This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          V/FDWLRbAn6s7YroeDsWbwUMzk+UWz8L1NqmgVHmqRM=
Subject key identifier:   DD:DC:4D:DF:EB:ED:4A:C1:47:69:5E:AE:04:68:09:1A:4A:61:59:BC
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       019B38A2727D9FA61A25C81F313D1C27960F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          06FC
Signing time:             Fri 19 Dec 2025 22:02:08 +0000
Manifest this update:     Fri 19 Dec 2025 22:02:08 +0000
Manifest next update:     Sat 20 Dec 2025 22:02:08 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: gXTghsCVgUKpb6dtqXl3LNlucHTb+/t9v8glp/fASMU=)
                          2: 7DpOIi23b7w6zVte6tZo0zLsIsI.roa (hash: 8WUFXjUR6rohu76kGO9oBTKuoh9CTAEJxOJOkr+Eaig=)
                          3: 7iFKRLth1Zm4UheUp7tUenlx6tU.roa (hash: y4tZzIay0AgtGP5YoKVVSCeeZFYasXEYu2JLlwWG/oU=)
                          4: Ej8KsK3ekpSAuBzyfoaBTrkE254.roa (hash: W6V0L2A/Di1Ma4bsmI96DmEyiw9w5QmMthcncjOX6q4=)
                          5: F3TFrLyovb8XvAopBK7JOYa2mwI.roa (hash: pEvX4onxvm1t0Llqu8JqybLkNG3FnmVsK+ePV2bdtbk=)
                          6: HdVwiDwUbAPjibY5-soI_-5GP3Q.roa (hash: LGd6NFXkOMQdCLQuTu/prT8oZ0DAlS19b3AM/PKsdWY=)
                          7: M9m5ciKZUlugxrd6zs79XHL4dD4.roa (hash: 5TehzUmwbp1N2JUN9csCq1NNReNAH4jUA6HYU4FBVG0=)
                          8: OEVx3wt-afSCjQoq4CCBGEYZ0-0.roa (hash: RZxMVkxGx/ioX0a/f6t/tDg0YGbR5g3ZOXjOM4aJF6g=)
                          9: TN5asrP-O_svuOzye5lJGogWzMo.roa (hash: rh9STD4IRIWTtIYMAcynIA4v5v5kpJ3eCDcSGZQerzs=)
                          10: V0NyGBzeNeiAwnkgDdus_1vA7a8.roa (hash: RKgBfoEec6XrdZ6UCnyyORQQ1M5776wgDHM2EvtO4bU=)
                          11: XnSGdaCJ3eKb4i-6Nu6dhvAlrx4.roa (hash: wQcutn0UQG9+UbR3j8U6CVNcG7YhBuHIXfvYXpQN+ao=)
                          12: Yw1DL4n3FWC67KL8P9tumDcnyZE.roa (hash: kPAh3h9z93w4ldeG3DZ18aXthzPwd8/sa1w8KSR09RU=)
                          13: ZGnbqEJq-qw_IWPEKqawYAsKEw4.roa (hash: SDtzm6VK9bckNeNEdZhn8jsHEtoYJ95MVTF5jrFtBQc=)
                          14: krwPzjnTtCEOQgP9EXp1WO-kgx0.roa (hash: Jq2f8YMj3fJWLcxBtjZ9CHuZ6W1PxUoBmS3CD2sax2Q=)
                          15: rZ3f2ghlIlMmEeLut9WQeMpv_SI.roa (hash: /O3dwETcjlHRpfy4ApMsXsWCRk5nnssK+ipGTgIqiqA=)
                          16: svXrG3QIK1PSpFAJHEHHGRbfEO0.roa (hash: 7T2NVDjV6DcXy4mWtWp/NMapveCETPUIEEYMdpJqHYk=)
                          17: tfdAtKatow845W41MwNnVpLGgtg.roa (hash: uTfMLLKHQ5gluQZvH64MoBHxclcjq9Bv7RbosMqSlGA=)
                          18: tvKdacTyPhsu3aile8gsFpB1HcM.roa (hash: yiqjckQWXIHm/HpkT1O/N4DyAaNrbG/A0u9Wu9m03qo=)
                          19: uJPBnwCQe4pWBPSakttM1tJFVcw.roa (hash: SlkGHJE+y8/3ykMchDghQk+vAt9Ko0/kJI2Pi7OwLbY=)
                          20: uXaR6RAYcqB3z1-tbN1V4Lmmtig.roa (hash: Z0domiO2KfsF3sKgfBv0gzE592rMugMpuZyP3VV1qNI=)
                          21: uhML_oNbUvddVaM_8h0IgpoA3cc.roa (hash: C4c5Ksbcv3rZrM8/EsXQOZhZrBbQbFeY/G5HM2327Gc=)
                          22: yWS3DxYlEa286j-Oj-MizHyB7tQ.roa (hash: ThzwUBysD3Pp4+LTCcV1XKNGgsfv+MNlctzHUQSZ/t0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a2:72:7d:9f:a6:1a:25:c8:1f:31:3d:1c:27:96:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Dec 19 22:02:08 2025 GMT
            Not After : Dec 20 22:02:08 2025 GMT
        Subject: CN=dddc4ddfebed4ac147695eae0468091a4a6159bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:66:0e:1b:a2:51:f9:de:be:bb:13:d2:06:
                    9a:f2:4e:eb:ba:b0:69:a3:59:2a:6c:ba:70:21:c6:
                    e3:17:90:f4:c9:f8:b9:c6:d9:76:45:ef:a7:67:98:
                    07:ea:4e:ee:b7:94:17:f6:f8:14:e2:cb:60:23:43:
                    eb:1c:61:db:22:a7:ff:ca:84:92:0b:b7:01:be:29:
                    57:81:ff:97:e3:b1:48:d6:5d:ae:b2:94:e2:36:ee:
                    2a:33:24:a5:41:15:f3:8b:e5:3b:13:27:7a:11:f4:
                    a0:f8:af:2a:04:b1:52:7d:2e:01:a8:f0:c2:65:f4:
                    48:b3:43:42:f5:39:4a:53:2a:81:0c:ca:70:7b:21:
                    3f:90:03:ea:3d:18:f9:c8:10:5a:41:66:59:d9:f8:
                    ec:96:dd:ad:ee:fb:cd:a0:41:10:fd:b6:ad:81:cd:
                    d4:a7:fd:a4:6a:38:82:bd:98:37:f0:70:e0:69:11:
                    84:7a:51:60:6e:4b:6b:1b:23:4e:02:48:27:df:16:
                    ea:4e:97:d1:52:45:dc:aa:62:88:b9:ff:84:97:6a:
                    ba:3d:69:a1:a3:75:d0:bf:c1:d5:0d:7c:83:d6:66:
                    dc:f7:aa:af:4e:22:df:57:c6:ee:f0:80:e2:0f:d4:
                    31:3e:ea:d4:9b:c5:cf:65:ec:57:36:5b:30:c3:17:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DC:4D:DF:EB:ED:4A:C1:47:69:5E:AE:04:68:09:1A:4A:61:59:BC
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:63:41:9f:dc:c8:b2:03:e5:77:ae:55:18:06:99:c0:88:f4:
         8a:d9:00:3e:25:8a:75:48:1d:61:cc:50:b1:30:bb:c1:41:61:
         b2:4f:fc:6d:3d:73:45:77:c0:ad:1c:8d:1a:51:a7:89:dd:97:
         04:3d:36:8c:6c:61:4e:ea:1f:1b:d7:5a:ad:ff:67:3c:47:7b:
         38:6a:5a:d5:ab:c6:40:8e:58:99:76:6c:a9:1b:f6:a6:49:2a:
         ae:11:61:ba:95:a0:3f:17:c2:73:37:f8:72:e5:69:ef:51:79:
         c0:df:f3:60:e4:a1:0f:ac:be:3b:7e:00:02:63:7a:cc:56:2f:
         b8:40:83:e0:46:4d:49:57:3b:60:c7:35:88:00:a9:b9:62:18:
         65:1f:10:7d:e0:6e:0e:63:56:86:32:1b:5f:24:10:bc:d7:16:
         21:59:f7:6e:2e:9c:e9:c4:24:c4:89:e6:85:9c:5b:d4:fe:8a:
         5a:fe:4e:20:38:7b:bd:b5:fe:5f:ad:3b:4e:c7:bc:c7:f9:4f:
         ad:89:35:34:dd:44:7c:85:6a:a2:40:a4:ca:f9:5b:00:6c:e7:
         15:3b:bc:60:23:2e:ab:f3:af:0d:9b:36:27:d4:f8:dc:87:98:
         f7:65:7d:d3:20:76:1a:e7:80:ef:ae:a0:e3:40:2c:e0:94:c9:
         76:50:9e:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs4onJ9n6YaJcgfMT0cJ5YPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjUxMjE5MjIwMjA4WhcNMjUxMjIwMjIwMjA4WjAzMTEwLwYDVQQD
EyhkZGRjNGRkZmViZWQ0YWMxNDc2OTVlYWUwNDY4MDkxYTRhNjE1OWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7FmDhuiUfnevrsT0gaa8k7rurBp
o1kqbLpwIcbjF5D0yfi5xtl2Re+nZ5gH6k7ut5QX9vgU4stgI0PrHGHbIqf/yoSS
C7cBvilXgf+X47FI1l2uspTiNu4qMySlQRXzi+U7Eyd6EfSg+K8qBLFSfS4BqPDC
ZfRIs0NC9TlKUyqBDMpweyE/kAPqPRj5yBBaQWZZ2fjslt2t7vvNoEEQ/batgc3U
p/2kajiCvZg38HDgaRGEelFgbktrGyNOAkgn3xbqTpfRUkXcqmKIuf+El2q6PWmh
o3XQv8HVDXyD1mbc96qvTiLfV8bu8IDiD9QxPurUm8XPZexXNlswwxfppQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3cTd/r7UrBR2lergRoCRpKYVm8MB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2NBn9zI
sgPld65VGAaZwIj0itkAPiWKdUgdYcxQsTC7wUFhsk/8bT1zRXfArRyNGlGnid2X
BD02jGxhTuofG9darf9nPEd7OGpa1avGQI5YmXZsqRv2pkkqrhFhupWgPxfCczf4
cuVp71F5wN/zYOShD6y+O34AAmN6zFYvuECD4EZNSVc7YMc1iACpuWIYZR8QfeBu
DmNWhjIbXyQQvNcWIVn3bi6c6cQkxInmhZxb1P6KWv5OIDh7vbX+X607Tse8x/lP
rYk1NN1EfIVqokCkyvlbAGznFTu8YCMuq/OvDZs2J9T43IeY92V90yB2GueA766g
40As4JTJdlCe3g==
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:19:14 2025 by rpki-client