This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
File:                     1Ion9EsQQExS9v_E4I3IK_i13uQ.mft (raw, json)
Hash identifier:          li6vspEr1UwWXHqHNyB6c9LFYqbXNzTuGb1T3Bh63SQ=
Subject key identifier:   81:F9:7F:09:95:11:A3:09:2A:B1:47:8F:E9:D5:34:66:B7:C3:20:03
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Certificate issuer:       /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial:       019AE55F42F83A4D49A91B798DE827D759CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
Manifest number:          0C11
Signing time:             Wed 03 Dec 2025 18:00:16 +0000
Manifest this update:     Wed 03 Dec 2025 18:00:16 +0000
Manifest next update:     Thu 04 Dec 2025 18:00:16 +0000
Files and hashes:         1: 0O8PsfQQ837HZC6vH8HZdjQhz9k.roa (hash: Xwa6CcyNtMqGwJ8SwiL0+ATMW4k6h9G4j8VyDVTQCuQ=)
                          2: 1Ion9EsQQExS9v_E4I3IK_i13uQ.crl (hash: aVe3u8T7mO/Ruj4sTQDl90hPDYvfmpyuRxDIE0cgcx0=)
                          3: 3n4-ucZdGz_1X3fIAf9XxJmNHo0.roa (hash: Qb7wFX91g78lr4g5B/mSH8rgR/DbATD0NzeRsFaH16Y=)
                          4: 4d2QZZ-Yg51N0ozxYFeFkxn7Qy8.roa (hash: GvTYY3vxIUIpSpx5NqRwtadFiwvbmCTuc+PABVRSqfg=)
                          5: 6DKPMNriuuz5czJiETGvSTeZJTk.roa (hash: Won6pxgmbG/3Nyt61zaGAHF2tGR423C85mRCMrJv3/8=)
                          6: 9IzClk2cOa1HvrSqnxJFFpqt66M.roa (hash: rklyjGu+NArQTZ8EAeTWx20YU2+30eONSR24wbRMT30=)
                          7: Am3EHuazR5NKapUc7shNSbJ3YpE.roa (hash: WkPWDqODhGSWdXqV4LXZ2J8aMXMEbvI2EsaFMtrCqo0=)
                          8: B6VqUcRRtb2MG4kQqbYZ86ns2tM.roa (hash: +Ea3Kfr/iO3BP5K4xdtqsmPvqCeKY8rlPBoMN9gFO2k=)
                          9: C-vYvlFYfUXiwi5hu4BNg-H_RfU.roa (hash: Nlk7WgRdvB30t6f6caFVZOFs3Kxbuk6ZqeclTDKzs84=)
                          10: DRxPV7g-J1aJlfjrCz40pEPhzQ8.roa (hash: 4fR+vAgAShrw7d32oea15u7iZSKphaePuUR6Y5wxMPQ=)
                          11: EZnxg9to9tj_CGFbyqX0_Anjt-g.roa (hash: bS+3tO9zhYQpPnZP8Cd0s84+g/0K57qgcaxrjbHpLjM=)
                          12: F-Xx3vyPK6Zuw2ickEOsmn77QZ0.roa (hash: TfUjlNMx1vYLh3UKPXaRyW/cNRHghaWp6CGNxQmhNw0=)
                          13: Fu1w_hrRZ6yvjLCKsfpv5n0xIk8.roa (hash: xuz0ZazQYPtF7LGAYIk414qfYlSUwXjrvvWKQZrz71k=)
                          14: GiXPWO_M5_Qz7chgSaADKYyKdjQ.roa (hash: CR+t2FWeT4iCGvfmEuW7cscv5yFtp2gnGfSh1BKnw8o=)
                          15: GuBQqiW-LmEg8stIC6E4AIYuJEs.roa (hash: aTYnjaPKY9lXYdKDON5qB0M/NwQWopdVxCa+5FBEevo=)
                          16: JCdeVSQVLryQs_floRfjIOg1IdA.roa (hash: JMyYzR5Ytfu3qGv+sDPU3QLbpcRzcLEVb4d/DbF5OQk=)
                          17: JRmU3PiZjl4xAoYPwkJb5noBCag.roa (hash: Tw3oCfi2dlv54OcvvpTN/uwHZHshvPjQOz5AooIbmhg=)
                          18: Kg3SmAND62QL3-SDQn-IRWTqb5U.roa (hash: e+aNLlkluG412rP8rKU5tgRjVlTnT3Y7a6yQ2b8GkaI=)
                          19: NPffvzyYCQ1VGQX5s9EH8MCdkLM.roa (hash: ZIpNbtJtajAkg9tTb3DzFwtmkDZ5B+a0yULTgfFJCGM=)
                          20: NsLrBAx4ehVwnuRuIxV4GC6AKlY.roa (hash: bd0jFVShVRoxlQ2yZQX5k4g9HNjTW4iyAU7DLnrdQJs=)
                          21: OCl4O_g8kh_MMdyOLYMnZrJN_o0.roa (hash: i1wR3mlRtlouSF3tMzR6qf6WRAKsPfUQiKuxrhK0qNU=)
                          22: OTTrSlclWCrRRWM2xxMcTqVQjHg.roa (hash: WiU4r6HmQH1aEfbGFidApr+E2bNSyNZEaoF5S1MwslA=)
                          23: PAdijC34nr5oNMfrJ7fBKertBW0.roa (hash: gutQFHA8Ql/o1ne5M+dpU0TQTfal0TR6oWI0g8prBRA=)
                          24: QiI8gDDw-xAJA3ePxVIRRlGEYdI.roa (hash: C246FPX5mXJCm4V+/x93EQQYecFpNkWeuxla6G3+Gtw=)
                          25: RI3LFPhg4jmbP8O1e85KP3aj8lk.roa (hash: gUcCXtIOZXayvFIzH8aC27OcYWb3MO5PirxCf5ErU0k=)
                          26: RhTgRnEQVN7BS8zCeDKIuJodexE.roa (hash: kwTo3MfM5TV/NqXvs58S+K2AnfxciliE0IO9j6jlzFA=)
                          27: U2oo4EeXi07FDJs5d6gm5B9lm3I.roa (hash: uJCLp60QZG1qA4nEQCFjuH0IiotbNwKkHdC47s8z3I8=)
                          28: XZ2qSxG6IIfUP5-D5xqkxEFuop0.roa (hash: EQYHe9fPUNXtaun67LEYjoKIUgIs6p0S+2q0WI8Ef+w=)
                          29: XfRZr4ZUmo8CviyR61d6BBYXeu0.roa (hash: V2gLjBN6JRs8c4eTuvOGyFpY8H58uor1l70khSIpYUk=)
                          30: _KiSxOPdlZjyAMKBUu2shVHXjhI.roa (hash: CeCeupQAOIztWol191+Mn81JbkZ17ESdQ65PUeIBGfE=)
                          31: _f3bAh3QZBzzfoMBw1ivQ7tCgBg.roa (hash: 40q7FyKfBAV0CHaycHYZH72iTxMdhgLI5P4rdAUvrj8=)
                          32: aM8ocR3q8EE7bdbXGv-dz1oPpSc.roa (hash: dnMtZt2ON0ayr7vduG77kGmQK0ucTfTmT1qnf7SK3u8=)
                          33: bFfYuWF2ASD_WhaKHcwniE-EJhc.roa (hash: 7I4u+C+7dGPFU5Dq9B4FirGYzRrbhUT5p5jlp8mFRMc=)
                          34: da0UD-kuGXFD_ci4pN6yO25XCis.roa (hash: ntqBnVu4I5mhNnat1Dpr7d+NbSZRHCzSrhmPk41TZ2w=)
                          35: eNwCCRRxYwedsynnp6vdifKfv1c.roa (hash: He7kVis/ImC9dCvWBNoGqFcunz/T3uLP9V6ES4Qh7wM=)
                          36: hdIxNPniriLqDPal4vVmN4LTzUI.roa (hash: GKik+pViPBdwqK82mbEHx8mM74JFPwndzNJY/KfTOPc=)
                          37: jDAJarmbJDmpb6Wbcj0oSyTI-QU.roa (hash: ml97QdTLFtVKx6jlo8OGhRGz+5rlpj20ZXv04hU+wT4=)
                          38: mS1s9j-JjgNm4d2VuT1lr5VcqMA.roa (hash: xf8zpG47yBnOyy23/cPTCI/LJKLAzA3IN7xQkiepsjk=)
                          39: mwl0r7vx7glziPY_QItxRsSJeAk.roa (hash: 1Ot+hb3FMddnj8lrNQfPiqO4rxPdgpHynBKtjzrIzH4=)
                          40: npPe8XFZ6a2BHwdNHsqb1MolM3s.roa (hash: SYptx1aM+buVWFSsRUXazThSDntWvjmVRSFMm5fwB98=)
                          41: o68Ghde1n_EzeMSw-694dwm9M2o.roa (hash: Y6KCx3LRrw57VbzbPdLVCd2PGVgDxQ3gEG3VGoRjZt0=)
                          42: pOZ1F9hyRFOdoBaMtrLB8jYGNWc.roa (hash: 6VCklzgSsrpQjFMUYtVFUJA9ILM+2e5OeIFkbP0SCQ4=)
                          43: pUVRAGRxGer_PT9GoNVcHpcoPUc.roa (hash: 9De+mymT+37Q7sJV6Uh4eDoOTy/OcNptGN5ZBYfBFFM=)
                          44: pwoEOeTO5RZHQUnWOLHwrScd5mY.roa (hash: mY6C75sEFICze3RcBiamn1tgNhCa7rp79HYsNFFHVu4=)
                          45: v8DtO9sFqeKg9oTGngfTpCtjaII.roa (hash: JeKCa5d4cZjxM+nA63f6nRxZSxhVJ6hVpgcdWItAlHo=)
                          46: vYedWlZNDof4aeqt7GH1ICmZ2c8.roa (hash: lu5tkHaFcw5lj7XFeRIq0l9w92PlIzSVK79nk1zVeJU=)
                          47: wbdQBewhjGL_o8gz03PFcbQEZfw.roa (hash: 0KEr302c4T/9hrqwNTvBUDuUACLhLVoyeo/Qw/qZOfM=)
                          48: woV9oWvrEJRyOxoXse9vUn_mgHI.roa (hash: ZIXhqfX+KEofmATOkl8AwpHz9QcN0okCG1XU458ix8I=)
                          49: wpk44n_r5AT7MPdbwfoHwqwEN1g.roa (hash: OEmREU+uP7MuT6j5xB9EYxVEEOnHYRANjVT14LQPfCA=)
                          50: x3nqxHENVx6z3K0pIf-XmBxM8uo.roa (hash: wuURTJePv583PfrVsyxxz/yyWiHn+PihCcbD8+m6VU4=)
                          51: yqHa79yqc_AhTdpIF1z57lBumTw.roa (hash: 3XrQ3wUDbCvMFbRIq0bvRcdv/vcwmJoIo/ROmgZoAgI=)
                          52: z7Kwn4LDCEPgPTaFc4eTapKvf_s.roa (hash: R68ngf3hyKpTSVCx0War1aNzwekx8c09pnwQjDY4JS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Dec 2025 15:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e5:5f:42:f8:3a:4d:49:a9:1b:79:8d:e8:27:d7:59:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
        Validity
            Not Before: Dec  3 18:00:16 2025 GMT
            Not After : Dec  4 18:00:16 2025 GMT
        Subject: CN=81f97f099511a3092ab1478fe9d53466b7c32003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:2c:61:fe:56:fe:a6:1b:05:9e:f0:67:fd:
                    23:be:7d:6a:87:c1:7a:bc:e5:1b:cc:14:83:ff:f8:
                    60:96:27:a7:02:56:3e:25:34:d4:e8:eb:6a:80:a3:
                    f6:fa:41:b3:d6:f7:0a:4b:ae:f2:b5:45:fb:49:99:
                    e1:57:38:24:77:71:5b:7b:a1:a5:01:17:a7:05:63:
                    cc:8e:ae:94:7c:2c:93:d4:b5:ff:21:37:40:c5:9d:
                    cd:0a:b5:c9:33:1c:71:73:61:9f:05:f7:f0:eb:49:
                    39:59:f7:6e:b3:1d:2c:74:da:a3:a9:e9:9b:03:d4:
                    69:58:69:d1:68:bd:a9:5b:44:ad:de:02:97:a8:85:
                    55:4c:50:77:ca:f9:bb:f4:ab:9a:42:18:18:c1:65:
                    37:02:69:2c:89:f5:a2:a0:c3:b3:fa:9d:8e:62:0f:
                    53:6a:12:92:f4:3c:34:24:d6:88:e5:a6:3a:2d:ff:
                    16:66:7c:04:3e:0d:3b:8b:32:2e:6b:da:7b:f1:28:
                    cc:db:22:92:91:ea:6c:40:16:c8:6f:57:15:12:86:
                    4d:96:a8:bc:32:f2:f0:31:1b:0b:54:63:2a:6e:b1:
                    c5:77:90:11:70:1a:af:61:7d:83:e1:08:9b:c6:39:
                    82:57:b8:b9:aa:6b:13:99:64:22:32:14:4d:2c:94:
                    7a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F9:7F:09:95:11:A3:09:2A:B1:47:8F:E9:D5:34:66:B7:C3:20:03
            X509v3 Authority Key Identifier:
                keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d3:e8:19:09:8d:ff:a1:82:7e:e1:fc:99:0d:de:0d:6b:d7:
         2b:f2:02:34:db:ed:31:45:d8:c5:8b:57:ad:aa:a2:30:c4:46:
         8a:ef:5c:ec:ce:cb:28:19:ab:8b:b1:78:c6:c0:44:1b:b1:dd:
         92:ed:2d:e8:6d:42:ae:2e:9b:48:ae:53:8e:ba:0b:33:8e:b5:
         c3:e3:ff:41:d1:71:5f:6e:68:65:6b:f5:55:e1:17:a2:a0:55:
         4f:e8:fd:0d:be:5b:11:0a:cb:f7:18:cd:a3:e6:a9:26:04:25:
         c3:ba:bb:0f:9c:e7:a4:b3:d1:5c:4f:59:ff:07:7d:e0:25:15:
         f6:55:06:ea:87:30:c6:f3:f0:e8:83:4e:e2:69:ed:88:af:f9:
         40:f5:12:bb:84:eb:4a:01:4c:52:64:8c:7e:cd:e3:f2:c6:d1:
         0a:e7:d3:be:84:c0:85:17:75:9c:ef:2a:03:60:3e:35:a9:27:
         8a:eb:2f:f2:01:e1:46:01:09:3f:87:d4:35:d7:06:84:8b:86:
         85:10:1f:43:90:e5:a4:ae:6b:12:b0:4b:1d:3c:c9:da:5f:ed:
         6f:99:c1:06:8f:f7:08:57:d4:99:d2:e1:22:ee:dc:41:96:5d:
         ad:d4:88:8f:6f:bf:18:91:a2:3b:09:71:1c:aa:ae:5d:84:09:
         b5:66:b8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 21:49:42 2025 by rpki-client