This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
File:                     MMQJYT_qCitELOES6cvbSF4BGI8.mft (raw, json)
Hash identifier:          jr57dviaLD4XSAYbAdrSpRqTFOpZY+ygwU3JTZdzbCo=
Subject key identifier:   34:96:1C:E5:08:14:60:10:EE:99:57:0B:A4:E7:B7:15:35:DD:33:98
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B3BA2A1135F6B7C6DB7D1AEE74AFEC71A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
Manifest number:          1613
Signing time:             Sat 20 Dec 2025 12:01:12 +0000
Manifest this update:     Sat 20 Dec 2025 12:01:12 +0000
Manifest next update:     Sun 21 Dec 2025 12:01:12 +0000
Files and hashes:         1: 0TcqWmBbS4pZwVBptkq4lqA5c5Q.roa (hash: SPYZBsTv2MNh1qyA2xq5tH1xrGTzoY0rK9rAvW0asOo=)
                          2: 1XXH5Tc2jjPAzQHYwkwVQAw_gHI.roa (hash: dcfuBWAVvDzz9GpSqGo/OZzT5vbmtFCpLz+pXMeuFkc=)
                          3: 3LgD2pWeokaJnu7AtKvUjtGF1K4.roa (hash: EUbwmkUwuSMcYd+jHYxrR2mUP8puunpDHahZx+0W+pc=)
                          4: 3cL278tMfhHRt0jMeGBsuK_6tdE.roa (hash: 9Jvsf+gu/Bz99BEJw/Qs3de4jjh1Gye98YTVVsGjiIs=)
                          5: 6QoOwa2ipaJqvrD7E2dbw1UcuV8.roa (hash: 2tOtZzMlaS8Y+/JP7ae7uNFPL8Y8C/sjWCJwPgz2D6M=)
                          6: A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa (hash: lE06Mjh97LJaUQ/w1auWux3C8TovlUNXB3RO85AG9OU=)
                          7: A49d_BeiTEUQG4p_3mJzcU9LAxc.roa (hash: Yk0iZpFyJXXMqGPy0ILeZNptWZYqa7K2r7Sh5AS5hIk=)
                          8: D-Xj-E8a8KpGmRlH8BwGif1kmI0.roa (hash: 7cRbUgZAzkqORhvBRcVH2i2M6t3Q6qZCnPwfq5AZPQw=)
                          9: DzFwKCs4SLbfq2s9Q7Y4hhddAlg.roa (hash: uVhqZq8hFXzpst7g4lUJZCwbTahSvmYx+Wbki8iJE20=)
                          10: FMEvE8lRSqQ-c4n53FDffBkErx8.roa (hash: GlA1THHMaPutrg5iNRsJwfVrQRoJ41Dni2qIntaImAw=)
                          11: Iv7XsxWXHnyoVpEd4DC_3XASFeY.roa (hash: RkiFvafvAi0w5FjSv5Z+cDcQDkhTTLcusqCEJERJr3M=)
                          12: J5Zl0e93w7Ouht3QTJQ8Agt_K3E.roa (hash: Ci6kg2a6GSjpPc9RFHsQWbp71+Q5BJmxJkaiYnBdvGA=)
                          13: J6jwomPMeZ1BKUT1HKADpUVqL4Q.roa (hash: ZT8/tzUWsV32mp8ODBnGUiawz3yA5cw8UBFbLvsiiBI=)
                          14: Kwu503K5TQ6mKB9wIlqJIRzuA5U.roa (hash: D2DY/gDYtav/Dsf8JETmsRPCOwdw9kpocKeFf8s9QAs=)
                          15: MFeBsVEFv-VXfJA4s0kbwDLrsao.roa (hash: EMCcoY2pdOJ/xwyHG39NdP4RUjuyAAIrDAvEM6JIEKM=)
                          16: MFuSjMaEcH_KfJOuOTM_egeHxuM.roa (hash: gSvthfvoW6hKh161OH6a/3I+TpE1mQXg8q3eHq/8gkU=)
                          17: MMQJYT_qCitELOES6cvbSF4BGI8.crl (hash: HaH7W/W1+lYdbxeABhJ2P2l+s/028PUNIzEW15sEfjg=)
                          18: PW87IxcR8NO4WUeOitQNh5EtNhc.roa (hash: abtoslPQuSyoMS7yrHdnRO9jo2QkBlO9JvhCml8oipM=)
                          19: Pevz6EWQXEb5yVp9lKenzNIdBdc.roa (hash: qGmkuDrxspXM+mBcJKKqEwtYtBwpIYoUjNRrKJA7ruA=)
                          20: RO_vqVjc-WToTVgA2LecnPN6dt0.roa (hash: jWGNKA1BOvpll3zjMK7kK32ayXj4dMaMQ6dbhZt9Q8o=)
                          21: RYzSxxWBkqoIYdDWQzrtXyD6HxY.roa (hash: 9uDtpLtRIp3Z50Qzu21CuIdk3zj29vKS3wKK9lm5Lyg=)
                          22: SRycxRgb7-ZLpEXgHls6Rg1GkZE.roa (hash: tgYoh8E5W71tyTIqSyUElR8mNX+J76OHaL8Cs33nYQs=)
                          23: S_pHPsCNWukS-WUFhIXy-OSJe2o.roa (hash: CgIqwLllc8CTWv043HB1kGIdlsthfsikGWfcwzjk14A=)
                          24: U2iNflEHT3HIL-S9ukQcbf1cEE4.roa (hash: CmjocmnsbLnvfp3fpATzHwZwgEQxqvdIsJxJ7LRGUnw=)
                          25: WHHJUFYWyKjhDOYk7Bkwtd_KEaA.roa (hash: WAiPSFNwflOwr12Zue1faOYw7xwtb69ioqP/IRmI9s0=)
                          26: XJn6uz5-oygXgu4ZAc2om2Be0WQ.roa (hash: Y9gNxCERt7wH5/baWKBp/m59FpcWgCGrLReBBXmd6l8=)
                          27: Xk5AYjoJKqpE6UbWJWl0e64Jdgc.roa (hash: Crv4Pgd3B0w5ftY7wmKEGbhnAr8LA9YDu34JHjjTqtw=)
                          28: YyzLMTt87Ecy3ghXnphVjvqquQ0.roa (hash: ZwuNLZzvOtpWGtNlX0gjt9977y68KkozP3OVholZME0=)
                          29: _kwy9bDSccd3Rtu2SHd2nC9AWHs.roa (hash: S0KPjYm8+CTV9bHwk2kn78YNa61JdUHm026b4f57gYU=)
                          30: a2QST08vhAuM6YzseDeOjRqXeXk.roa (hash: lMOk2f76mI5XqI13RnVVzTMO4e/gWq+iR4UTwWxTKW4=)
                          31: b1DT6ospwzst3YJkd_0LR059Sno.roa (hash: FX1wepEOkF8A9hAFZM7i5GnZPOJgUdJorm4d827ZEso=)
                          32: b5X1JzbTJUuqVfX0DehpNcJ_9kc.roa (hash: LmA3Cohl41GAEztGDTKc3Ga2ZxVmadMDX0gNG66wU94=)
                          33: g64IDCaPNJ9ZShV_l_bo46HmhJ0.roa (hash: 5+QoeL2CSfIj5AnV36tcPb8Se6mkOWP178b805IjUzk=)
                          34: gb13af6kKgtlfQFdYQtCupgkRjQ.roa (hash: WlJgR2c//WMYosfMkR2CJaWVw/G4EQYofJSeZrH4jNE=)
                          35: iYwPyGfodR503O-c7GXbrVrD7gQ.roa (hash: t+A2Ec5s6C/6NIyk0+jCzCtUWuwTw/vLmgLTTeId4fs=)
                          36: ipTg348ZUOHwTFCERWv85x5upVw.roa (hash: 16jKgCClYBo+eCIMwkt7ZjD/Ascu9zEJCZArBRFo1ac=)
                          37: jJ_1uHLWKiQkF1iVYcO_4bXIskw.roa (hash: MlNZfYRq0YeYuGTlp+S0bdyWWJDClUExqjVU2jALhT8=)
                          38: luhgkGvXoSBeo49IDDTu1_s8AjA.roa (hash: 9H2kNdWwK/olweSvXdAl8KgICVS+D/OaSJX7mmjuiAk=)
                          39: lyu6R4gm1GDGGWrprfi3lQB2gi0.roa (hash: SnWsapf5S+uAoqHYWK233NyQQsjjVYaX6QjiNNmT2oI=)
                          40: mErkWeU3I8mGIE7o-s9X2fk5o5s.roa (hash: VUpCAKhA9EiJ9ug9Oc5wXy4xs0jXv9yffBf1VGddEjc=)
                          41: my4k0_ivDuUGyBw3mHJZ8SCPZrQ.roa (hash: DJVXpvSVC65t6DyhISYYJXNS1LFS4kO5R9YQf3IOo4E=)
                          42: oZdG4eGf7a8nQ-LsuE-l7MTCS18.roa (hash: 5c15Pb7KH72jzhvecKBamgtcszwWgCVUEzSxuUMdHSM=)
                          43: qJ22okdD8cK_emCAng8rI9cPrbU.roa (hash: WUQnBOwIu5J+Q0plEqLVlVFpmBiC7eLrEJFqZ2HqzGw=)
                          44: rVRMkskBzwl9zi-JY6YFOAI1hcA.roa (hash: v08kT5N9ZXsSCeQYLs3P8oE3ZLKAofwCwujUwPJ72Pc=)
                          45: sAL7HV5u2GX7kRj70Q8iPk9F6Hc.roa (hash: PqlT19J8VExmo6WWORuzOl0PCbV635XVo/nu7AQxx1w=)
                          46: saL_JgI0PuLcRd2fgaRyuCRT4oQ.roa (hash: TKYq5bkvZmNzmAS5U9vl5b3QXUiEmUHsR8998Y8ephk=)
                          47: ssCZoEPZ62NS6Z7w7p7XHtYYBDY.roa (hash: Hgc/3TJtI5yynn7M0w0nfY5PZGQECx2OAgvuax5O8ME=)
                          48: xlkcSwD0mmtZPgi3xXKhycAWYyM.roa (hash: BAhCmE0YHR0xQbs06CAdD0yavtNQmtlINBJ1oX8Gqn8=)
                          49: yJts8iRe97z0LBku4nfeAAQmzuI.roa (hash: Kml13BMft8IVP0nzevzpw72P/X7Z+HrpFqQAw2Yg/rY=)
                          50: ydjj493UN6JAAmZf6D9xQrp5Fuc.roa (hash: r/+ra3gt0oRo1h5IYk68eH88kHv7hYOt8DrkYcFlWmE=)
                          51: zg4G9Al7ef2rgqcn_nM4kp9NKaI.roa (hash: YDgq8a39d8LckxrdlKsf3y4bYTg9xyEVGHD8tb4DwoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:a2:a1:13:5f:6b:7c:6d:b7:d1:ae:e7:4a:fe:c7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Dec 20 12:01:12 2025 GMT
            Not After : Dec 21 12:01:12 2025 GMT
        Subject: CN=34961ce508146010ee99570ba4e7b71535dd3398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d1:19:7c:d2:46:26:96:07:16:85:48:21:a6:
                    9a:ae:7a:6f:7a:7e:b7:9f:77:3d:e9:20:39:3e:53:
                    e2:b1:66:13:f5:7c:b0:07:bf:a1:d6:10:55:07:c4:
                    66:f2:e5:db:1d:48:45:e4:a4:8d:b0:84:30:fe:a0:
                    8a:e1:db:db:50:15:4f:5d:3f:83:4a:8a:1c:08:2b:
                    b3:1f:41:f3:e6:90:61:d2:f8:9f:39:1d:c0:aa:04:
                    d3:a5:43:89:6a:be:61:0e:ba:c7:0e:2c:d8:05:f6:
                    8a:c1:0c:86:71:b0:59:23:70:e3:66:11:b6:c7:f4:
                    8d:70:e0:1f:07:f3:71:e2:b1:3c:e3:0d:a6:d9:4a:
                    b8:d9:88:e2:89:75:81:e5:14:f9:02:2d:35:d6:ba:
                    94:ea:92:ff:cc:ba:2d:97:47:04:70:76:29:e1:54:
                    31:8f:42:55:f0:a0:dc:55:20:ee:1f:02:5b:3c:77:
                    cd:1a:19:7d:ee:fc:bf:ac:60:6a:8d:af:d2:89:54:
                    b4:51:e7:e8:7f:51:92:0b:cc:de:36:d7:83:bd:18:
                    07:60:d4:73:77:b3:7c:bd:f8:c9:57:7d:bd:7f:8b:
                    d0:7f:e3:b5:80:f7:d2:1d:17:3a:e4:43:c9:c1:41:
                    dc:94:d5:75:38:89:43:d9:48:90:37:1f:45:c5:77:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:96:1C:E5:08:14:60:10:EE:99:57:0B:A4:E7:B7:15:35:DD:33:98
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:64:da:bd:0f:4e:ab:9e:4b:f5:5e:8f:48:73:3d:be:75:8b:
         dd:c8:7f:b1:0a:f1:65:80:f8:cb:12:92:23:b6:17:0a:d0:3f:
         19:f4:bf:a5:e6:df:5f:26:62:3e:22:43:f2:39:f6:3c:15:92:
         91:91:51:7c:29:4f:d5:9f:c4:70:f3:24:01:45:e8:71:68:5f:
         07:fe:60:4b:89:0a:f0:f4:be:c4:72:e1:ba:3e:ed:02:d0:47:
         8e:58:a2:19:78:78:cf:35:e3:99:81:6c:06:57:c5:09:86:0d:
         c8:e5:0e:1d:a8:f6:4d:46:d5:61:50:d4:00:49:26:36:9f:04:
         f7:c7:16:7e:9c:b2:97:33:bc:d0:11:28:d3:50:72:93:d9:ff:
         87:ff:7e:48:37:07:bb:af:a9:71:8e:93:23:8a:64:38:1d:4b:
         0e:e1:e4:0e:d2:1b:64:14:22:9a:5a:98:8f:45:92:37:47:0e:
         36:1f:8d:4c:c9:6f:2e:01:1e:9e:2e:a1:60:b0:10:5b:c1:72:
         ad:07:d5:d6:db:32:cd:89:5e:d3:78:2c:c9:a0:29:99:97:b6:
         90:e9:a6:23:38:e0:e5:12:44:36:98:ce:c4:ec:c1:93:7e:09:
         32:d8:db:a6:7c:09:0d:86:5a:09:43:d7:84:50:0c:83:43:70:
         9d:dd:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----