This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          NXkU/I6jnXXjSAr/3n0/31fGOqIZWqUoUX4M+dFxrKE=
Subject key identifier:   04:16:6C:AB:7D:83:26:E0:DF:DF:A6:13:7C:BB:54:EE:82:51:8F:E9
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019B38339AB72887AE45DF629BB02DC2C2EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          15A3
Signing time:             Fri 19 Dec 2025 20:01:04 +0000
Manifest this update:     Fri 19 Dec 2025 20:01:04 +0000
Manifest next update:     Sat 20 Dec 2025 20:01:04 +0000
Files and hashes:         1: 1-VQIXd1Dv8dYEwumNhf_Kai60iI.roa (hash: pQJXttwx4tIQGMrCRPK48DSAm3VpqwW1cLlhoOT+fEw=)
                          2: 3JFGNuMYTVRE_tgsRB9Dv7TkoAI.roa (hash: cgDSOAUcOV7B/P90698S4nI5hWvg5jhDlyl5V3knjkc=)
                          3: 3Op6IBEY3gIrJNcrF_fGEKXZ-lc.roa (hash: M5VWSQ1XRldGWp06/hwl4sINAHp+AWXgzvQPky9tqeo=)
                          4: 64sSNXk_C-4uunlXMJj6fpY4CQI.roa (hash: ZLvXhsXHDXuI7q/6VX9yEZlysMPbD/8sIkoIAedYVM0=)
                          5: 9tqxD372UOGf-zL9Og3dZI-GB_E.roa (hash: 1BflUu83I4Fz3YB6j1fHXKTleEcGx3LVxi458xNGCuo=)
                          6: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=)
                          7: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (hash: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=)
                          8: HN-sxkXhsPARhEyjcxF2VA5ULns.roa (hash: XKKXt3nQtVRf5U2SzwHGZlsTijL5Olvfsj7LyZpSgu0=)
                          9: HsLS8TqY4NFLquD6H-5Z9XTyc6w.roa (hash: g2/hdlCHK2Ht1c5u6jzay4iFxsxhaV8W4ya9D22Ghyw=)
                          10: KNHznfe17OxgibRQI55Yjrk8XqU.roa (hash: KNo2fR9uF9ojRisFW+2PVfbmA3oeyJ0R9L/NsD+vadg=)
                          11: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=)
                          12: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: 3p2WHO5hnotLxPVPA50MuWlVQsLm1reJ141CcAlocnY=)
                          13: LSruAiQDo0YzCVhUXgqjhjUO-xE.roa (hash: kwNRN3xXd5C3IikenOrdSQUWZnh6jQej+1QyWNhFcWo=)
                          14: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=)
                          15: MfgxEOGAfVTGEvhRZTV_fR1-qXk.roa (hash: k0aQBEKvm4oillc+UIihjgdIum6WVpAkoV036ebhwvc=)
                          16: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=)
                          17: Phu2nli9lCvsxHbXVyMP25QcGBU.roa (hash: C93S5lyPLin9gQ4E1c8YlHx6c8vdXkwLjQSH53ms6gQ=)
                          18: Q8PmaVsu91FafNMJSiUguBXDAy4.roa (hash: v/8qlXzfsrMPaxgUO4OHSG4SXigE1NDzd1YZIaC3Tfs=)
                          19: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=)
                          20: S5Vx_PwhrUdn6uSPv9B8Pl8fWZ4.roa (hash: XmpSvZLR/cpO3PqSr4aJClVLTWeNmz7xYTDZX7wuFYc=)
                          21: XdU9ba_H8wvW9YWGekfY-RC6fac.roa (hash: t+t6oWtjjjeUHSoz5gNWccz0VBGlDxWsh2LU4cszm7w=)
                          22: Y80uU89YrbsuRnQLDbu-NjJY_lM.roa (hash: HoKIkUXkxj/FHV4FD9GgqXgSMpn2DDHcOSAHP1jozsA=)
                          23: ZreaaSzvj0F5FavpUXWG2Nvv2Pk.roa (hash: 1Qh4e1SS86x/OjiBlUymOG3z5N1ty2+63wfpNrmVAAs=)
                          24: _Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa (hash: VTikAPXKyS/i+ZZ35PgUSzUblUTlMqZmtelGl4Mi2wc=)
                          25: bOiCbz9dALfluTYK4_jqGYR0Jz0.roa (hash: Q/2eSa8vYTTH6Z04ZbFhK/SEUsOgRoPldjQvM2cSbUM=)
                          26: bZv3S6SjMHuATa5GhC0St5hSsfU.roa (hash: v5Z9NLPnQ7ljIuVsTKQar4zGJUJdgJ7qXeQXJqaqbtI=)
                          27: cOWXDby_VAjDBm-QNXyxFV15NYc.roa (hash: d23wa4ZI6ixe2JTopJ8C5Bi1Ca40n6+Q2pIZccoLoNY=)
                          28: dEipwsI3eN1As0rWuDbWNnqMvTw.roa (hash: +biJe511JtIv65zZKrLUqAD9MG0u+pcvdynZY6XvZoc=)
                          29: fFIiPcIZQx033jSV6p41eBFER7E.roa (hash: qhzye0ysaR3MnkAhIOM63hxvVgvo8rQw3JHNBHBliIQ=)
                          30: fYh96DEUprSlV21wSMnuWBCSwx0.roa (hash: v06BAbDyEGINC47vf0TbEA82PuMPVQcWMD/+BPJ4cCg=)
                          31: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=)
                          32: iZaZeEkRfA-qPxq2ngG3cfkXZcs.roa (hash: T0PfM8f9MKiqot92ZRLwnMqkMZ5rdvRshuTN3e9yWu4=)
                          33: j8EQoO-MFJxIyUrWWVh8xZJfwf0.roa (hash: 5TgJY/51sZ3zuY+vHNTStO0X7tDdmTzCrMeoxfHzgyE=)
                          34: onT2MkF29XmtrGx1gO1FbJGGd64.roa (hash: 9BBTl4rWlge/62o6XB7LJ3UfJ89LN7a5QNMStDRgw1U=)
                          35: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=)
                          36: uNJMLJU1OW9vcIqjiQSUIVSCjgc.roa (hash: HOHu6WW/4np2LUQoidC7DHY+Djbp+WHZl3/vUb3ayiQ=)
                          37: uznfP4LeTg8IXEvfphe5kyMLZpI.roa (hash: g3X9/REzY0LgUWr0WUpFnhLkhuTurIuuqm4rYiqx+NQ=)
                          38: wXqFn09i9yfbXFnbL12mgHRCRrg.roa (hash: jlOEEQKoDVWCSBu9sZcGjLGjM4xVn5YWnhjqZnj8/D4=)
                          39: wgXSVyqMPOaVRZoRz2DoQs27lno.roa (hash: 5JI0l9I/46gau6VOxIi0gUhDeXleGfmQ+fS0p1j3UPM=)
                          40: zoKa5rQePkHEPMZVNfuzo9aiNhc.roa (hash: vKObmrx8e0xeNE7rTL2Kryo1mCerVlEr58rYUGyO4oM=)
                          41: zrYke7PCJd1OgjFZP6XYwEJIRSA.roa (hash: uD4HZqrmKJVSDIqlR1oLRTq7Ftc6Qs9dYopCDxPeGP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:33:9a:b7:28:87:ae:45:df:62:9b:b0:2d:c2:c2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Dec 19 20:01:04 2025 GMT
            Not After : Dec 20 20:01:04 2025 GMT
        Subject: CN=04166cab7d8326e0dfdfa6137cbb54ee82518fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:b4:a7:72:09:59:71:93:27:37:ac:1e:54:
                    fd:1d:d1:42:f5:25:bb:83:dd:4b:40:82:0c:8d:ab:
                    29:29:f3:24:3b:68:2f:5d:e8:6f:ae:af:46:ce:b4:
                    f3:92:c7:5e:84:b1:93:90:37:8b:54:14:10:a5:0b:
                    76:70:a6:47:41:7a:f7:90:f2:67:3a:94:dd:e0:63:
                    d2:b9:4f:19:93:4c:79:89:01:f5:5e:50:15:d1:78:
                    e9:61:2f:23:95:f6:88:7b:35:e0:1f:08:9b:03:7b:
                    b2:ba:7d:fd:73:3e:cc:06:f8:08:0b:90:34:8b:c8:
                    d6:d4:98:14:ed:7d:a9:d9:2a:f6:1e:84:0a:26:2e:
                    e9:c4:e3:51:47:d5:1e:43:56:1f:d0:72:0f:de:0a:
                    39:5d:bd:61:49:02:ae:04:e3:ca:c3:b7:81:d4:a7:
                    9c:bb:a7:c7:79:5b:b9:b0:31:c1:8f:c5:95:c7:7f:
                    10:0e:d4:24:cd:e4:d3:c6:0a:9c:48:81:b9:16:0d:
                    e1:dd:de:46:57:6d:30:a9:d8:9d:0f:01:30:b4:30:
                    f2:04:86:78:70:24:b4:be:9f:2e:d1:8f:76:7d:9b:
                    8a:7f:0f:71:41:2c:75:ed:1d:4a:17:92:c1:6d:b2:
                    33:3c:9d:75:1d:98:3d:55:30:93:08:28:f8:d2:46:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:16:6C:AB:7D:83:26:E0:DF:DF:A6:13:7C:BB:54:EE:82:51:8F:E9
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a4:3c:28:f3:2a:1d:e3:c2:e3:66:b1:28:9f:4f:d7:50:e4:
         cb:d7:76:32:ca:ce:30:0b:27:18:0e:26:f1:68:52:38:f6:b7:
         43:59:c4:7e:e3:d5:d2:27:a2:03:80:16:21:49:af:04:f2:d0:
         92:e2:e5:4e:40:fc:cc:ae:9b:b2:ce:c4:75:36:6e:ec:35:56:
         5b:de:58:aa:73:6a:22:79:11:a6:65:eb:79:b1:b9:7e:6d:6b:
         19:d3:dd:00:ac:58:10:77:cb:6b:9e:9d:b6:ec:9b:a7:45:08:
         93:9a:fa:4d:8a:5f:47:2f:4f:58:c1:57:3c:cc:7e:7e:7e:25:
         79:69:f9:16:2c:24:be:8e:93:a5:a2:3f:88:16:0c:26:38:39:
         14:ba:f9:eb:21:37:08:b4:05:41:a8:52:a9:1f:eb:0a:5c:00:
         c6:cc:a7:23:88:c4:f8:8d:69:b8:ef:e0:8e:35:96:3d:2b:07:
         ea:31:a7:fc:9f:c4:47:42:4c:9b:8f:0b:33:3e:6a:0e:47:2e:
         a7:56:88:44:06:7c:3a:27:3b:1a:11:a9:8a:95:56:71:8e:a3:
         3d:8b:03:3f:bc:8b:62:20:0b:25:5a:c2:42:66:1b:84:55:45:
         a5:a5:18:54:36:68:0b:39:3e:d2:79:d5:6f:dd:13:68:5c:56:
         6c:42:06:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs4M5q3KIeuRd9im7AtwsLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjUxMjE5MjAwMTA0WhcNMjUxMjIwMjAwMTA0WjAzMTEwLwYDVQQD
EygwNDE2NmNhYjdkODMyNmUwZGZkZmE2MTM3Y2JiNTRlZTgyNTE4ZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppG0p3IJWXGTJzesHlT9HdFC9SW7
g91LQIIMjaspKfMkO2gvXehvrq9GzrTzksdehLGTkDeLVBQQpQt2cKZHQXr3kPJn
OpTd4GPSuU8Zk0x5iQH1XlAV0XjpYS8jlfaIezXgHwibA3uyun39cz7MBvgIC5A0
i8jW1JgU7X2p2Sr2HoQKJi7pxONRR9UeQ1Yf0HIP3go5Xb1hSQKuBOPKw7eB1Kec
u6fHeVu5sDHBj8WVx38QDtQkzeTTxgqcSIG5Fg3h3d5GV20wqdidDwEwtDDyBIZ4
cCS0vp8u0Y92fZuKfw9xQSx17R1KF5LBbbIzPJ11HZg9VTCTCCj40kZJIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQWbKt9gybg39+mE3y7VO6CUY/pMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6Q8KPMq
HePC42axKJ9P11Dky9d2MsrOMAsnGA4m8WhSOPa3Q1nEfuPV0ieiA4AWIUmvBPLQ
kuLlTkD8zK6bss7EdTZu7DVWW95YqnNqInkRpmXrebG5fm1rGdPdAKxYEHfLa56d
tuybp0UIk5r6TYpfRy9PWMFXPMx+fn4leWn5Fiwkvo6TpaI/iBYMJjg5FLr56yE3
CLQFQahSqR/rClwAxsynI4jE+I1puO/gjjWWPSsH6jGn/J/ER0JMm48LMz5qDkcu
p1aIRAZ8Oic7GhGpipVWcY6jPYsDP7yLYiALJVrCQmYbhFVFpaUYVDZoCzk+0nnV
b90TaFxWbEIGGg==
-----END CERTIFICATE-----