This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File:                     Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier:          5/DvvfFJIwwZFBDHDFVsclDQikyH0Mn/dSlQoZpFQ1o=
Subject key identifier:   86:5C:33:A2:93:2C:98:52:63:4E:89:47:BE:77:C2:E9:97:A0:20:62
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       019B37585D0648EE19932C06B32C5B946817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number:          0BAD
Signing time:             Fri 19 Dec 2025 16:01:36 +0000
Manifest this update:     Fri 19 Dec 2025 16:01:36 +0000
Manifest next update:     Sat 20 Dec 2025 16:01:36 +0000
Files and hashes:         1: 0CT1joEXXqHn7ApZderh8oz-6X8.roa (hash: BvOsPrngGNiLcDK7gBcQWH9QFWAThZP/Rzb+/PLbPTU=)
                          2: 1syvLvZNw4oAM-YcaPxmJP31bEQ.roa (hash: LPtgL6Q40OCE7W48yA4YQ85j1wM296i1AWyNKAFeL24=)
                          3: 2eiy-_16euZlcY312olF09W31s4.roa (hash: IUh18w7P0P6a+lmEiR7StlwVEgGLtk0s4vBFZb7XO5A=)
                          4: 3EbDHVpUGPClmvm3J9iIFuXcrd8.roa (hash: cSc8UvFvDER4vb0XGisijdGU9FyUobR1/SMTyehQLHQ=)
                          5: 3cwOhtgSXhi4ajb5tZo0Xfs-k6s.roa (hash: JPBKuPq7WE9CFKFDDLjhI9Isd03CJ2NF4DCcSMyCJjc=)
                          6: 45wSdKS9u-kLwBER9DAdp0dOdgk.roa (hash: fvR/mlJedJy8x4zrL0etfG0pS/sgz873Mc4ixjc+vyg=)
                          7: 4hsvXB1iTRQzBfKiak8pW2I8BF4.roa (hash: XAp414dDwa28MtvplUV/sn7g1yns68g20QzpT6TX080=)
                          8: 9RqjWLw5HPxJzuXKXhGXXmyVkAE.roa (hash: 16h/SJTNr54l9qICOmuHkNeVLrt+8pmYa+3yNFUR3qM=)
                          9: D8tDS5afEI55b3ob8NG1ZTIaLQQ.roa (hash: HR9k0vtrdM5wK2sftLGXjSwvC6aqcZVjRpaEL6hcsrk=)
                          10: D9x1CTV8F_4B-wx1zITSO-EMubE.roa (hash: HbzAlStX6f56p1esX7YT4omJKAR7bHh229e0ejlC5Eg=)
                          11: FG5pNQ5_c3TjGvqm7drNqjAtp_0.roa (hash: pcv1sQ3cPr8Z5RqoT1cS23yqOKHpxM+1wRoitpX9AAY=)
                          12: H72gujMCMAZpLRg2cNnbawNMi2A.roa (hash: mc2ktHWkVm4x7yx+zpHQ1y0JVlLOdpVbGYpYAwP02X4=)
                          13: HIuQQFKgSBuAKuZ5NFV39UWdk-0.roa (hash: 6EaFRuDYvhQ4ZsTUqzReAUxLoig1ZR4YO2BpnNtxZIo=)
                          14: IYyyhMB1ESxGlLx1uYqNqrIgR6U.roa (hash: 4+KfJiZUKyrNHi/Wrz4kW/2Z3KBOulRvE66Y7Dq4jLQ=)
                          15: LbcVeiuDUugzhWMtPmYqNrGtC38.roa (hash: 17lM/1TLk5NwhqbTHI9QcyIG0e9IHDWy4YL3CEcB+EE=)
                          16: LgEojSSWxqPQSa07ze94dva_jUY.roa (hash: bgXznWdGQZcKwK/PhDBEr8V0fAhdejJIL6EFj3ITnqs=)
                          17: MGapW0vbEsDh07CObJqBM_xk66k.roa (hash: P8snUlMzN8SD1TPId1VEZe9Ri9QxtvHOJ9QJWot9Jpw=)
                          18: MrSOOhfdgSDu8DQamecQZPxYswE.roa (hash: mfmpNUSQT/f2SOWnIgX00XuCSJAj/TdvBXwWPhwJxA4=)
                          19: Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa (hash: 5jYKkFvljl/sNCuuK9Ccg8C+9QQrnGFhMRE89ePvdFM=)
                          20: O0wQkTberJBGf616XMSFIFD7KBs.roa (hash: 17n6+YLzt02MURVWqCyG+6B7DEgjzFUFOHL19KG1glw=)
                          21: OX5WGRMzsMc_dGpoOLVRfny2bxo.roa (hash: 8X3DRCHPDRRM7fXfOlVxxkg/aG8D1XcXWTqt5pAok5c=)
                          22: OufG3sBDvZI7hwG4WyzIc-Z0xOI.roa (hash: i/Y4cgjlSFEZdmlvRCXLNV99JlvYX2KAZ/g9aNaovag=)
                          23: PEoeENAheHgzP-nL_A9MPW80L0Y.roa (hash: iWOMsN9mK7Qviawj2/fUT70nqm31lGZIYRGadWpH1II=)
                          24: PGRCK_988SWzktKeQMe19aO2XTA.roa (hash: QsLivLGV0/DhneRFQo4vdA6cUJRH1asxl+VSehvXl8g=)
                          25: QNAvqEtOtUfMbDmfsPFEe603WNU.roa (hash: 1LcNY8ab58yNfN182kfxAkp7IB4n+zASQa1ST2WM24w=)
                          26: SBzgWhSF_OyJTG2wd8o-Ulr1nmk.roa (hash: 6nfYexvO1Kc2k+mD82GVF9WHZYMyGMTF3rCD7nDSq6c=)
                          27: SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa (hash: K6b6z9i944Syq+ZCWjptF5NFMjXs/+RPvy8K9zsSPCc=)
                          28: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: AFejJ12cyv8UKQ9PHY2vxIlbotQcpEQEVM2DNDbWNW0=)
                          29: TwoNGVXfFwHv00p0hl1agjjAKh0.roa (hash: EnXnb3QTXsz/G4VrSLiwLMRbpZkmAexWJqS5QR8p6FI=)
                          30: VkgHoc_Rx9LO0thb-KJrhy8aQQ8.roa (hash: zIBkV8AorlkbljaZ5zOpi/5kWq6s1363XBg2GvdQ8pE=)
                          31: W81rCzQb4TbKxPTooSlXa8XN4QI.roa (hash: CtqqoCzBFYTr59fu6lgBm7DIo8Hs2FvwBTe1ZDr7Ngk=)
                          32: WCelWbxY_ryT25IoQyob9TjveSo.roa (hash: bnYBgUb483TxMKFPkryTdkRUhsIN0EWfbbSv1I4sQIU=)
                          33: XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa (hash: wucX+GJutPw3tDOpsoQ6MWs680eTe2mkRw2xXYGRGbY=)
                          34: c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa (hash: W9CgyAiS0YOpvUOhIebxxS0z/0teFH9NlJCz2jTE+zo=)
                          35: cMU8VvUmjbwv8fW28N13UafJfMI.roa (hash: r21tLs/TiTIXMMK7rlbmRyjsYlaJyqFWP02tJ2yQ+5o=)
                          36: cTM_wPu67RVLbAM3nD6sWnqniqw.roa (hash: Ate7PK/dPf9sl6jT2ZlxKjCFiwliYg6RScR5spCNLF4=)
                          37: dgRDsleizFFiXe9DaqQOkGqkv1w.roa (hash: 5SxZOgkCgjuwwOmw1bmV20/4QSWRJ59FbX4T3oudoSo=)
                          38: khtbiZZNtdravP-MConYlqJTYmY.roa (hash: xXo87eImVPHif3j6yLOoXwcVidIvdHpygsCrdgfHCM4=)
                          39: kzJROGRJyZHBGTjoX7TVF70t_uI.roa (hash: Jj+yaaYYgzB6tRgd4hOyiggZphR9XS4OGfW8KoSDVmg=)
                          40: l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa (hash: 1gYcxOTK35gAGaMUX4XHHZe6la72rr7YynYRUMDnuCw=)
                          41: p3ROJ266o2pF0nOiR0HBZYzO_HM.roa (hash: ROb/DIruAz/5oHca7U7nr4QK7Ki0POfWjiHizu/y8lE=)
                          42: pLRMCkjbhFiMNh52TnBAspU8Hjk.roa (hash: U1FUmpIZB70rTHNhu4UV38Kt+GlWp4EPp8i4yoOh8xY=)
                          43: pS3QOZ2wypZ71SVvS4_yCNQwDJE.roa (hash: ftQJDmKbzx9RdLUMravYt2oMuiMTqqjLnLQ/z0Jk1Gg=)
                          44: q8_h8PwM9LDKmRpiGhzf_DMIsWw.asa (hash: 7qtDu35vecy0P5hMEg5ofnYuE5IxyHuwd1UDICCZ/2w=)
                          45: rWSnUoFSizQeONQqtbmoxgRXQLg.roa (hash: WRwAsaYm/Kcb4E7MVkOhb4dnAP9wdxMUgAV7X/La5Vs=)
                          46: rxk8aFkOeWjK91_TW-WX0ASv1Z4.roa (hash: 13VThZFeUCr48FxuuPNHQvJ0Fk0X//zMlJyzyJOre9Y=)
                          47: u-s_IvRi_d2uT0pVGYggJ-9vf_w.roa (hash: xE0k9qkP4J77FkjGvlKk6uMwrXPnBnaccpHmcue4AWY=)
                          48: vJD-DSmwOkOOJFuZzauASqUSruo.roa (hash: auuNNDBDYVXVMGfixRK8lih+GV92mCYSoacO6fybksg=)
                          49: vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa (hash: 5j5FVAZ4CeKUoBwfFPNsI7WH45FNyhDbv1/sr4ayZcY=)
                          50: wha7fcogtd47YRJWz6jr2K_oy9M.roa (hash: 7bzvo+VMMMPCXskKWF1nzlRo2MigQF9srzUNxlr/2Hg=)
                          51: zzDzNokLDw5fB_iBSLdcgwToZfI.roa (hash: 9Ii575Yb0QHWdHvqaclZEqxxCr5HLB5JkEBBY/yv0gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:58:5d:06:48:ee:19:93:2c:06:b3:2c:5b:94:68:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Dec 19 16:01:36 2025 GMT
            Not After : Dec 20 16:01:36 2025 GMT
        Subject: CN=865c33a2932c9852634e8947be77c2e997a02062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:28:38:6a:10:1a:77:74:5a:26:03:3c:d5:
                    18:e6:4c:87:7d:76:bb:c1:df:ae:57:32:07:9d:ea:
                    5e:f4:b6:fc:44:4c:c5:58:b0:9f:d6:4f:1f:1f:58:
                    01:fa:b9:1e:6a:ec:ba:f3:38:9f:6b:d3:1f:c0:64:
                    ef:7f:e8:3a:99:f7:26:e4:54:71:2f:1d:b9:49:4d:
                    49:4e:76:4d:40:36:2d:c7:44:43:eb:c3:53:41:80:
                    29:eb:72:4e:af:24:92:f9:12:d3:bb:4f:3a:f4:3d:
                    63:3d:c6:54:e8:12:e1:fe:66:6b:90:3d:89:32:78:
                    8b:aa:6f:bd:6e:84:02:72:40:08:4d:c0:6f:29:37:
                    cc:1b:35:b8:11:13:88:7f:84:32:50:3d:c4:a6:d0:
                    c8:9b:08:82:7b:db:95:be:ec:5f:ca:71:e9:24:ad:
                    11:2d:a3:61:42:a1:28:4e:9c:5b:17:e2:0a:65:36:
                    28:11:56:a9:98:ae:af:31:22:43:6c:e6:30:5c:83:
                    ce:57:ed:8e:aa:27:d4:ad:ae:e7:ab:6e:8d:30:d8:
                    f9:8a:fc:5c:da:b7:30:37:86:06:5d:f3:30:32:e3:
                    cd:d1:3f:d0:ee:e5:0c:45:ed:36:48:a2:5c:1d:c9:
                    b6:25:c1:a3:5e:58:1f:9c:80:ce:90:84:43:fd:20:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:33:A2:93:2C:98:52:63:4E:89:47:BE:77:C2:E9:97:A0:20:62
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:43:59:23:fa:7f:c7:c5:57:fc:3f:86:3b:1a:60:bd:80:e8:
         9f:e0:b7:b5:26:4e:7b:a0:60:07:84:3e:fe:b0:22:68:05:1b:
         d5:31:64:38:59:7f:41:d5:e7:5e:1e:58:24:f5:29:47:b1:e7:
         d1:c5:55:c3:97:f6:0a:c1:3b:fe:f4:14:28:45:07:57:b0:61:
         6c:1f:9f:79:7b:78:8b:ca:71:8d:75:c4:f9:97:a3:57:99:30:
         27:19:da:53:5d:c6:cf:6f:04:d8:0e:29:12:43:0e:b9:75:eb:
         f1:6d:10:18:3f:60:46:14:5a:9f:e2:c9:03:86:a7:a8:20:7a:
         9c:36:07:f0:3d:ac:4a:8c:02:c2:87:f8:1a:fc:50:d9:b1:4a:
         67:4e:d5:b2:c7:d0:74:8b:52:34:d4:3a:b9:b5:7d:46:ef:66:
         64:ff:c1:b0:61:46:84:e0:bb:78:6e:b8:2b:49:06:ac:2e:cd:
         f6:ae:40:e4:f0:b6:58:6e:1c:20:3a:54:2e:e6:fa:0a:ec:05:
         76:ca:cd:8b:01:15:f0:75:9e:fb:4f:6b:f9:c0:27:7d:eb:87:
         2b:de:56:2e:61:08:d4:bf:0f:17:f2:aa:75:be:76:3d:e1:c8:
         35:da:1a:31:2a:80:e1:49:24:48:9e:9d:d9:7c:3f:9d:e2:e0:
         c7:3e:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----