This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
File:                     BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json)
Hash identifier:          +2YaViTAT1HW3IKL1pp6HnzJt+t6gOVCQVo49xIVp6Q=
Subject key identifier:   22:C3:17:C0:92:B3:CA:45:BD:F8:77:0F:D8:7B:98:06:AB:09:36:CC
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       019B386A13DC6CDE44E3B8FC32C0FCAB0A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
Manifest number:          03A4
Signing time:             Fri 19 Dec 2025 21:00:34 +0000
Manifest this update:     Fri 19 Dec 2025 21:00:34 +0000
Manifest next update:     Sat 20 Dec 2025 21:00:34 +0000
Files and hashes:         1: 1-RaVWhm4ucmlR0gicKOMbFicM3o.roa (hash: /qKJHU7nXX75mZYztfdpKis2coqeEEK4LaABUZMxtZw=)
                          2: 1-Z-VJ1Ms32GjdpMHy4Gt2fXpC7o.roa (hash: BLjg1ZutxDLP0LD83fUNb6XlKzTK1eWAEiysqvfQvfg=)
                          3: 1EwZ1bZic_jqiX7W5UwQyn8Bgyo.roa (hash: Vg6OC/7w8cP7V5moLCtSw7RIkRKWW/diliXF+ajxpxA=)
                          4: 6SPF9wUKHrZ6dX8XvKxjnVR5gSs.roa (hash: fkqYDZXkVkcORjtoFgL9LCKCeNFqQJ4NJn9PSDeEfBQ=)
                          5: 8-yw9B2nPkCfG0ri-05wxbzK95I.roa (hash: D9ViM4Gvio4pjQlbZ1UG+yr83bOB/c4pGt/sWMwpAIo=)
                          6: 8h_JebN18U-DQLa7g_VNQTnzmD4.roa (hash: qaZfGE5JnXlAKOoOZ4NfG/E3st+EoiejWrngTgnqPGg=)
                          7: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: DHRuZqCisDLvpFA0ubNxEhHfphJFRyWnRQ/ZhgjuRGg=)
                          8: ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa (hash: dRJ7Xfhd2IktdnYweUcsqpbKflQdcxF/jmr99tlC1i0=)
                          9: CNtM8zejZ349bsOx94QsI819vZU.roa (hash: xxnS1MVGHtYdDD2abmYeFD2yf6kRsOETWylSJhltDEE=)
                          10: ExusXckLrxsZNqKlfCaNi76wyn8.roa (hash: 958U6++7iG9JMRvtU0OfoU8TdGPIQhNtWPh5XYFfc1E=)
                          11: Jnw1w_L7O97u-ptQteogd_jgFsQ.roa (hash: gYLRcSAcu23jE4q8uZBt8H00mSQ2wrfmAYo9MAdyz28=)
                          12: KBH5_k1ABLmKeJO7l-34IXPXqRs.roa (hash: P/JtMtW3yU+sxA5fXStKTboD+4DMtOGbsll537HWOk4=)
                          13: O88pJYUrrqVOidkJjEP-5_wS7ww.roa (hash: cvcdBAMQsvb0r0SAZ093g5qXRau0yzmBdmsOPLmPc+M=)
                          14: OY-GIx9hD1F4OFf4n-y0JK1ANZg.roa (hash: PbCMLXyHRgfKX4P/i6p6IrPplONleRWnbtsOIMdtbRA=)
                          15: PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa (hash: cKqK7iISq+hHAlg/ZJ1m7UofToF0VF0S/PulOyt8vLw=)
                          16: T-WQUbMA2opCoWmz9iIpBVDop7w.roa (hash: LxZzYTsPv2oZVsXtK1M9TpzKZjJLXQwZ4LXrHPlJD7Y=)
                          17: V6Fx8HKW5vYtwoUl9-FGq139rH4.roa (hash: VbwVmnD3kf6YOoUlp8nFzAYfvI3kHMT1G3evyq8grxI=)
                          18: YW5y5usoTQiLpmzQvCUyRj8cuug.roa (hash: 5m2wahUSKxltYiSybHNnUMgIAkEZacf1G1VAJvHHhFI=)
                          19: ZAO9zOgwcnH7CVr3zg-zAmkFmEU.roa (hash: jzMcOQPGwbHcpf5AaSFTbx4J1lBs/EwoqM2RnhLe/64=)
                          20: a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa (hash: AjkSxRf4m/hDIVmcEg8Nz3dPC++vr47UARhugAtRJG4=)
                          21: bkj_9Heh0C9FpUqLrf65_9tMX1o.roa (hash: bkX0VT2UTOwEY8RRSJ6fL2Rs1tekiUyjrTzbnadeNds=)
                          22: boJmz216E2pVUR2unuNVUplfhyM.roa (hash: i+zLjdL9F/qjZdj6l1k7yZCeKyy95BgZFZ1ZAYbGuBs=)
                          23: f2D3UV4sYjo4Otohoy79vFEF0Ag.roa (hash: KRgW361Frr8F6yZbGVOnQ7xVzqdchF195Wcn12RxysE=)
                          24: fZcssnMM-oyAkfiWcEwQiIqtu5U.roa (hash: 9OgIxc3uOeDLvKMHACKvgXGx2POImcau/RInqulO5p0=)
                          25: fgixHbZKg25jUYMjY4avGf_2zgc.roa (hash: a1WxWLaFd4etV2MRrIUVy/vhRQGZaTvT5ScFogrxkhA=)
                          26: gZPpaGdB-IQFDiAnlSFV-CdGFAk.roa (hash: 1uQ18FR87Qkggs6mA4a4E9yey6Lcw5DNg+4ly1If6Z0=)
                          27: gicegBW5Q1xikkf_SLe1-6lH06U.roa (hash: pqN+I3n4dBN3SZnpQPA/6vzrG5l7HojgVKb3SXvaH9M=)
                          28: iuwR3gymafKwUArlmGbUUJNbSa8.roa (hash: EtXzdV3cLqZcZzSgtMiBpL5x/7d8YbZUcgnJOjOuNu0=)
                          29: kNKW14Dxh4X2xbIOHRvhO-4tzcE.roa (hash: ENDHKI6G3Ef3eUled5c74JZlLpucyibX5X1QKlCy8/E=)
                          30: kP1MLzfrQwWk1GVdDlBjhCK5JJM.roa (hash: +NDOnTtKyng4Xa7G5fvhPU29tORd7PYP5BmWYtRjBxk=)
                          31: mN1SF0jqXFbA77Cv4kSAFM7eMrI.roa (hash: bd+gRbyeXkhCADuawPp6Y7Zl70oz5JVqv5T2uQOkFmM=)
                          32: nE08znyGEROzN-ZPpvH871B_YXc.roa (hash: rvo0J7csjKxABmc7ZJ4UjX/IGGVkIizjnr+3tXbkjRg=)
                          33: vZmH2bvHl1nSGW5nMPLYnxBlkRU.roa (hash: JOoXAeAAIZEiWY0Rg+/OZMN4l51Mdx07GGAUcyh78VU=)
                          34: x_kmwuaD2Uv2HFLODCKAcngkZmI.roa (hash: YzInZ8+3078RATQFSI7n9ucYtfrzyFiROEAN+YuWwao=)
                          35: yA3UMDG2NorD0yXtnnE6FrjVIhg.roa (hash: JySOvmeafpb1h5Z9vGr3Dw7i3K7yP3Q/urfaVB0miMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:6a:13:dc:6c:de:44:e3:b8:fc:32:c0:fc:ab:0a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: Dec 19 21:00:34 2025 GMT
            Not After : Dec 20 21:00:34 2025 GMT
        Subject: CN=22c317c092b3ca45bdf8770fd87b9806ab0936cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:c4:07:e8:dc:fa:35:c8:17:35:3d:30:8a:
                    8e:bf:26:73:2c:8a:c9:92:2e:04:f2:e5:47:e1:d9:
                    3f:40:98:9b:30:b3:62:a8:a7:0e:bb:9b:1e:ed:18:
                    8b:a5:c5:bb:02:90:1a:28:35:c4:0f:05:f8:d0:d7:
                    aa:33:bf:fa:37:cf:a9:46:a8:4a:2d:7a:c0:e4:4e:
                    43:ea:59:09:7a:8b:f4:5f:c3:13:af:a0:8f:e3:c4:
                    8c:a1:9a:21:af:75:af:de:be:8e:d9:00:b8:b4:52:
                    c2:94:d2:9c:5d:6b:98:61:63:77:84:df:28:0e:47:
                    79:d0:d5:0b:ee:43:13:30:2a:2d:73:1e:65:98:7b:
                    7e:3a:43:37:f5:c7:d1:17:bc:1f:47:ab:f8:a6:66:
                    56:17:7c:51:26:84:6c:98:3f:15:d9:6a:2d:0c:e8:
                    e7:25:38:12:8a:ed:de:8f:93:35:4d:d6:41:5c:75:
                    38:25:75:5d:a5:f2:4c:8c:58:ec:e3:8f:5a:fa:78:
                    f0:60:2f:d8:3c:8f:3a:d8:56:d4:73:76:fc:1f:ff:
                    d2:ab:72:eb:d1:82:71:47:74:e6:5d:bb:20:18:70:
                    3f:66:23:cc:d1:37:f9:ec:3c:f9:ed:8c:a5:74:ef:
                    e1:fe:7a:2d:39:f4:3c:bb:21:53:b7:1a:71:06:58:
                    2a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C3:17:C0:92:B3:CA:45:BD:F8:77:0F:D8:7B:98:06:AB:09:36:CC
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:60:b0:b5:ca:22:12:68:6d:ef:a1:69:de:1f:fa:6b:bd:8e:
         ff:a0:f5:46:2b:a2:0f:42:7e:01:b0:f6:8c:f8:f4:20:16:75:
         f4:bf:b3:e8:eb:af:bf:66:78:fa:04:9a:98:50:7b:d9:b5:9d:
         7e:c9:8f:c7:06:ef:26:3a:18:83:ea:3d:2a:44:ca:ed:74:a3:
         20:d8:8b:67:87:a2:1d:fc:51:93:3f:3f:db:7a:43:27:82:89:
         ed:81:86:03:af:ad:93:be:fb:3d:be:b4:43:3b:41:37:0c:2e:
         9c:5c:3d:69:f7:3e:1d:a7:94:3c:fb:d8:28:52:9d:bc:79:88:
         ad:12:88:5e:70:b2:2d:39:1b:97:68:83:90:9f:8f:10:e2:73:
         b9:3a:99:c9:a3:99:6c:08:3e:7d:91:af:3d:eb:89:04:15:5d:
         b3:b0:a0:0b:13:71:4e:6d:b0:ca:1d:a1:d7:85:93:21:a5:cc:
         1b:3d:c3:3e:d5:e2:3e:b0:a4:7c:b6:f0:6c:d0:27:67:b8:4c:
         c6:10:6d:a1:d8:f1:53:e2:cf:06:91:9d:95:f3:8e:1e:73:b5:
         bf:a5:39:a9:05:31:4f:ba:dc:41:1b:01:44:fa:8d:3e:14:98:
         ec:79:7a:80:59:90:37:34:52:d6:9a:e5:e4:45:a6:54:88:94:
         ae:b5:25:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs4ahPcbN5E47j8MsD8qwpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjUxMjE5MjEwMDM0WhcNMjUxMjIwMjEwMDM0WjAzMTEwLwYDVQQD
EygyMmMzMTdjMDkyYjNjYTQ1YmRmODc3MGZkODdiOTgwNmFiMDkzNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLPEB+jc+jXIFzU9MIqOvyZzLIrJ
ki4E8uVH4dk/QJibMLNiqKcOu5se7RiLpcW7ApAaKDXEDwX40NeqM7/6N8+pRqhK
LXrA5E5D6lkJeov0X8MTr6CP48SMoZohr3Wv3r6O2QC4tFLClNKcXWuYYWN3hN8o
Dkd50NUL7kMTMCotcx5lmHt+OkM39cfRF7wfR6v4pmZWF3xRJoRsmD8V2WotDOjn
JTgSiu3ej5M1TdZBXHU4JXVdpfJMjFjs449a+njwYC/YPI862FbUc3b8H//Sq3Lr
0YJxR3TmXbsgGHA/ZiPM0Tf57Dz57YyldO/h/notOfQ8uyFTtxpxBlgqUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLDF8CSs8pFvfh3D9h7mAarCTbMMB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGCwtcoi
Emht76Fp3h/6a72O/6D1RiuiD0J+AbD2jPj0IBZ19L+z6Ouvv2Z4+gSamFB72bWd
fsmPxwbvJjoYg+o9KkTK7XSjINiLZ4eiHfxRkz8/23pDJ4KJ7YGGA6+tk777Pb60
QztBNwwunFw9afc+HaeUPPvYKFKdvHmIrRKIXnCyLTkbl2iDkJ+PEOJzuTqZyaOZ
bAg+fZGvPeuJBBVds7CgCxNxTm2wyh2h14WTIaXMGz3DPtXiPrCkfLbwbNAnZ7hM
xhBtodjxU+LPBpGdlfOOHnO1v6U5qQUxT7rcQRsBRPqNPhSY7Hl6gFmQNzRS1prl
5EWmVIiUrrUlUw==
-----END CERTIFICATE-----