:84:5e:
         2a:cc:a3:ef:ba:ca:7a:79:20:bd:db:73:ac:ff:08:7b:2e:50:
         29:24:e9:4b:6a:b6:12:1c:c7:87:bb:f2:45:1a:36:27:09:73:
         33:f2:86:b8:dc:44:2f:89:74:da:10:b2:51:ca:e2:33:f5:4d:
         b7:30:2c:c3:a4:e9:be:36:69:d9:b6:e9:6e:c8:38:f0:5f:77:
         5c:82:47:f4:b9:5e:62:95:1d:c8:74:49:b6:f9:f5:92:24:e2:
         0c:09:3c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 29 08:05:59 2025 by rpki-client