This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
File:                     aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json)
Hash identifier:          Dbr0K4Fj8Fn4iyfkrnBd/hf/zLj2Q2rxitnlmT79qMc=
Subject key identifier:   25:9E:24:74:97:9A:42:D3:69:FF:5D:06:61:08:B0:81:B7:B5:5D:48
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Certificate issuer:       /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial:       019AF3C0238C7BE378CAD52572B5AF708275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
Manifest number:          0ADC
Signing time:             Sat 06 Dec 2025 13:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:46 +0000
Files and hashes:         1: 0ZnUbFz494YaFYXrrvpst6o3vps.roa (hash: OVgxGJmRNj8L4Akc46yjqXSfo2J2UzOCk6rafbqc2OA=)
                          2: 1gMhaWTt9SatCtzXb2x3evmqFAM.roa (hash: 6Y9a57NqqkLkQqCohM5S0/g04HJqvciLd/hsGJkposA=)
                          3: 2R9OObFNaEDkANSZ-coBJRfRpcg.roa (hash: PuD3VMT0jUQBkYxsd7Ldnl6ZWhsJPerlMMUp2zMDWgw=)
                          4: 3B48XSzrqRQbODZNf87x_kjUhNo.roa (hash: y14T24Ofee6GJVa1mI4/7qxhdq0jl8KEydSAoin8Qhg=)
                          5: 4Big0S_3eVdxzCi9Q5-ZazqY78k.roa (hash: MZj2ZauIX6SjNg/AhkH3xRZrKv7KoBeknyWj0YQB2/w=)
                          6: 5KCmcBzgBtGKXXIdhXDGwgQX-Nc.roa (hash: 3MBj03+qouTWcvDDud6sW23ZkQ0DtRDfsHdVwPfcmzA=)
                          7: Ge-sdc_RhsJevkQCq5DXSj7W5SM.roa (hash: cppMW1hN3HemsqcEnmgRLycbL6rv3c6Bv6GxyK4Dr7I=)
                          8: GzbjpWWbs-1PqotRsV09E9K9Lz4.roa (hash: DPdOn5R31znLhVjpEt/89hnY5IoUTo1sHiV7ubrKX6Q=)
                          9: IR0N93wyt194hpjTT9eshHBGwCY.roa (hash: hm8stnovqLivJRd1Zt72YsNy0Lv8colWOGD8fUtYhVw=)
                          10: Ipr3KewOoeNwtKcMjwWhhMZ4XGk.roa (hash: 3JCwXXZ0yyhMNw7g8hWZGcEbqAf0RiAf0XwSMEKW1/k=)
                          11: LiReZTb5eM73wM_EtDaxcTNj4Uc.roa (hash: VxzmF2kcB0hEh+Og8NMqll1d/dM5T/PwiOdBSWMF9+w=)
                          12: NdAX7Rrn7y-KonnG7TF23wCnJFU.roa (hash: 1r3koUbwGBNgbjNaxMGO8L4AUL4EQ4uI3dkO8TUFqEA=)
                          13: NxKKuEIzsEe5p3RwQBZ8j63Lsc4.roa (hash: mOT2nWmKWDEZ1VeM86bS3Qx+tjUuZhaB/QcxGF5t7y4=)
                          14: OxLywK9-WD8ykiaZCQkg8aVcCjY.roa (hash: iXcObwE6BigOurV7fYooDfgc8zyVyQ+nTBGFkUMqd08=)
                          15: Qjyx-VfeYJzhQ64OO3GeexbDjpo.roa (hash: rj+IOmmZrJFH/pGr6IiDQ9M39qURzS3Ek11UjeILldM=)
                          16: TvRgaW9-CsNjYomAsfORBTmW3OU.roa (hash: E1pW1tBEDD4gp+efpV/wAMGMYES5LCvHxLW4UcIoHuI=)
                          17: US4urt8SGYSwI0nrEmSfY23OtMo.roa (hash: WGkLaX+bRS10FeqEfnkw5XXJQ/dEDlUw6wG2fIeU7p0=)
                          18: UbTczMXH1DXAp6Y4rzAMo0-vjMY.roa (hash: /5fKT3FRRFYWFa0s/Qas8JVmnywA6hIsUQs3iIAfCSc=)
                          19: V9MunteQeVICf2ICr71lxQH0Fho.roa (hash: eyd5tdJUMOhtnb51XXGrnbSnVth9KptYyQQSksmwF/U=)
                          20: Xk5tmPIosW8yWOoBE4vC97DKTmI.roa (hash: n+WSuCldCqJF0J/zIrAAsy8W1NaktFT44ojEQwTF8/A=)
                          21: Y8kVBgTTg77JqceZAx8eeOkuigc.roa (hash: IFdbCND0Hr2WHlrHfsppyOn82/Cdt+j+/f3Y4nRrJM0=)
                          22: a0il1xPCzL5RX2zRZ16C5yrKQN0.roa (hash: jNHlYD8MG49p1qoIK36TKFr01Lgirahfew8083hVbhQ=)
                          23: a75rOpjpaPa3RoX99f00xHpyQQk.roa (hash: pBUN5kZ0kemGdrUfIg4JmP66bIvq4vhJcqUtu9xb4uk=)
                          24: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: zumCghah0JcbzonpORzD56DXHhI0cfHrWZ1B05Uiyj4=)
                          25: eSDGXftwPU-DhjYptcEbu97gSEU.roa (hash: 298/MebJAxJVNu0RXxXXDu+aRB+xIjmk2sL/OavJmSI=)
                          26: gt8flTD_zJibygdA8dyeuF1l6X4.roa (hash: aubI8iptMgWbWF9zUBH11nChoCQulzBZponMqronaCU=)
                          27: h8jROV5bQoENdkPdOHcG_4qWdVY.roa (hash: glJfimln9Noz47bXSrY5ZJrPDNDjmCoZp6sAhb5XR58=)
                          28: hd5E-IfEq2TxeShk5Gaec24hUKw.roa (hash: gaGe3UUy/HO5uK3mGo4Jfk2cwdMRK/X0E0rPiNSPI88=)
                          29: mqFZ_6poK042LnYArfefb64YNZQ.roa (hash: z+bsA4ZcDvX2JPMlTZwVkKpOQPowKJ3wnhxnQ/pVUXU=)
                          30: qjt96n4RyTnwKt8f25Hzr4YOzU4.roa (hash: c+NeV173DV29fxhrcPqvFfp6/xCLnBsKjYjqezsWpbo=)
                          31: r72MZC6TP9HFp69hVblH2z8aLDw.roa (hash: 60a58tQ14AuL0odo9HIWNyGRLIp51J3Om0fY3oCEnBg=)
                          32: uuETfDd2MFEUFL6j7oWk0rsVxng.roa (hash: gq3xyqmM/tiK/h2Lc/3S6cQaZW777XfzMoLElI6p2tY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:23:8c:7b:e3:78:ca:d5:25:72:b5:af:70:82:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
        Validity
            Not Before: Dec  6 13:00:46 2025 GMT
            Not After : Dec  7 13:00:46 2025 GMT
        Subject: CN=259e2474979a42d369ff5d066108b081b7b55d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:2c:3c:79:3a:27:1e:64:b6:ea:87:e0:c1:
                    3d:3b:ed:53:95:d3:9e:a0:9e:d9:ce:0a:82:08:e3:
                    6f:dd:59:86:52:69:ff:ee:40:62:dc:2d:3d:52:30:
                    90:b7:a0:f4:38:c6:f3:3e:d8:14:bd:7f:61:93:43:
                    15:f1:24:3b:9c:25:06:39:29:ef:c2:13:11:b4:a0:
                    f6:31:21:30:32:eb:2e:36:43:90:20:96:2c:fc:bb:
                    0a:8c:7f:66:59:4f:35:5e:af:b7:18:82:89:24:02:
                    63:78:a5:11:24:e6:c0:ee:bb:96:1d:18:cc:89:2c:
                    5f:f7:2b:a4:72:50:23:3c:7b:7a:8b:33:22:61:92:
                    58:97:82:dc:e6:67:e6:b2:10:d4:56:12:a3:36:4f:
                    62:94:03:50:8a:ba:11:e4:0d:f0:97:77:0a:5d:f6:
                    8b:60:f0:b6:23:b0:70:60:cc:40:64:7b:0d:b2:22:
                    bb:db:8d:80:d8:b9:f3:57:b1:0c:1a:c6:e9:82:10:
                    cb:6e:d6:d8:5c:3b:d9:9b:bc:ca:99:1a:8f:27:14:
                    cd:8b:aa:f4:6e:2a:c2:7e:c3:1d:63:6d:44:59:ab:
                    f4:68:b4:a8:15:5f:13:f0:fc:a0:8e:c1:e5:04:c8:
                    1d:e3:c5:47:df:75:f6:66:e4:ee:c9:f6:4f:46:15:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9E:24:74:97:9A:42:D3:69:FF:5D:06:61:08:B0:81:B7:B5:5D:48
            X509v3 Authority Key Identifier:
                keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:64:32:79:f7:5c:31:3d:e7:0b:02:4f:5d:27:ee:af:9d:
         24:26:da:b1:36:c9:05:5f:2c:06:58:fa:fa:a1:1b:c1:c2:fa:
         4b:90:83:bd:f0:d4:6d:b2:98:45:cb:e5:a2:c0:ce:b0:b1:d0:
         65:65:c2:ba:08:56:51:62:be:6d:fd:ae:65:6c:4f:26:a7:87:
         58:e6:db:2b:49:e1:b8:64:2b:b7:4b:c2:df:d6:3e:31:44:6f:
         cd:92:a7:51:4f:6d:04:90:4b:a5:5d:37:c9:5f:4a:83:b9:b4:
         90:2f:ad:bd:bd:33:91:9f:50:ab:c0:6f:b6:ac:83:c1:21:f7:
         1b:a7:b3:bd:1a:f3:fe:69:db:cf:38:ae:c1:ce:17:f3:27:a3:
         65:a7:c4:56:00:69:02:a5:51:26:fe:c9:21:1e:1b:54:e6:e0:
         9b:63:f6:a9:e5:82:f8:46:c1:6f:a2:e6:80:22:9b:cc:c6:a3:
         ea:60:a9:1c:ec:05:8e:d0:af:b7:71:ef:a8:b0:cb:05:00:ce:
         30:4b:f5:3a:8c:fe:84:99:82:ac:c5:29:53:0a:07:c9:99:61:
         79:57:b1:ff:2c:08:35:88:93:56:66:dc:bc:42:0d:7d:8d:a8:
         83:34:79:9f:c8:7e:7a:f2:41:9d:66:9c:6c:8c:ef:88:0b:31:
         cd:90:2e:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwCOMe+N4ytUlcrWvcIJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjUxMjA2MTMwMDQ2WhcNMjUxMjA3MTMwMDQ2WjAzMTEwLwYDVQQD
EygyNTllMjQ3NDk3OWE0MmQzNjlmZjVkMDY2MTA4YjA4MWI3YjU1ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp64sPHk6Jx5ktuqH4ME9O+1TldOe
oJ7ZzgqCCONv3VmGUmn/7kBi3C09UjCQt6D0OMbzPtgUvX9hk0MV8SQ7nCUGOSnv
whMRtKD2MSEwMusuNkOQIJYs/LsKjH9mWU81Xq+3GIKJJAJjeKURJObA7ruWHRjM
iSxf9yukclAjPHt6izMiYZJYl4Lc5mfmshDUVhKjNk9ilANQiroR5A3wl3cKXfaL
YPC2I7BwYMxAZHsNsiK7242A2LnzV7EMGsbpghDLbtbYXDvZm7zKmRqPJxTNi6r0
birCfsMdY21EWav0aLSoFV8T8PygjsHlBMgd48VH33X2ZuTuyfZPRhWIuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWeJHSXmkLTaf9dBmEIsIG3tV1IMB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/NkMnn3
XDE95wsCT10n7q+dJCbasTbJBV8sBlj6+qEbwcL6S5CDvfDUbbKYRcvlosDOsLHQ
ZWXCughWUWK+bf2uZWxPJqeHWObbK0nhuGQrt0vC39Y+MURvzZKnUU9tBJBLpV03
yV9Kg7m0kC+tvb0zkZ9Qq8BvtqyDwSH3G6ezvRrz/mnbzziuwc4X8yejZafEVgBp
AqVRJv7JIR4bVObgm2P2qeWC+EbBb6LmgCKbzMaj6mCpHOwFjtCvt3HvqLDLBQDO
MEv1Ooz+hJmCrMUpUwoHyZlheVex/ywINYiTVmbcvEINfY2ogzR5n8h+evJBnWac
bIzviAsxzZAuDw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:23:33 2025 by rpki-client