This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
File:                     MMQJYT_qCitELOES6cvbSF4BGI8.mft (raw, json)
Hash identifier:          YO2JCrC5uPpB0qoCzxSQhxnVJCaaPU/9kYiCYe/FjM4=
Subject key identifier:   33:46:6D:81:A1:62:DD:02:51:47:50:55:CC:96:76:E0:DA:F5:85:30
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019AF2AE047511F56FDEEBB64F5F918509DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
Manifest number:          15EC
Signing time:             Sat 06 Dec 2025 08:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:21 +0000
Files and hashes:         1: 0TcqWmBbS4pZwVBptkq4lqA5c5Q.roa (hash: SPYZBsTv2MNh1qyA2xq5tH1xrGTzoY0rK9rAvW0asOo=)
                          2: 1XXH5Tc2jjPAzQHYwkwVQAw_gHI.roa (hash: dcfuBWAVvDzz9GpSqGo/OZzT5vbmtFCpLz+pXMeuFkc=)
                          3: 3LgD2pWeokaJnu7AtKvUjtGF1K4.roa (hash: EUbwmkUwuSMcYd+jHYxrR2mUP8puunpDHahZx+0W+pc=)
                          4: 3cL278tMfhHRt0jMeGBsuK_6tdE.roa (hash: 9Jvsf+gu/Bz99BEJw/Qs3de4jjh1Gye98YTVVsGjiIs=)
                          5: 6QoOwa2ipaJqvrD7E2dbw1UcuV8.roa (hash: 2tOtZzMlaS8Y+/JP7ae7uNFPL8Y8C/sjWCJwPgz2D6M=)
                          6: A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa (hash: lE06Mjh97LJaUQ/w1auWux3C8TovlUNXB3RO85AG9OU=)
                          7: A49d_BeiTEUQG4p_3mJzcU9LAxc.roa (hash: Yk0iZpFyJXXMqGPy0ILeZNptWZYqa7K2r7Sh5AS5hIk=)
                          8: CHj040_wogpBH97VhIKu-XXKbAw.roa (hash: kAMrOvcHCUufkgh6MldjA8l6HcgiHhZpGpuWCTLkt1g=)
                          9: D-Xj-E8a8KpGmRlH8BwGif1kmI0.roa (hash: 7cRbUgZAzkqORhvBRcVH2i2M6t3Q6qZCnPwfq5AZPQw=)
                          10: DzFwKCs4SLbfq2s9Q7Y4hhddAlg.roa (hash: uVhqZq8hFXzpst7g4lUJZCwbTahSvmYx+Wbki8iJE20=)
                          11: FMEvE8lRSqQ-c4n53FDffBkErx8.roa (hash: GlA1THHMaPutrg5iNRsJwfVrQRoJ41Dni2qIntaImAw=)
                          12: Iv7XsxWXHnyoVpEd4DC_3XASFeY.roa (hash: RkiFvafvAi0w5FjSv5Z+cDcQDkhTTLcusqCEJERJr3M=)
                          13: J5Zl0e93w7Ouht3QTJQ8Agt_K3E.roa (hash: Ci6kg2a6GSjpPc9RFHsQWbp71+Q5BJmxJkaiYnBdvGA=)
                          14: J6jwomPMeZ1BKUT1HKADpUVqL4Q.roa (hash: ZT8/tzUWsV32mp8ODBnGUiawz3yA5cw8UBFbLvsiiBI=)
                          15: Kwu503K5TQ6mKB9wIlqJIRzuA5U.roa (hash: D2DY/gDYtav/Dsf8JETmsRPCOwdw9kpocKeFf8s9QAs=)
                          16: MFeBsVEFv-VXfJA4s0kbwDLrsao.roa (hash: EMCcoY2pdOJ/xwyHG39NdP4RUjuyAAIrDAvEM6JIEKM=)
                          17: MFuSjMaEcH_KfJOuOTM_egeHxuM.roa (hash: gSvthfvoW6hKh161OH6a/3I+TpE1mQXg8q3eHq/8gkU=)
                          18: MMQJYT_qCitELOES6cvbSF4BGI8.crl (hash: hrT7wCagfEzTTwieGY35/sn6fMYuEhPumJnS61D6Ero=)
                          19: PW87IxcR8NO4WUeOitQNh5EtNhc.roa (hash: abtoslPQuSyoMS7yrHdnRO9jo2QkBlO9JvhCml8oipM=)
                          20: Pevz6EWQXEb5yVp9lKenzNIdBdc.roa (hash: qGmkuDrxspXM+mBcJKKqEwtYtBwpIYoUjNRrKJA7ruA=)
                          21: RO_vqVjc-WToTVgA2LecnPN6dt0.roa (hash: jWGNKA1BOvpll3zjMK7kK32ayXj4dMaMQ6dbhZt9Q8o=)
                          22: RYzSxxWBkqoIYdDWQzrtXyD6HxY.roa (hash: 9uDtpLtRIp3Z50Qzu21CuIdk3zj29vKS3wKK9lm5Lyg=)
                          23: SRycxRgb7-ZLpEXgHls6Rg1GkZE.roa (hash: tgYoh8E5W71tyTIqSyUElR8mNX+J76OHaL8Cs33nYQs=)
                          24: S_pHPsCNWukS-WUFhIXy-OSJe2o.roa (hash: CgIqwLllc8CTWv043HB1kGIdlsthfsikGWfcwzjk14A=)
                          25: U2iNflEHT3HIL-S9ukQcbf1cEE4.roa (hash: CmjocmnsbLnvfp3fpATzHwZwgEQxqvdIsJxJ7LRGUnw=)
                          26: WHHJUFYWyKjhDOYk7Bkwtd_KEaA.roa (hash: WAiPSFNwflOwr12Zue1faOYw7xwtb69ioqP/IRmI9s0=)
                          27: XJn6uz5-oygXgu4ZAc2om2Be0WQ.roa (hash: Y9gNxCERt7wH5/baWKBp/m59FpcWgCGrLReBBXmd6l8=)
                          28: Xk5AYjoJKqpE6UbWJWl0e64Jdgc.roa (hash: Crv4Pgd3B0w5ftY7wmKEGbhnAr8LA9YDu34JHjjTqtw=)
                          29: YyzLMTt87Ecy3ghXnphVjvqquQ0.roa (hash: ZwuNLZzvOtpWGtNlX0gjt9977y68KkozP3OVholZME0=)
                          30: _kwy9bDSccd3Rtu2SHd2nC9AWHs.roa (hash: S0KPjYm8+CTV9bHwk2kn78YNa61JdUHm026b4f57gYU=)
                          31: a2QST08vhAuM6YzseDeOjRqXeXk.roa (hash: lMOk2f76mI5XqI13RnVVzTMO4e/gWq+iR4UTwWxTKW4=)
                          32: b1DT6ospwzst3YJkd_0LR059Sno.roa (hash: FX1wepEOkF8A9hAFZM7i5GnZPOJgUdJorm4d827ZEso=)
                          33: b5X1JzbTJUuqVfX0DehpNcJ_9kc.roa (hash: LmA3Cohl41GAEztGDTKc3Ga2ZxVmadMDX0gNG66wU94=)
                          34: csjA1XzPZVDmuFMOF4FVNAGTAvc.roa (hash: gyaRxHTvsY2fQ/zZCrzxFkfMjoim5rMmBV2aGfzP9aM=)
                          35: g64IDCaPNJ9ZShV_l_bo46HmhJ0.roa (hash: 5+QoeL2CSfIj5AnV36tcPb8Se6mkOWP178b805IjUzk=)
                          36: gb13af6kKgtlfQFdYQtCupgkRjQ.roa (hash: WlJgR2c//WMYosfMkR2CJaWVw/G4EQYofJSeZrH4jNE=)
                          37: ipTg348ZUOHwTFCERWv85x5upVw.roa (hash: 16jKgCClYBo+eCIMwkt7ZjD/Ascu9zEJCZArBRFo1ac=)
                          38: jJ_1uHLWKiQkF1iVYcO_4bXIskw.roa (hash: MlNZfYRq0YeYuGTlp+S0bdyWWJDClUExqjVU2jALhT8=)
                          39: luhgkGvXoSBeo49IDDTu1_s8AjA.roa (hash: 9H2kNdWwK/olweSvXdAl8KgICVS+D/OaSJX7mmjuiAk=)
                          40: lyu6R4gm1GDGGWrprfi3lQB2gi0.roa (hash: SnWsapf5S+uAoqHYWK233NyQQsjjVYaX6QjiNNmT2oI=)
                          41: mErkWeU3I8mGIE7o-s9X2fk5o5s.roa (hash: VUpCAKhA9EiJ9ug9Oc5wXy4xs0jXv9yffBf1VGddEjc=)
                          42: my4k0_ivDuUGyBw3mHJZ8SCPZrQ.roa (hash: DJVXpvSVC65t6DyhISYYJXNS1LFS4kO5R9YQf3IOo4E=)
                          43: oZdG4eGf7a8nQ-LsuE-l7MTCS18.roa (hash: 5c15Pb7KH72jzhvecKBamgtcszwWgCVUEzSxuUMdHSM=)
                          44: qJ22okdD8cK_emCAng8rI9cPrbU.roa (hash: WUQnBOwIu5J+Q0plEqLVlVFpmBiC7eLrEJFqZ2HqzGw=)
                          45: rVRMkskBzwl9zi-JY6YFOAI1hcA.roa (hash: v08kT5N9ZXsSCeQYLs3P8oE3ZLKAofwCwujUwPJ72Pc=)
                          46: saL_JgI0PuLcRd2fgaRyuCRT4oQ.roa (hash: TKYq5bkvZmNzmAS5U9vl5b3QXUiEmUHsR8998Y8ephk=)
                          47: ssCZoEPZ62NS6Z7w7p7XHtYYBDY.roa (hash: Hgc/3TJtI5yynn7M0w0nfY5PZGQECx2OAgvuax5O8ME=)
                          48: xlkcSwD0mmtZPgi3xXKhycAWYyM.roa (hash: BAhCmE0YHR0xQbs06CAdD0yavtNQmtlINBJ1oX8Gqn8=)
                          49: yJts8iRe97z0LBku4nfeAAQmzuI.roa (hash: Kml13BMft8IVP0nzevzpw72P/X7Z+HrpFqQAw2Yg/rY=)
                          50: ydjj493UN6JAAmZf6D9xQrp5Fuc.roa (hash: r/+ra3gt0oRo1h5IYk68eH88kHv7hYOt8DrkYcFlWmE=)
                          51: zg4G9Al7ef2rgqcn_nM4kp9NKaI.roa (hash: YDgq8a39d8LckxrdlKsf3y4bYTg9xyEVGHD8tb4DwoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ae:04:75:11:f5:6f:de:eb:b6:4f:5f:91:85:09:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Dec  6 08:01:21 2025 GMT
            Not After : Dec  7 08:01:21 2025 GMT
        Subject: CN=33466d81a162dd0251475055cc9676e0daf58530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:e3:ff:4b:e3:59:fc:df:2a:54:1a:75:4a:
                    fe:ba:f8:c6:f1:ef:04:4b:96:cf:d8:09:36:48:28:
                    76:5d:fc:52:9d:33:48:93:92:1f:43:45:74:79:3f:
                    54:c5:38:11:87:c0:aa:9d:5b:eb:f3:80:18:88:b3:
                    3f:16:0e:c7:9e:8e:c7:9a:07:85:c4:49:8d:ad:24:
                    e8:70:81:3e:e8:83:99:35:2f:4c:d7:fe:5b:62:12:
                    53:34:a7:00:46:ea:9d:10:4a:4c:5d:96:03:fa:3d:
                    19:06:f2:ae:ac:29:0f:d9:b5:48:9b:6b:74:b9:ae:
                    07:e6:4d:80:51:0d:38:f4:4d:42:c9:7e:26:05:af:
                    cb:2a:63:28:a2:53:cd:04:3e:c4:29:d3:15:a2:93:
                    d4:fc:d3:85:1d:92:e6:a5:a1:49:83:48:9a:87:15:
                    18:f9:ec:f6:3d:47:47:52:14:0f:ce:41:8b:e7:28:
                    c1:70:27:ec:5b:be:ed:ac:a5:c8:81:58:a0:9b:cf:
                    af:3f:3b:2e:19:85:0c:e4:ba:88:5d:fd:05:f9:7d:
                    14:72:c5:10:79:95:f2:d5:9f:44:29:32:56:31:94:
                    f3:1e:7d:e4:d9:49:cb:5b:a8:20:d6:08:53:80:a9:
                    f9:5c:e0:0e:30:b5:59:99:7e:61:8e:35:d0:ac:cd:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:46:6D:81:A1:62:DD:02:51:47:50:55:CC:96:76:E0:DA:F5:85:30
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:23:c4:3b:c8:c7:8d:0e:88:b2:02:99:d1:70:27:23:39:02:
         39:95:6c:30:88:62:b7:22:9c:74:29:31:05:80:3a:b6:75:6e:
         22:6b:6d:98:60:91:99:59:88:40:e4:31:c2:bd:b8:2d:db:e6:
         db:84:7b:31:85:2b:52:9b:0c:c9:e9:f7:a6:68:a8:02:9d:34:
         46:a1:ae:db:ff:76:85:e4:4d:c0:77:fe:36:5e:53:f7:68:3b:
         de:9b:51:4f:2b:ac:02:b0:5f:03:14:ce:6e:55:10:cc:9d:63:
         2b:1b:fd:93:72:bc:d1:4d:77:50:78:fa:51:3c:c2:a1:42:74:
         25:b5:ef:df:f0:3c:fd:bc:4e:75:bf:4d:de:7b:65:50:97:e4:
         c3:21:7a:77:0b:52:4d:4e:d0:ae:7d:7f:7d:0f:76:01:e3:fb:
         f8:b2:38:ee:56:ef:ed:fd:40:81:d8:d9:3f:a7:dc:88:1c:7a:
         6c:11:ae:12:d5:b7:5f:73:aa:3b:a6:76:89:30:df:11:ba:62:
         2e:b9:b3:14:c7:9f:e0:d6:0b:e0:e6:e8:91:86:d1:4f:e4:07:
         7c:f4:9c:ca:01:2e:35:67:80:a0:ff:a1:13:bb:2c:3d:0c:57:
         30:4f:37:dd:ee:3f:20:c1:69:21:2c:db:c2:19:38:80:84:d6:
         9d:52:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:07:27 2025 by rpki-client