This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
File:                     MH9f4nQKK23kw3CdKWQRWzyWfaE.mft (raw, json)
Hash identifier:          LuqMWSQ/NH6mVxoHPFX1cf+GW36u01dfO0+Km8oY4qM=
Subject key identifier:   54:7B:E2:8E:26:F0:6C:3F:CE:65:D1:6B:F6:ED:F4:39:25:90:D7:A6
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Certificate issuer:       /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial:       019B34C5968000B87A4C37902CC872454C47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
Manifest number:          1852
Signing time:             Fri 19 Dec 2025 04:02:02 +0000
Manifest this update:     Fri 19 Dec 2025 04:02:02 +0000
Manifest next update:     Sat 20 Dec 2025 04:02:02 +0000
Files and hashes:         1: 00Mkn4ALhz2_PsYkyEOx1I4Ersw.roa (hash: /nCoLNktQTRkwf19+RkLZm6+K8Um4Om/CE/FhAF+NuE=)
                          2: 1-COYrNmS4Yj9DuD0Iitd9unCCQQ.roa (hash: JYNBrYFYnRoWLArFqkMLwPLI1r5eBOC15oN7aK1rASQ=)
                          3: 1-lpBuKXXx8g9yxpi6iuVgN2ZkaU.roa (hash: RgZnA77LWWsGNIxky5OwYiVUFovIqwLxtj+NYBSAZ9M=)
                          4: 1dc_AoVDsergaSgV7R-3yql_9KE.roa (hash: a9qa0YzuaGBz3jd/Pf5UATBtpu300fCkvirZYtsQepA=)
                          5: 3WNl-m7gCvquDzEDrkwIQEg6pro.roa (hash: FxKNwejyJuuX0RG0vdRP0TUvJlDOzXxsIbbdxEYJvWM=)
                          6: 6EnYKRUPOG0Bajz58Rzdix-x9Hs.roa (hash: hj5dsY/14wcoPQMYFN+FDqGIoYmYmbl7lzQUbFpSl9g=)
                          7: 6FhDGvyiE15m5in3JxEtWm2LQvU.roa (hash: Qb2nBgiw2wjL0NKInr8G6lRKGlTQkFAoRZAC/5y/JJ8=)
                          8: 7uyz50yy6Hw96HGzOKfD1adh_ck.roa (hash: n4kWCxw/NHUiGeVP5x0IvmrVoASb0wzvbCgftEjfsB8=)
                          9: 95jWS9jKpRrroELAnGEuEqeiVuk.roa (hash: 9oQPUKrBIIejm5soFm9BOrvY+R8e49uut81KixCREME=)
                          10: C9rTZ6_iu1FXRg451e341Atg3Z0.roa (hash: XcWEYMD9cUcIh2EC0BBKyyITu1rFp8td9cXo80ANEyQ=)
                          11: Camuu63_kpRUf6FxMmJ-Ok-oBwc.roa (hash: +iIyFBA3ZhKNuVhyNzUqDLxWmuz7/LHtk6wG8bzNLCw=)
                          12: Dcl4o4Mo7N0s3M3iAQoKIPl9m2g.roa (hash: SVwXdwnjQoGTLQZCk0CvIrT8UoqR6f7tYRnOAGH0NIA=)
                          13: EdlEeGF0p-ph_-EZ90A8Cv8g-lo.roa (hash: bxOL6/VDd4hVc81yHqPsVHT8CDLp/qHPAVWZhIxPWDQ=)
                          14: F4z4cRp1o2-2fDGziBvSnYHbVpM.roa (hash: 2wAWhkLWWqS0rO2Q1Az6KgQGqplVuffj57lG+uTxooM=)
                          15: H4YuarFLRv2DKAM6083yrFzz9JY.roa (hash: fMRUn4uvKnHkcfGAlHBm1byeQeTo8bCHBsHlwHjMTDA=)
                          16: JI0eb8S1GNh05B8yRPp4g-MmznE.roa (hash: vofbBr6agtDCq9C2DcAavwwJSfex0/8B3Z91wfqPM6M=)
                          17: KF8itGoY1xLI5AYmY-m8xyJCd-M.roa (hash: 3x8CCjFbHcFE+DJK2zQRD0PbpgAm7tcfoBUcCbuoWVU=)
                          18: KSKxvPfPoQ3-9nZ5IaAyZyw0eVA.roa (hash: Ldllwbeq3sVnl6+zDKpnVxt8zPewHEjiNMebEvP4PkM=)
                          19: MH9f4nQKK23kw3CdKWQRWzyWfaE.crl (hash: gvY9hvQ1QRcdEst7brlMSPFb5c9tYhio4I4lZnRNLtQ=)
                          20: Na5QZvVlGuZQeLfXORY_9aEEYSo.roa (hash: 7zaWEKU6Pa667pchWMlNtONL4EFj3rNY7MR9JwlAuWs=)
                          21: NfrImU14VyPFoYoWbQqSwcjt0NE.roa (hash: MQdzlW7R+JzkpiS+Sg0oeOl5PeyecnB8iAb1AGvWxuA=)
                          22: OoYqylkHzmwaVAMQUI6VbW19fUY.roa (hash: GTuWmeM87GVOh1bcDtRCfkyFY8mWiN9eSfyMgGPB+zE=)
                          23: RYzhujVp6gIBgIh6wj1hAB_7rVc.roa (hash: dxOdcde2n2siUlRnNLCGHKOg3YoidL7qLRsEX5nlICY=)
                          24: StSv8ki3Hfy1kt0rrrfueNG7XQE.roa (hash: n5KuwRYffa0Ye2MfTHYi4Ou9cVdpBRC7za9HK1Mdc+U=)
                          25: UpgKqZKDk6DocsIHKTjtNdmcKOA.roa (hash: ks27GBa0bjdMoWqX1B0YBEH3qIWHeKCvjtYKHznBta4=)
                          26: W1J1-YCCiOxiAdhCBpIGiI6-ens.roa (hash: qQljpaYP6KShT3JCLBM16HPQvI04wWe99FsoBr17EDc=)
                          27: XZVtjWmGJy5TJN5gkclvuaDTx08.roa (hash: +A3dF//QsJfJLVvgoQOwQfNBd3HuH3X5Enj0ICpyoDU=)
                          28: Z9ftDVnLuDarY233BHukY7esuz0.roa (hash: 8IP/yjkR/p4P5xW7keZ1mbS3Olm9wSVSpmHnR8UNIxY=)
                          29: a5vhXTFxFnmVktk1fpfvlo_HM2M.roa (hash: jBANqiVsO0TchdCr8Pw27uhxGmAd9aIES2vzyb+GsNU=)
                          30: aJaJGtMfWNSQiA_bAEWtiLHd_FQ.roa (hash: K2mPF2eHRJwmWDINxTS4kipEwWDutquLs7wNrJd3zo4=)
                          31: afF1dxl_LmNwCvwOu-CxTaBAPsE.roa (hash: 2PsecFqYTcXE3Me2mMpOXpuvsS4y86LFqJBD0VQl4Yk=)
                          32: hIqJAfSnn9KNywKp0QfHCh8jdEs.roa (hash: SVYSpB2PXKZBd+1YFg4Zcu+R5qUNSr3ksyKlguLNrhk=)
                          33: k4dE6GVK9WXXHG3YD6YqaU59DBE.roa (hash: gfljlL3cqgD/q79IzT5OLmzpfKZUJCewNF1J+kEHTmM=)
                          34: kTAZ1eq_4NqZeUF8WiyBjLmzzOM.roa (hash: FbN3ktB3aIhk7lj6tCA82i2iYB31YzcLrswYNQRr2fk=)
                          35: nPLIjH6A9Mvf1F8HtLDzWb8jIMc.roa (hash: Kkbt3awiC7wXEdfElBvXbg7tTE4YJO5Q0eMabJjQuQ0=)
                          36: o033YbxU_4pqzhTYeW8KgBTyJFQ.roa (hash: dhvpupNA3tAu+C5YNjmZoQsdlwc5TGF6rdYGFnIKpdI=)
                          37: ogWtRj9AJ-3VS3wVOcqhrepWr84.roa (hash: z7l4qX9iNc6t/itsLZx/1qV94NBFb0s6x69mJ0YgY6g=)
                          38: ppMhjhMTVNCeTsOFe3m6ewW5Jro.roa (hash: Am+kXBQ0WIwa6A/BwBA616zUdJ4SzItvZBpW+RuBy8g=)
                          39: qWfH_VKoWWUUQ8bi1qKxTuV0KIA.roa (hash: x3hukl87lsHfId1sEhc10WEbYF6R3yTOTAtjx/H0dM4=)
                          40: rXpni-4ALcocOhcZ1QqAO1mIJGA.roa (hash: FRAHJFSzOsHBC4a0opWl+1Gehcqt2UuiLhry14uVIHQ=)
                          41: wSL45AIT5EJXXFGp5vg6M2DPNCk.roa (hash: 1wb4FcpLDXgZHELKVN0aczuYaHIxl0jPkQS+LI1QUhs=)
                          42: yMSRSUOaD_I9-_w6JSkVSof-73c.roa (hash: IIoX68dv6Vr/WkUd893+l+Jc8xvnAeBmWPaJowHnKOE=)
                          43: zfjWVaBt_BelAB4wLgicMa-3gUk.roa (hash: mUXFCeRc2Y4QqbwjvPvmqd3yvXigvxAWleegmSOAAXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 04:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:c5:96:80:00:b8:7a:4c:37:90:2c:c8:72:45:4c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
        Validity
            Not Before: Dec 19 04:02:02 2025 GMT
            Not After : Dec 20 04:02:02 2025 GMT
        Subject: CN=547be28e26f06c3fce65d16bf6edf4392590d7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:3f:73:91:b6:0a:97:2d:7f:f0:5e:55:af:
                    0b:51:8c:0a:28:32:06:31:81:1a:98:41:b6:d4:f9:
                    ad:17:16:03:bc:1f:3e:5d:69:d7:2f:30:45:56:3c:
                    8d:21:1b:50:c8:7d:70:f7:f3:7e:75:bc:99:c9:6f:
                    bd:b0:40:00:c5:cd:a6:2b:d8:76:e3:d6:e6:2f:83:
                    9a:35:a5:55:e6:a7:e0:aa:10:45:c4:8c:04:b4:18:
                    65:56:e4:75:03:74:9b:ad:b9:3a:a5:d9:cd:3e:54:
                    08:11:f7:dd:ab:e7:0e:47:65:63:95:91:73:4f:f7:
                    8a:db:0c:42:ed:5c:b4:00:48:1f:82:7f:80:6e:9e:
                    b8:c1:fd:57:56:14:5c:35:2a:8b:ca:9e:38:c5:ee:
                    b4:61:ef:16:a2:33:1d:0e:0a:a8:5e:4b:3e:47:61:
                    a0:07:67:08:76:ea:03:31:25:e5:b2:6b:8b:13:d1:
                    0f:79:11:50:0a:6e:87:f4:ca:2f:3a:dc:ce:15:d5:
                    c9:64:cf:13:67:31:f5:d4:a8:4e:23:93:35:5b:40:
                    46:7f:d1:aa:26:44:f9:02:98:09:2a:4f:78:99:75:
                    28:fe:c3:4e:37:74:cd:c3:fd:52:71:28:1e:09:30:
                    30:44:eb:bc:b4:c0:37:01:f6:91:71:39:07:ec:1c:
                    a6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7B:E2:8E:26:F0:6C:3F:CE:65:D1:6B:F6:ED:F4:39:25:90:D7:A6
            X509v3 Authority Key Identifier:
                keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:72:06:87:0f:a7:e6:b0:00:f2:06:9a:75:17:46:47:15:32:
         32:dd:7b:92:bc:7f:87:26:2c:b6:61:fe:c7:a4:e4:6a:8c:bd:
         58:54:bc:8c:3a:56:94:1a:79:52:9c:99:56:18:35:2c:fe:a9:
         58:46:35:6c:fb:5e:03:ee:33:6a:84:cf:93:54:b2:6a:c1:34:
         5c:c6:8f:0a:53:6d:9e:1d:ff:ab:5b:b7:8a:52:c1:63:0b:67:
         93:ef:ad:a0:6a:86:c5:b8:72:ee:2b:6f:3e:fa:7d:62:51:ea:
         1b:3f:c9:f1:08:88:4c:b2:f5:4f:85:2c:e6:47:b0:09:1d:01:
         b3:a7:5f:44:37:d7:38:7b:aa:35:cf:30:68:b1:16:ea:8c:d6:
         3d:28:ca:d2:2b:11:2d:86:ff:dc:9f:c1:e3:85:17:f8:95:ef:
         bc:12:98:53:ea:ea:3b:06:26:2b:ab:19:28:bd:18:7d:b5:0e:
         ec:35:eb:56:67:d8:a9:5d:1e:c1:2a:cd:b5:49:20:b6:ec:2c:
         d4:cc:e4:61:21:41:11:db:e6:e7:2a:88:3c:26:55:94:51:70:
         67:d6:5c:e7:35:f4:a9:ac:ae:a0:fb:f5:5a:87:a2:63:ac:38:
         51:75:62:31:c6:d7:57:12:67:eb:02:75:7c:f3:95:77:2d:9c:
         16:f1:25:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:33:08 2025 by rpki-client