This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          6rpxQJkRunEaBx3E8cMvAszPFli/7gBdjdFGv0lES1s=
Subject key identifier:   CF:50:E5:35:24:B7:91:BA:FC:53:1E:79:6D:E4:D3:BC:8B:52:DF:1A
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       019AF27684643890CBBB57417326A2575D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          0FE4
Signing time:             Sat 06 Dec 2025 07:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:44 +0000
Files and hashes:         1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=)
                          2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=)
                          3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=)
                          4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=)
                          5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=)
                          6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=)
                          7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=)
                          8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=)
                          9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=)
                          10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=)
                          11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=)
                          12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=)
                          13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=)
                          14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=)
                          15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=)
                          16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=)
                          17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=)
                          18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=)
                          19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=)
                          20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=)
                          21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=)
                          22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=)
                          23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=)
                          24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=)
                          25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=)
                          26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=)
                          27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=)
                          28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=)
                          29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: 0EL3lAKV98cNgBCyp2ra/rDtSvcV9xURtvSoI7lUnKk=)
                          30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=)
                          31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=)
                          32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=)
                          33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=)
                          34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=)
                          35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=)
                          36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:84:64:38:90:cb:bb:57:41:73:26:a2:57:5d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Dec  6 07:00:44 2025 GMT
            Not After : Dec  7 07:00:44 2025 GMT
        Subject: CN=cf50e53524b791bafc531e796de4d3bc8b52df1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f7:79:8b:4a:12:e2:88:a1:d1:60:92:ab:0f:
                    a4:0b:ea:f8:d9:28:f0:57:7c:84:78:f0:0a:1b:59:
                    7f:d2:0b:9f:34:97:50:da:2f:aa:35:aa:b1:b0:fb:
                    cb:af:de:11:18:6b:89:62:fc:ac:6a:e4:d8:89:cb:
                    d0:47:1b:21:35:c7:29:48:5f:45:46:2a:80:4c:a5:
                    ac:c7:e1:5f:27:96:b4:3b:53:f3:27:1f:19:c5:1f:
                    8e:f7:5a:ab:34:8e:09:ef:11:04:2e:07:da:fa:ac:
                    9f:6e:b3:15:a8:96:af:02:02:e7:a2:7a:33:74:2a:
                    51:08:88:a5:9e:d7:73:bb:ce:d7:c5:0b:ce:07:60:
                    6e:9b:f1:7f:f4:02:da:98:3c:08:c7:dc:97:6a:59:
                    3b:d2:b3:63:68:0a:ad:dd:a9:1c:9c:f5:41:5a:1c:
                    f2:34:66:02:26:99:81:93:cf:99:bb:ce:ee:4a:23:
                    26:b1:fb:1a:3e:f7:df:f8:47:d5:61:49:09:34:54:
                    96:c5:22:b6:70:6e:7d:c3:1c:dc:b6:4a:c7:cc:50:
                    aa:f7:83:86:fd:66:e3:0a:4d:93:ba:e3:57:8b:5d:
                    3e:d8:54:05:1b:59:02:e9:11:d0:da:31:af:97:10:
                    a6:75:f3:f2:28:e4:2c:b0:d3:e7:78:b7:30:30:37:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:50:E5:35:24:B7:91:BA:FC:53:1E:79:6D:E4:D3:BC:8B:52:DF:1A
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:74:61:9e:e3:ab:7e:3f:0b:d7:7e:04:a6:65:85:bf:14:19:
         74:aa:52:0b:c6:63:e1:e0:36:da:67:a5:bd:67:bc:8f:c4:1e:
         be:8e:14:a0:e0:74:0e:1f:04:c7:3f:6f:8f:10:35:c4:f5:78:
         90:bd:cc:f4:d8:25:e6:25:ac:4b:eb:c1:6e:c6:d2:49:cd:b5:
         56:34:4d:63:5b:06:15:12:be:35:b0:b5:69:11:d7:34:9c:b5:
         8b:a2:6e:42:c4:a6:10:02:fe:05:d4:ed:9c:61:e8:7c:34:25:
         73:f6:15:9b:ef:03:c2:9b:59:d8:65:50:f5:26:96:78:d0:95:
         e2:b2:f4:82:23:93:41:0a:04:02:af:08:f1:de:97:19:d0:8e:
         2b:f4:67:e9:14:96:bc:35:3f:0e:06:5a:3d:3a:c5:b2:17:71:
         ad:35:5b:74:04:5b:f5:4a:7d:66:8c:c9:f3:24:16:a0:44:8d:
         de:7d:e6:8c:e2:ca:3a:83:cb:30:99:11:e4:df:90:7d:36:67:
         dc:84:d8:2b:7e:eb:a7:48:0d:d9:c3:47:40:d2:a7:3c:1b:66:
         ea:ae:3b:70:fb:ff:4d:b6:19:3f:06:fd:d3:00:33:79:7c:1d:
         a9:e1:a9:4b:94:37:b0:b5:f6:e4:d6:e7:b5:7a:80:c2:e0:93:
         78:1e:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:04:46 2025 by rpki-client