This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          HElGFL+VUcfkjhmwAejAOToznkOYVQL2wovwkq9li00=
Subject key identifier:   59:11:70:DA:74:17:5A:0B:EA:1C:BA:C7:3E:8D:10:CF:F1:B1:1F:FC
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019B3A8F6FE36E318242E4F53F7EA626859C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          1853
Signing time:             Sat 20 Dec 2025 07:00:37 +0000
Manifest this update:     Sat 20 Dec 2025 07:00:37 +0000
Manifest next update:     Sun 21 Dec 2025 07:00:37 +0000
Files and hashes:         1: 2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa (hash: G6zKwZ9ARfBcNvqeMifheKtZPq8hpO3XrWu/vbDqSnc=)
                          2: 2qlsylzgqXhlEayXE9wkcK5qmug.roa (hash: uhfOGYd80G0548JpMljPb9TBOvg2gxGmo4JHGRdJP94=)
                          3: 45tL-NSBHodaksRDpK2BnTL6Pg0.roa (hash: 9aD/cGsEDm3tuWSuuFsHXgYn2a7J4uwCri2o7lDx6TU=)
                          4: 8nzdRByXa6_8dlrWgKf9ECgVADs.roa (hash: VxQagbxVGwG1Dz0dUi7W2+z8A42U9csxDOJUyvPq1/Q=)
                          5: 9GIXqcmPDOQCe6OcRi8fYZeIDJA.roa (hash: LALysLYk2cUV8ywank9MaIcyv6Luq5IysC+FHpnCFCE=)
                          6: 9xAImfJODTs2zsrACx9eeEsMp4M.roa (hash: gSkZqCfSwfOJL0b2bYeZUGWxUdiYjnYulJENp5XdAs8=)
                          7: Ahr84eZNjYWY2iLRQSZih5fyo8U.roa (hash: Wy69yidMg4yOPUxtA5o5maFsZL4vm+hEqwKZHQwSUzk=)
                          8: ArAhICSanbkeXehKoKQd1V5tguU.roa (hash: 8+a9w0L+HOX6KtVQT5sEhoZJ7WpUWjL5KHUsIh1x6Pg=)
                          9: C2GrQzBO3vl5T105EzYHvBqFqSY.roa (hash: JsqpwBb8513EA82J6T2Eh579nv6JIkErIIaCpTYKtxo=)
                          10: C5neA90kjVHnDPfO-djUn4i2zAA.roa (hash: 6roTXs09K6iOJG+sNAF1RcACFRNOxhrWD6dzp7AoLnY=)
                          11: E5lP18ybHMTHTnPo0M0LIgPaYUo.roa (hash: YCZh/ekLx0cpTY4qWcdCoc57O+gA2agdNfcO7UjD4OY=)
                          12: FdGsnJ5FLSOd35QGWiCkxWoyevI.roa (hash: f01f4w0Q6I/PDdhyj4RbTWC73/Jl9COa4MGDXGsL49E=)
                          13: Fl_ha6ZRrcj7LNabFfiIvy4PXBQ.roa (hash: rGTu/eBvREBIS2YrmRECHoO4Fq6M0d9n2xt5c5qKdlE=)
                          14: GKwqF0OXF5vx1vi3kjXqC_qDYz4.roa (hash: lLtKncTZA2NWJ2KxQ5FTNadrcCKtcyHuvexVTxDDl6w=)
                          15: JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa (hash: OK9ChmoGjGac52vxxGBWAKkSK/ouBl0i27ZM3by8gJo=)
                          16: LNoNmGDFQklAar5TnT_a2DeUWek.roa (hash: wgI395g0pDizwgkf8Jbw1xgOK75FIU6UUEcPX6ofaYk=)
                          17: O8pEm_-zc4a3l2oOmaPytNy4TWg.roa (hash: 3g6cRnV9tCnYa+2wT7Y16qVT2YK1kvB1yvGTbTRzptI=)
                          18: OkV10ej4i1aWkWynfHxAfefl68k.roa (hash: 5dmrYmVBIjHF14pmICYPZDuHTrGireyhaa0Od9fQBWk=)
                          19: QBmp01no0zozc61oJgZgkFLuCRM.roa (hash: Qn8BLHhUaOBThtjWeeHJIXBsVvpchtYykKu7xJstcZY=)
                          20: R0HpmWnfk67q4Dq1iqO8vwpWAYI.roa (hash: wziNGqeAwzyFoCjoElw3SGFz2e33vQDW2HjZjdtvkaY=)
                          21: SyIG9NJxGW9KUTgjUx79TlL5O30.roa (hash: EGPh6In0bkdx7KM76oGtCsHkMFmct6zVay9ocJ+HUSQ=)
                          22: TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa (hash: qgQJ65sybbMwGBkmkMyc9apxITp5UjZu3/AIRYjPkjQ=)
                          23: TTkmvvK-JdTZC6C7UNOuEGH0KnY.roa (hash: 8l6xkNYUvsiiGkoEUdLgLlUC3G7J5Ykm9qCMqOzTgnQ=)
                          24: UNPMxUTpN6F_pgC91vCmD1HFspw.roa (hash: jTsyj9nrkYHMCYAdHXNg5BbHNZmwI4fUMjG/ubMSE0Y=)
                          25: UV6qvkU7uEdukz6I3mbVkpLmqK0.roa (hash: 0A+8ttGoev/2nYj8rEiQJKPOhjsFNaPs3a8ni/KoTvs=)
                          26: UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa (hash: ZqrOUq2ygIXaHriNfA42kKbOZNd/4pARULEQqbGvaMU=)
                          27: WcIw6N44wqFmTSYqs2SA02NfAMg.roa (hash: dr9+lLa9vHheKAcwgnQXvyLdvzdSym8f7D33KNvf/iE=)
                          28: XDlyJBFwdLFezb6RcQm4nzRzf7s.roa (hash: 9MqmiX4xDXaJiAH60iCJjk+VCTx/eFVEhHuHV+pr81c=)
                          29: _0v8B3PHRVD7yYQcASHCL5uWyOY.roa (hash: pu+m41bbVsvu3wkqU3+YbKOTAB8KfYUq9S8Plxm7sds=)
                          30: _6fk9u3GMpi14RhY0Vpqi7RoUuY.roa (hash: 8J+04Jyy5QLdgaXHvTT5XyET/UweE7ZvDXWvk66tOH0=)
                          31: bp9itvd4xpX6vi30qXgEwi5j_Uo.roa (hash: /dew31w6ckgUH8lXPNZF+UTwUD9TWS47g5E5HbIVbQo=)
                          32: d83pqeKiLQhLliuN6pcj5rdzr8I.roa (hash: w/WdVJXy4ZPvV9vYHP3UeCe1IyTQx7yuPgXNPi29GH4=)
                          33: dY03HFRy1RllCenKPrieGUzQXmc.roa (hash: Whvf/7UBVmwJMgZJVFUghC//K+ikEuNaWx2rK86SYdI=)
                          34: fDEuib_mZ3qZfkE1az0EDj_NR3E.roa (hash: 73YMuFd+/YUrXpnrlnZ9kLlZaPNZZkHXycwBv8GSkpg=)
                          35: fsOnaX4tr6VeXJENVam_r7FGZAQ.roa (hash: hHwUXFYP1l9gP70QmfIy18+VkKqbCEzGkYH7C8X8l0A=)
                          36: hWeemcuAMFd0TiPHK8padYtmPOI.roa (hash: m4qFC3qaxfb5JeQfmU+wC2Sy0np3M3w+mxPZ3dJbjcI=)
                          37: l63y35hRh82nc-qWk3eB9bHn_KM.roa (hash: b11mcWefxXYA/2pWdJ3fnWeAI5cFgL/vQOg3VNqp9sg=)
                          38: mNova3WsqOD86eozlCah8ixo0-U.roa (hash: tawcqw6hUcWGQX2dsRM+1JiLekafnjb7jkwLDon7tHg=)
                          39: md7lCwgk9LJmputWOklSB9z83hg.roa (hash: Jb5j3kqdV51LDdKirCOVD1xlgB1FSCucCnzGZEOy8wA=)
                          40: nobXS_EDX1u5OLuM3jnkQJc5t54.roa (hash: 735lQDz4Vu7mXLkQ1OEt71c9RAs4JRSb3jvCDTUy3KY=)
                          41: pD9YdY0kZIyV4tT8Grm6rpRjhMg.roa (hash: iWFl3KeSrkOlRwk9579ovrOA2IUp/1Q3ethXhdT5Cjw=)
                          42: pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa (hash: OzOY0OrVWczErs4fuxcA3h4F8Ql7jZ/JPJpASVv2l9A=)
                          43: pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa (hash: URJHpCopeVtbF70/Rhbrt1/lAiesGtyfYnYjTgM042E=)
                          44: qyphdMRg48o4QmPXSk_OaaQIYw8.roa (hash: lkUqQM+hYiYzJgtpLKYB/0YXPUyEtY/oiN8P3e71gro=)
                          45: sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa (hash: yFiBP614tqQIG+YIYZyTbqGdVwZv4LBDmT23q0+YqFE=)
                          46: uJACdV10EKYjDPAt6fI1jvPKsi0.roa (hash: SqSn3v0aLoH5HzHbohXSEzvqOPRzwdhqN+JqUGBBEF0=)
                          47: uNIkw6t3uZZfjC7mwfO-RlvNdzs.roa (hash: gNASkgszeaveacGmk4j2FCwMOxhgqDVQXhG0Sb6l+bU=)
                          48: vkuL6lPvBwnsGG2zqXJ0dKlsd_E.roa (hash: LAjlqkzhQBZUdmq+rtYjKPdKSPlnRizG/dxEUgNDRm0=)
                          49: weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa (hash: SYYKrJWHItEf708CTIE6RnrGdiSwFYKJxi86yfIO4Oo=)
                          50: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: VMXWvRfnRs+ISnVGYFEetIJdTJh++YltLn5E/gmtQH4=)
                          51: zUVPzFFhR9J5knJHAZ9lhdp0_ok.roa (hash: /TspGM70/yRXNVHKhWj5smL/PZUzQoqRLk1Lpb2lDmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:8f:6f:e3:6e:31:82:42:e4:f5:3f:7e:a6:26:85:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Dec 20 07:00:37 2025 GMT
            Not After : Dec 21 07:00:37 2025 GMT
        Subject: CN=591170da74175a0bea1cbac73e8d10cff1b11ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:48:ab:15:9e:85:35:92:77:58:f6:29:fa:
                    9e:6b:75:31:cd:a7:60:fd:ea:15:3f:2f:71:9c:dd:
                    96:94:9c:d5:e4:25:07:42:31:4d:25:98:ce:4c:84:
                    2e:d3:44:da:d6:a7:0d:24:8d:4c:09:23:6d:c8:1a:
                    95:19:5b:ca:5f:fd:da:7b:8c:78:d4:f3:18:18:79:
                    46:52:66:f9:6e:1d:3a:dd:d1:d8:0b:bc:8a:ae:6a:
                    57:34:e1:d2:ea:8a:dd:ed:67:17:0c:ff:a2:e8:51:
                    ea:53:cf:ab:cf:38:d5:87:a1:58:eb:8a:00:7a:39:
                    c1:6b:15:14:d7:78:d7:05:1d:04:7d:9e:e5:33:c8:
                    d9:59:a7:11:dc:b7:d7:d7:52:88:22:d2:0d:55:e1:
                    95:27:2e:cf:fd:13:07:4c:d6:85:70:7f:69:1c:b4:
                    d4:82:db:0f:14:bc:47:5e:d9:25:88:b6:7d:df:b4:
                    8b:f2:d3:7c:23:56:fd:10:85:bc:3c:55:e6:af:a4:
                    b6:eb:26:40:cb:aa:ca:e4:5a:27:74:24:16:27:2c:
                    40:c0:a0:df:fc:8e:19:cd:bf:1c:d2:36:9f:6e:f2:
                    12:a4:9c:bf:4e:41:9d:87:02:63:a8:c0:ec:04:37:
                    5d:0b:52:3c:91:8b:98:0f:e2:9f:ec:16:7e:06:db:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:11:70:DA:74:17:5A:0B:EA:1C:BA:C7:3E:8D:10:CF:F1:B1:1F:FC
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d4:a5:4f:29:f3:06:d1:bd:63:a8:e3:20:46:0b:fd:d8:e0:
         f8:57:02:81:28:b0:17:28:ea:6c:f0:4a:6b:70:97:a1:cb:9e:
         29:d7:72:e0:20:ce:de:c5:bd:25:ce:94:77:a1:25:49:87:b9:
         56:90:3a:0f:2a:11:dc:c2:26:aa:82:01:af:18:d1:80:89:88:
         d3:4c:b5:6f:1f:8d:34:b8:01:0f:5f:36:10:d3:71:a4:b4:88:
         ef:79:a2:1a:f6:83:4e:9b:c5:25:f7:35:61:19:33:97:40:cb:
         fa:82:c8:f9:ca:04:c8:f9:58:4f:ae:89:61:bf:ce:ce:21:67:
         da:de:f4:20:b4:52:10:a5:6c:16:22:60:12:e1:7f:f9:f5:a8:
         a8:3d:92:64:9f:a5:88:64:f6:61:80:60:e2:00:ed:ab:bd:8c:
         4e:04:91:d7:13:ef:3b:f1:74:4c:13:48:c8:14:53:47:fc:9f:
         2f:98:40:3f:3b:1f:23:b1:80:3e:57:4f:df:47:c7:a9:c5:a3:
         ef:a0:47:ed:b7:fe:f0:01:93:98:dd:14:6a:9f:70:46:88:0c:
         a7:42:36:cd:dc:f0:c3:76:98:70:2f:1b:e0:9b:1a:2b:db:df:
         1f:e2:9b:25:d4:ec:ea:4d:11:84:ef:2d:8a:b6:d4:81:96:8c:
         28:d3:d9:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6j2/jbjGCQuT1P36mJoWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUxMjIwMDcwMDM3WhcNMjUxMjIxMDcwMDM3WjAzMTEwLwYDVQQD
Eyg1OTExNzBkYTc0MTc1YTBiZWExY2JhYzczZThkMTBjZmYxYjExZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqZIqxWehTWSd1j2Kfqea3Uxzadg
/eoVPy9xnN2WlJzV5CUHQjFNJZjOTIQu00Ta1qcNJI1MCSNtyBqVGVvKX/3ae4x4
1PMYGHlGUmb5bh063dHYC7yKrmpXNOHS6ord7WcXDP+i6FHqU8+rzzjVh6FY64oA
ejnBaxUU13jXBR0EfZ7lM8jZWacR3LfX11KIItINVeGVJy7P/RMHTNaFcH9pHLTU
gtsPFLxHXtkliLZ937SL8tN8I1b9EIW8PFXmr6S26yZAy6rK5FondCQWJyxAwKDf
/I4Zzb8c0jafbvISpJy/TkGdhwJjqMDsBDddC1I8kYuYD+Kf7BZ+BtvVAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkRcNp0F1oL6hy6xz6NEM/xsR/8MB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtSlTynz
BtG9Y6jjIEYL/djg+FcCgSiwFyjqbPBKa3CXocueKddy4CDO3sW9Jc6Ud6ElSYe5
VpA6DyoR3MImqoIBrxjRgImI00y1bx+NNLgBD182ENNxpLSI73miGvaDTpvFJfc1
YRkzl0DL+oLI+coEyPlYT66JYb/OziFn2t70ILRSEKVsFiJgEuF/+fWoqD2SZJ+l
iGT2YYBg4gDtq72MTgSR1xPvO/F0TBNIyBRTR/yfL5hAPzsfI7GAPldP30fHqcWj
76BH7bf+8AGTmN0Uap9wRogMp0I2zdzww3aYcC8b4JsaK9vfH+KbJdTs6k0RhO8t
irbUgZaMKNPZxA==
-----END CERTIFICATE-----