This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
File:                     1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json)
Hash identifier:          2Zgtj7OAVF7WUz71yF3/r1+ugro3ZgfmVTkj9KwEQEU=
Subject key identifier:   CB:C6:47:6B:86:BA:1F:F6:13:77:72:3B:8C:4D:8F:9D:86:01:FB:FB
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       019AF23F7358A7451E75D58F2DD44785F0A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
Manifest number:          13F0
Signing time:             Sat 06 Dec 2025 06:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:35 +0000
Files and hashes:         1: 0ZW5KAczE20U5QcyFUsqUpXEED8.roa (hash: Qetbra8MpJDEVBlrjsX+7ywmI/a2YJ5nyn+yLqs6/P4=)
                          2: 1-KqzRG2ufGqmf5yQ7wQzU4Xpuyc.roa (hash: l2xJNQYVF3CqUltI0y/hIsNBwR8gaP86h2XHPrc9QSw=)
                          3: 1-UyIE7mqGVmQEQbqx8oewJU8LM.roa (hash: KQFvzUnWZGxgTX/FEU09xFGvTL2c/hN91WsuPQzlMhw=)
                          4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: jpAQ0VKWt62ILdA90cQU3nbulGxJ6yT2+6z66qsQu0I=)
                          5: 2MOnXULTLtYclW-99A5rta05gq0.roa (hash: 6oGTjNPxn9eGz+r7PD17nLTEHvSwkvDHY+K0q2a9Gmw=)
                          6: 2NIi98dN4sD0TIk71akteZnx1sw.roa (hash: k2get3lC4qal5WwpLqouWUlNle+TBDTdoCPLPn4qxTI=)
                          7: 30ltggt23rh7GTkDQejt9lmB4lI.roa (hash: 0Vi+rnQhpwPVxdHvuD/xFHoYMxHHBZAXfOAyM/8y4Rg=)
                          8: 3KlMZ-8oPCOwu9zbCpY8l5ygzW0.roa (hash: Nge1ZCdkQPHDYH5IbuQgeafxrKKZqheIQyKLqfoWvq8=)
                          9: 4JaepfCsA_lI-MmKxIYkIhWjTNo.roa (hash: n4hI5BYrL4MC9QXfsIecgobxU5/Ctvsdshk1tOj/4EM=)
                          10: 5TtTEnOmkanhTyR3jvoic_M4oOw.roa (hash: dYr6gC4EPJ8sQLdRS6y23vT8eJ0Xwsf6Qa1i1BT9vgE=)
                          11: 6BcG8bb1z_N4tvvUd1Gx5I8lmwU.roa (hash: LIMmkOw4HP8z7A8TqIJ9/r7g9X4ISQkmNHzzK5GwkoA=)
                          12: 7tdpn3LvL4ATw0CK_nHXC0-PM_g.roa (hash: //EiIzMHwuVi0THXNdxsIrv8Y+yxoxo1dBTprYwHSf0=)
                          13: B24rrIATyI6Y9bSpOIpB3PSj_8Q.roa (hash: ocbaVuTRQvDIOrxTxxg4/a9rgNewaIFpClA6y+NFqrM=)
                          14: BF9-axl09aLWZxr5YBfgizGRwYQ.roa (hash: +Qu2Xjmm9jSdAOCIdC+nqYHdIw9cP+EHQrcHEv9RXEo=)
                          15: BKmZbRh0zQ9oa_wPaKfsvtQfYUE.roa (hash: MF5MiDvqIGWrFA0JrjP3/BbBY/oWFnXukDS276OlJ/k=)
                          16: DlkMGzQHqOPh83nGG23nOj8tXkA.roa (hash: huMdxewxpuA4QGSVi+HwJbNMTf5SAHSJShnMsKq063c=)
                          17: F6rEC-DZF3Bn189GQxLFZdrW9ss.roa (hash: 0wg9QuGJMND5sNEy85LKkdkXbGMFG3a1ulykBXwSpbk=)
                          18: GKIBvtXq3THm63QH_8TaUji8HSI.roa (hash: +pvrI4erf1Lcj/8FcUip5ayRE0gXLz82FrGP84f2lSQ=)
                          19: I9PPHzCZLC3KRf5pPW4mcpNhTV8.roa (hash: 5VGGGh+D7rGqED1Cty/ds9a2QEhu4eIqlF+8kjtmXGs=)
                          20: KRDtf3OrZoijGFAdBpTPZ_LqhCU.roa (hash: hhT6v19/kwC+l+XsitAuGoa0pCOzj3GbmlwXD/IoK9Q=)
                          21: R8VY5MGVdE17A_2z_8Qznz96tZE.roa (hash: Y6Us+zb47DyfsgxnI70nrLZEznsAibIlmNM0YizAwAI=)
                          22: UJ9wNu4dLXvqKoUnbBe2xQx_31k.roa (hash: j4PamiWHKROafLFoI92zeGHphQE1Y+azapQ4RzxfK2A=)
                          23: UYQwhD4luTCUu0PCAY6S9fVvQB8.roa (hash: xwaHQTXwHl9OCxbP17eG8J9sJZEQNFLx/yHQgL2r4Fs=)
                          24: XPRcOQ12damhWz672VXQCKzctD0.roa (hash: +UjnKkHiRNO5TAw4O2QYp9JmNxVCRQBE+d4ZaSLhA7Y=)
                          25: Ywm1jYc0iwGuAB63sRGCNirYSf4.roa (hash: r1HsrQz41mTN+65j1uhqS2AuuYL14Zx4+m/FTWRASv4=)
                          26: aQXWpkeo8CYBrBnYK0PT1cWdHCk.roa (hash: JF3VKXhZgLXaADeU/i5/1vCJwGFlrS9omLotINcIakY=)
                          27: biZIWkN3do83nCL4GcgvnTOKqEI.roa (hash: C7QSBlbd7LRHpMATyfH1mxp6DG7K5WX31EKCXaPNBU0=)
                          28: bujGm6GH7mncfnxw5jTViL-bAwE.roa (hash: p2zIVwjY93QiNgpvPIwoy5vB+KV3M+ELyrgfIsjTSIs=)
                          29: hBV1lora2TRWVIDjfS5RTXSSC-w.roa (hash: ZFsMk9BOGX+QUOlHkhTwmMr1ntoiOz88gyQ0q6nWnI0=)
                          30: igGBFD8kNEyp0oLcDRQiMdpWqUg.roa (hash: JBfHKzIq0hybb3YSwoXuYc0ak5WjhrecAhw46dVwLpA=)
                          31: n0D7QgHWZsopO1EgFVVvK-P6Dwo.roa (hash: 1Tdg8cemFUBIoV4egYbYb5wLjUFGRRBY2gDNWEAljR4=)
                          32: n74OnOk2cupPxqpmEGxm3X6NJi0.roa (hash: 4IFl5DFKU9Rz9OqnMogOy+LZtMk2c06yHfw/g7OpLv4=)
                          33: nE4q77HuE9eMvcYlJ0VXC5AQzH4.roa (hash: xhWHmf0Wl/9mSIPxWksh0jgqlzI8er3WRgeIRoZRvn0=)
                          34: nq598Y-mH7WXt-wp7oTFReqn5JI.roa (hash: Lm1lMb1JelLgN0kxz8OzEijA9ElHx0kaIfvRfFoPkz8=)
                          35: rDFkTX5m2EO34s7P6mELh2PpTv8.roa (hash: tZ+O4/AWsb0SLsjDMIyQ8MdUzk2kAVytgwYcD7IQjCo=)
                          36: rcDj_gzVqEGnWxyFh2uHR9qUtN4.roa (hash: vMZLTAcjN1T2lc6mDfUwyn2YTO5QFTYoYEhTJHBI/0s=)
                          37: sIt3F6ds6E5Cw-7IGWGY_E58vEs.roa (hash: Sbu/A4tPhb/YMsWEmB4prBnkedMa/77cZPz9BrDKBSg=)
                          38: s_sfe0PwpYYFQ6HtLR5YzbGsYe8.roa (hash: Q4EHED4zem9TjQrfPSu31rh8tUnEGOxod/kov3RZEgM=)
                          39: sc5esKExOPd9MvtDyHiUo5axTto.roa (hash: T21z00EGEhOOCwVKI7S6BwJd+ujtp85ADOaPIJ5A1Tk=)
                          40: tBCiClZ01i6bRTFcoV9J9olvPiQ.roa (hash: F04EUBkZe5J5GkXs7KwkzKr7Lxa3zzkxl/rd7ozso6E=)
                          41: uLID9O7nU2pNtz7HGdAH46WS7JM.roa (hash: oYgEaY31SpEl7BoKtZCP9Lzuu9kwt/rbH0ExUKFH0PU=)
                          42: uxnZYNa8d97ZTb_0yY6HvXc3zYY.roa (hash: Uc2FRxSyDw4WWufpEWvzn7eMEVoT2cdYyXigSL+3Mr8=)
                          43: v-xNq330WdoiiPlZjkVxav1Azgs.roa (hash: 5Gfb2PYZTagtc6GTH7GCkVgOxZ7Twxzj2kExG39tIfs=)
                          44: y4Vx9Qkt31hnDWKRDzjTPFqJDKw.roa (hash: pJac98NKx2lAtwRM2cZV4ynaL5asMJypxmM9yqZe034=)
                          45: yh9ccliyxEcC6Avn1oCQoSv62L0.roa (hash: +3+0y4CEemTmWkaSTewyd3AcJUzmmij1RdzS9B5WjYY=)
                          46: zo1EB5eOu--ZgkCTUFK4z2eLIIU.roa (hash: GOnyByd/Nh/dSSCTb9OFvngxMy/STifQEOgflC9UV2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:73:58:a7:45:1e:75:d5:8f:2d:d4:47:85:f0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Dec  6 06:00:35 2025 GMT
            Not After : Dec  7 06:00:35 2025 GMT
        Subject: CN=cbc6476b86ba1ff61377723b8c4d8f9d8601fbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:c4:91:3e:3f:e6:c0:c5:d1:8a:d3:e5:4c:
                    1c:1f:e0:88:1c:59:9f:6b:bf:fa:c5:91:28:dd:74:
                    a8:28:95:65:be:ad:fe:75:ce:ab:a8:90:8b:ef:dc:
                    0e:a8:55:a8:36:7b:44:d9:79:07:de:7d:70:39:79:
                    31:52:2b:52:b1:c3:59:a0:32:f0:e0:7d:98:df:44:
                    14:62:1c:9b:cf:fb:77:cf:fe:b6:ca:80:76:c5:e8:
                    48:3b:e7:04:24:16:cd:1c:e3:ba:ea:a7:4b:57:e6:
                    5c:30:6d:03:e8:ea:3d:a0:fb:9e:de:e3:66:a0:68:
                    a5:64:ec:05:1d:73:d1:1b:a9:86:ec:65:3d:b1:fe:
                    69:70:cc:cd:7c:76:2e:ac:ab:ff:7e:5d:50:9c:8b:
                    8f:c7:b3:a5:a5:a8:4a:42:94:01:4c:ea:f0:41:75:
                    38:45:c3:58:6f:3e:c1:46:f1:e5:41:8c:38:34:51:
                    22:fd:0c:ee:6e:c0:4e:93:3a:1a:e1:8b:50:7d:ba:
                    d5:19:26:0e:06:9b:c9:45:0a:3d:0f:45:18:40:b2:
                    22:52:e5:3a:ae:3e:03:35:c7:d5:e3:06:db:81:02:
                    4b:d5:5a:92:3d:be:51:05:5d:7a:53:74:2a:8f:2b:
                    3a:16:a3:bd:aa:d4:ee:28:b7:ee:35:01:64:b5:c1:
                    09:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C6:47:6B:86:BA:1F:F6:13:77:72:3B:8C:4D:8F:9D:86:01:FB:FB
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5d:6c:d8:a0:23:d2:7b:4c:17:62:4e:af:54:b9:7b:df:d9:
         1e:9a:b0:82:e5:c1:14:2f:84:00:ca:34:47:83:75:b8:5f:10:
         0f:af:83:d4:cc:29:8a:3b:21:cd:29:26:82:8e:3a:cb:d2:9a:
         19:fc:26:0a:2d:07:ca:21:c6:cd:be:6b:cb:83:e6:fa:d7:6f:
         a2:89:ed:9f:54:30:08:fe:00:9c:16:40:bd:54:c6:aa:7a:23:
         37:54:97:0e:89:9e:61:51:be:bb:c6:43:51:e1:2c:9b:54:eb:
         61:44:33:fc:27:9e:2e:34:ca:d4:fc:61:43:33:b8:6a:0e:4f:
         af:62:ca:fe:7c:b1:9c:3d:99:f5:80:18:81:16:cb:9e:a8:b6:
         94:61:b3:58:6a:c6:81:eb:2a:29:e0:6d:c9:97:8d:6c:a1:6f:
         11:d2:e6:ab:e4:6f:f0:28:7f:5a:c3:4c:ac:59:86:e8:38:cd:
         44:04:ba:79:23:a9:2c:2e:46:3f:f3:38:4d:23:6d:5c:07:3b:
         f6:57:a9:a1:65:28:62:e7:63:ca:30:5a:38:be:4e:36:a5:8a:
         2e:8b:b5:25:cf:aa:38:18:b8:0e:a1:e3:ec:21:9a:a0:ab:7a:
         5f:e7:c8:6c:f5:21:57:af:3a:a1:f6:d0:95:e6:2c:8f:13:d9:
         37:52:ec:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP3NYp0UeddWPLdRHhfCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD
EyhjYmM2NDc2Yjg2YmExZmY2MTM3NzcyM2I4YzRkOGY5ZDg2MDFmYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua3EkT4/5sDF0YrT5UwcH+CIHFmf
a7/6xZEo3XSoKJVlvq3+dc6rqJCL79wOqFWoNntE2XkH3n1wOXkxUitSscNZoDLw
4H2Y30QUYhybz/t3z/62yoB2xehIO+cEJBbNHOO66qdLV+ZcMG0D6Oo9oPue3uNm
oGilZOwFHXPRG6mG7GU9sf5pcMzNfHYurKv/fl1QnIuPx7OlpahKQpQBTOrwQXU4
RcNYbz7BRvHlQYw4NFEi/QzubsBOkzoa4YtQfbrVGSYOBpvJRQo9D0UYQLIiUuU6
rj4DNcfV4wbbgQJL1VqSPb5RBV16U3Qqjys6FqO9qtTuKLfuNQFktcEJswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvGR2uGuh/2E3dyO4xNj52GAfv7MB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGV1s2KAj
0ntMF2JOr1S5e9/ZHpqwguXBFC+EAMo0R4N1uF8QD6+D1MwpijshzSkmgo46y9Ka
GfwmCi0HyiHGzb5ry4Pm+tdvoontn1QwCP4AnBZAvVTGqnojN1SXDomeYVG+u8ZD
UeEsm1TrYUQz/CeeLjTK1PxhQzO4ag5Pr2LK/nyxnD2Z9YAYgRbLnqi2lGGzWGrG
gesqKeBtyZeNbKFvEdLmq+Rv8Ch/WsNMrFmG6DjNRAS6eSOpLC5GP/M4TSNtXAc7
9lepoWUoYudjyjBaOL5ONqWKLou1Jc+qOBi4DqHj7CGaoKt6X+fIbPUhV686ofbQ
leYsjxPZN1Ls/w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:22:58 2025 by rpki-client