This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          wsqPJzJQLVMw/Qs8A2eoPLgaIjCQJx5AQ8gT83vhOa8=
Subject key identifier:   F4:D8:49:41:A0:70:1F:02:FD:2F:D6:B8:AA:02:E5:35:B0:0F:6E:7C
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019B37FC3B3728CD246DF2650D4AB9586D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0FB3
Signing time:             Fri 19 Dec 2025 19:00:35 +0000
Manifest this update:     Fri 19 Dec 2025 19:00:35 +0000
Manifest next update:     Sat 20 Dec 2025 19:00:35 +0000
Files and hashes:         1: 0JHO1-X7wGcaGpl-pLpAVCz8aTM.roa (hash: zsfS+cyGk2xh2Z90DNVKJE65eHClSQHHZEU6AiR2qyc=)
                          2: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          3: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          4: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          5: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          6: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          7: 4C6SBkLAqoydNDL30z7KnDqMSWE.roa (hash: LxL9frw5C1z/wACOaJKO6nleNDsOIyIpKJqL+pn/ss0=)
                          8: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          9: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: YLtl72We6wODoluFxujjAPrTfulbbN3KCme1TgUaewU=)
                          10: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          11: 9Kz5q63dKFUnAF1wMTr-Z290llk.roa (hash: iWOGwKn2UXubdMmIS3zPYzzM7O/5RV8JicklkYYwMRA=)
                          12: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          13: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          14: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          15: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          16: IPsGPqLmFHx-C33JFo-4MPUAWR4.roa (hash: Sl37i0Ko7qbIuxKKVw0qC5lMicuIGX9lG5VLqXg9Ln0=)
                          17: IzbD7mcraoOG_DimOkj2L2oAjhw.roa (hash: wu+QMMHTKCstbdiRuln4sn4sjq5YOED5W8egMC/fkZA=)
                          18: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          19: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          20: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          21: SbzKQ5ZuE5d10qtGejfj2ks01LQ.roa (hash: /IE77xZq/Zb+dfD/xh2uWpfIP/F+pigOIyzvCZv26Bk=)
                          22: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          23: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          24: VRSYZLu7Iz3MKoqFG3i4WqE0-rk.roa (hash: rVUeHHbdH9yar6h0c5uw/E5qc8xRGnabT3yOgGA4TNA=)
                          25: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          26: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          27: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          28: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          29: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          30: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          31: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          32: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          33: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          34: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          35: qXbTND87m9kq_oOHnJNLc8fg148.roa (hash: 2oi3EjBDp5VOcsS+jhxxC8jNjfjQeC4aw46ML+KCI9g=)
                          36: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          37: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          38: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          39: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          40: tzBpElROeFE4YvPvkrDo9wg__zs.roa (hash: FVFmdLOR8nbI+H9KWKyzfFrmi5eYKjA6nxxAmdPiAgk=)
                          41: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          42: vEoakUYlpmTQIaLwpaXyp7_1UqE.roa (hash: eiYLucoZ9zchXIwhszUzBZ15EUScjN1eZIZfgJxOdfo=)
                          43: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          44: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:fc:3b:37:28:cd:24:6d:f2:65:0d:4a:b9:58:6d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Dec 19 19:00:35 2025 GMT
            Not After : Dec 20 19:00:35 2025 GMT
        Subject: CN=f4d84941a0701f02fd2fd6b8aa02e535b00f6e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:4b:70:74:9e:54:bc:10:0c:ef:52:c2:33:
                    f9:d0:f8:fb:fd:76:3e:7c:1b:11:a2:00:ec:5b:ab:
                    80:72:4e:1c:74:d9:38:8b:75:0e:d5:7b:8f:46:36:
                    af:5f:fd:63:6b:b0:f3:d4:c4:ad:40:dc:f9:05:41:
                    2c:08:68:4d:5a:68:dd:24:ed:c9:27:c3:b0:bf:ec:
                    f2:0e:e3:45:d5:f0:5b:7c:6c:4f:5c:a9:68:b1:c9:
                    f5:fa:6c:f2:75:11:ca:0b:dc:ea:e6:79:82:fb:15:
                    e3:8b:a1:f9:c5:87:6c:b4:6a:77:6a:c5:0b:76:9e:
                    59:65:8d:d3:eb:4c:83:15:4a:15:2b:a9:f3:e4:7c:
                    f2:9b:47:34:ed:fa:34:5a:10:e1:8c:1b:66:a8:10:
                    fa:03:d8:5b:00:af:7c:f1:b6:77:5d:b2:a1:57:a1:
                    58:78:a2:87:05:dc:3a:e3:9f:29:58:d4:b3:c7:d1:
                    59:98:14:8a:22:fc:62:fa:7d:67:b7:c8:52:b8:6c:
                    3d:ce:be:54:03:8c:5b:2e:30:1a:12:89:6d:74:6c:
                    c6:57:a9:5d:29:c9:8f:18:07:41:55:e1:11:ca:03:
                    b7:9a:9b:1b:ab:bc:f4:b6:d1:8c:27:8b:9e:68:71:
                    72:e9:57:bc:c3:7b:bd:67:09:11:40:24:6e:c9:b0:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D8:49:41:A0:70:1F:02:FD:2F:D6:B8:AA:02:E5:35:B0:0F:6E:7C
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8e:7b:3c:7a:26:ee:65:f4:7f:d1:d7:bb:3f:00:d9:0c:1d:
         d3:77:91:4f:89:d1:af:9e:56:d3:7f:b0:ae:d3:c0:db:4a:a3:
         9a:53:5f:ab:6d:0c:56:df:66:d1:3d:10:49:e1:dc:1e:e3:76:
         a9:b1:91:75:b1:78:8e:75:94:b2:28:5c:44:37:8d:0f:e3:73:
         90:11:ba:3c:2e:27:04:51:5b:ce:78:97:1a:ca:91:9d:a7:20:
         11:fd:a2:11:b2:fd:c7:4e:99:b7:a0:0d:d7:44:56:3c:bc:ce:
         5d:18:87:87:fd:a8:d0:d6:eb:1d:de:b0:08:69:21:5e:95:18:
         11:68:cb:66:f1:39:6b:fc:bd:51:70:b0:5c:d2:48:eb:7b:78:
         d6:4b:70:14:38:37:fb:07:64:fb:d0:0a:df:ba:c8:8d:f1:53:
         a8:a0:2a:5a:c9:40:88:70:01:f9:1c:de:f7:61:58:02:0b:7c:
         90:9c:38:7d:46:be:b4:e2:2c:19:a7:3e:ae:86:f9:64:48:a7:
         e3:9b:9a:fd:0d:51:ba:6b:8c:01:1c:0c:23:f8:3e:2a:6e:b5:
         bc:f9:e6:26:65:0a:a5:71:f8:b6:74:65:fe:00:47:d6:bd:90:
         b1:bf:52:0e:3f:65:26:78:ad:3e:2a:fe:46:30:63:a9:6b:fb:
         7f:f9:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----