This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
File:                     mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json)
Hash identifier:          b/nIfnKDvLUYViNNBzQIZspLtqGaDxwqXQ0C3m6ZcmA=
Subject key identifier:   0D:1F:70:82:21:81:4B:B6:EF:6C:C2:CF:1F:55:B1:55:CE:25:8C:76
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Certificate issuer:       /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial:       019B202B540E78F1FCABBAF2F07542F79626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
Manifest number:          1853
Signing time:             Mon 15 Dec 2025 04:01:09 +0000
Manifest this update:     Mon 15 Dec 2025 04:01:09 +0000
Manifest next update:     Tue 16 Dec 2025 04:01:09 +0000
Files and hashes:         1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=)
                          2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=)
                          3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=)
                          4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=)
                          5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=)
                          6: 7fy5pMwC2BmqEWASDCe2Ap4e3m4.roa (hash: kq97Xxg5npRZz+k6S6J7uCxRX2OaCExgApqCLJxftGE=)
                          7: AZYvtxCiQAo7McIIg5dYZPnjqkI.roa (hash: e/Nkv2lWFMKh5GkiCT+Bt9tYXmSUttTSHjKIqokHr5w=)
                          8: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=)
                          9: Hd_pbYNJS6Yi-k0tVsDsErLdxyo.roa (hash: nlfGof7swDkDQ7O/uQUGbM73LWqnxbg6+kbUFVkSQTw=)
                          10: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=)
                          11: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=)
                          12: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=)
                          13: MRoUAROw4LH2qMua3FF0ivRRV1k.roa (hash: AM1ERkg9MkmZ5+MBy7Dj4XsMG8QwYDlhJ+3I/zu6fhk=)
                          14: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=)
                          15: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=)
                          16: SxQI_3_Y-7ZpLPPNmq8yQolj8a4.roa (hash: /jpAQ90QqsOsi7QGg9C6CHgPGdkAjYPh2JAoZXEh1HE=)
                          17: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=)
                          18: UhKvXl_m9nZBE-_rxYy3N0dwSmQ.roa (hash: MTKTbfYtfwy4jMu3+6j7vVJcG2UaV+0Ha/vAze0SZ3c=)
                          19: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=)
                          20: W27NQHDSt-8QijhI1HYZsZz3Tfo.roa (hash: yNqWLj2CL2ilT9Yb7jbV3Mx92Lx6x20uHpMieW58ZKw=)
                          21: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=)
                          22: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=)
                          23: eetoOfsHWTjLMfZd4vxj2wOaMbY.roa (hash: 5nUue4a1MqJN5QwbPYCQhcOixJJ8u3fjYV7s8ou0jm4=)
                          24: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=)
                          25: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: yAFNjRnUqKCrZH3gvpRrZIplf3Nl1Qpq7Z2xiJvezls=)
                          26: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=)
                          27: rdyjilu40aDA8JWXXpkIm61tzQY.roa (hash: kUzYkjZ0Pr+4AdaDz/BIzjHecTU3TFmXSfUR1EA6v2E=)
                          28: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=)
                          29: sClmMBT_F-zHChOlRIEgdQPxP6k.roa (hash: ZhHXlBlX50DWtj7LBEqnVF6o2/ifQbmJsY9h3vjBI4Q=)
                          30: sMeA9xl8ZUuMKTOiIPGJ4CDhuVU.roa (hash: die5Hli6P/WXh1sfkmGYgfVjSONOwz0N0yrCW9dYC6M=)
                          31: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=)
                          32: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=)
                          33: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=)
                          34: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=)
                          35: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=)
                          36: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=)
                          37: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:2b:54:0e:78:f1:fc:ab:ba:f2:f0:75:42:f7:96:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
        Validity
            Not Before: Dec 15 04:01:09 2025 GMT
            Not After : Dec 16 04:01:09 2025 GMT
        Subject: CN=0d1f708221814bb6ef6cc2cf1f55b155ce258c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:23:b6:bd:14:a7:0e:e2:20:40:b9:98:03:
                    97:87:46:6f:fa:e2:8b:14:f7:a1:fc:6b:4c:91:d6:
                    1e:c8:36:d2:a0:33:46:48:d3:bc:98:5c:13:44:51:
                    ab:c1:1f:7a:d8:0a:5f:1e:27:01:3c:28:d7:8e:c8:
                    f6:7b:61:2e:3c:d7:00:ba:b3:41:02:6e:64:f5:ac:
                    a0:53:0a:e1:3e:66:7c:85:ce:5c:4b:75:ac:65:f9:
                    0f:d2:2b:dd:ab:fb:b6:b8:43:64:41:25:d6:be:3d:
                    26:a4:10:e6:75:74:cc:f3:68:da:88:ee:c9:36:62:
                    de:c2:62:56:b0:2a:c3:59:0e:62:1e:17:13:be:34:
                    b6:c5:73:92:c8:87:9a:ad:5e:57:81:1e:32:5c:70:
                    9a:71:93:02:27:1c:66:58:1b:bf:73:a1:ff:1a:1d:
                    71:fa:44:f3:0e:47:7d:27:61:1b:97:6d:1d:e0:ca:
                    8b:1b:ef:87:ce:c2:32:25:9e:6e:2c:72:da:d3:2a:
                    77:90:e0:7b:5c:63:1a:16:96:36:1d:1d:4f:b6:2b:
                    3c:3c:90:e8:52:bc:90:8e:3f:b9:fd:b5:09:4f:2a:
                    30:b0:2c:0a:2d:74:ec:09:a7:3f:2e:41:38:c6:63:
                    56:c3:93:d0:27:59:5c:b1:d3:2a:0f:57:e1:7a:c5:
                    15:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1F:70:82:21:81:4B:B6:EF:6C:C2:CF:1F:55:B1:55:CE:25:8C:76
            X509v3 Authority Key Identifier:
                keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:18:97:2f:ae:8c:33:34:36:05:30:90:ba:02:09:ee:e8:d1:
         13:b8:c9:e2:75:75:83:fe:be:34:bc:b3:55:6b:83:d1:6d:0c:
         7b:5b:e2:bc:04:49:28:ca:b1:3d:9c:28:ad:65:cc:91:17:84:
         9f:8e:98:2b:4c:a4:8b:c4:f0:19:f6:81:be:70:45:05:f1:cb:
         f2:94:5a:cc:1c:6f:e0:18:3e:64:44:be:88:64:31:ee:15:3a:
         cf:8b:80:7f:81:6d:ad:ef:c3:0d:7a:91:cd:c2:b6:ba:7f:99:
         50:fb:17:60:24:4a:0a:bf:d6:e0:43:62:03:37:4a:f5:2d:bf:
         34:31:d4:12:1d:86:71:14:6b:ff:59:13:53:e1:d9:7a:d5:28:
         67:d1:8a:8b:8c:e8:aa:54:57:4d:0f:a2:b3:63:12:85:83:a7:
         d8:ab:0c:e7:e5:6c:f1:b9:da:ef:d1:83:2e:aa:b0:9a:29:fd:
         d4:9f:a3:13:cf:bd:f6:e4:bf:a5:b3:f9:cd:bc:59:bb:44:55:
         72:73:b1:1c:23:ba:38:6f:4b:21:90:2f:32:e3:ea:a3:46:13:
         e6:1b:e7:fa:a3:93:ff:8f:b8:24:e5:72:92:04:30:4a:45:5a:
         dd:43:b7:c2:7b:64:6b:09:b1:27:e0:65:8b:a2:6e:ff:54:b2:
         fd:85:ae:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsgK1QOePH8q7ry8HVC95YmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjUxMjE1MDQwMTA5WhcNMjUxMjE2MDQwMTA5WjAzMTEwLwYDVQQD
EygwZDFmNzA4MjIxODE0YmI2ZWY2Y2MyY2YxZjU1YjE1NWNlMjU4Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKYjtr0Upw7iIEC5mAOXh0Zv+uKL
FPeh/GtMkdYeyDbSoDNGSNO8mFwTRFGrwR962ApfHicBPCjXjsj2e2EuPNcAurNB
Am5k9aygUwrhPmZ8hc5cS3WsZfkP0ivdq/u2uENkQSXWvj0mpBDmdXTM82jaiO7J
NmLewmJWsCrDWQ5iHhcTvjS2xXOSyIearV5XgR4yXHCacZMCJxxmWBu/c6H/Gh1x
+kTzDkd9J2Ebl20d4MqLG++HzsIyJZ5uLHLa0yp3kOB7XGMaFpY2HR1Ptis8PJDo
UryQjj+5/bUJTyowsCwKLXTsCac/LkE4xmNWw5PQJ1lcsdMqD1fhesUV6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0fcIIhgUu272zCzx9VsVXOJYx2MB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxiXL66M
MzQ2BTCQugIJ7ujRE7jJ4nV1g/6+NLyzVWuD0W0Me1vivARJKMqxPZworWXMkReE
n46YK0yki8TwGfaBvnBFBfHL8pRazBxv4Bg+ZES+iGQx7hU6z4uAf4Ftre/DDXqR
zcK2un+ZUPsXYCRKCr/W4ENiAzdK9S2/NDHUEh2GcRRr/1kTU+HZetUoZ9GKi4zo
qlRXTQ+is2MShYOn2KsM5+Vs8bna79GDLqqwmin91J+jE8+99uS/pbP5zbxZu0RV
cnOxHCO6OG9LIZAvMuPqo0YT5hvn+qOT/4+4JOVykgQwSkVa3UO3wntkawmxJ+Bl
i6Ju/1Sy/YWuMg==
-----END CERTIFICATE-----