This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          YLnZUMmkpWAN83TNHOUefOF+c0CT9tO31GlnQxbgn1s=
Subject key identifier:   63:D4:0F:9A:55:57:FB:FD:81:FE:7A:91:7C:80:0B:77:03:19:FC:6C
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019B3757E6CA74E024F22574384BCBAA87CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          1929
Signing time:             Fri 19 Dec 2025 16:01:06 +0000
Manifest this update:     Fri 19 Dec 2025 16:01:06 +0000
Manifest next update:     Sat 20 Dec 2025 16:01:06 +0000
Files and hashes:         1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=)
                          2: 2zSqcJ9Y-8gFEYLEn8boP0u6rS4.roa (hash: haGjzU6eyI1x756FuVAVNLEoh000mU3ZA/CDoJfpaAY=)
                          3: 3GpFaqQcQN9oMifABgrQUFoG0kE.roa (hash: WY/ivhDoFD/EbNKAvaxEqHPsDCFDZM/+fS+MHyM0i7w=)
                          4: 67Mxj3KpQWipNpMlLApfSyTCvC0.roa (hash: Fv9QcoJhLdt0inevu/XCAdGmMRCdZt4H9qb4Kzk/RZ4=)
                          5: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=)
                          6: 8eDdBsgY2IyhmucFkbHm5Vqa4dg.roa (hash: 4395eHok2K6kmkkM0vCUMdpi272lI5L2QlfvQJmQQ18=)
                          7: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=)
                          8: C5OsBMz5fQykWMCwQdFhSa-dVME.roa (hash: VBECbuwyUI1l/OYWc21n03EPHCXetAxOxte4Dp1kyt0=)
                          9: CcLRGj42YfBnS-DSMVQ56Ed1ds8.roa (hash: p6KK3vhNlRrVRpgQjaHC47rAMguNzRk9ILNOwRtTjlE=)
                          10: EWzjzTnMnun7dm42dJGmvnyBoZ8.roa (hash: U4usoWTWTzR00G3EMoi9wIZBlXX+/pCkgzxPh9oloGk=)
                          11: Eflo_3d0ikDGp7ukpVhOINTx3_g.roa (hash: mJ4gMIcu0+nxbTSlBEyuBzWv45URexFlpi8POVPz4Yw=)
                          12: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=)
                          13: FHDgepgQrMHgp6ZemKClHBnTyFk.roa (hash: 1wn4Qh5DiYSN72ZmOop87rF5mtepTFFlXdUD4HUb+ec=)
                          14: LsXYjrjtcFruHy0Xsx-YzdXSSk0.roa (hash: dkMfT/u2kIwaZXzUHMjpU4ARix+vR+H4IPW7qIHRzPg=)
                          15: M714mkyeLGecG3CxD57_mFs1bVI.roa (hash: sWZ4L0BbCyDSxcxQBSHqJ3/DS0RNI5BibcEqYwkAaKY=)
                          16: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: XBihC2Sb7R3rk5fD1AIvwV18eqAMtqtJ+EbX3H5cxTw=)
                          17: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=)
                          18: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=)
                          19: PYrj6Q-UxHtJwUeb_m9R8cqHKEE.roa (hash: Jl1qDKOhIHPhckL0Pr5e3wh24QkNWmFXDCd6nvl0ew4=)
                          20: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=)
                          21: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=)
                          22: XS46VDgJy0IpkMv_mAk6kiYR64Q.roa (hash: NjRGNJyDi7JXjX7bqeTNuVu8F0dNnfoYqiJ5z0av0uE=)
                          23: ZbSMtU36ykIrlVNp2VK8NgG5pVE.roa (hash: sH8ut9Rj+IdHM5ZsAXPpIAl8TDiv4KxH+jfISb7fbXA=)
                          24: _01k3y56cEMdQ42iOKunr2RMUeM.roa (hash: DGyUgtSPD/8CoWC86Wf/mLLAiyFkCUgpPiidGCEavaM=)
                          25: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=)
                          26: anRCvSGXJN-cP3l_C6L2k19y4zA.roa (hash: o5ciTWqaZzCbSMaIT6261kWGdGN0gxeTcqMlc5EBp70=)
                          27: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=)
                          28: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=)
                          29: dbqC1gfl12f35WYp8InH-gV02wk.roa (hash: EkpXoaMa0fy12pzt6OTS/PPrHhuvYU2fIVqKuLxv5vk=)
                          30: eks95w96IDU3y7FJtqpJE2ERD5g.roa (hash: L7xCEIYpGK6CRbHPIfP9mIdxc/3UabGk1gnSMBDQAsk=)
                          31: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=)
                          32: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=)
                          33: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=)
                          34: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=)
                          35: pOIWxKcdmhqjCV5w5POl9_2JyY4.roa (hash: n0yy3OyjCswMBJj55eSTCAuqwQeLoykODrZnbzLuaaU=)
                          36: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=)
                          37: rBr9G__yg--ybJi7KjL0Na3qRHA.roa (hash: ItHH13EhHo4OE288cMXg6GiOrDY96SUMCagz0YFt5LI=)
                          38: rvxwWdPBwUEDeub1SKW47DVWEmI.roa (hash: 5Fz4NipysVwhza6RRmS7qJbBV/XzxV+pB0l2qBalJ28=)
                          39: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=)
                          40: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:57:e6:ca:74:e0:24:f2:25:74:38:4b:cb:aa:87:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Dec 19 16:01:06 2025 GMT
            Not After : Dec 20 16:01:06 2025 GMT
        Subject: CN=63d40f9a5557fbfd81fe7a917c800b770319fc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:90:ac:ff:38:6a:84:05:3c:f5:82:09:4d:
                    f9:59:02:89:91:9b:27:4c:0c:14:55:d7:fb:eb:b8:
                    dd:b1:ec:40:1f:97:33:0b:7d:b9:7d:b7:eb:1b:6b:
                    19:c9:ee:5b:f6:1d:4b:0c:0b:26:5c:dd:ad:f2:a0:
                    74:91:7b:1f:0b:00:5a:93:d3:16:29:cf:fb:d7:6a:
                    3a:94:f7:6a:3a:2b:c0:87:6f:be:25:41:ae:d5:be:
                    e0:09:6c:31:c1:6f:33:6b:d4:a7:46:7d:5c:40:08:
                    82:05:4d:3f:47:93:4e:22:cf:88:bd:f0:1e:fd:40:
                    c7:60:c8:a4:e7:2a:b9:8d:c6:94:c1:ab:28:c2:4c:
                    cc:8b:24:05:f4:55:dd:0b:ae:98:37:28:37:27:11:
                    9e:71:a4:49:58:10:17:0f:8a:3e:47:89:27:7f:74:
                    c1:95:a8:26:57:87:0b:00:65:0b:0f:8a:67:32:fe:
                    c1:1f:92:39:69:29:e6:f5:95:9d:79:8b:63:0b:65:
                    d3:08:97:20:91:d7:68:15:90:ea:18:f5:a8:a4:32:
                    6b:02:ec:28:d5:47:43:58:c4:0c:84:ea:98:57:7f:
                    46:4d:51:fb:93:17:42:36:9b:1b:4d:15:30:2f:59:
                    ce:ca:5a:0e:32:a2:35:cf:05:21:c2:8f:07:ac:b6:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D4:0F:9A:55:57:FB:FD:81:FE:7A:91:7C:80:0B:77:03:19:FC:6C
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:51:30:15:ae:b4:23:1b:96:70:db:db:57:4d:23:62:d4:
         f1:87:18:eb:02:b9:c8:a2:ea:54:fe:c6:03:c4:d3:4e:00:42:
         4a:5f:8b:17:52:8c:11:d7:f0:9f:5c:64:fe:07:5e:10:65:31:
         f5:9a:10:d2:23:eb:0c:43:5f:81:70:22:f9:0a:ea:dd:ff:3b:
         a1:d8:be:e8:82:57:fe:96:a3:54:c6:81:4d:4a:36:0d:63:51:
         da:7d:2a:ee:9c:2a:19:40:b9:e1:dd:e4:24:6a:c8:e4:43:26:
         8f:65:7a:ba:47:c5:9a:26:86:c7:b1:6f:e0:a5:21:df:cd:ff:
         91:b6:72:1a:6c:12:ff:b2:e1:0d:b5:02:55:39:65:de:ab:d6:
         ee:11:2d:b6:95:b0:af:9c:4a:b8:ac:20:c1:a8:c4:ec:62:92:
         13:30:b9:99:2e:4c:f9:66:60:78:e8:8c:e3:19:c8:b5:b8:41:
         a3:15:26:be:64:35:17:6d:05:f1:fe:1d:11:1b:db:92:d7:af:
         88:61:05:6d:da:61:5f:c7:63:47:9e:e3:6a:b9:f4:a4:24:2e:
         bf:dc:2f:0e:ce:d1:a4:fb:1e:8c:5e:46:a8:c0:f1:b9:65:d3:
         4d:e8:a4:25:ce:a4:53:40:e4:55:e3:8d:f7:77:6b:88:43:f4:
         7b:a7:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----