This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
File:                     v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json)
Hash identifier:          nSixlR251f5kkxAL8/RmplP19AwTtLXTzPRf7lcXUfM=
Subject key identifier:   2E:BC:DD:E8:47:34:B0:40:D6:EE:A1:93:1E:50:A1:F2:F2:CF:2D:C5
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Certificate issuer:       /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial:       019AF2096CCD1F5A338EF23B4C8339E04E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
Manifest number:          1424
Signing time:             Sat 06 Dec 2025 05:01:35 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:35 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:35 +0000
Files and hashes:         1: 1-S5qpnBw1ylZG1spddvT9f57eco.roa (hash: maWJwVVWyYP373g2CIlTAWvamrZD0BLeDX8OlPQnHj0=)
                          2: 4YJZgp7xTWFiJLAAYmAdYMX-8jw.roa (hash: R7iC2oeDJte4OQeOXE0fKY5JFdMXKkWYo6RK+dbq0eg=)
                          3: 89emf-zQu5cChR3UYQiQV0LCzb8.roa (hash: Gn4bAw93VPtwM8/WqcYl7nEAu6xe7jHHYKNJVu4549g=)
                          4: 8BYyiV_FmTFHvbWCMT9MCIE0Jec.roa (hash: vchZYcV4SDRnLThnALYy/67VTOlcKJqhG1pqy1A7Xrw=)
                          5: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (hash: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=)
                          6: CAPtrPNnBdBiOUsFIZ1KMxmmZso.roa (hash: 9jgYa3vRUAb8QbrmXxskhHH0R6D/iCZRnkTtWpWyrOU=)
                          7: DwoEeOBfOR1SSGusspKAwmFsVzQ.roa (hash: H0pqbDAXRPRfJy9ww7VBJEAMgv3v6lJt4id1Wh1pb3c=)
                          8: ENmvSrLnZ5l3zdl7_SWX-dmV2iw.roa (hash: d78rG1JxemNpbntQxK8HRnUpFVFRNZsmtcWweXwXHFA=)
                          9: FrUnjfKCvGdTklpw5yjishp0Vp0.roa (hash: socEogWsYtSV64aAUP7N8mo0FIS+nbU+IRfnzQIfWZ8=)
                          10: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (hash: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=)
                          11: LG9XIK_MLYyjB0UFbHjeKYpMPK8.roa (hash: 8XYZGjqN6kqvc28ZEmvKEuOWBYWjfI/wtI4kkaavjPQ=)
                          12: LHp-Ta0kps7ZGlhRPmsNyhh2hwA.roa (hash: bBoLumt4C2qITlPGkAX4DT2//QAjdutXa5WDertG6UU=)
                          13: M08pG0WnhIQX2KOfjmHJXSyaCoc.roa (hash: 7/2skEcs3WncoMu7ukPnikjrb0ygdobEezSJD1ACHfA=)
                          14: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (hash: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=)
                          15: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (hash: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=)
                          16: QDo92mi4UWCLSwxkXaA5OctFTkc.roa (hash: ovBhPdG/TKSn9sfg2AM068Pokavj0m1i5AMYnj3jGLs=)
                          17: RJ_pu626Ce_XeWRRjGCg0rBJ5No.roa (hash: CnjyAdkpFkqDDXWo/A5sDL6/Mzrh604ryWOcVYb0EdU=)
                          18: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (hash: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=)
                          19: YyBDnlwVRLs70MJK1KT4FesLKyU.roa (hash: 4tm/JGl1e/uknO1Ju/nt2CfaO1Nf+gSmh9MxSuAs2aA=)
                          20: faH_H0bFTtExgpasofxwLYYJANE.roa (hash: UuzU0p9stf+YHdFjtIwVt8QxOqyBZDWMZbSxRsrWLug=)
                          21: fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa (hash: sqU76Se28Ec/MvIdqZD/zhVxUgHos++zus2QQ63LwTY=)
                          22: gdi_J_c0GtCc5x443kexg-b8wPs.roa (hash: Aw5kYwxs8AG4Z/q8iT+6fyl5oYGYb5LB9ortXvdtI9I=)
                          23: gprH44AplwwXGaOOjeCuLFfIu_g.roa (hash: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=)
                          24: hP2fgAy34XIg7aM2C0Ad6ElaYgI.roa (hash: /xs3DUUFJAe9wbGBaQmfw6+eASI54MfNuZpQE+CXA0o=)
                          25: i0SeWpSdogsaJx8W0_kVOAU_lRM.roa (hash: zq4L3oJxr9W9+WWee/L9rMw2rGgwNa6vusNf5ygshpI=)
                          26: i7VszA84SZS6OuHdokjMypdaGJc.roa (hash: m3y569SYJ1HX7ytRuzexHPJwkziPyzH7M0vjR2GZNvA=)
                          27: lsUTyap9w4Y2oLY8ZnktLZStCYQ.roa (hash: emTi848aQBwWEDQNS5g3zSRylsJAzf0KVP+OaAM5+qE=)
                          28: rlvR4lgAAPe6NxanZUVpezIwE3A.roa (hash: z8dG8w6G/0kvxVmZ+4RC/Z1OH/kukWiL1TxfJ/ZMp5Y=)
                          29: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: gNj4o4/jk4OpwEldhvuZUErfWueJ1GCV8JiJsvkzbJk=)
                          30: w8idkeWbG52TtIpx9U6pAxc7Df8.roa (hash: u3rb6lYT1ibz1O/axkufNUJsAz+Fi6V/7un9KfX38o4=)
                          31: wr8foz5Mir5CdXg4AJzu9v_vxAA.roa (hash: ixM1cMPLJGFu51fGqV4fl5yayoYnJRWGn/rjQ5uu5VM=)
                          32: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (hash: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:6c:cd:1f:5a:33:8e:f2:3b:4c:83:39:e0:4e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
        Validity
            Not Before: Dec  6 05:01:35 2025 GMT
            Not After : Dec  7 05:01:35 2025 GMT
        Subject: CN=2ebcdde84734b040d6eea1931e50a1f2f2cf2dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:92:66:d7:a8:44:46:57:64:53:46:a0:26:20:
                    d5:61:69:2f:6b:05:ca:77:19:f6:21:f1:aa:78:56:
                    dc:45:38:6d:99:02:3f:20:04:fe:cc:84:6d:9a:d7:
                    c4:3f:bf:17:60:53:ed:ee:7f:a1:2a:d4:c5:4e:e1:
                    61:39:a5:32:7c:6a:34:74:4e:5c:99:c3:cc:bd:8a:
                    b2:40:91:be:ad:f5:d9:0f:20:c4:ba:ab:c2:0b:ae:
                    1b:db:93:9b:50:83:ba:29:3d:8d:8d:39:3b:e5:3f:
                    81:b3:2d:69:96:ca:ee:5c:57:7a:77:1a:ac:1b:bb:
                    ac:b7:fc:f8:b2:d5:e9:bc:7d:88:49:17:f8:c8:b6:
                    d3:5e:4d:cb:31:b7:80:5b:ca:b1:0c:c9:d7:8c:8e:
                    8c:62:e0:2c:9f:83:8b:a7:4e:5c:4f:0f:f4:e4:65:
                    e4:09:a7:aa:e1:35:20:bf:88:c5:8d:74:a4:72:67:
                    5c:d4:74:f9:2f:32:38:3d:24:7e:54:22:03:ad:a6:
                    ea:32:cc:8d:5f:e6:66:47:fd:23:f7:06:db:fe:3a:
                    6a:06:c2:b8:78:d6:ef:07:c7:1d:6b:86:4f:33:22:
                    51:1c:dd:d3:9f:85:1c:68:b5:10:c0:fc:ba:e7:eb:
                    ab:ec:03:ab:14:1f:3a:9e:5a:e8:4f:25:42:64:41:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BC:DD:E8:47:34:B0:40:D6:EE:A1:93:1E:50:A1:F2:F2:CF:2D:C5
            X509v3 Authority Key Identifier:
                keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2a:fa:96:19:80:6a:d1:79:bc:48:42:b0:12:ba:a4:8b:88:
         4e:32:30:d6:7e:77:a7:5a:ed:b3:81:71:30:0a:77:e6:35:49:
         47:84:25:87:9e:8a:4e:0a:24:44:b1:56:7a:3f:db:aa:0b:12:
         63:44:33:38:2c:08:75:60:ba:fc:58:36:72:e5:5d:a0:df:41:
         bc:d2:02:e7:e4:76:ac:69:77:a6:14:cf:3d:41:fc:21:cf:0e:
         01:bd:89:88:00:41:42:93:6c:fa:51:eb:8e:5c:f7:ff:5b:b1:
         8d:a7:28:ca:0c:b1:f3:37:de:48:be:ef:47:ef:a3:e0:32:65:
         08:ee:db:8d:4c:6c:b5:f1:a2:d5:36:3c:c7:92:9c:2f:3b:c6:
         8c:d2:20:43:9f:5a:04:83:45:ed:2d:40:4d:34:1e:fd:53:e8:
         66:62:3a:b2:2b:2b:73:86:c3:15:28:4b:1e:fc:25:52:de:a5:
         ea:75:54:7b:08:72:f9:f7:90:18:88:d2:c9:06:01:24:15:2b:
         55:02:0e:2a:f7:a9:95:b4:e5:e8:27:03:e3:cb:56:f7:0b:9e:
         d0:03:6d:2f:7f:9f:87:30:f0:9b:09:3e:1f:0b:2e:26:51:97:
         6b:f3:d6:56:04:58:a5:b3:c9:7b:5e:7e:ee:46:d3:ca:b7:f2:
         b8:35:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:15:43 2025 by rpki-client