This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
File:                     c8adBFg1AMXvgRNoMSN1k-C7hs4.mft (raw, json)
Hash identifier:          HfC44haiJY8EGgtgaTVuQ4E8DquMuHE9+fVXfPHmmC8=
Subject key identifier:   8E:8E:92:8B:19:70:27:0F:C1:60:D1:30:F7:83:A4:65:AC:14:54:C4
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       019AF61C6BB08A1DF38ECB92EC7E08FBA4E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
Manifest number:          166A
Signing time:             Sun 07 Dec 2025 00:00:48 +0000
Manifest this update:     Sun 07 Dec 2025 00:00:48 +0000
Manifest next update:     Mon 08 Dec 2025 00:00:48 +0000
Files and hashes:         1: 0ZTHdWDr15cqYmaXjlmLQxK6Zsw.roa (hash: aaXeukPVZ6Exhc1+tGslLOXk9RL2GrL89uC5WbXggxs=)
                          2: 0gaSfyJRbV56ttZg9F-YqH_DRGE.roa (hash: T1yJweEHTNg3yzCf+2eFUQByYcpzztAF5N1iIm6RRlY=)
                          3: 2dx8DL40Mg5k3bN-LuUbgmFcuWQ.roa (hash: 4YShjbmkyQp2+OR1aaEcb8XQsTpNNFTW1A97+Onix8k=)
                          4: 5V9nQk8eS6DyC882Rg33Rs4PgXA.roa (hash: CplRfVFqh0nKDCBvHrkyF9RjBMlnhGzkyUPZCH8h8VA=)
                          5: BxQo5X2Y2TZj8fRxpzNb0rOltnY.roa (hash: hy9KlBDDlaqHeJfskJfz5sPZPxdlMGpQRLdrCpucBTo=)
                          6: D7YVwZhncDx3_UZqgA3gpKqWvn0.roa (hash: BlUl3hhqCEz+P104qMh6BeJeaRVXgUPaeD+RSr+RHQg=)
                          7: Dftd-VryWzb6u-zeQqdEZiplGRU.roa (hash: tFA23PL3qRC+vkOFJ+TEse6iryWAsUjncx2TDaX6Vc0=)
                          8: EtE4gpML-DMtpPENAF6RnashcUc.roa (hash: AE/FnlvfzSn9fbhcLM6iL67BrHqCOHRQ5Hn3opvhQYg=)
                          9: H-adpFxDzgm3Ihfm5yTkElLaOkY.roa (hash: JFhQUBwkXfF9hbwQFzAvo2FNMJOmEMEK9fLtnReKalM=)
                          10: HR0XymDjYe2DRNyUZVbZqFsvTwE.roa (hash: pR8njP8dU7BytaQQCqlISJPDZn6JuoxV9zI68zcZufg=)
                          11: I3_IiNfwaVT6yGAou-Y_8jj1fjo.roa (hash: 5R2EP2O5kXETgv526wumPipGy63WjecYbGIbTlL/qiU=)
                          12: MRXNXI85dWMVubwTEI5OsYMnvV4.roa (hash: I4tVIYSz9UUp+FQAmn9G4Rosb3pc1OEa7y+j2kjzuGQ=)
                          13: MygoE_jUZqBsScjcZdWAm0kE8gk.roa (hash: fHs0IvlW5BY3UiPw/q1n490w7b57j4vXfM7H33JKjfs=)
                          14: O4vdHJ9QUww1uQlhzJCFdxoJHsU.roa (hash: Nyj0b/sPzVhXT9FyVdgqmqJCTKENym6fidoReTUthdY=)
                          15: RE1ge7RUk3qelCQ-rVyaZ-va0MM.roa (hash: EOIvgLCzSAsAPkfzjyAYPQk2TKIdGHygtK7XtDffXfg=)
                          16: T_cZrw-UGTlWP2ULxdLpSKX6goI.roa (hash: rSBTg3iLeaSdoGoI3npdkmaNIUU3TACDuXErAC7qRNw=)
                          17: XxHfc-a9htRibcc6wiaA8b5vADo.roa (hash: BWFgGLeyn66mCnqmmne07/YheXx02V5t3syX64hzdus=)
                          18: ZCbIcF0GaldOLtUYof19sqbakss.roa (hash: gNWCQlz3oJejIcSvnhZoA0kGCGPgLjhKUohnu1qe2EQ=)
                          19: _qZcEW-0qY5qmC7kkDn5PwSj8x0.roa (hash: sKDfKXjRwKDdRvUFDLAuK30F1njCJtMyE69WZo1sVbQ=)
                          20: aDS6YMCzOKNGt_fdPH8rD2EqERE.roa (hash: EmZdINDIvUEaNFDiN6itzMDSGZ5e6bJP+GZQfG4efsI=)
                          21: bIif3WM2r9Fp6Q7fCUGuAk-YB2o.roa (hash: zGw6D9i4iJZZxwf+Rme+fCmifU42Ux4sdDoPKxw/WSg=)
                          22: c8adBFg1AMXvgRNoMSN1k-C7hs4.crl (hash: VwShBNpSF2GvqL7yymcdhs+yU6YwQgerSA3oFyHZ3po=)
                          23: dGoZcHSRMRsCv2FFrgCOlXiXd7I.roa (hash: HqDnkJbVSabC0LJ8ZMWoqNYaQf4Qt1hocMR8nRQd6lI=)
                          24: dzgPMpnfibC1YutDFb9cRnpQgMI.roa (hash: K7ZmzzZrLRs3d/7/pDEA+9sKsS2UnBWudXaJPrkjbB0=)
                          25: eSAdGAcJU2Lp7GWxqjyJg860UFo.roa (hash: POacM2N+GD3qu/kucfSHd3RuPLLeqK4i1SrQYiocu8A=)
                          26: fhomSjXrFlv9QCf_yNmwBNocY-g.roa (hash: GP6VZl4TI88SDQ4yws6ZwSlwnMvAo4Nk6DLgfbo3JgM=)
                          27: gR-u8bbl7CpODpcyHOQdtDNy2f0.roa (hash: Ut3zYRyimjZoyc0EPzGxgygwX+4ILv4UHAbFies+BRg=)
                          28: hEya02Xf9kd-D5oiAew2cf9juRQ.roa (hash: jbCwzNjHJJsCtcnhi9SoCiV0LyMvvoy50hLc24+WNPg=)
                          29: lGFP2ErJ84ru7GCCVjFyz-bo_24.roa (hash: l0mQkhZFjodXmX2U7qVqH+cWGP8hW5nCcat91wnQqyI=)
                          30: lpO2gtExEgZg6I3tA7u83UORPzg.roa (hash: Ys3yOY1uG9OwiIw12Nxl74Yju3LXIYbXWusRGboq5uA=)
                          31: qwTTHCXcxwtsgcuGIWM5lbPW5Io.roa (hash: f/0DiiE2k7pjXg46zZOOFPAkYIW0WGzA9MmvWCkb4Ec=)
                          32: rkufoHj1sBQ6QkN_glbHfjlIUYU.roa (hash: XBAAhgYFrtiOkEQFPV67KuG+GLv9BoCZU5LpMqRsUGI=)
                          33: t2c35tmleGdhqgD8qTpaULWpgWE.roa (hash: 7ZHJRQNSKx7UJXKcS05fSX5RQ3fmt7+stYkFABn0Tvg=)
                          34: vBSOJyFGv8Um2BlsLzXA8MLh2V4.roa (hash: OwkejZShQGGaJ73E/UJUzbkSzS8eM+OGd/J1SEvObrs=)
                          35: wYKtXFaCTvrrAK9ghn3IBzNri6U.roa (hash: 5muPxdtSfl2kG91ragur7xX35YNdygE6/Y4gC4KO/cg=)
                          36: x2p0_kEcAb_1QfXoQChRmwjKPk8.roa (hash: 3vNpTazkOZyrEuNo4ZEB146g5i5xdxjdHR8X41sR0G4=)
                          37: y6447IBS9lGcRS1y6cfP1pWC88M.roa (hash: tOpxGpBo2KldSCNUwsWOJk2X6zAJeUCHzVEL0VHyCVg=)
                          38: yExdCq18W8PN0uJNoni46-mqDLs.roa (hash: WSKriRp6rFDoWygxt9XCuZYqzRyO6ViMIh/amFRIKxU=)
                          39: zM7qvBzObT4TRPA1xfHDs_-cQdQ.roa (hash: ffCeSSCBeQ93odKdKRzFv0+gdaFz3UWj1W8taDqZSzQ=)
                          40: zlYt-NU_IsXRuNa1sLxsIcCUUW4.roa (hash: wYSAeAgo2bdVrftGmAfLXkadC78aMraO3HxtmmTaA5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:1c:6b:b0:8a:1d:f3:8e:cb:92:ec:7e:08:fb:a4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Dec  7 00:00:48 2025 GMT
            Not After : Dec  8 00:00:48 2025 GMT
        Subject: CN=8e8e928b1970270fc160d130f783a465ac1454c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:40:48:93:0b:53:50:48:d4:64:ae:cd:23:
                    a0:a2:5b:66:31:29:f9:33:ec:dd:86:c5:8f:96:7c:
                    eb:b8:bb:4a:da:c4:aa:19:1f:99:00:0a:96:55:87:
                    f3:5b:6a:c8:d5:40:45:0b:9f:21:e8:4b:25:a8:80:
                    ef:95:0f:4e:cb:c9:35:40:99:c6:46:86:f6:3f:eb:
                    f9:7a:0b:f9:80:ef:de:8a:7a:4b:15:00:0e:57:76:
                    a4:d6:65:e1:a7:bd:c1:6e:4e:7a:16:bc:10:0a:18:
                    85:0f:f7:e6:01:d8:c4:a8:c9:1e:0d:ec:64:96:78:
                    81:bb:a8:59:d9:85:af:93:06:1b:4b:04:09:f5:52:
                    93:80:4e:7d:fa:fe:18:4b:d7:fb:7c:5d:36:54:55:
                    5f:0c:e4:88:a8:03:64:b4:a6:45:a2:10:d0:59:14:
                    81:2c:47:29:05:28:c8:99:0f:8c:a9:62:a8:23:e6:
                    2f:8d:07:e9:7c:be:3d:b9:0f:39:1b:92:8c:fd:4a:
                    da:8a:ab:20:c7:41:f1:f0:b7:aa:9c:a5:83:86:2a:
                    88:8f:3b:06:90:0a:bb:42:7d:31:79:d3:45:83:a1:
                    80:e0:d5:bf:89:e7:8f:aa:2f:70:71:7a:94:3b:dc:
                    8b:d7:e6:21:fb:28:56:8e:15:2d:03:70:b2:ed:44:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8E:92:8B:19:70:27:0F:C1:60:D1:30:F7:83:A4:65:AC:14:54:C4
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c9:54:05:ed:99:e0:14:22:71:c9:c0:12:8a:cd:97:63:27:
         9f:ad:30:57:f0:e6:57:28:17:72:26:35:4e:a4:27:d6:cb:8f:
         cc:03:41:60:20:f5:3c:5d:ef:a6:b8:11:2e:81:2a:eb:af:39:
         c1:55:3d:3d:c3:21:89:44:ff:29:57:26:c7:a5:48:5f:2c:8c:
         6c:44:63:2b:6a:74:80:86:c0:5f:72:fc:5a:cd:ac:d8:29:87:
         da:f2:57:ed:5b:b4:c6:68:80:5a:df:d4:ea:df:1e:c5:01:a4:
         90:21:f2:dc:79:f7:e4:3b:0a:cb:96:be:0d:16:1b:e6:3e:53:
         4f:0f:34:a0:e1:3a:77:39:c2:46:ad:16:72:96:23:4a:83:da:
         6e:4e:b5:f0:1a:a9:05:e3:35:f0:99:ea:3d:3b:d8:74:21:c5:
         39:fa:19:af:e4:d4:20:2e:09:8a:93:d4:b9:47:6c:3a:fd:9c:
         4e:1b:ff:dc:79:56:9a:a2:f1:58:65:36:6f:50:a8:fb:c9:3c:
         da:f6:62:c0:e9:0c:27:a6:32:8d:29:66:91:a1:6c:9e:6d:68:
         1a:ad:12:8b:4e:41:16:bc:a8:fb:6c:8b:c2:86:a5:41:f3:8d:
         58:2c:02:9a:17:56:3f:d8:a6:ee:83:6c:e7:9d:56:f5:fa:b2:
         5e:df:2b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:02:54 2025 by rpki-client