This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
File:                     TxQRLQXp2HYUnSd41I7aqjJNsKU.mft (raw, json)
Hash identifier:          1HMLLjR0OmJ8e0RbIIK2TJQ6305QUetn+kD8rrRtOlA=
Subject key identifier:   F0:0F:B7:86:6C:34:D9:86:D7:A6:88:56:6B:EE:50:4A:CC:FA:02:94
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Certificate issuer:       /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial:       019B36EA0C38D19AE87123E2EAEB088A5064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
Manifest number:          0AB9
Signing time:             Fri 19 Dec 2025 14:01:06 +0000
Manifest this update:     Fri 19 Dec 2025 14:01:06 +0000
Manifest next update:     Sat 20 Dec 2025 14:01:06 +0000
Files and hashes:         1: 1LGdECS37WYO0cSstd7WiM58Wb4.roa (hash: o62Pe4Cj4MRSCZ8/0ZYxX65Y0zAb31DdOeGPHsIeQHk=)
                          2: 1q15TtXvytVHjStfX_lL9tV9DVs.roa (hash: w5d7SYBHMqnm/Qqyb8nFvT3J808OFmfopT33zLcfmNQ=)
                          3: 2xyfwpZuyS8FfcxbjFGzpEC1S80.roa (hash: ph5pFid7hQN2/J8cBKGByUr3gkDLCxIRBEgEgJazIvY=)
                          4: 3dgwdFBn2PXVI0JsrotAUEKLYR0.roa (hash: 7HuR03EpVzgap8e4ae91gdyjM/onEIpLgtNf42Acqus=)
                          5: 4_eWVTbuyBWFWXmZsgd58LozWxA.roa (hash: VcywCNJAu5x4K91o4zk/dsIIOQy3B1o5AtQtJM+7WGg=)
                          6: 781Y7WR74KP16bfjYN7x7qbjXUo.roa (hash: JLjFmALQamBcUTpdq5w7UO7gABpC9Lprod8kcbZKktE=)
                          7: 9l1LU6vhxehP_pQUKOsxdDCtk4c.roa (hash: M9SdlMffEUjd/9zAke6Pbv9btXlDRe6+PWs1O7KZTbI=)
                          8: BJCX_WggKmBE3-H5I34ldv6fLZ0.roa (hash: ZCzS0PTX3qe/6sYXUo5G6g055d8TtdLeIKIWCmgswxk=)
                          9: CFH3tDV6CjVHTRuE0yBcRo2-IaQ.roa (hash: ac5Eyl+9TSmSCBTLI0o39IsF1z2SYP3dsWgJcZrSzGQ=)
                          10: D7_j71WlNQbJSaNR8h4l7oOWSxU.roa (hash: NIejWpZS6g33TTIHATPaLnEB2XPdA2izYQUXBac0DZo=)
                          11: Ed4loudndsjYSXqY4Q8xs6ER8Q4.roa (hash: Lr3T5aakdnBMwcWrCBXcMU2w7PGSM6aH6wthEb/gTIw=)
                          12: Ez20p-DfZEiMmfY2vvzmOJ0Tio0.roa (hash: QrUId5MJLVUM/zJdVKerb/DCzP6BbhRQ78QxOCS7vqE=)
                          13: F5Ytjlg1FWsdxSwJLOPD5DQhDJo.roa (hash: rB0GXP4P44L/glh/m3ADF7lSZ634cO8s/N8lvh7pZrw=)
                          14: FNPtX1z6-Gt7jQ44UvWNFSRbm-g.roa (hash: nguWIGGL61WB5iPidKnsdqS+gmUzKRAINT8EDHat7dE=)
                          15: GekOQSRgaOq2ZMppSTi9JC4xr5c.roa (hash: +xllFqhGaEr3x2j2aZdOO9FiBxWmNKtqHeZi5tWloaU=)
                          16: HzB5_mrhdxqK3tHemRYqJUrCWoc.roa (hash: c97N2Ld9NhkRwBwjJDypJuWc2rnmxKN1z4mc5oDIaFc=)
                          17: Jf_p-1GWcr7ryXYkVaXP-mq5LrY.roa (hash: B5E/QZm1FWuwr9aSwFJceJ1D9xRlja/oZuQDsxojUik=)
                          18: Jx6sf754-VYd5Og5nvcp5unrAyk.roa (hash: D3DLgP5OFULjC1PpELSPiJrkZ1hR2NUXXRL/5u3293w=)
                          19: KtlnfW9_h7_MyW-j9TcGiC0HAu4.roa (hash: 104LifrnYp7wohFkNN5zsIKvsi2D4tpUsJX89f3PFT0=)
                          20: LzdMGu0OcRYHQY1HlpwxQLBRuSY.roa (hash: 8UTPwSHPxxCJvAY5ZTsxLYAysZ1uLF0MwZ9WftvyUs4=)
                          21: NdhPKGIZH_MNEMgUukoxGilRd4g.roa (hash: oG0/Fo7mBIi0X4IrdXas78jFDzdGU3jGiruJ+gMVCZA=)
                          22: O0YkX4qTSSZSsOFa-tmk41Ndtdg.roa (hash: kPmdgzP5KpLEZJZzI9YnBU9KMJ0ksoUVrclQTKF1Oi0=)
                          23: OAkrSqfZjROgM8oZN4ddqwaUIFY.roa (hash: njs/k7l0yWQH9Tc0wN0u7gMoEWInaliFjlKXNYgF0Kg=)
                          24: SmBWFs2JZp-Kija2c7xPvzisjqY.roa (hash: hKlLzT2Dg4Xh1iL/3d5i5HLxDI7Ai252L90EvULpFjk=)
                          25: SmKw7AOI9JUtfz6HkGV4t9qJQqE.roa (hash: GwxaToKhMxog5Qb6KLB212ESabEWepvnGaUrIpVp2N0=)
                          26: TxQRLQXp2HYUnSd41I7aqjJNsKU.crl (hash: d7bdxUq9aqACN8KixFK+dgbhkb3M1WsnjKxtc0mOri4=)
                          27: WYsGEQYq-064ncik3p6ueM-7xVg.roa (hash: zVzrmUA+nDyzCbHUJnNFHw5HV+KZpljQJupjwkywgGY=)
                          28: X33Nuee0w6GTBtZodhIbCfryLHg.roa (hash: q4lpuwTTRU669YBE3yh5vrkAgExUqfjgBFzui/pDGDI=)
                          29: aI2NYqmkcYv2KKww0cSjGySGxgg.roa (hash: KQ/nFDjAaOgdJNR5OHss0Kd7IzAM9h3KUzyzVYa2qPw=)
                          30: a_vqQ_dpJ86k-sfo8QYIVPIue8k.roa (hash: F5HdqHfdDR2gLHVN1eM7f61dVLu6vUvw7JEvDQ7zXws=)
                          31: cZSQ8R7-65vAwJO-FT96chJrUGw.roa (hash: 9tzcRSPinXlO3L9oDrIRigxx9j9+0/c5jg3Nd12dBaI=)
                          32: dYJSVxEZgDei3viP39Y4btT5FiM.roa (hash: GVxx2rls/AyUvWNi2L9Idnr+t5Xad94uy8RGF2BpTNs=)
                          33: f7ptg3vdm2RgdD3iP1J5JBwbuAo.roa (hash: N4rUxBlNqRiwZcSHmZeJl28Kw95VKLe/3xyx00W8iKM=)
                          34: gD4s9HSc5p2am1oaqm92KyZ6rNc.roa (hash: uwwSmxA3VyFu8q7qjQqWimuyakFaRyg23jDDeJ5VJyc=)
                          35: gILMbtpqEFA62JoaeYu1K5LSJW4.roa (hash: yqHQtUF3utDdJ9J+Q83C8R4pXPlN44ovUCcpIL/CHjk=)
                          36: iO2XymkwIF7WlUW5qz2qQNgB2Ak.roa (hash: L1lYpnfPbbUaWlpO5SVeEau2RnCcWEeITZOvJxCDImc=)
                          37: jKJZGttVpd2zbPn5oh1yZ1pxZRk.roa (hash: /ybO8+Gcl/0Baoo97KPi0aH4uqVdzayZm5LOJa3MJ/I=)
                          38: jOulq9wQPJB_K34gHf7uO6xhDfw.roa (hash: ir9xDKYoEAdzfQ8CoBLgJ34BLcy8NxqnVn77vnV7lOk=)
                          39: mAliMArUmeDltoxHl02OqrxoCJY.roa (hash: +m9SPyFh2km+SGU6TDB8gaIZJAfCsZcIjO6U8dM+w8Q=)
                          40: mOjHMHlJNxxJBysxWsOSgCfJbsA.roa (hash: VQ2RDJHlSUvA0D8d5A3JuXxTffzuCIHvTqw3n6jvJDg=)
                          41: pcOsOCoBsuL7OjuzRuZAWMvl6mc.roa (hash: +7ELHnUi27cewsZpM+owlK2DUPXW1s4Jgo5ehxXa18A=)
                          42: qLDWr5FRCRwk2RMS3WcB3B53rjQ.roa (hash: hl3kBvxy5HeRGUZ/+JI94lwbfr4n0ciKRIwo3aDRXTo=)
                          43: qZRUKhtlwXj4OrWA8MBU_mzQqJE.roa (hash: m4ExbXP9WfcgqmfcRkXxxoPJRBeGpqPuyhVZmNOMFB4=)
                          44: qcESyJho236kkRbvaWCAhX-miAs.roa (hash: 1LWxs4g+I2yFIL/no7/kIY/0PMOjmSNdV+jfd8hn5rg=)
                          45: r9qWmUyirzSoIMx5xp_y-7AIxWk.roa (hash: ZemXpLqp/9c9SIDUxkmjPuxL9iotKu/FfXs2x9gaAl0=)
                          46: rYLcFx5z6G3F0c8E2CLYI2ft2xQ.roa (hash: v8HpMK/XYo2dITbm51u44Lg6YUMfXWJ1/7II3z+WDLc=)
                          47: rcteLidFERvpW3aicyZGo9zBq-k.roa (hash: cGt1yTW6OGCqQEjIYjL7yNvwob0EaCMvI1+m70PBnvg=)
                          48: tV54uU3ZmCsg6sSy89lMnHmRMgw.roa (hash: xeN+Px8JR54zMIfmkNo/HGATdW5+cpBSYt40vhmLq5g=)
                          49: uD2BNoEUFo8Zqs2piGNRNmvsiCw.roa (hash: 8UHPHglR5u1SfVoLg9SM698CdCn1mJj97ywMXYEzWLw=)
                          50: xMasQceydTZcZsjJ0G1xqv22RS8.roa (hash: Gn3d7yAyEC2mSWuItAA/HIsql3a3gI/aK5D90tUYS+A=)
                          51: yKr-lbxbewyIbYXmFRw2mMNuLTo.roa (hash: Z3aYRDydfDmgj6e8LtjA5XA3RM4olFdMgIZ5SEEf7Ao=)
                          52: yfw3m2Ijcs8ilng5Ei6kal1sVgg.roa (hash: bhU5jEJ486mPZq7xJvEW4FqJLqBkO1Tqfe8yLuJHcNE=)
                          53: zYxYRAP9u5F3jsVOwBwaECKVSfQ.roa (hash: xaRiAijSC2CzFybNmVPCza0Iv+L7QdAl+PosddXHUfE=)
                          54: zrYBef1QK-dLallM9PjcSjGpymI.roa (hash: cRsj5gQpAcfkjpl2JMJWNvqgYv7eA6VvFL+ielOPLC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:ea:0c:38:d1:9a:e8:71:23:e2:ea:eb:08:8a:50:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
        Validity
            Not Before: Dec 19 14:01:06 2025 GMT
            Not After : Dec 20 14:01:06 2025 GMT
        Subject: CN=f00fb7866c34d986d7a688566bee504accfa0294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:5d:a8:5a:65:94:23:4b:92:c9:82:bb:f9:
                    47:c6:8c:16:52:bd:fe:f9:43:cb:1c:06:0d:47:eb:
                    17:df:2f:8c:1f:7c:55:92:68:fa:b9:4c:a6:4e:db:
                    44:ce:31:4e:7f:22:06:a5:a4:f8:d1:b9:97:48:72:
                    5f:27:42:68:66:1d:34:d0:ba:3f:28:fe:a9:47:7f:
                    80:50:c4:65:03:eb:74:6a:f1:36:d7:ca:bc:a9:c6:
                    0a:da:4d:79:d1:f9:5c:6c:e9:6a:bd:7e:75:25:c0:
                    03:de:59:f6:c1:a0:70:f6:49:a8:0f:82:85:2c:7c:
                    00:62:7e:41:27:0f:e4:d0:ab:78:f2:21:6b:3a:f5:
                    f3:61:31:90:2c:1e:96:86:d5:0f:4c:0b:f3:b7:ea:
                    bc:b4:5c:80:72:59:ca:af:2a:2b:6e:59:3e:3a:89:
                    ed:e1:fd:20:d8:06:0b:85:3a:8d:95:b9:89:18:30:
                    2e:7c:2c:0b:39:9b:33:4c:59:a7:24:82:06:8d:e6:
                    47:27:53:24:f0:f0:e5:c7:61:a8:ea:5f:73:04:cc:
                    7b:3c:08:eb:b9:9a:4a:d0:5e:59:48:ff:ca:29:b0:
                    cf:49:dd:99:0b:9b:c4:91:e4:09:7d:8f:7f:55:2a:
                    bc:a4:45:8b:eb:5c:9d:9d:64:07:ff:e1:63:ac:45:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0F:B7:86:6C:34:D9:86:D7:A6:88:56:6B:EE:50:4A:CC:FA:02:94
            X509v3 Authority Key Identifier:
                keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:54:97:ca:3f:10:70:f4:24:23:a5:e6:10:76:9f:cb:29:f5:
         2c:8c:85:4c:00:d0:70:fb:f7:c2:88:b5:55:38:e5:c5:ca:ab:
         29:cf:97:d8:f2:a1:7b:fe:cf:1b:bf:32:ef:67:12:99:49:c0:
         d1:f0:6a:4e:b9:3c:2c:7d:6d:7c:7d:99:d9:cf:da:ed:69:1e:
         15:6e:bd:17:bf:a3:5d:66:ec:24:fd:c0:f5:e6:2e:92:d2:d1:
         03:f1:79:6b:7b:b1:5e:94:7d:1a:e5:eb:96:6d:f0:9b:92:ac:
         6c:9c:cb:f0:4a:5b:0e:93:3c:35:0a:72:89:54:91:8a:70:98:
         e5:fa:ec:25:7e:8a:f5:b4:b6:a7:30:3c:3d:63:aa:55:99:d6:
         d4:cf:28:e8:aa:d7:bf:73:8c:b3:2c:ef:ac:a3:81:0e:2b:09:
         80:82:e5:d7:97:fb:04:e7:f6:a6:ce:3c:88:9f:4c:5f:7d:15:
         56:48:f9:d7:49:0e:bf:04:bd:a7:e8:b0:bb:01:38:60:10:0c:
         e8:7c:a9:42:9b:7b:b1:9d:9e:c1:1f:f6:ba:29:3f:9b:46:81:
         49:47:45:ea:a8:d6:a7:31:28:29:a4:c2:57:3b:d0:64:4f:c1:
         f8:df:fa:01:55:92:12:ce:d9:79:9c:31:f3:2b:c3:3e:78:03:
         4f:c4:a5:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs26gw40ZrocSPi6usIilBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUxMjE5MTQwMTA2WhcNMjUxMjIwMTQwMTA2WjAzMTEwLwYDVQQD
EyhmMDBmYjc4NjZjMzRkOTg2ZDdhNjg4NTY2YmVlNTA0YWNjZmEwMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3pdqFpllCNLksmCu/lHxowWUr3+
+UPLHAYNR+sX3y+MH3xVkmj6uUymTttEzjFOfyIGpaT40bmXSHJfJ0JoZh000Lo/
KP6pR3+AUMRlA+t0avE218q8qcYK2k150flcbOlqvX51JcAD3ln2waBw9kmoD4KF
LHwAYn5BJw/k0Kt48iFrOvXzYTGQLB6WhtUPTAvzt+q8tFyAclnKryorblk+Oont
4f0g2AYLhTqNlbmJGDAufCwLOZszTFmnJIIGjeZHJ1Mk8PDlx2Go6l9zBMx7PAjr
uZpK0F5ZSP/KKbDPSd2ZC5vEkeQJfY9/VSq8pEWL61ydnWQH/+FjrEXFsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAPt4ZsNNmG16aIVmvuUErM+gKUMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFSXyj8Q
cPQkI6XmEHafyyn1LIyFTADQcPv3woi1VTjlxcqrKc+X2PKhe/7PG78y72cSmUnA
0fBqTrk8LH1tfH2Z2c/a7WkeFW69F7+jXWbsJP3A9eYuktLRA/F5a3uxXpR9GuXr
lm3wm5KsbJzL8EpbDpM8NQpyiVSRinCY5frsJX6K9bS2pzA8PWOqVZnW1M8o6KrX
v3OMsyzvrKOBDisJgILl15f7BOf2ps48iJ9MX30VVkj510kOvwS9p+iwuwE4YBAM
6HypQpt7sZ2ewR/2uik/m0aBSUdF6qjWpzEoKaTCVzvQZE/B+N/6AVWSEs7ZeZwx
8yvDPngDT8SlEg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:25:57 2025 by rpki-client