This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
File:                     1Ion9EsQQExS9v_E4I3IK_i13uQ.mft (raw, json)
Hash identifier:          HzAdB90Hpvhk4SGL83iAnyW3kfjPsN6Af3e3GE4vD74=
Subject key identifier:   33:98:00:F9:E4:8F:3A:25:42:7F:AB:74:F2:08:F5:02:68:FA:6A:71
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Certificate issuer:       /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial:       019B08C75615E9AFBBE70AE9BD1B96AC6E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
Manifest number:          0C25
Signing time:             Wed 10 Dec 2025 15:00:39 +0000
Manifest this update:     Wed 10 Dec 2025 15:00:39 +0000
Manifest next update:     Thu 11 Dec 2025 15:00:39 +0000
Files and hashes:         1: 0O8PsfQQ837HZC6vH8HZdjQhz9k.roa (hash: Xwa6CcyNtMqGwJ8SwiL0+ATMW4k6h9G4j8VyDVTQCuQ=)
                          2: 1Ion9EsQQExS9v_E4I3IK_i13uQ.crl (hash: 3O3b7ybZjwVPc6phzE+Csg8c/zcFYniWYcAlGJdK1Jc=)
                          3: 4d2QZZ-Yg51N0ozxYFeFkxn7Qy8.roa (hash: GvTYY3vxIUIpSpx5NqRwtadFiwvbmCTuc+PABVRSqfg=)
                          4: 6DKPMNriuuz5czJiETGvSTeZJTk.roa (hash: Won6pxgmbG/3Nyt61zaGAHF2tGR423C85mRCMrJv3/8=)
                          5: 9IzClk2cOa1HvrSqnxJFFpqt66M.roa (hash: rklyjGu+NArQTZ8EAeTWx20YU2+30eONSR24wbRMT30=)
                          6: Am3EHuazR5NKapUc7shNSbJ3YpE.roa (hash: WkPWDqODhGSWdXqV4LXZ2J8aMXMEbvI2EsaFMtrCqo0=)
                          7: B6VqUcRRtb2MG4kQqbYZ86ns2tM.roa (hash: +Ea3Kfr/iO3BP5K4xdtqsmPvqCeKY8rlPBoMN9gFO2k=)
                          8: C-vYvlFYfUXiwi5hu4BNg-H_RfU.roa (hash: Nlk7WgRdvB30t6f6caFVZOFs3Kxbuk6ZqeclTDKzs84=)
                          9: DRxPV7g-J1aJlfjrCz40pEPhzQ8.roa (hash: 4fR+vAgAShrw7d32oea15u7iZSKphaePuUR6Y5wxMPQ=)
                          10: EZnxg9to9tj_CGFbyqX0_Anjt-g.roa (hash: bS+3tO9zhYQpPnZP8Cd0s84+g/0K57qgcaxrjbHpLjM=)
                          11: F-Xx3vyPK6Zuw2ickEOsmn77QZ0.roa (hash: TfUjlNMx1vYLh3UKPXaRyW/cNRHghaWp6CGNxQmhNw0=)
                          12: Fu1w_hrRZ6yvjLCKsfpv5n0xIk8.roa (hash: xuz0ZazQYPtF7LGAYIk414qfYlSUwXjrvvWKQZrz71k=)
                          13: GiXPWO_M5_Qz7chgSaADKYyKdjQ.roa (hash: CR+t2FWeT4iCGvfmEuW7cscv5yFtp2gnGfSh1BKnw8o=)
                          14: GuBQqiW-LmEg8stIC6E4AIYuJEs.roa (hash: aTYnjaPKY9lXYdKDON5qB0M/NwQWopdVxCa+5FBEevo=)
                          15: JCdeVSQVLryQs_floRfjIOg1IdA.roa (hash: JMyYzR5Ytfu3qGv+sDPU3QLbpcRzcLEVb4d/DbF5OQk=)
                          16: JRmU3PiZjl4xAoYPwkJb5noBCag.roa (hash: Tw3oCfi2dlv54OcvvpTN/uwHZHshvPjQOz5AooIbmhg=)
                          17: Kg3SmAND62QL3-SDQn-IRWTqb5U.roa (hash: e+aNLlkluG412rP8rKU5tgRjVlTnT3Y7a6yQ2b8GkaI=)
                          18: NPffvzyYCQ1VGQX5s9EH8MCdkLM.roa (hash: ZIpNbtJtajAkg9tTb3DzFwtmkDZ5B+a0yULTgfFJCGM=)
                          19: OCl4O_g8kh_MMdyOLYMnZrJN_o0.roa (hash: i1wR3mlRtlouSF3tMzR6qf6WRAKsPfUQiKuxrhK0qNU=)
                          20: OTTrSlclWCrRRWM2xxMcTqVQjHg.roa (hash: WiU4r6HmQH1aEfbGFidApr+E2bNSyNZEaoF5S1MwslA=)
                          21: PAdijC34nr5oNMfrJ7fBKertBW0.roa (hash: gutQFHA8Ql/o1ne5M+dpU0TQTfal0TR6oWI0g8prBRA=)
                          22: QiI8gDDw-xAJA3ePxVIRRlGEYdI.roa (hash: C246FPX5mXJCm4V+/x93EQQYecFpNkWeuxla6G3+Gtw=)
                          23: RI3LFPhg4jmbP8O1e85KP3aj8lk.roa (hash: gUcCXtIOZXayvFIzH8aC27OcYWb3MO5PirxCf5ErU0k=)
                          24: RhTgRnEQVN7BS8zCeDKIuJodexE.roa (hash: kwTo3MfM5TV/NqXvs58S+K2AnfxciliE0IO9j6jlzFA=)
                          25: XZ2qSxG6IIfUP5-D5xqkxEFuop0.roa (hash: EQYHe9fPUNXtaun67LEYjoKIUgIs6p0S+2q0WI8Ef+w=)
                          26: XfRZr4ZUmo8CviyR61d6BBYXeu0.roa (hash: V2gLjBN6JRs8c4eTuvOGyFpY8H58uor1l70khSIpYUk=)
                          27: YbmeqCsd9MmNOkQ-ekN7TciXOLc.roa (hash: r1kni82qSuB0YVLAblhjzygbPavNrZru4SlS0wjR4YE=)
                          28: _KiSxOPdlZjyAMKBUu2shVHXjhI.roa (hash: CeCeupQAOIztWol191+Mn81JbkZ17ESdQ65PUeIBGfE=)
                          29: _f3bAh3QZBzzfoMBw1ivQ7tCgBg.roa (hash: 40q7FyKfBAV0CHaycHYZH72iTxMdhgLI5P4rdAUvrj8=)
                          30: aM8ocR3q8EE7bdbXGv-dz1oPpSc.roa (hash: dnMtZt2ON0ayr7vduG77kGmQK0ucTfTmT1qnf7SK3u8=)
                          31: bFfYuWF2ASD_WhaKHcwniE-EJhc.roa (hash: 7I4u+C+7dGPFU5Dq9B4FirGYzRrbhUT5p5jlp8mFRMc=)
                          32: da0UD-kuGXFD_ci4pN6yO25XCis.roa (hash: ntqBnVu4I5mhNnat1Dpr7d+NbSZRHCzSrhmPk41TZ2w=)
                          33: eNwCCRRxYwedsynnp6vdifKfv1c.roa (hash: He7kVis/ImC9dCvWBNoGqFcunz/T3uLP9V6ES4Qh7wM=)
                          34: hdIxNPniriLqDPal4vVmN4LTzUI.roa (hash: GKik+pViPBdwqK82mbEHx8mM74JFPwndzNJY/KfTOPc=)
                          35: jDAJarmbJDmpb6Wbcj0oSyTI-QU.roa (hash: ml97QdTLFtVKx6jlo8OGhRGz+5rlpj20ZXv04hU+wT4=)
                          36: mS1s9j-JjgNm4d2VuT1lr5VcqMA.roa (hash: xf8zpG47yBnOyy23/cPTCI/LJKLAzA3IN7xQkiepsjk=)
                          37: mwl0r7vx7glziPY_QItxRsSJeAk.roa (hash: 1Ot+hb3FMddnj8lrNQfPiqO4rxPdgpHynBKtjzrIzH4=)
                          38: npPe8XFZ6a2BHwdNHsqb1MolM3s.roa (hash: SYptx1aM+buVWFSsRUXazThSDntWvjmVRSFMm5fwB98=)
                          39: o68Ghde1n_EzeMSw-694dwm9M2o.roa (hash: Y6KCx3LRrw57VbzbPdLVCd2PGVgDxQ3gEG3VGoRjZt0=)
                          40: pOZ1F9hyRFOdoBaMtrLB8jYGNWc.roa (hash: 6VCklzgSsrpQjFMUYtVFUJA9ILM+2e5OeIFkbP0SCQ4=)
                          41: pUVRAGRxGer_PT9GoNVcHpcoPUc.roa (hash: 9De+mymT+37Q7sJV6Uh4eDoOTy/OcNptGN5ZBYfBFFM=)
                          42: pwoEOeTO5RZHQUnWOLHwrScd5mY.roa (hash: mY6C75sEFICze3RcBiamn1tgNhCa7rp79HYsNFFHVu4=)
                          43: sDIABi-NxM3KNvAMpS9f9LMeDro.roa (hash: 2fZD0tm8spxkVprfSBfodTdfq91wWyAoGPPPYFBNTMs=)
                          44: v8DtO9sFqeKg9oTGngfTpCtjaII.roa (hash: JeKCa5d4cZjxM+nA63f6nRxZSxhVJ6hVpgcdWItAlHo=)
                          45: vYedWlZNDof4aeqt7GH1ICmZ2c8.roa (hash: lu5tkHaFcw5lj7XFeRIq0l9w92PlIzSVK79nk1zVeJU=)
                          46: wbdQBewhjGL_o8gz03PFcbQEZfw.roa (hash: 0KEr302c4T/9hrqwNTvBUDuUACLhLVoyeo/Qw/qZOfM=)
                          47: woV9oWvrEJRyOxoXse9vUn_mgHI.roa (hash: ZIXhqfX+KEofmATOkl8AwpHz9QcN0okCG1XU458ix8I=)
                          48: wpk44n_r5AT7MPdbwfoHwqwEN1g.roa (hash: OEmREU+uP7MuT6j5xB9EYxVEEOnHYRANjVT14LQPfCA=)
                          49: x3nqxHENVx6z3K0pIf-XmBxM8uo.roa (hash: wuURTJePv583PfrVsyxxz/yyWiHn+PihCcbD8+m6VU4=)
                          50: yqHa79yqc_AhTdpIF1z57lBumTw.roa (hash: 3XrQ3wUDbCvMFbRIq0bvRcdv/vcwmJoIo/ROmgZoAgI=)
                          51: z7Kwn4LDCEPgPTaFc4eTapKvf_s.roa (hash: R68ngf3hyKpTSVCx0War1aNzwekx8c09pnwQjDY4JS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:c7:56:15:e9:af:bb:e7:0a:e9:bd:1b:96:ac:6e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
        Validity
            Not Before: Dec 10 15:00:39 2025 GMT
            Not After : Dec 11 15:00:39 2025 GMT
        Subject: CN=339800f9e48f3a25427fab74f208f50268fa6a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:7f:d9:bb:b8:c0:03:83:73:dc:13:4c:12:
                    b5:b4:31:50:c1:aa:cf:14:82:f7:70:34:ec:7d:6a:
                    09:70:69:6d:c0:1f:e9:d5:11:05:a6:ee:50:91:41:
                    ec:a6:1e:7f:2d:ca:f6:ea:19:81:db:4b:e0:60:1d:
                    f1:bd:c3:a5:17:60:57:bc:fd:d9:43:88:e6:72:1c:
                    00:72:4d:38:1f:42:a1:4c:f2:f2:17:ea:c4:ee:ec:
                    2f:24:0d:44:5f:1a:6e:83:fa:b4:6f:eb:96:86:0e:
                    cb:34:26:6e:be:4c:6b:a5:3a:b3:c1:49:da:ae:dc:
                    eb:75:fc:7c:46:96:0b:e4:89:4a:c1:3a:19:63:64:
                    db:5c:87:58:91:6d:1d:f1:45:d9:cb:a6:38:df:66:
                    b0:1e:57:86:2f:ba:61:81:a8:1b:ab:8b:30:d4:a6:
                    bc:68:4c:9b:94:08:69:6a:d2:5e:93:d3:26:0c:63:
                    1f:f8:7a:bd:e7:c1:3e:96:9b:ef:9e:7f:95:d1:34:
                    1c:5e:8b:97:c9:91:80:47:ae:e3:72:34:99:e4:3a:
                    5c:0e:72:5a:54:12:75:21:ad:e1:bb:04:a0:85:49:
                    66:f2:bc:c0:e1:e4:b9:fa:1f:8a:eb:c3:19:ca:51:
                    74:6a:7b:81:9d:8f:bc:75:df:0a:ec:84:22:52:df:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:98:00:F9:E4:8F:3A:25:42:7F:AB:74:F2:08:F5:02:68:FA:6A:71
            X509v3 Authority Key Identifier:
                keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f6:c2:b1:6f:e3:5c:0c:d1:e7:a5:b7:39:a0:d4:4b:ad:77:
         b9:62:ae:78:e2:b0:4c:8f:f1:b1:46:f3:7a:4d:34:fa:1b:49:
         15:d8:b8:74:f1:87:af:7a:80:19:6b:f8:89:f8:0e:e5:45:27:
         ec:81:6e:6c:57:f9:cc:f9:bb:7c:a8:9e:2c:21:21:9c:8b:7b:
         61:56:48:4d:5a:18:73:06:fa:17:ba:10:e9:12:a5:0c:fe:b4:
         c9:37:52:e5:b1:0a:70:62:19:96:90:ec:dc:9e:65:af:d1:8d:
         e3:de:b5:1c:68:c8:fc:ad:38:61:ed:70:2b:7e:00:1f:80:27:
         32:be:49:91:f2:07:92:0a:fd:49:70:75:8b:8d:cf:cf:76:39:
         31:0b:05:d2:36:6a:98:89:23:e6:94:99:41:8b:7d:20:ab:2d:
         6b:a6:6a:ca:43:38:df:31:8a:4b:e8:1b:5f:d5:bd:2b:6d:66:
         a2:b0:14:b4:a0:f1:de:d4:df:f6:79:af:0e:92:b7:c0:03:01:
         fb:44:c1:62:17:5b:39:58:83:89:20:5f:19:26:14:0b:d2:20:
         1d:62:45:bc:31:40:17:70:2e:a9:97:a1:b8:87:cc:1c:64:84:
         07:ab:37:f2:38:f6:49:11:01:57:12:1c:9b:77:92:9a:2a:e7:
         95:5a:5c:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsIx1YV6a+75wrpvRuWrG6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjUxMjEwMTUwMDM5WhcNMjUxMjExMTUwMDM5WjAzMTEwLwYDVQQD
EygzMzk4MDBmOWU0OGYzYTI1NDI3ZmFiNzRmMjA4ZjUwMjY4ZmE2YTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN1/2bu4wAODc9wTTBK1tDFQwarP
FIL3cDTsfWoJcGltwB/p1REFpu5QkUHsph5/Lcr26hmB20vgYB3xvcOlF2BXvP3Z
Q4jmchwAck04H0KhTPLyF+rE7uwvJA1EXxpug/q0b+uWhg7LNCZuvkxrpTqzwUna
rtzrdfx8RpYL5IlKwToZY2TbXIdYkW0d8UXZy6Y432awHleGL7phgagbq4sw1Ka8
aEyblAhpatJek9MmDGMf+Hq958E+lpvvnn+V0TQcXouXyZGAR67jcjSZ5DpcDnJa
VBJ1Ia3huwSghUlm8rzA4eS5+h+K68MZylF0anuBnY+8dd8K7IQiUt/F9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOYAPnkjzolQn+rdPII9QJo+mpxMB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfbCsW/j
XAzR56W3OaDUS613uWKueOKwTI/xsUbzek00+htJFdi4dPGHr3qAGWv4ifgO5UUn
7IFubFf5zPm7fKieLCEhnIt7YVZITVoYcwb6F7oQ6RKlDP60yTdS5bEKcGIZlpDs
3J5lr9GN4961HGjI/K04Ye1wK34AH4AnMr5JkfIHkgr9SXB1i43Pz3Y5MQsF0jZq
mIkj5pSZQYt9IKsta6ZqykM43zGKS+gbX9W9K21morAUtKDx3tTf9nmvDpK3wAMB
+0TBYhdbOViDiSBfGSYUC9IgHWJFvDFAF3AuqZehuIfMHGSEB6s38jj2SREBVxIc
m3eSmirnlVpc4g==
-----END CERTIFICATE-----
Generated at Wed Dec 10 22:09:49 2025 by rpki-client