This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          5LlehGWywYU95ER5s52naFTEwJoMIz2d+UaXp9zKJQc=
Subject key identifier:   03:39:19:AC:65:12:96:4F:D8:C1:06:FC:79:BE:11:5A:AC:71:22:B9
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       019B3BD99AC87B2CD5F1048615925D98C7B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          100A
Signing time:             Sat 20 Dec 2025 13:01:15 +0000
Manifest this update:     Sat 20 Dec 2025 13:01:15 +0000
Manifest next update:     Sun 21 Dec 2025 13:01:15 +0000
Files and hashes:         1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=)
                          2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=)
                          3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=)
                          4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=)
                          5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=)
                          6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=)
                          7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=)
                          8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=)
                          9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=)
                          10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=)
                          11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=)
                          12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=)
                          13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=)
                          14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=)
                          15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=)
                          16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=)
                          17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=)
                          18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=)
                          19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=)
                          20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=)
                          21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=)
                          22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=)
                          23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=)
                          24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=)
                          25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=)
                          26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=)
                          27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=)
                          28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=)
                          29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: 1Tr4IGPpVoGGralwV33qmJn2G6RL7BWRFtZRR5oSWOY=)
                          30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=)
                          31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=)
                          32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=)
                          33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=)
                          34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=)
                          35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=)
                          36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:9a:c8:7b:2c:d5:f1:04:86:15:92:5d:98:c7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Dec 20 13:01:15 2025 GMT
            Not After : Dec 21 13:01:15 2025 GMT
        Subject: CN=033919ac6512964fd8c106fc79be115aac7122b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:9f:05:b8:93:fe:e5:41:79:86:57:f3:79:
                    82:f3:9d:fa:ed:7a:bf:39:ab:6f:34:72:fd:83:f1:
                    4a:a0:1c:1a:10:93:b6:0b:2a:7b:ac:7f:0d:b7:7b:
                    a5:04:f9:82:44:68:2c:52:2d:19:e8:58:19:42:a3:
                    eb:e8:07:7b:0e:bb:2a:d9:5d:fb:84:de:77:32:f7:
                    6b:f6:2e:a6:d0:d7:a4:57:9a:3e:35:e0:c3:ab:67:
                    37:ab:fd:86:e6:09:8d:f8:98:2f:c3:29:21:9b:9c:
                    ee:cc:52:d5:c3:2c:1a:69:84:c0:61:cb:1d:6a:f7:
                    5d:7c:39:d7:d5:8a:7b:0b:d1:29:12:eb:00:1f:f9:
                    e4:cd:67:50:a2:b0:c4:71:5a:da:12:3d:2d:12:41:
                    a4:0a:16:13:28:fa:6c:3a:fe:c6:52:1f:57:25:cb:
                    22:5c:fe:fb:20:ee:5a:ef:1c:af:7b:8e:a4:ad:eb:
                    59:45:38:99:98:6d:cb:d5:72:83:e0:ed:bd:0c:1c:
                    35:e8:4d:d4:f1:bb:71:3d:2d:bb:a2:07:96:90:d3:
                    1b:a0:43:5d:fa:bd:61:bd:0b:24:53:7a:87:25:0c:
                    41:a0:97:08:2c:6c:e7:cd:cd:06:99:42:f4:11:a5:
                    7c:ea:6c:d3:e9:b7:ef:2b:6d:fc:1f:d3:26:35:00:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:39:19:AC:65:12:96:4F:D8:C1:06:FC:79:BE:11:5A:AC:71:22:B9
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:91:2d:a3:07:85:ee:10:d1:06:3d:cf:67:7b:0d:56:7a:da:
         28:35:28:c5:4f:5d:58:d2:d3:c7:7a:2c:2d:d7:1b:9e:12:a3:
         dc:1f:cb:06:48:d4:93:c9:0c:e9:19:ed:ab:1a:22:4e:6e:10:
         43:d3:b5:4d:61:4e:c5:17:a3:33:81:b0:59:be:e4:66:9b:a3:
         fa:48:3c:f2:75:9e:f6:0f:06:af:a1:2b:04:60:d5:ed:a5:96:
         35:b8:4e:11:6d:39:a9:b9:bb:ef:f1:f0:d9:0a:00:59:00:53:
         be:56:4e:a4:0b:04:23:5e:d4:74:24:ac:33:dd:4f:60:c9:93:
         19:8e:8d:8b:bb:cb:b1:b0:6b:92:08:2a:11:a7:51:22:96:28:
         0f:99:d4:41:0e:d2:a2:cf:af:42:c0:30:4d:e5:c9:13:b7:18:
         bf:f9:1e:fe:df:f3:b7:35:2f:87:cc:5a:c7:09:a8:3b:fb:a2:
         b9:07:36:6d:85:c2:3e:33:d8:b8:bc:44:c4:cc:24:5e:d2:58:
         9b:bb:e5:3c:5d:81:b7:8c:3a:30:09:d5:c0:13:3e:46:e8:0d:
         a6:bf:7c:71:d6:f8:fc:4f:b1:4f:51:76:26:4f:ba:68:7d:28:
         b4:54:90:d6:ea:c5:29:58:e4:36:49:1a:5c:56:0d:10:80:82:
         ee:5d:0b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:34:52 2025 by rpki-client