This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          X8bBr5w1oBKXlJeJquUyr3GISSPTA+qQkS0xohC/2jI=
Subject key identifier:   63:3A:07:34:BF:D8:6D:49:FE:34:9D:DA:7E:E7:0F:2D:34:AD:01:47
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019B4738C7D862E45FAC173354D8A512D757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          100A
Signing time:             Mon 22 Dec 2025 18:01:02 +0000
Manifest this update:     Mon 22 Dec 2025 18:01:02 +0000
Manifest next update:     Tue 23 Dec 2025 18:01:02 +0000
Files and hashes:         1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=)
                          2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=)
                          3: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=)
                          4: 5Gpugl9qvXvWFS1DpStrfULxE_U.roa (hash: KZiaRVIOQGiZVW3R13UM2WDkj8fWfnSB18hjkaWIqbs=)
                          5: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=)
                          6: 65ahf5r6xKbeZ8AGsp6YsLsmAZE.roa (hash: Sj/V9VHJ8TFvtffvUCl874DjTHZKJVL+voddh2kr3I4=)
                          7: 6__FzytDeJGBiOsqkC5Q6lvVz5c.roa (hash: k4b9r2kfzauGDNPF91+6aM/sLBFPud/qX7UDElApLio=)
                          8: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=)
                          9: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=)
                          10: 9diCFn7EgM2RCCX6Qx6aFyhgX2E.roa (hash: Nh8bc26byCkv5gvckcokp5euxtQrzclKwBg68owpgwo=)
                          11: AH9IWPeSjn4zPMXrJdOOZZAn9Aw.roa (hash: NZOres5BfCUJDRAZEdwJLZ3pKyCM0qr94CohvGLshJM=)
                          12: EqQMeL6zx5KJ7G-6yvg5oeaml80.roa (hash: +hIYVqIF3npRwqzc+KC9S17raCPIuUeac2Niy0EAaaQ=)
                          13: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=)
                          14: GgheZMui_9obLhlNhZVy8uWvs5U.roa (hash: 7NB7RYWksH/wQuJ5gKOAyFQPxId7nbq3caWrTZFbMUE=)
                          15: GxXapth5TXJfKL3THtGbcZ2d5Gc.roa (hash: GIxE2UOc9CUSVW0vSExmLz7YKeQavAKFp0T5CTs9JW0=)
                          16: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=)
                          17: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=)
                          18: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=)
                          19: P1Oafitv1-CeGpiS3295bk_jc2k.roa (hash: zdC8sgbH1GuCJi8ZjmFdq/tJ5mm7D49KA4AN5K55yRY=)
                          20: PAT-1ixXWzm9Bfubciqff_m-8kY.roa (hash: nHull2wN05E21by+dWEX9iqYF+MEaBy9skelAofF8sQ=)
                          21: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=)
                          22: SqKkKM173VSrB36qGmxTUJHKCo0.roa (hash: 48hEcJJ8yoYkRJhZ40G+F37LnKZ8jLN3UCGXFfcuN8I=)
                          23: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=)
                          24: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=)
                          25: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=)
                          26: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=)
                          27: eRDw7dF55P7wHv9vfdNgciZiits.roa (hash: MdrDuZVh60KAJjt7uD5dLHrckgAME9PGiYJbxXCoOHg=)
                          28: eb1JGLGjHk8dUCm22Z9YVbWJfI4.roa (hash: 4dk6LdqYI6h3lwSIwoSI/6KhGYHQ7oiRewrKPkKoR8Q=)
                          29: hlbDH1BhxY_47J6JKo3X--hFSJc.roa (hash: j+krjic4ia3MsnX0RPgsoulWfYQqpaFZ1Z4xAOqKERc=)
                          30: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: MZeL/uO6DQ1q2Kwnbz/zfDVNwubeWo+Q+UiuU7YEa5c=)
                          31: jVzLhR_-fZDDxOR849cM8vp6pzo.roa (hash: j+TN92lkP2jjoQ1DpZsUrV4hygUYX+rjfYRIwGn+Dyc=)
                          32: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=)
                          33: moTDq53FtqLZAk0AGJnD6LpxpL4.roa (hash: yDXZvfMOXGpBwTjMd4JFoseeDN5zwWwTjLyIqfnezgg=)
                          34: mrJC9W9EE59GYgtXbqXAdDLeR5M.roa (hash: EmQASPlX4VYn+oN5h+q7sFx0PUiUYy3q6dEHOc0jLAs=)
                          35: nBCkRyX1WlWGiDbtpEcZ1yzXCz8.roa (hash: N7pYS0DZbvPX9AJ7+c9P/Fy4kdTMZIvg/FrKj/0hE8k=)
                          36: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=)
                          37: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=)
                          38: pnumxDfICVHia5do1NtNtM481Fg.roa (hash: Z3XykIcH5XHf5JFowplLEgcMZj6sQcUDlFWPwTcLHhA=)
                          39: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=)
                          40: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=)
                          41: yFVnEJP7VmWlHCimsj8mvmclw8M.roa (hash: Id+C3+f0hiPCfYs2C9ySsYjpohP/fRM7b8PZS/7AKHg=)
                          42: ynxoqLNGRfbAQl1csrIqvWu2om8.roa (hash: 02FpxfF5rw0ZP5XHvGYcpaVTPQJddG9K1OzX9QimBYM=)
                          43: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:47:38:c7:d8:62:e4:5f:ac:17:33:54:d8:a5:12:d7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Dec 22 18:01:02 2025 GMT
            Not After : Dec 23 18:01:02 2025 GMT
        Subject: CN=633a0734bfd86d49fe349dda7ee70f2d34ad0147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:c2:c3:51:3f:73:78:21:ce:07:89:9f:88:
                    bc:e7:17:27:00:22:b5:fe:28:b2:53:fe:79:67:f2:
                    a5:5b:b6:75:c0:16:e0:5a:54:94:c2:e9:e6:72:95:
                    3b:b5:39:28:0e:ea:f5:3d:c7:94:f8:14:6f:f1:68:
                    8a:03:1b:f6:63:d9:db:35:fc:9b:c8:c8:43:30:c5:
                    90:89:94:09:e5:db:95:ca:25:0d:a7:90:64:36:61:
                    ed:89:18:3b:06:43:52:ac:5a:d5:d0:ff:7f:86:a1:
                    d0:65:35:15:6e:e8:7b:61:11:1f:a6:b1:bf:eb:92:
                    57:97:29:7e:6b:a3:3b:f3:92:15:21:ac:26:1a:35:
                    a2:d1:9d:37:fb:bb:2b:d6:1c:bd:32:27:64:1d:3c:
                    11:64:88:cd:cd:e2:d3:83:22:bc:2a:7d:ce:ca:95:
                    9b:a5:89:41:c0:7f:fa:87:4c:f0:34:43:e7:0c:a1:
                    e5:ec:a7:5b:26:fc:4f:58:76:2a:79:48:e3:d0:4c:
                    7b:9f:75:49:41:f4:c6:c8:e9:60:11:73:8b:81:f8:
                    e4:2c:fa:69:e2:cc:ec:af:5c:c1:87:6e:fb:d3:06:
                    1f:a7:a0:2a:7d:d4:fb:29:c1:a5:75:52:bc:4b:c0:
                    ca:59:61:9a:93:63:45:40:86:56:23:6b:4d:8d:84:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3A:07:34:BF:D8:6D:49:FE:34:9D:DA:7E:E7:0F:2D:34:AD:01:47
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:31:41:cc:1f:ba:fa:14:8f:4a:06:32:44:3a:dd:ea:2c:a6:
         40:0d:46:c5:38:8b:f2:f3:fd:63:f4:a3:19:64:4e:b0:f9:e6:
         1f:d7:20:d4:8f:8c:c2:ab:37:77:ea:62:22:c5:5d:aa:21:e3:
         d7:c5:22:4e:69:27:bb:9d:dd:e9:6e:16:5e:89:ce:83:12:82:
         18:e3:0b:82:97:9a:9b:14:fb:f8:e2:68:e1:6a:c4:bd:7c:e7:
         4f:8c:df:74:81:27:1f:46:26:52:a1:41:d1:94:e5:be:7b:39:
         bd:b0:a8:c5:13:43:73:89:1f:88:47:2b:17:71:70:f2:d7:40:
         32:53:99:27:5e:8f:4c:8d:75:bb:65:f4:f7:0d:be:7c:16:1d:
         85:0f:30:37:7f:14:1e:42:ca:33:66:8f:3a:a4:89:58:51:b8:
         ec:2c:7a:01:e2:b5:1b:35:85:1e:20:6c:20:6c:89:50:01:bf:
         62:73:20:ed:45:e1:4f:8b:42:ab:ec:60:9e:d5:fc:73:0e:20:
         b6:79:91:64:79:d4:b4:ac:25:7f:64:64:b4:10:e1:66:d8:6b:
         f1:fc:74:18:34:59:3b:84:a2:53:59:3b:a1:b0:d2:58:e5:d0:
         8c:de:b9:81:ad:5c:27:5f:c2:75:92:f0:35:58:03:5f:2d:cd:
         bb:da:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----