This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          ledjKmZ+tbiEDzpRv/qdoNutkLa1S4uXwGMPz62RdyI=
Subject key identifier:   8B:75:8F:7F:0B:93:43:58:F8:F0:6D:18:9E:CA:4E:26:8F:04:68:2C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019AF3F7665FE0476369FAC91798FA2042CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          0FDD
Signing time:             Sat 06 Dec 2025 14:01:08 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:08 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:08 +0000
Files and hashes:         1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=)
                          2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=)
                          3: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=)
                          4: 5Gpugl9qvXvWFS1DpStrfULxE_U.roa (hash: KZiaRVIOQGiZVW3R13UM2WDkj8fWfnSB18hjkaWIqbs=)
                          5: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=)
                          6: 65ahf5r6xKbeZ8AGsp6YsLsmAZE.roa (hash: Sj/V9VHJ8TFvtffvUCl874DjTHZKJVL+voddh2kr3I4=)
                          7: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=)
                          8: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=)
                          9: 8wGardeeEmTMhzRkH2QgILTu5wc.roa (hash: Cdy17idpQ91vblcr1bF/c0NNDsf4K72mGLO3I6JxJgc=)
                          10: 9diCFn7EgM2RCCX6Qx6aFyhgX2E.roa (hash: Nh8bc26byCkv5gvckcokp5euxtQrzclKwBg68owpgwo=)
                          11: AH9IWPeSjn4zPMXrJdOOZZAn9Aw.roa (hash: NZOres5BfCUJDRAZEdwJLZ3pKyCM0qr94CohvGLshJM=)
                          12: EqQMeL6zx5KJ7G-6yvg5oeaml80.roa (hash: +hIYVqIF3npRwqzc+KC9S17raCPIuUeac2Niy0EAaaQ=)
                          13: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=)
                          14: GgheZMui_9obLhlNhZVy8uWvs5U.roa (hash: 7NB7RYWksH/wQuJ5gKOAyFQPxId7nbq3caWrTZFbMUE=)
                          15: GxXapth5TXJfKL3THtGbcZ2d5Gc.roa (hash: GIxE2UOc9CUSVW0vSExmLz7YKeQavAKFp0T5CTs9JW0=)
                          16: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=)
                          17: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=)
                          18: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=)
                          19: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=)
                          20: P1Oafitv1-CeGpiS3295bk_jc2k.roa (hash: zdC8sgbH1GuCJi8ZjmFdq/tJ5mm7D49KA4AN5K55yRY=)
                          21: PAT-1ixXWzm9Bfubciqff_m-8kY.roa (hash: nHull2wN05E21by+dWEX9iqYF+MEaBy9skelAofF8sQ=)
                          22: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=)
                          23: RjFS94paAjWz-3G0y1dI22n5TrQ.roa (hash: JlGMnpLyU9SIKXBkIF00C5OEytENmKH+q58a58QV1CI=)
                          24: SqKkKM173VSrB36qGmxTUJHKCo0.roa (hash: 48hEcJJ8yoYkRJhZ40G+F37LnKZ8jLN3UCGXFfcuN8I=)
                          25: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=)
                          26: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=)
                          27: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=)
                          28: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=)
                          29: eRDw7dF55P7wHv9vfdNgciZiits.roa (hash: MdrDuZVh60KAJjt7uD5dLHrckgAME9PGiYJbxXCoOHg=)
                          30: eb1JGLGjHk8dUCm22Z9YVbWJfI4.roa (hash: 4dk6LdqYI6h3lwSIwoSI/6KhGYHQ7oiRewrKPkKoR8Q=)
                          31: hlbDH1BhxY_47J6JKo3X--hFSJc.roa (hash: j+krjic4ia3MsnX0RPgsoulWfYQqpaFZ1Z4xAOqKERc=)
                          32: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: uqFjkj2ay8YO+GWbQl8S+TH27a5H06oyg8vpqYFI6wg=)
                          33: jVzLhR_-fZDDxOR849cM8vp6pzo.roa (hash: j+TN92lkP2jjoQ1DpZsUrV4hygUYX+rjfYRIwGn+Dyc=)
                          34: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=)
                          35: moTDq53FtqLZAk0AGJnD6LpxpL4.roa (hash: yDXZvfMOXGpBwTjMd4JFoseeDN5zwWwTjLyIqfnezgg=)
                          36: mrJC9W9EE59GYgtXbqXAdDLeR5M.roa (hash: EmQASPlX4VYn+oN5h+q7sFx0PUiUYy3q6dEHOc0jLAs=)
                          37: nBCkRyX1WlWGiDbtpEcZ1yzXCz8.roa (hash: N7pYS0DZbvPX9AJ7+c9P/Fy4kdTMZIvg/FrKj/0hE8k=)
                          38: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=)
                          39: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=)
                          40: pnumxDfICVHia5do1NtNtM481Fg.roa (hash: Z3XykIcH5XHf5JFowplLEgcMZj6sQcUDlFWPwTcLHhA=)
                          41: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=)
                          42: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=)
                          43: yFVnEJP7VmWlHCimsj8mvmclw8M.roa (hash: Id+C3+f0hiPCfYs2C9ySsYjpohP/fRM7b8PZS/7AKHg=)
                          44: ynxoqLNGRfbAQl1csrIqvWu2om8.roa (hash: 02FpxfF5rw0ZP5XHvGYcpaVTPQJddG9K1OzX9QimBYM=)
                          45: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:66:5f:e0:47:63:69:fa:c9:17:98:fa:20:42:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Dec  6 14:01:08 2025 GMT
            Not After : Dec  7 14:01:08 2025 GMT
        Subject: CN=8b758f7f0b934358f8f06d189eca4e268f04682c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:55:26:17:1b:23:0d:a7:da:f2:8a:d4:38:ce:
                    64:89:0e:47:62:74:2d:5d:83:2b:3e:5c:9b:dc:d8:
                    11:dc:ff:2f:7a:3b:15:f8:ad:09:30:62:49:2c:9c:
                    fc:ea:39:e6:e8:c8:24:54:19:a0:72:c6:e1:84:75:
                    af:6f:aa:86:39:50:5d:7f:9c:ca:16:56:85:b5:14:
                    40:33:a5:5c:83:95:9e:21:16:73:a8:13:ee:bd:8b:
                    04:73:ae:22:d3:18:84:b6:6c:e1:18:72:7c:2d:26:
                    c1:70:42:5b:7d:02:ed:97:94:62:68:7f:f4:7b:71:
                    1b:63:89:c8:ac:05:e3:fc:45:c9:3a:2a:85:72:e6:
                    f7:0f:ef:f7:17:d0:7d:9c:da:74:36:d0:10:10:82:
                    62:62:0c:85:f4:75:8e:2a:8d:7c:6a:50:94:7c:a1:
                    fb:ca:22:30:3c:b3:e5:e4:aa:44:4e:99:9d:32:95:
                    28:ab:69:ee:ed:0b:11:01:fd:c4:91:d1:51:1c:75:
                    02:d4:d3:65:a6:0d:5f:4e:17:28:fe:f0:88:41:a8:
                    c8:f6:fb:17:9e:84:08:33:04:e4:4d:52:c3:0c:89:
                    8b:ba:73:8b:8c:b2:7b:c8:78:b0:e9:28:ee:7f:31:
                    f5:2c:49:58:98:57:6b:16:ce:1e:02:99:63:9a:1f:
                    0c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:75:8F:7F:0B:93:43:58:F8:F0:6D:18:9E:CA:4E:26:8F:04:68:2C
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:33:be:36:a2:bd:75:68:49:92:02:a8:64:61:08:7d:1e:f8:
         47:c6:cd:92:70:78:97:2a:7b:b8:5c:18:68:12:96:7e:93:28:
         e0:70:09:d6:79:f3:42:e1:73:f0:63:b7:6d:57:d4:22:99:c5:
         ea:41:77:7c:d3:77:4a:82:6e:a4:c3:47:52:cc:aa:7c:05:a3:
         9a:7b:e7:90:38:e3:08:db:1b:df:38:2b:6f:7b:5b:91:b4:f4:
         7b:1e:8c:48:7d:ec:2a:c8:be:60:d3:c2:24:6f:66:dd:cf:5f:
         c2:e9:2e:96:be:6a:fb:3e:60:84:a7:1f:fa:f0:3b:44:b5:d0:
         c1:5d:63:2e:87:15:43:66:48:4a:f5:22:fe:a2:47:b7:c3:b4:
         58:73:28:24:d2:22:d3:73:ea:eb:47:8c:03:fd:d6:c1:fa:97:
         96:03:16:af:68:2c:e7:89:e8:10:37:ea:94:cb:1c:94:7c:5d:
         3f:5b:e0:93:29:c3:96:f9:d0:31:34:6a:54:44:ee:2a:c2:9c:
         a2:9d:07:4e:74:7d:0c:40:7d:62:e1:0b:3c:18:ef:12:8b:90:
         15:b0:42:90:83:9f:3e:31:2e:19:c1:07:1b:9f:31:8b:28:e2:
         f7:a3:0c:ee:d0:65:10:9a:41:0e:df:72:65:80:7b:f8:f1:61:
         bb:7e:9a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:10 2025 by rpki-client