This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
File:                     gz4_XvglVWsBSghdMlZbsMvFrI0.mft (raw, json)
Hash identifier:          KrBmpcPXCph6TLwliJrUv0DL4s7Yfo4RxLDQvNEqSQU=
Subject key identifier:   D4:76:98:D3:E5:6E:99:E6:1F:BF:51:56:56:8A:92:AB:51:8D:AD:77
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       019AF38912C14231299175341FBD344015E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
Manifest number:          0FE9
Signing time:             Sat 06 Dec 2025 12:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:37 +0000
Files and hashes:         1: 1g-KrbdKdsirF4z_TJUgMYDdg8w.roa (hash: t4/rANrGQWzgMBGHr7j/eIG0rZ6yy42STR9wQTGQfXg=)
                          2: 3DfFQETO6bhcObetwxPc_BEalpU.roa (hash: xqeLrmN/A5n6UzRrPesNYGPs31AaH1Fhah/D9XB5+TU=)
                          3: 3dhPwrEfhjofRYtfJkI4cPyP9HQ.roa (hash: ghQ2YzpCC9cQdtiIH9wDRG0qGVcd1atQTaldPN8jXwM=)
                          4: 5jSUnFhs2XEyycUC5F1Dog5tF5I.roa (hash: NzPe1uK8hgb/2QUTC9/jZUJTZ1C0bqYViWey+KVX7G0=)
                          5: 5k0l33eoi3Brg_78Lfio8CwECJY.roa (hash: 7s9GklqJfkLUFdqkSy634AK7jTs0g0YfNGnBUpjatlY=)
                          6: 6TAg5h6JB3I0CM2Vyicny0RgSwI.roa (hash: D8FLS1BfWg93BjIKpEgKtuQ3uhfK/yRWFwiL8yH9elI=)
                          7: 6enrTheZlg2LTqdMmIhfZVyFqSo.roa (hash: kqgvQKSPF2+Up/2yDj3HrsLxLHBj0u7sT6S7YBLCFtI=)
                          8: 7f0FvWWiK-FJARL4XbUu9Z_oMoU.roa (hash: nQwnfkX+B9YqdykzZWswDiiarqGiJRduXnI4iwryl0U=)
                          9: 9a227jlcyERB05XuKgmmcTNLpNE.roa (hash: a8eVC/jEAw2MkKx2mic9H59IS/um5WPqUrHWI5PvJLg=)
                          10: BP4TqkOtBFp0i9RIcsfpzdFxxtY.roa (hash: gr5E54KUXZ1S0kWmDwR6NxGfZr8Il97zAx8H2R2BeUg=)
                          11: BSMTiyM4pnl9If5voX3KbONrs5w.roa (hash: uWxXBrcWnzi1eJsm6+Zzg9+sO9uQewGhXuGeqUwQqqk=)
                          12: CRZRtehztTtgWzQtbQPSWf6XW0o.roa (hash: 76hBOLhxFMSoFb2U9B/edZAyunhaiojf6U+F7Si+vgo=)
                          13: Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa (hash: DqisiAtgMNAzc5PU8NEVt9H9xXUvbQuT95XDdCMZxEw=)
                          14: FxXgnbjIjMQJSVyfPbrnNLIEdzE.roa (hash: 3RrsCHtrq0EWoychIudSGLBvrbDi5Gn3NMR0p8Y1rFM=)
                          15: G4uMj4jEgbl0nPqapbiYN9oWNtk.roa (hash: 0hgew6NK06cNsc5ACwn1eMXrZldgM8YdDncSgwy28f4=)
                          16: G_75n8-L0iJqnjkaHw7zP2gBjIo.roa (hash: z2fRWBvDRrVRPA42qxS+QP078b8hBDM48KrQZFVaasA=)
                          17: IzTLE4b5lDqpegZ1KkiaLyUb11A.roa (hash: jGqSCridatYK7NpRGljMKF9f+mxYkA4keFTBMsNcmco=)
                          18: JvqBIXiq5TxtaexDe6MiLG7Uzco.roa (hash: huNRUsFo/Oz7iRP5jciR9/safRSwPrF9PgF6uaHgaAU=)
                          19: NnAxQCksqItExvZLldJlkjJaDPU.roa (hash: tSnaOUKLG9no6tm+L2kNSTXG7yxAD3P/F0t251P32qE=)
                          20: PaYlLL1YOtm8IJ8_CD0zAGIXidM.roa (hash: eUBaLNH36vCB6dujbo8I9hbjCeQAzjBG5TSSXdiMCes=)
                          21: QVpUZXXtRIH20Imi_FSbaFyiVsM.roa (hash: 4TM9EKcDHQ+gG0op3bcQD0U+ZAq/ULDsduNRox8hgWE=)
                          22: TN7hnpecGw4vVEA_h9JU4nwBKAI.roa (hash: QguoCsciRkHqlithinwUkI7ebgBBrsRhr+OaqhRW+4A=)
                          23: UaHUGX2me0fCinu2K0o7FQZnjgw.roa (hash: OaWH39B32ar55uhOAtdCpNgOxqCD3V6ZAB5otMTUBaU=)
                          24: UpFmEVi9jbeSbJ9D14Si7UIPFiI.roa (hash: ubP3B1UVs4jY0GUt9mbiH49JNGq+VoCuEFTx/SPGC6U=)
                          25: VnhOPBZDowa-khGe6_hFTUNqCsk.roa (hash: qCIsr4GjCEdCucIllYzz4SFGtxqgpQsm/0HzykOXZ08=)
                          26: XreWF-dzlOcgK_7UUvJIWUUq16I.roa (hash: zc2OR/ijrznF2LEmeYNAq4SUMXQRqDJyOAjX/GcmzX0=)
                          27: Y202gT9Jqy8iAdNt-19QysSVvqg.roa (hash: xiLKkaHcZefVoBcsFuyXKuKiRKZdYLgydHNRy1Epp28=)
                          28: Zkz4_ZlIcB7DyFtPU6FEcoHSLPM.roa (hash: s1IAQ81D2wcGPIyH9EA3eeNc1gEW0sjHMUGBYsUA8aU=)
                          29: cVRIKyklOGb7gyBNTjf8ZM0mf7c.roa (hash: 1zkBtP2Tn8VtUUwECLAshf+HOZ82qvOHUiN42yc3zEo=)
                          30: g7CQjOrXAZDWN-UCXNhfBqU8GtM.roa (hash: TsfqchRGcZNHpPlXb+jTlHuU31TnVWJ3XGIt3131e90=)
                          31: gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa (hash: J4XAvT5tZPvTOHy0OK0TxDdYN7DkuoEm8K0en8dr0cI=)
                          32: gz4_XvglVWsBSghdMlZbsMvFrI0.crl (hash: T/RpjMFFNzL6W3FwNf0RiXvIfWHrJhJfnZzlErw55v8=)
                          33: h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa (hash: zt8b+CmiqgKijkhJRz6BTVkUIsFNQWitXdvorvNbiis=)
                          34: hhDruU2BGyL72LcDTa30VVmeyeI.roa (hash: QkshKq6erv7Xez3qseCJmTlwPfpvRSNnvi/jlZLUf8M=)
                          35: iCLw8RIiSqOym7ZoMaqRRfESDrY.roa (hash: NUpT/nfSwkXpCmZKiEmftqeM0tB0nII8kUks+AYv2Fo=)
                          36: kOl5tooHYMmCtstl7OngZrFymus.roa (hash: MIQSNm55pK0/ZWOL6VUclSGA1LTZJ7gzQ8p6imnGB8g=)
                          37: okmrS3MAeCGkajH0g9nEl4QdGVo.roa (hash: UuGatYmxYnLQPEz6I45Aj5HUMzevfoaTRLkkn05wa24=)
                          38: pCZJYGWLfMf47M4hTTnNHaf3lqE.roa (hash: jcoNV10A9nQKZm/yHM5DNeojh1+AoJUaIuNjlaLYlYY=)
                          39: pbEV8GSzmyv5GEIcw9Ps_8U2s_w.roa (hash: qlJyUREqgOjbb/bkcX56q9Hymy9qBj3GRGQENNt2mZk=)
                          40: pmxFhlPPQLXGUv6hd8fA82dYGtE.roa (hash: a6LynfLW7GHcGAYPPMXAzMR7yEq39V2Fcbsey8YM/M8=)
                          41: q6F9SG-XWqoRFuk-s2MEKbm8R-M.roa (hash: HWAvi/nB+0pKx4Xg51fThO2kGs/JvHTtRCq8nddH81k=)
                          42: qv1zuA1uhOhB0iQXeqNiqrroLGs.roa (hash: Q8oWPpA1az03yvY1CQBg0YQouTSBYAb79g98f5yLevk=)
                          43: qzHe-_6PkH9h9IbS4f1I69zMwPc.roa (hash: +cJNQoL2PhbEUBuXSpebAHA3yJ2vf9VHaZKXe48SIMc=)
                          44: r9qtEucdT5fBEuZvonXHKnblamc.roa (hash: e84AERvT12bRjzteneYAf/72qjIGN9KxsKv7v1cQ7Nk=)
                          45: t1jAwDE4ePrJr-20runZjcVjYy8.roa (hash: J3DFEAIlVxaosyTy22VtpM9ytnJ7AurPBR88JS2iL1U=)
                          46: tSrMnczmlEbYIQOpkEmwHRnQpzI.roa (hash: FuBmyi06UTvYJhovqEho4RVXPO+aGk1wa3ZPdqXvWWY=)
                          47: tTaIEuNhDsWfSGBVJoH_1fvOdfI.roa (hash: VT3DnvWCB9neNDoyETNfDyp0hytuoc0dOGs+b9s3uIQ=)
                          48: tscTIRNnXBX4bdk7PPWEzOgkrpQ.roa (hash: jmoGtQG/6MXeYZuB+mNX2aLoq4UfhEQ2DtKrowmccSM=)
                          49: uF8rk7LpxpBMxklV_RWm55Ih4vo.roa (hash: y0maThc1Ra2sguvgT6xC+DyshsCgw3R/u2YIpFuI4Dc=)
                          50: vEr0WmjCQO9XLJ8vDxqSevuKzUw.roa (hash: I7Lc2kIYUnx+kkg2FUe2IW0JdVsQsNpYg9hzZRkWPfA=)
                          51: vPvzH2Jkd68NGCsRhA2y2FlM_lA.roa (hash: 9Klt1Up9ZbII9TfgturV2CBhPEMnjyOglIYDIB463Jw=)
                          52: wHbZyzXG2oTwKSsrj1pETQ_DcTU.roa (hash: 49IYyocP4YGAaKauaepHwxpuEkb9L27DPoNPiAyWcVI=)
                          53: yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa (hash: Fg4ccth+vYXV/2sgHnZqs8EKhJY1bCZHVgLjSsbq1kc=)
                          54: z_F3eZPtphqpXf_B7RZ4t8rRcAw.roa (hash: CRnPIsnZf64ThYvuup5THfnyETtp12ZJqAtj5gO1A74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:12:c1:42:31:29:91:75:34:1f:bd:34:40:15:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Dec  6 12:00:37 2025 GMT
            Not After : Dec  7 12:00:37 2025 GMT
        Subject: CN=d47698d3e56e99e61fbf5156568a92ab518dad77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:75:54:76:54:29:f0:2d:fa:ea:18:c5:6a:27:
                    7e:df:94:cc:20:6a:88:42:b7:55:21:53:21:5e:b2:
                    cc:25:01:83:ce:9d:b3:eb:8f:78:75:1e:be:f2:ea:
                    2e:50:28:46:40:a7:09:78:d9:4a:bc:a4:16:94:2d:
                    da:d4:81:16:6c:0f:a4:79:75:27:e9:c5:b9:80:23:
                    8d:6e:5c:dc:20:07:f4:ba:2e:5a:8e:d2:b5:35:79:
                    32:1b:16:d3:28:2e:3f:d5:6f:a5:9f:00:b3:14:00:
                    8a:77:be:5c:80:5c:dc:33:51:1a:04:f5:15:d0:7c:
                    3a:ae:74:e4:4e:11:ea:7f:63:97:16:5f:f9:16:94:
                    a6:69:07:8b:fb:8e:12:f2:09:5f:6e:f8:57:a6:02:
                    42:ec:83:19:3a:36:e3:9e:da:56:50:75:69:c3:f6:
                    2c:d3:fe:25:b6:35:a8:61:00:99:b5:02:62:08:98:
                    8d:a3:74:d0:cc:bd:d3:bb:c3:9e:f3:ce:af:0d:53:
                    07:d4:c7:6e:0b:fc:c6:a4:ec:ee:4a:fa:2c:86:3d:
                    4c:6b:9d:76:8c:64:15:e7:d0:41:24:bd:4d:3b:8b:
                    09:92:ea:14:95:37:57:50:97:db:6c:ca:3a:58:2d:
                    bf:e2:59:95:74:35:19:57:b3:80:05:9a:00:0e:d0:
                    43:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:76:98:D3:E5:6E:99:E6:1F:BF:51:56:56:8A:92:AB:51:8D:AD:77
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:32:dc:7c:e3:4c:cf:8c:7a:e9:2f:e3:8d:91:26:92:94:de:
         47:bc:4d:83:6b:73:4c:66:46:fe:ad:60:cf:b6:c4:15:97:22:
         e8:a3:56:83:0f:e2:c7:47:6a:0d:c4:49:6a:6d:47:fd:78:cf:
         38:63:82:b6:7c:42:86:14:06:de:c6:e1:13:70:1f:e8:10:9e:
         f6:d6:92:2e:1f:7d:72:6b:6b:71:35:86:9f:21:14:5a:02:fc:
         e1:b8:51:c1:c6:4e:db:43:1b:4b:b2:6b:e5:b2:91:4f:9b:12:
         bc:73:1d:15:64:bc:ad:e5:94:2b:eb:cf:af:37:ea:e5:3e:0b:
         00:53:5b:d8:4b:d6:80:37:48:18:f0:fb:68:35:4e:ca:8e:74:
         ed:16:da:e1:3b:eb:36:7b:f5:7e:55:24:df:8e:53:ae:8d:ba:
         1a:f5:10:e9:97:16:da:f2:8f:3c:bb:6b:18:72:3a:a8:3e:bb:
         44:d8:df:38:2a:23:b6:5f:d5:2b:6f:db:d8:7f:db:d4:fe:09:
         aa:69:ee:c7:cc:fb:70:d9:c4:b0:c5:63:84:26:75:b1:8e:ab:
         47:cf:53:13:75:59:4d:fe:28:9b:02:2f:5f:fb:22:f6:61:63:
         c2:00:31:8c:6e:76:18:f8:48:1a:5b:a1:5d:29:4b:bb:da:07:
         2f:ed:da:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrziRLBQjEpkXU0H700QBXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUxMjA2MTIwMDM3WhcNMjUxMjA3MTIwMDM3WjAzMTEwLwYDVQQD
EyhkNDc2OThkM2U1NmU5OWU2MWZiZjUxNTY1NjhhOTJhYjUxOGRhZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nVUdlQp8C366hjFaid+35TMIGqI
QrdVIVMhXrLMJQGDzp2z6494dR6+8uouUChGQKcJeNlKvKQWlC3a1IEWbA+keXUn
6cW5gCONblzcIAf0ui5ajtK1NXkyGxbTKC4/1W+lnwCzFACKd75cgFzcM1EaBPUV
0Hw6rnTkThHqf2OXFl/5FpSmaQeL+44S8glfbvhXpgJC7IMZOjbjntpWUHVpw/Ys
0/4ltjWoYQCZtQJiCJiNo3TQzL3Tu8Oe886vDVMH1MduC/zGpOzuSvoshj1Ma512
jGQV59BBJL1NO4sJkuoUlTdXUJfbbMo6WC2/4lmVdDUZV7OABZoADtBD1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNR2mNPlbpnmH79RVlaKkqtRja13MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajLcfONM
z4x66S/jjZEmkpTeR7xNg2tzTGZG/q1gz7bEFZci6KNWgw/ix0dqDcRJam1H/XjP
OGOCtnxChhQG3sbhE3Af6BCe9taSLh99cmtrcTWGnyEUWgL84bhRwcZO20MbS7Jr
5bKRT5sSvHMdFWS8reWUK+vPrzfq5T4LAFNb2EvWgDdIGPD7aDVOyo507Rba4Tvr
Nnv1flUk345Tro26GvUQ6ZcW2vKPPLtrGHI6qD67RNjfOCojtl/VK2/b2H/b1P4J
qmnux8z7cNnEsMVjhCZ1sY6rR89TE3VZTf4omwIvX/si9mFjwgAxjG52GPhIGluh
XSlLu9oHL+3a/A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:30:50 2025 by rpki-client