This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
File:                     1Ion9EsQQExS9v_E4I3IK_i13uQ.mft (raw, json)
Hash identifier:          l2YnPtXN4bmhGK1/sOsVKzmSYMbKh2yBw+dcFQnZF9w=
Subject key identifier:   49:75:59:B5:66:67:F0:E5:84:F5:4B:20:79:13:42:A1:72:C0:09:62
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Certificate issuer:       /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial:       019AD0219ECC14EF1C89378D566111428017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
Manifest number:          0C06
Signing time:             Sat 29 Nov 2025 15:00:55 +0000
Manifest this update:     Sat 29 Nov 2025 15:00:55 +0000
Manifest next update:     Sun 30 Nov 2025 15:00:55 +0000
Files and hashes:         1: 0O8PsfQQ837HZC6vH8HZdjQhz9k.roa (hash: Xwa6CcyNtMqGwJ8SwiL0+ATMW4k6h9G4j8VyDVTQCuQ=)
                          2: 1Ion9EsQQExS9v_E4I3IK_i13uQ.crl (hash: wCsep1oPL9Zwz+ap9XkNirVjn/xse8kmOsMXXOHU+cY=)
                          3: 3n4-ucZdGz_1X3fIAf9XxJmNHo0.roa (hash: Qb7wFX91g78lr4g5B/mSH8rgR/DbATD0NzeRsFaH16Y=)
                          4: 4d2QZZ-Yg51N0ozxYFeFkxn7Qy8.roa (hash: GvTYY3vxIUIpSpx5NqRwtadFiwvbmCTuc+PABVRSqfg=)
                          5: 6DKPMNriuuz5czJiETGvSTeZJTk.roa (hash: Won6pxgmbG/3Nyt61zaGAHF2tGR423C85mRCMrJv3/8=)
                          6: 9IzClk2cOa1HvrSqnxJFFpqt66M.roa (hash: rklyjGu+NArQTZ8EAeTWx20YU2+30eONSR24wbRMT30=)
                          7: Am3EHuazR5NKapUc7shNSbJ3YpE.roa (hash: WkPWDqODhGSWdXqV4LXZ2J8aMXMEbvI2EsaFMtrCqo0=)
                          8: B6VqUcRRtb2MG4kQqbYZ86ns2tM.roa (hash: +Ea3Kfr/iO3BP5K4xdtqsmPvqCeKY8rlPBoMN9gFO2k=)
                          9: C-vYvlFYfUXiwi5hu4BNg-H_RfU.roa (hash: Nlk7WgRdvB30t6f6caFVZOFs3Kxbuk6ZqeclTDKzs84=)
                          10: DRxPV7g-J1aJlfjrCz40pEPhzQ8.roa (hash: 4fR+vAgAShrw7d32oea15u7iZSKphaePuUR6Y5wxMPQ=)
                          11: EZnxg9to9tj_CGFbyqX0_Anjt-g.roa (hash: bS+3tO9zhYQpPnZP8Cd0s84+g/0K57qgcaxrjbHpLjM=)
                          12: F-Xx3vyPK6Zuw2ickEOsmn77QZ0.roa (hash: TfUjlNMx1vYLh3UKPXaRyW/cNRHghaWp6CGNxQmhNw0=)
                          13: Fu1w_hrRZ6yvjLCKsfpv5n0xIk8.roa (hash: xuz0ZazQYPtF7LGAYIk414qfYlSUwXjrvvWKQZrz71k=)
                          14: GiXPWO_M5_Qz7chgSaADKYyKdjQ.roa (hash: CR+t2FWeT4iCGvfmEuW7cscv5yFtp2gnGfSh1BKnw8o=)
                          15: GuBQqiW-LmEg8stIC6E4AIYuJEs.roa (hash: aTYnjaPKY9lXYdKDON5qB0M/NwQWopdVxCa+5FBEevo=)
                          16: JCdeVSQVLryQs_floRfjIOg1IdA.roa (hash: JMyYzR5Ytfu3qGv+sDPU3QLbpcRzcLEVb4d/DbF5OQk=)
                          17: JRmU3PiZjl4xAoYPwkJb5noBCag.roa (hash: Tw3oCfi2dlv54OcvvpTN/uwHZHshvPjQOz5AooIbmhg=)
                          18: Kg3SmAND62QL3-SDQn-IRWTqb5U.roa (hash: e+aNLlkluG412rP8rKU5tgRjVlTnT3Y7a6yQ2b8GkaI=)
                          19: NPffvzyYCQ1VGQX5s9EH8MCdkLM.roa (hash: ZIpNbtJtajAkg9tTb3DzFwtmkDZ5B+a0yULTgfFJCGM=)
                          20: NsLrBAx4ehVwnuRuIxV4GC6AKlY.roa (hash: bd0jFVShVRoxlQ2yZQX5k4g9HNjTW4iyAU7DLnrdQJs=)
                          21: OCl4O_g8kh_MMdyOLYMnZrJN_o0.roa (hash: i1wR3mlRtlouSF3tMzR6qf6WRAKsPfUQiKuxrhK0qNU=)
                          22: OTTrSlclWCrRRWM2xxMcTqVQjHg.roa (hash: WiU4r6HmQH1aEfbGFidApr+E2bNSyNZEaoF5S1MwslA=)
                          23: PAdijC34nr5oNMfrJ7fBKertBW0.roa (hash: gutQFHA8Ql/o1ne5M+dpU0TQTfal0TR6oWI0g8prBRA=)
                          24: QiI8gDDw-xAJA3ePxVIRRlGEYdI.roa (hash: C246FPX5mXJCm4V+/x93EQQYecFpNkWeuxla6G3+Gtw=)
                          25: RI3LFPhg4jmbP8O1e85KP3aj8lk.roa (hash: gUcCXtIOZXayvFIzH8aC27OcYWb3MO5PirxCf5ErU0k=)
                          26: RhTgRnEQVN7BS8zCeDKIuJodexE.roa (hash: kwTo3MfM5TV/NqXvs58S+K2AnfxciliE0IO9j6jlzFA=)
                          27: U2oo4EeXi07FDJs5d6gm5B9lm3I.roa (hash: uJCLp60QZG1qA4nEQCFjuH0IiotbNwKkHdC47s8z3I8=)
                          28: XZ2qSxG6IIfUP5-D5xqkxEFuop0.roa (hash: EQYHe9fPUNXtaun67LEYjoKIUgIs6p0S+2q0WI8Ef+w=)
                          29: XfRZr4ZUmo8CviyR61d6BBYXeu0.roa (hash: V2gLjBN6JRs8c4eTuvOGyFpY8H58uor1l70khSIpYUk=)
                          30: _KiSxOPdlZjyAMKBUu2shVHXjhI.roa (hash: CeCeupQAOIztWol191+Mn81JbkZ17ESdQ65PUeIBGfE=)
                          31: _f3bAh3QZBzzfoMBw1ivQ7tCgBg.roa (hash: 40q7FyKfBAV0CHaycHYZH72iTxMdhgLI5P4rdAUvrj8=)
                          32: aM8ocR3q8EE7bdbXGv-dz1oPpSc.roa (hash: dnMtZt2ON0ayr7vduG77kGmQK0ucTfTmT1qnf7SK3u8=)
                          33: bFfYuWF2ASD_WhaKHcwniE-EJhc.roa (hash: 7I4u+C+7dGPFU5Dq9B4FirGYzRrbhUT5p5jlp8mFRMc=)
                          34: da0UD-kuGXFD_ci4pN6yO25XCis.roa (hash: ntqBnVu4I5mhNnat1Dpr7d+NbSZRHCzSrhmPk41TZ2w=)
                          35: eNwCCRRxYwedsynnp6vdifKfv1c.roa (hash: He7kVis/ImC9dCvWBNoGqFcunz/T3uLP9V6ES4Qh7wM=)
                          36: hdIxNPniriLqDPal4vVmN4LTzUI.roa (hash: GKik+pViPBdwqK82mbEHx8mM74JFPwndzNJY/KfTOPc=)
                          37: jDAJarmbJDmpb6Wbcj0oSyTI-QU.roa (hash: ml97QdTLFtVKx6jlo8OGhRGz+5rlpj20ZXv04hU+wT4=)
                          38: mS1s9j-JjgNm4d2VuT1lr5VcqMA.roa (hash: xf8zpG47yBnOyy23/cPTCI/LJKLAzA3IN7xQkiepsjk=)
                          39: mwl0r7vx7glziPY_QItxRsSJeAk.roa (hash: 1Ot+hb3FMddnj8lrNQfPiqO4rxPdgpHynBKtjzrIzH4=)
                          40: npPe8XFZ6a2BHwdNHsqb1MolM3s.roa (hash: SYptx1aM+buVWFSsRUXazThSDntWvjmVRSFMm5fwB98=)
                          41: o68Ghde1n_EzeMSw-694dwm9M2o.roa (hash: Y6KCx3LRrw57VbzbPdLVCd2PGVgDxQ3gEG3VGoRjZt0=)
                          42: pOZ1F9hyRFOdoBaMtrLB8jYGNWc.roa (hash: 6VCklzgSsrpQjFMUYtVFUJA9ILM+2e5OeIFkbP0SCQ4=)
                          43: pUVRAGRxGer_PT9GoNVcHpcoPUc.roa (hash: 9De+mymT+37Q7sJV6Uh4eDoOTy/OcNptGN5ZBYfBFFM=)
                          44: pwoEOeTO5RZHQUnWOLHwrScd5mY.roa (hash: mY6C75sEFICze3RcBiamn1tgNhCa7rp79HYsNFFHVu4=)
                          45: v8DtO9sFqeKg9oTGngfTpCtjaII.roa (hash: JeKCa5d4cZjxM+nA63f6nRxZSxhVJ6hVpgcdWItAlHo=)
                          46: vYedWlZNDof4aeqt7GH1ICmZ2c8.roa (hash: lu5tkHaFcw5lj7XFeRIq0l9w92PlIzSVK79nk1zVeJU=)
                          47: wbdQBewhjGL_o8gz03PFcbQEZfw.roa (hash: 0KEr302c4T/9hrqwNTvBUDuUACLhLVoyeo/Qw/qZOfM=)
                          48: woV9oWvrEJRyOxoXse9vUn_mgHI.roa (hash: ZIXhqfX+KEofmATOkl8AwpHz9QcN0okCG1XU458ix8I=)
                          49: wpk44n_r5AT7MPdbwfoHwqwEN1g.roa (hash: OEmREU+uP7MuT6j5xB9EYxVEEOnHYRANjVT14LQPfCA=)
                          50: x3nqxHENVx6z3K0pIf-XmBxM8uo.roa (hash: wuURTJePv583PfrVsyxxz/yyWiHn+PihCcbD8+m6VU4=)
                          51: yqHa79yqc_AhTdpIF1z57lBumTw.roa (hash: 3XrQ3wUDbCvMFbRIq0bvRcdv/vcwmJoIo/ROmgZoAgI=)
                          52: z7Kwn4LDCEPgPTaFc4eTapKvf_s.roa (hash: R68ngf3hyKpTSVCx0War1aNzwekx8c09pnwQjDY4JS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Nov 2025 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d0:21:9e:cc:14:ef:1c:89:37:8d:56:61:11:42:80:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
        Validity
            Not Before: Nov 29 15:00:55 2025 GMT
            Not After : Nov 30 15:00:55 2025 GMT
        Subject: CN=497559b56667f0e584f54b20791342a172c00962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:be:57:7d:ef:9a:6a:4b:59:47:e3:b6:78:
                    b5:46:fe:66:e8:1d:f4:71:8f:5d:a7:1b:b2:a2:02:
                    7f:d1:6d:d6:2b:c1:d1:47:32:67:e7:db:33:83:96:
                    25:73:1f:6c:81:94:c9:2c:0e:6f:05:34:36:77:be:
                    74:4f:34:b1:a8:4a:85:cd:d8:6c:07:c8:df:40:07:
                    90:14:75:81:6b:78:a5:6e:82:fc:93:99:8d:25:9e:
                    f3:28:39:c7:93:34:73:6a:07:d5:85:ee:de:79:8c:
                    23:90:a5:62:92:8e:5d:38:b2:c8:79:a8:35:8d:75:
                    fb:2e:e7:f1:9e:b4:a9:ab:0f:83:fb:43:dd:5c:33:
                    f9:f6:52:88:6c:9d:87:b0:09:26:1b:69:6a:e4:ab:
                    ec:fa:96:a6:6b:78:f1:08:b0:a1:95:f5:47:35:08:
                    e6:fc:0e:36:de:62:9d:66:6f:c0:15:b7:23:d2:f9:
                    6c:58:73:1f:52:c8:b2:ab:71:51:e0:ff:7a:be:0d:
                    6c:ec:43:d3:97:49:c9:75:a9:78:0d:3f:39:62:33:
                    05:36:c2:1c:97:a9:12:65:c6:cb:67:56:d3:9f:b7:
                    2f:38:1b:50:5b:5f:6b:83:f1:86:59:ef:29:08:67:
                    59:e8:88:95:a7:85:da:df:90:b6:4b:72:e0:ac:d3:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:75:59:B5:66:67:F0:E5:84:F5:4B:20:79:13:42:A1:72:C0:09:62
            X509v3 Authority Key Identifier:
                keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:69:00:8f:5f:c6:33:41:86:a6:b0:ef:21:d4:54:d0:1f:a1:
         c9:68:28:20:6c:e2:ff:36:d0:e9:51:28:92:d2:a0:06:c5:95:
         94:f8:48:59:91:28:5c:41:d9:e4:1c:67:c6:85:9d:fe:5a:a7:
         c7:35:13:12:c2:ad:f6:4b:1b:46:7c:d3:18:d3:55:70:5a:4a:
         48:dc:c9:72:67:20:b0:0c:78:bc:1d:14:ba:b9:ab:16:7d:e7:
         1b:a8:fb:7d:96:d9:b0:8f:17:c6:5a:7f:83:0c:27:5a:32:6c:
         b3:b9:03:0d:92:78:69:77:86:ab:1a:04:f7:81:2d:24:bf:bd:
         12:8b:2e:8a:d2:42:d0:f8:6a:93:3f:22:e1:7d:f0:41:a0:8b:
         13:80:5d:31:37:ef:af:e5:d7:13:3f:d9:5b:b6:0f:db:95:27:
         c6:6a:8f:fa:e5:39:30:4a:64:fd:00:97:45:28:b5:b9:42:35:
         8b:1d:06:1d:1c:66:01:5c:12:22:be:57:7f:80:0e:b5:ad:4d:
         ba:b6:e5:04:39:0a:27:f2:03:8d:9f:5b:27:7d:59:90:aa:ea:
         fe:95:a9:bb:7a:ee:9a:9c:25:6a:0e:44:e7:8e:88:db:42:45:
         0e:8f:8c:b9:ec:3e:09:cf:f6:6c:88:cf:b7:83:d2:e3:90:7a:
         1a:9e:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----