This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          NThIP2dIYvjY68ZK+lsi4LyMVtPk7uercxNgq90wnoQ=
Subject key identifier:   85:7C:03:77:4E:51:DB:AD:B6:85:7C:AD:3D:F8:D0:64:EE:8C:C0:8F
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       019B39EB3F394D333C572EF2212C267BD075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          1009
Signing time:             Sat 20 Dec 2025 04:01:17 +0000
Manifest this update:     Sat 20 Dec 2025 04:01:17 +0000
Manifest next update:     Sun 21 Dec 2025 04:01:17 +0000
Files and hashes:         1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=)
                          2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=)
                          3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=)
                          4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=)
                          5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=)
                          6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=)
                          7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=)
                          8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=)
                          9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=)
                          10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=)
                          11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=)
                          12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=)
                          13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=)
                          14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=)
                          15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=)
                          16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=)
                          17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=)
                          18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=)
                          19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=)
                          20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=)
                          21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=)
                          22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=)
                          23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=)
                          24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=)
                          25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=)
                          26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=)
                          27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=)
                          28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=)
                          29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: vUNaSrGFRLnriDYZLzdFT4bK7D3FUGJKVWUtd9gmlfw=)
                          30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=)
                          31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=)
                          32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=)
                          33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=)
                          34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=)
                          35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=)
                          36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:eb:3f:39:4d:33:3c:57:2e:f2:21:2c:26:7b:d0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Dec 20 04:01:17 2025 GMT
            Not After : Dec 21 04:01:17 2025 GMT
        Subject: CN=857c03774e51dbadb6857cad3df8d064ee8cc08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:c8:26:8b:c6:fc:7f:38:7d:b5:df:1a:76:
                    94:f6:f5:3e:c3:e9:b8:d9:75:80:19:6d:ec:8a:36:
                    8d:dd:2d:07:72:fc:f3:5a:ec:7a:c4:92:06:00:8a:
                    35:ea:47:07:d6:96:81:b0:aa:0e:82:96:49:6d:85:
                    69:bc:76:ee:d4:81:25:87:e0:9f:dc:04:c0:93:d5:
                    f4:ff:62:ff:e3:ae:44:ba:7e:13:ef:12:93:50:a4:
                    b5:87:63:89:1a:1b:4c:bc:70:83:e8:2c:37:04:eb:
                    11:3c:94:e2:5b:fe:2f:ff:36:0d:6a:a5:3b:10:1e:
                    49:fe:6d:69:c8:df:a3:01:66:a4:46:3d:62:83:72:
                    08:fe:7c:3b:15:1f:d3:d2:94:96:f7:ef:9a:f9:32:
                    98:a8:ed:ff:7c:06:20:be:bc:84:0a:ea:67:9a:08:
                    0c:f1:9d:8c:95:88:b2:3f:2f:1d:52:67:ab:e1:fd:
                    ca:92:b1:ba:c9:98:f9:0d:6c:43:a3:88:30:50:f8:
                    94:c6:c8:86:ad:61:9b:cb:60:3b:ba:e9:e8:4e:50:
                    b3:74:b7:27:42:45:d2:6e:30:0b:f2:b3:ae:43:3e:
                    aa:57:21:e6:9e:10:a3:74:33:e5:46:ac:73:14:6c:
                    c7:d3:f1:3d:07:04:2b:95:eb:a1:51:92:86:5e:a1:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7C:03:77:4E:51:DB:AD:B6:85:7C:AD:3D:F8:D0:64:EE:8C:C0:8F
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:2f:7f:d4:95:cd:02:2f:ba:55:2b:d6:35:f2:a0:d7:b6:
         23:c8:df:82:f0:a0:fe:9c:3e:d5:d4:75:bf:5e:e2:5f:10:01:
         fa:62:38:dc:7e:10:a9:37:2c:e6:e1:6f:ae:b2:07:ee:19:f6:
         58:46:dd:7a:39:82:39:f1:5c:8b:fa:3f:4d:e0:5b:e1:f5:55:
         e1:ce:1a:cd:69:9c:28:85:0d:66:d6:8c:7f:77:89:44:6e:39:
         90:81:f1:4d:e2:1a:24:06:37:85:fd:92:f7:50:09:bb:ba:b3:
         16:bf:ea:dc:74:ae:6b:48:cf:30:6a:21:76:aa:4a:1f:72:37:
         c0:71:21:d6:2b:f4:d8:d2:e8:be:2d:af:fe:d2:67:96:71:1b:
         bf:e0:61:39:dd:87:e1:03:5c:33:fb:e5:e6:f6:47:65:a0:01:
         89:08:f7:20:86:b1:4f:f6:ff:b8:f7:f0:fc:63:d4:6d:0b:a3:
         4e:b2:48:59:77:2f:83:bb:14:2d:88:ed:6b:fa:e5:53:71:f2:
         d4:ca:b5:4f:18:79:03:a5:21:92:9b:bd:97:d3:67:cd:b0:54:
         f0:d3:ee:82:a7:31:89:5a:95:b9:0b:5a:91:17:cd:d7:17:d7:
         17:c5:73:3b:be:87:19:cf:25:29:4f:0f:11:f8:56:48:5f:e2:
         12:e4:fc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:06:54 2025 by rpki-client