This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File:                     Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier:          VWZgDIeNyxBUtuHGzH4BK3/hTqFzoRcmajjslO+7lCU=
Subject key identifier:   0B:49:DC:13:A0:B2:3A:EF:7B:B9:D4:3B:31:47:19:B2:DF:1F:85:91
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       019AF1643C6677777D7CE77FB7C837B19D9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number:          0B88
Signing time:             Sat 06 Dec 2025 02:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:09 +0000
Files and hashes:         1: 0CT1joEXXqHn7ApZderh8oz-6X8.roa (hash: BvOsPrngGNiLcDK7gBcQWH9QFWAThZP/Rzb+/PLbPTU=)
                          2: 1syvLvZNw4oAM-YcaPxmJP31bEQ.roa (hash: LPtgL6Q40OCE7W48yA4YQ85j1wM296i1AWyNKAFeL24=)
                          3: 2eiy-_16euZlcY312olF09W31s4.roa (hash: IUh18w7P0P6a+lmEiR7StlwVEgGLtk0s4vBFZb7XO5A=)
                          4: 3EbDHVpUGPClmvm3J9iIFuXcrd8.roa (hash: cSc8UvFvDER4vb0XGisijdGU9FyUobR1/SMTyehQLHQ=)
                          5: 3cwOhtgSXhi4ajb5tZo0Xfs-k6s.roa (hash: JPBKuPq7WE9CFKFDDLjhI9Isd03CJ2NF4DCcSMyCJjc=)
                          6: 45wSdKS9u-kLwBER9DAdp0dOdgk.roa (hash: fvR/mlJedJy8x4zrL0etfG0pS/sgz873Mc4ixjc+vyg=)
                          7: 4hsvXB1iTRQzBfKiak8pW2I8BF4.roa (hash: XAp414dDwa28MtvplUV/sn7g1yns68g20QzpT6TX080=)
                          8: 9RqjWLw5HPxJzuXKXhGXXmyVkAE.roa (hash: 16h/SJTNr54l9qICOmuHkNeVLrt+8pmYa+3yNFUR3qM=)
                          9: D8tDS5afEI55b3ob8NG1ZTIaLQQ.roa (hash: HR9k0vtrdM5wK2sftLGXjSwvC6aqcZVjRpaEL6hcsrk=)
                          10: D9x1CTV8F_4B-wx1zITSO-EMubE.roa (hash: HbzAlStX6f56p1esX7YT4omJKAR7bHh229e0ejlC5Eg=)
                          11: FG5pNQ5_c3TjGvqm7drNqjAtp_0.roa (hash: pcv1sQ3cPr8Z5RqoT1cS23yqOKHpxM+1wRoitpX9AAY=)
                          12: H72gujMCMAZpLRg2cNnbawNMi2A.roa (hash: mc2ktHWkVm4x7yx+zpHQ1y0JVlLOdpVbGYpYAwP02X4=)
                          13: HIuQQFKgSBuAKuZ5NFV39UWdk-0.roa (hash: 6EaFRuDYvhQ4ZsTUqzReAUxLoig1ZR4YO2BpnNtxZIo=)
                          14: IYyyhMB1ESxGlLx1uYqNqrIgR6U.roa (hash: 4+KfJiZUKyrNHi/Wrz4kW/2Z3KBOulRvE66Y7Dq4jLQ=)
                          15: LbcVeiuDUugzhWMtPmYqNrGtC38.roa (hash: 17lM/1TLk5NwhqbTHI9QcyIG0e9IHDWy4YL3CEcB+EE=)
                          16: LgEojSSWxqPQSa07ze94dva_jUY.roa (hash: bgXznWdGQZcKwK/PhDBEr8V0fAhdejJIL6EFj3ITnqs=)
                          17: MGapW0vbEsDh07CObJqBM_xk66k.roa (hash: P8snUlMzN8SD1TPId1VEZe9Ri9QxtvHOJ9QJWot9Jpw=)
                          18: MrSOOhfdgSDu8DQamecQZPxYswE.roa (hash: mfmpNUSQT/f2SOWnIgX00XuCSJAj/TdvBXwWPhwJxA4=)
                          19: Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa (hash: 5jYKkFvljl/sNCuuK9Ccg8C+9QQrnGFhMRE89ePvdFM=)
                          20: O0wQkTberJBGf616XMSFIFD7KBs.roa (hash: 17n6+YLzt02MURVWqCyG+6B7DEgjzFUFOHL19KG1glw=)
                          21: OX5WGRMzsMc_dGpoOLVRfny2bxo.roa (hash: 8X3DRCHPDRRM7fXfOlVxxkg/aG8D1XcXWTqt5pAok5c=)
                          22: OufG3sBDvZI7hwG4WyzIc-Z0xOI.roa (hash: i/Y4cgjlSFEZdmlvRCXLNV99JlvYX2KAZ/g9aNaovag=)
                          23: PEoeENAheHgzP-nL_A9MPW80L0Y.roa (hash: iWOMsN9mK7Qviawj2/fUT70nqm31lGZIYRGadWpH1II=)
                          24: PGRCK_988SWzktKeQMe19aO2XTA.roa (hash: QsLivLGV0/DhneRFQo4vdA6cUJRH1asxl+VSehvXl8g=)
                          25: QNAvqEtOtUfMbDmfsPFEe603WNU.roa (hash: 1LcNY8ab58yNfN182kfxAkp7IB4n+zASQa1ST2WM24w=)
                          26: SBzgWhSF_OyJTG2wd8o-Ulr1nmk.roa (hash: 6nfYexvO1Kc2k+mD82GVF9WHZYMyGMTF3rCD7nDSq6c=)
                          27: SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa (hash: K6b6z9i944Syq+ZCWjptF5NFMjXs/+RPvy8K9zsSPCc=)
                          28: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: iZHvg6Nk9HAJYDPmE5npb9sTZSlOHfiM7TQATPMUrWY=)
                          29: TwoNGVXfFwHv00p0hl1agjjAKh0.roa (hash: EnXnb3QTXsz/G4VrSLiwLMRbpZkmAexWJqS5QR8p6FI=)
                          30: VkgHoc_Rx9LO0thb-KJrhy8aQQ8.roa (hash: zIBkV8AorlkbljaZ5zOpi/5kWq6s1363XBg2GvdQ8pE=)
                          31: W81rCzQb4TbKxPTooSlXa8XN4QI.roa (hash: CtqqoCzBFYTr59fu6lgBm7DIo8Hs2FvwBTe1ZDr7Ngk=)
                          32: WCelWbxY_ryT25IoQyob9TjveSo.roa (hash: bnYBgUb483TxMKFPkryTdkRUhsIN0EWfbbSv1I4sQIU=)
                          33: XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa (hash: wucX+GJutPw3tDOpsoQ6MWs680eTe2mkRw2xXYGRGbY=)
                          34: c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa (hash: W9CgyAiS0YOpvUOhIebxxS0z/0teFH9NlJCz2jTE+zo=)
                          35: cMU8VvUmjbwv8fW28N13UafJfMI.roa (hash: r21tLs/TiTIXMMK7rlbmRyjsYlaJyqFWP02tJ2yQ+5o=)
                          36: cTM_wPu67RVLbAM3nD6sWnqniqw.roa (hash: Ate7PK/dPf9sl6jT2ZlxKjCFiwliYg6RScR5spCNLF4=)
                          37: dgRDsleizFFiXe9DaqQOkGqkv1w.roa (hash: 5SxZOgkCgjuwwOmw1bmV20/4QSWRJ59FbX4T3oudoSo=)
                          38: khtbiZZNtdravP-MConYlqJTYmY.roa (hash: xXo87eImVPHif3j6yLOoXwcVidIvdHpygsCrdgfHCM4=)
                          39: kzJROGRJyZHBGTjoX7TVF70t_uI.roa (hash: Jj+yaaYYgzB6tRgd4hOyiggZphR9XS4OGfW8KoSDVmg=)
                          40: l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa (hash: 1gYcxOTK35gAGaMUX4XHHZe6la72rr7YynYRUMDnuCw=)
                          41: p3ROJ266o2pF0nOiR0HBZYzO_HM.roa (hash: ROb/DIruAz/5oHca7U7nr4QK7Ki0POfWjiHizu/y8lE=)
                          42: pLRMCkjbhFiMNh52TnBAspU8Hjk.roa (hash: U1FUmpIZB70rTHNhu4UV38Kt+GlWp4EPp8i4yoOh8xY=)
                          43: pS3QOZ2wypZ71SVvS4_yCNQwDJE.roa (hash: ftQJDmKbzx9RdLUMravYt2oMuiMTqqjLnLQ/z0Jk1Gg=)
                          44: rWSnUoFSizQeONQqtbmoxgRXQLg.roa (hash: WRwAsaYm/Kcb4E7MVkOhb4dnAP9wdxMUgAV7X/La5Vs=)
                          45: rxk8aFkOeWjK91_TW-WX0ASv1Z4.roa (hash: 13VThZFeUCr48FxuuPNHQvJ0Fk0X//zMlJyzyJOre9Y=)
                          46: u-s_IvRi_d2uT0pVGYggJ-9vf_w.roa (hash: xE0k9qkP4J77FkjGvlKk6uMwrXPnBnaccpHmcue4AWY=)
                          47: vJD-DSmwOkOOJFuZzauASqUSruo.roa (hash: auuNNDBDYVXVMGfixRK8lih+GV92mCYSoacO6fybksg=)
                          48: vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa (hash: 5j5FVAZ4CeKUoBwfFPNsI7WH45FNyhDbv1/sr4ayZcY=)
                          49: wha7fcogtd47YRJWz6jr2K_oy9M.roa (hash: 7bzvo+VMMMPCXskKWF1nzlRo2MigQF9srzUNxlr/2Hg=)
                          50: zzDzNokLDw5fB_iBSLdcgwToZfI.roa (hash: 9Ii575Yb0QHWdHvqaclZEqxxCr5HLB5JkEBBY/yv0gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:3c:66:77:77:7d:7c:e7:7f:b7:c8:37:b1:9d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Dec  6 02:01:09 2025 GMT
            Not After : Dec  7 02:01:09 2025 GMT
        Subject: CN=0b49dc13a0b23aef7bb9d43b314719b2df1f8591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:cf:67:76:58:dd:53:3d:cb:5d:d7:e8:49:
                    b5:7e:6a:8d:fc:42:2b:79:a6:4e:da:af:3f:de:eb:
                    87:81:a7:7c:61:7c:c8:8d:7f:e2:13:8f:b7:61:80:
                    27:b3:29:fe:17:21:a1:5e:29:98:e1:a2:5f:a9:20:
                    72:97:f0:b2:5a:3a:d5:b9:d2:e1:20:1d:8f:0d:81:
                    8c:2e:33:6f:b8:9e:2c:f5:2f:51:93:02:67:3a:11:
                    3c:9d:43:1e:fb:fb:b8:98:b4:ab:47:80:11:9c:2d:
                    0a:94:d2:e8:9e:ce:5f:8d:ec:07:65:ca:fb:b8:58:
                    15:a3:cd:d0:26:b8:ae:0c:bf:56:da:43:a1:e4:d5:
                    35:f7:02:12:0f:85:f0:24:63:58:f8:a1:f8:f9:21:
                    73:e4:9c:08:06:c1:4f:62:83:04:ce:cf:e7:ef:b3:
                    c1:ad:5a:ff:15:f3:61:a2:a2:82:d9:2f:2e:f7:70:
                    78:cb:47:df:80:46:82:fa:60:15:c2:6a:3a:c6:87:
                    f4:46:8a:b6:19:3f:46:9f:d7:be:06:15:59:da:96:
                    40:9d:31:7c:b2:73:65:c0:42:be:45:05:bb:46:52:
                    eb:cf:08:7b:5a:f6:f6:7d:fe:f0:6f:37:56:fe:49:
                    50:f2:ea:92:23:fc:ac:7e:68:37:7a:a8:29:11:3c:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:49:DC:13:A0:B2:3A:EF:7B:B9:D4:3B:31:47:19:B2:DF:1F:85:91
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f4:5c:37:a5:87:19:b8:81:b1:fd:5e:e2:57:39:1e:3f:ad:
         b7:54:3a:d4:14:8b:06:94:18:6b:15:d5:51:70:11:99:e9:6c:
         8b:be:79:5d:bb:31:60:fa:1d:5b:3c:5b:c4:93:8b:24:09:71:
         b0:3e:59:2b:52:b5:1b:7e:cd:bb:d6:75:21:48:a2:ac:d9:1a:
         71:26:02:9c:a9:fd:19:1b:e0:b2:e3:36:52:10:55:83:09:a8:
         6f:f3:50:02:41:a2:c1:40:54:98:2e:c5:06:e6:39:28:9f:1e:
         e1:4f:b0:7a:a0:22:07:0f:30:b5:bb:05:2e:5d:1f:30:28:a9:
         f6:9b:8f:0a:ef:a4:22:b4:f0:8a:55:b7:cc:07:dd:94:4c:34:
         e5:1b:56:37:e2:70:d5:a8:ab:b2:99:58:94:cf:64:64:4f:2d:
         7d:6e:e2:ea:a3:7e:0b:68:f3:ed:88:ac:bb:43:e2:bd:a3:38:
         5c:db:c7:9c:7f:21:0a:d1:03:ed:55:1e:3e:2e:15:f7:7f:b5:
         b6:47:56:6e:3d:bb:30:50:d7:05:d7:9e:8c:57:bc:48:ff:b3:
         91:7a:05:0c:38:55:67:86:21:3a:87:32:55:68:de:59:cc:18:
         9b:fc:dd:04:e6:85:c3:54:e9:e3:b2:7d:2c:3d:ed:71:3d:0e:
         13:8f:3e:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZDxmd3d9fOd/t8g3sZ2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjUxMjA2MDIwMTA5WhcNMjUxMjA3MDIwMTA5WjAzMTEwLwYDVQQD
EygwYjQ5ZGMxM2EwYjIzYWVmN2JiOWQ0M2IzMTQ3MTliMmRmMWY4NTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswfPZ3ZY3VM9y13X6Em1fmqN/EIr
eaZO2q8/3uuHgad8YXzIjX/iE4+3YYAnsyn+FyGhXimY4aJfqSByl/CyWjrVudLh
IB2PDYGMLjNvuJ4s9S9RkwJnOhE8nUMe+/u4mLSrR4ARnC0KlNLons5fjewHZcr7
uFgVo83QJriuDL9W2kOh5NU19wISD4XwJGNY+KH4+SFz5JwIBsFPYoMEzs/n77PB
rVr/FfNhoqKC2S8u93B4y0ffgEaC+mAVwmo6xof0Roq2GT9Gn9e+BhVZ2pZAnTF8
snNlwEK+RQW7RlLrzwh7Wvb2ff7wbzdW/klQ8uqSI/ysfmg3eqgpETxkdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtJ3BOgsjrve7nUOzFHGbLfH4WRMB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfRcN6WH
GbiBsf1e4lc5Hj+tt1Q61BSLBpQYaxXVUXARmelsi755XbsxYPodWzxbxJOLJAlx
sD5ZK1K1G37Nu9Z1IUiirNkacSYCnKn9GRvgsuM2UhBVgwmob/NQAkGiwUBUmC7F
BuY5KJ8e4U+weqAiBw8wtbsFLl0fMCip9puPCu+kIrTwilW3zAfdlEw05RtWN+Jw
1airsplYlM9kZE8tfW7i6qN+C2jz7Yisu0PivaM4XNvHnH8hCtED7VUePi4V93+1
tkdWbj27MFDXBdeejFe8SP+zkXoFDDhVZ4YhOocyVWjeWcwYm/zdBOaFw1Tp47J9
LD3tcT0OE48+lQ==
-----END CERTIFICATE-----