This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          j8QV8zNWb9igOoPnbZ6XGlgcWaQEExtLglUq4C0rmFw=
Subject key identifier:   B0:E2:44:B4:9F:99:04:B9:1F:16:21:03:1B:F3:3B:78:76:2F:52:90
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B37FC895524D1C61D3E1D745E9DE60C45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          139A
Signing time:             Fri 19 Dec 2025 19:00:55 +0000
Manifest this update:     Fri 19 Dec 2025 19:00:55 +0000
Manifest next update:     Sat 20 Dec 2025 19:00:55 +0000
Files and hashes:         1: 1-I_hO5bt1QImQjkGfOoCWjz_EeE.roa (hash: yVOsoV3yJ2B3NS6xPJkpc/bYU0gh14t4/0w2H7T8rs8=)
                          2: 1im9hEU1Zy9gvDtniuhopIsSAfI.roa (hash: KW9osimLZTsfRmjZlDNM2cTfJYEvT/L6ZQhgwqfwXrg=)
                          3: 4iA6JSRt9iOXLjSJo4FPcvo5850.roa (hash: Y6iNsmOmNRn1t0IzHy7GGa6of/n7DvPOfcUdK5WYltI=)
                          4: 5T-uWj9twPgW88xOoqQzKkjJJ24.roa (hash: sqAIwpwqapzYO2+lY5/AGADk25rfARYCO45gc5xFmSQ=)
                          5: 5ViRj5UOP26C2K_cQDvWpvsGWtY.roa (hash: FTaUWpoFHfHOaNS+eZLYDwPpxcO9OpNzf+cUKjmhjJg=)
                          6: 5sP9AUGchNWq9z-ewhSavIILNHs.roa (hash: AuCjYL0TN0EWfTEbYCBZhYsII9mCs+B7At3SazH6Kpg=)
                          7: 8DJ685XS7FFhXpTi96HwIs1c-E8.roa (hash: P3RV7SHn5Nd362yPOhJ1roOU2udG/g0q/278EWXSOPo=)
                          8: 8b5XsU_ykhlua86XBDQUS1Mo7FI.roa (hash: WWCuXlQD4j8DR63+O4KA60gHpfsjP5jXzLpDX6ZJvWA=)
                          9: AECbsIhKbWJ_Ff0F92F1-4KSX08.roa (hash: XeOu6WbkVXZWORsNFez3zH3cLGNSOvG9l/JIT9zyGeY=)
                          10: CCs7s7qtTwTA4v_cUzv1kNWH5cs.roa (hash: n9IEvGnZo2t/xTYkauWQNpybghOPxemj5Hqf6XCpTTU=)
                          11: CvYPnO9n9wAN8861pn_AlstUSmc.roa (hash: AhTYD+mPr3Q/UsUfGKJ2zJxIpB92wOFsAXppP+mD++w=)
                          12: E8a1_PGMprGsOEhvFqqS6i5Tdz4.roa (hash: df9z/ZIg8AUrgWm4WPTjfTwd5PEvval7nDbnweaPaGU=)
                          13: EjTg3FLoCqwMYSa2oVnLNKp7ATI.roa (hash: Zh9Sz85xAOxdRH/TSTK08WUiIZwDMKmp8n0eSS6ma5U=)
                          14: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: ToVxjPg9eQVqs5CXhdByWGuNZmzMkDzK1SzYnOXJSYM=)
                          15: FhVVLOSaxxu76faY814MnjaKzto.roa (hash: 9AmDzH895DDiPDx+GJM625gim3dI0bqS449682uf9QU=)
                          16: HnQUzsHGqdLWhe9eJs25T-3zS14.roa (hash: YP146by7eQkbB1DmmOOCpv5/ycsCOlnjnTQYlXQrPFY=)
                          17: HxdiwSRUmgtfx_Kzpm8iakZlshQ.roa (hash: NuZmUPsYGQYy/Wq1HHdRs3azySlyhMaPIgb+Xua5Zqw=)
                          18: IBQePbUiBM5g94FVwIacCAEuPao.roa (hash: KLM5pCcoF2f0RYayCLzM4NVj30QUjygkx0XcB71JnNA=)
                          19: IDNq1fzegiVq3DfMODVoKXhXsXw.roa (hash: 9qsXkwmfg9GPCCRx/oqPNzp3M+SoGsIIkgThEWElfxg=)
                          20: IJxwgWeGeUFHv_7JmoeJXVPHKlQ.roa (hash: x1bR2iw79o2n2CiabiJSxb3FYLKksGeSqDdvgl7oOyQ=)
                          21: J8B9b5nFvg0BXqbPVc8DoON7oaI.roa (hash: ZBKlCuKxq+Fhxp6ngyIeTvrnOGmVjLjKODM2yKkJTGk=)
                          22: JfzaQ2dY5KVszGMdtdyIa5vKvk0.roa (hash: v3XTTf92l+Sj9j1h2fHKleeb4kiTLIT150pzvx27CfE=)
                          23: MR1g3BBi_xl1gx5Y0lGmfE-MYoU.roa (hash: H1hmCwZT9JBFGwEqv/yJBQon6hUn8vTsaw2M6wo0nSY=)
                          24: OtfNIp_jb6HOI2uijeGzs2i4R7Q.roa (hash: x7yqlpuzOUYTjhI9koKYGYix8ZFmxFeUptiD8PTHtzo=)
                          25: P0zP1jJVbq5izuOS18FYTI1YHxs.roa (hash: s6fzct44ef1GEvO9VXyOMf9H83k5wEPaumVmsRJC6ns=)
                          26: P4n5HbuETfytwNfnSacxj1_moTs.roa (hash: i2WnA3xh5DsgbZaHgrqcjBS/ewnbK2udA8XCkAF3vmI=)
                          27: RKiPm9TAvbuh_hM-_lIBxDZv6rg.roa (hash: wmQF1xmI2xLjnYrkheVh+QF2nwc1FwtPu4Q6cucZc/A=)
                          28: TKLwlj_hhD4ChnDkZIEH511OIGQ.roa (hash: d5LelJw+wBPleYzumiiB1DR6XbgaSt39j02f16QfxpA=)
                          29: UssQ3uaWIBR-jRSPRfVK4dqtyZw.roa (hash: jSCB75UJBI6CVBgbXnymkTQet8MviTNNi1b+iGWhqX8=)
                          30: UueWcU4Q00o_IZEjIn0tQkIZHVg.roa (hash: K04uztC+U5jxVpEpYWqdgCa99Lrsgi/1SgksZlSEIKc=)
                          31: ZE5HXP4DhKEPM6Gv1wOErPS1cz0.roa (hash: O/2TK/NX3+tm+RkMY/59BD1XnfP0CTYDGNxOF5SY9hE=)
                          32: _rbgiNGO-S27H5VBRvlSaosM5pA.roa (hash: F4Wzd0keTC9/E8Yr8BBEUoGpX4zOhFgL+3EUdrKLPwg=)
                          33: bDYS4al9maBekHp3cZ5w3zMia7U.roa (hash: pOCmKySw+Tb1sm3NtefhOmKXAvO+WJqWskvC+nl7KhQ=)
                          34: ed1jORhWSi7ng65aRGJvId8bpXw.roa (hash: V1NGOKlYDvJUTPipPut4jDpgPnuzNxC4hJ0tFfqQYgM=)
                          35: g7XSFMyOFdfU8FCy9OGbf6MYoZY.roa (hash: n9yM7dyLNiBrfDvEbmkvhz7bFD53KNqtuiSWk/NDtDw=)
                          36: grkpzxJson0VO7xVFrMikGMv36c.roa (hash: YMm6A4zlYtaXgWVdkGysieoloVta9ggqSz989h7KXRQ=)
                          37: hRkfWek6x-vExSIgkwy_44n-0R8.roa (hash: Jw1jYBu4t1JSgiHUdnnTnbxfd7dT4zMqdCScHCXuMGo=)
                          38: iDsVGhUzM9wIiGAdd7UL3QbsAlU.roa (hash: CSbthrtDlT3wO3U8KcYsreaOD2U29zr8MXYvaDSeDTs=)
                          39: ilkQ7l85HQmR_JVmkd_hGC8Di00.roa (hash: TFb4vPDvFn3NHoDA2wS5sAtOgJMIPvQ/3QpJDKqOZjg=)
                          40: jHRs2CdaoDudTKV1UxeprvvPaJs.roa (hash: 1WGZ/i/Wlhh6+utA+tb7JAVK7IH3dTYaxIkabtzpM/w=)
                          41: k5sEgRhceCZcI9iXBGP9pqEJxRk.roa (hash: tPcC23jabsO/HaEh9FaehTyQBFjn5NH1jZecfICVZK0=)
                          42: ka9Kg1mP_UGoOXD67l2s092h9eY.roa (hash: gHOj1YrfYiq5kNzFwLUGBr3drQZHXZ/djO0mPNqlklo=)
                          43: lOXttIBfThT0VgY7ljjG4tEpJ7Y.roa (hash: fiZK9BjaPjO7qpd4ZBMfJGJpGVtukLbE3FtVCjB2QWI=)
                          44: pGVWe0w8lugoUQZ-979xl_-B-3I.roa (hash: LbElaUnKCk9Bg+fLyXmgBn+O2zSzwnYHINbqbS5NZdI=)
                          45: sVO_hwOUMLHjYiUFYzC6ZlJnNjg.roa (hash: A+S9gnFkAJ3wbXU2lCWRPwZRzZuYDwzqjjLfNzaAhnw=)
                          46: vpZ9pBlUZn9RHhWYszmcUSXh8xU.roa (hash: +lZGQ6hqM+WWBVf6jKaZ0gprTcSn3A0Dos8SvpePtso=)
                          47: wLoUUdSvg4mybpd990iExJeHUJs.roa (hash: eK4QhV/Upj6LcnsWEPnxaYJD29t58deZI0lM+T3uQOg=)
                          48: wRHBU_tIlHPadsLQLwBGJFuQGqc.roa (hash: HGZ2hfZbOO64qRGA+DNha/b0kQHhKQIKwFw+uvw3jek=)
                          49: xtowxRamwFXLEsXOBC5y8raNQsg.roa (hash: t/xR47ZdzknVJS1VuGL8SGn/NCyw9q5prCwcInTElro=)
                          50: yLcbHMgRfnm3GP6mvQgxG6m7W4E.roa (hash: Ezieh4C0OjR9hVJWQfbuNJn+pjhzzmPKBbae2Gg46+w=)
                          51: yaQ7VGjAsEQRr3MX_AiuNL7A9jE.roa (hash: io+LzSfCXNwPFD3txUCEZ0tHgOdPVC0wYWBLcgYdkFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:fc:89:55:24:d1:c6:1d:3e:1d:74:5e:9d:e6:0c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Dec 19 19:00:55 2025 GMT
            Not After : Dec 20 19:00:55 2025 GMT
        Subject: CN=b0e244b49f9904b91f1621031bf33b78762f5290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:4d:50:ab:ff:3d:e5:1d:26:3f:eb:5f:0e:
                    f8:96:f8:d3:c6:a2:0b:54:c3:df:1e:98:de:b6:7a:
                    42:ef:c2:1e:b8:42:32:0a:b7:b9:d5:c2:14:85:05:
                    36:4e:c4:f5:ea:1a:5c:49:96:8d:4d:e6:74:b4:b2:
                    6c:21:36:66:6b:d8:cb:12:86:9d:56:52:67:1a:8a:
                    d2:2d:2c:ce:12:82:36:a6:c7:67:02:16:bf:6c:a7:
                    42:0c:0b:97:9b:79:62:42:22:2a:d4:7d:9f:1e:6c:
                    11:c7:80:08:df:d0:df:b6:cf:75:d5:ad:60:11:ab:
                    83:94:e0:42:59:23:68:55:32:30:c7:c1:e4:44:e3:
                    21:2e:05:2f:bc:2f:67:e4:35:7c:3b:d3:db:7f:37:
                    4c:4c:6d:ef:f9:83:ca:5b:61:82:16:71:e4:12:ca:
                    2d:25:59:41:22:42:5e:2a:70:5a:34:5a:7b:09:d4:
                    2d:db:db:e7:22:c1:21:e5:0e:5b:b6:4b:fc:84:a1:
                    52:52:d6:84:2c:d0:70:09:dc:89:44:04:2c:93:b3:
                    60:b2:eb:4c:f7:60:01:9c:2c:58:a5:6c:4d:ae:06:
                    f2:20:02:97:eb:b3:43:00:dc:bc:48:9d:ca:3a:68:
                    be:c7:28:e7:3b:61:9e:57:b7:f8:ef:1a:70:86:4b:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E2:44:B4:9F:99:04:B9:1F:16:21:03:1B:F3:3B:78:76:2F:52:90
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:2a:b1:d8:85:c1:45:49:6c:56:27:5c:25:6b:b6:63:39:65:
         9d:4f:8c:71:0e:19:df:6c:d3:1d:10:ce:b9:9e:f9:dd:f4:16:
         22:b6:48:dc:4b:f9:2c:75:ad:a6:7b:4e:be:9a:2f:75:08:e2:
         f2:f3:03:5f:68:1b:e0:1b:c6:71:6d:fe:ce:94:9a:b5:62:19:
         8b:8e:eb:48:61:43:b3:e4:90:61:3f:17:d6:7f:8c:ec:ef:bf:
         58:c8:0c:2c:a8:87:f5:23:da:cb:62:4b:67:7f:0d:27:70:dc:
         0c:96:97:3e:32:8d:38:9b:2e:23:e5:04:e4:6f:83:71:b0:5d:
         fc:49:c8:7c:60:f2:89:a9:d3:83:d6:87:8d:5a:3f:48:09:41:
         85:08:bb:0f:54:f6:27:ba:c5:5e:e4:3f:01:16:a6:83:f4:2e:
         6e:ce:cc:9b:ac:46:34:38:1b:20:1e:91:a5:6d:6e:39:66:5e:
         4a:1e:ec:80:c5:00:e5:4e:f4:80:dd:e3:88:b7:08:0b:5b:2d:
         4a:4f:c3:7f:1a:b5:30:fd:3c:1b:73:be:0a:2e:19:ff:78:9f:
         a4:93:5c:c8:19:86:fa:25:2d:cb:ea:8f:15:55:93:a7:25:ab:
         87:a9:1f:6e:1a:11:1d:b4:0e:86:97:df:bb:2d:e1:db:7d:60:
         41:aa:65:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3/IlVJNHGHT4ddF6d5gxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUxMjE5MTkwMDU1WhcNMjUxMjIwMTkwMDU1WjAzMTEwLwYDVQQD
EyhiMGUyNDRiNDlmOTkwNGI5MWYxNjIxMDMxYmYzM2I3ODc2MmY1MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHBNUKv/PeUdJj/rXw74lvjTxqIL
VMPfHpjetnpC78IeuEIyCre51cIUhQU2TsT16hpcSZaNTeZ0tLJsITZma9jLEoad
VlJnGorSLSzOEoI2psdnAha/bKdCDAuXm3liQiIq1H2fHmwRx4AI39Dfts911a1g
EauDlOBCWSNoVTIwx8HkROMhLgUvvC9n5DV8O9PbfzdMTG3v+YPKW2GCFnHkEsot
JVlBIkJeKnBaNFp7CdQt29vnIsEh5Q5btkv8hKFSUtaELNBwCdyJRAQsk7NgsutM
92ABnCxYpWxNrgbyIAKX67NDANy8SJ3KOmi+xyjnO2GeV7f47xpwhktJNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDiRLSfmQS5HxYhAxvzO3h2L1KQMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwyqx2IXB
RUlsVidcJWu2YzllnU+McQ4Z32zTHRDOuZ753fQWIrZI3Ev5LHWtpntOvpovdQji
8vMDX2gb4BvGcW3+zpSatWIZi47rSGFDs+SQYT8X1n+M7O+/WMgMLKiH9SPay2JL
Z38NJ3DcDJaXPjKNOJsuI+UE5G+DcbBd/EnIfGDyianTg9aHjVo/SAlBhQi7D1T2
J7rFXuQ/ARamg/Qubs7Mm6xGNDgbIB6RpW1uOWZeSh7sgMUA5U70gN3jiLcIC1st
Sk/Dfxq1MP08G3O+Ci4Z/3ifpJNcyBmG+iUty+qPFVWTpyWrh6kfbhoRHbQOhpff
uy3h231gQaplxg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:22 2025 by rpki-client