This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
File:                     1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json)
Hash identifier:          1Dd3P/dafGVzTII/6HHEi/3tTN+CP9BE5K6gtEAszZI=
Subject key identifier:   7C:14:B8:D7:89:EE:39:4C:DD:33:56:45:16:53:71:3A:2C:96:C7:CB
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       019B3BA2350EE7E034672B06BAEE871B9543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
Manifest number:          1416
Signing time:             Sat 20 Dec 2025 12:00:44 +0000
Manifest this update:     Sat 20 Dec 2025 12:00:44 +0000
Manifest next update:     Sun 21 Dec 2025 12:00:44 +0000
Files and hashes:         1: 0ZW5KAczE20U5QcyFUsqUpXEED8.roa (hash: Qetbra8MpJDEVBlrjsX+7ywmI/a2YJ5nyn+yLqs6/P4=)
                          2: 1-KqzRG2ufGqmf5yQ7wQzU4Xpuyc.roa (hash: l2xJNQYVF3CqUltI0y/hIsNBwR8gaP86h2XHPrc9QSw=)
                          3: 1-UyIE7mqGVmQEQbqx8oewJU8LM.roa (hash: KQFvzUnWZGxgTX/FEU09xFGvTL2c/hN91WsuPQzlMhw=)
                          4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: UihULmZTfHOmfX4OX4jDk2Fm6WDpXQ6TsW8DyjTQJqc=)
                          5: 2MOnXULTLtYclW-99A5rta05gq0.roa (hash: 6oGTjNPxn9eGz+r7PD17nLTEHvSwkvDHY+K0q2a9Gmw=)
                          6: 2NIi98dN4sD0TIk71akteZnx1sw.roa (hash: k2get3lC4qal5WwpLqouWUlNle+TBDTdoCPLPn4qxTI=)
                          7: 30ltggt23rh7GTkDQejt9lmB4lI.roa (hash: 0Vi+rnQhpwPVxdHvuD/xFHoYMxHHBZAXfOAyM/8y4Rg=)
                          8: 3KlMZ-8oPCOwu9zbCpY8l5ygzW0.roa (hash: Nge1ZCdkQPHDYH5IbuQgeafxrKKZqheIQyKLqfoWvq8=)
                          9: 4JaepfCsA_lI-MmKxIYkIhWjTNo.roa (hash: n4hI5BYrL4MC9QXfsIecgobxU5/Ctvsdshk1tOj/4EM=)
                          10: 5TtTEnOmkanhTyR3jvoic_M4oOw.roa (hash: dYr6gC4EPJ8sQLdRS6y23vT8eJ0Xwsf6Qa1i1BT9vgE=)
                          11: 6BcG8bb1z_N4tvvUd1Gx5I8lmwU.roa (hash: LIMmkOw4HP8z7A8TqIJ9/r7g9X4ISQkmNHzzK5GwkoA=)
                          12: 7tdpn3LvL4ATw0CK_nHXC0-PM_g.roa (hash: //EiIzMHwuVi0THXNdxsIrv8Y+yxoxo1dBTprYwHSf0=)
                          13: B24rrIATyI6Y9bSpOIpB3PSj_8Q.roa (hash: ocbaVuTRQvDIOrxTxxg4/a9rgNewaIFpClA6y+NFqrM=)
                          14: BF9-axl09aLWZxr5YBfgizGRwYQ.roa (hash: +Qu2Xjmm9jSdAOCIdC+nqYHdIw9cP+EHQrcHEv9RXEo=)
                          15: BKmZbRh0zQ9oa_wPaKfsvtQfYUE.roa (hash: MF5MiDvqIGWrFA0JrjP3/BbBY/oWFnXukDS276OlJ/k=)
                          16: DlkMGzQHqOPh83nGG23nOj8tXkA.roa (hash: huMdxewxpuA4QGSVi+HwJbNMTf5SAHSJShnMsKq063c=)
                          17: F6rEC-DZF3Bn189GQxLFZdrW9ss.roa (hash: 0wg9QuGJMND5sNEy85LKkdkXbGMFG3a1ulykBXwSpbk=)
                          18: GKIBvtXq3THm63QH_8TaUji8HSI.roa (hash: +pvrI4erf1Lcj/8FcUip5ayRE0gXLz82FrGP84f2lSQ=)
                          19: I9PPHzCZLC3KRf5pPW4mcpNhTV8.roa (hash: 5VGGGh+D7rGqED1Cty/ds9a2QEhu4eIqlF+8kjtmXGs=)
                          20: KRDtf3OrZoijGFAdBpTPZ_LqhCU.roa (hash: hhT6v19/kwC+l+XsitAuGoa0pCOzj3GbmlwXD/IoK9Q=)
                          21: R8VY5MGVdE17A_2z_8Qznz96tZE.roa (hash: Y6Us+zb47DyfsgxnI70nrLZEznsAibIlmNM0YizAwAI=)
                          22: UJ9wNu4dLXvqKoUnbBe2xQx_31k.roa (hash: j4PamiWHKROafLFoI92zeGHphQE1Y+azapQ4RzxfK2A=)
                          23: UYQwhD4luTCUu0PCAY6S9fVvQB8.roa (hash: xwaHQTXwHl9OCxbP17eG8J9sJZEQNFLx/yHQgL2r4Fs=)
                          24: XPRcOQ12damhWz672VXQCKzctD0.roa (hash: +UjnKkHiRNO5TAw4O2QYp9JmNxVCRQBE+d4ZaSLhA7Y=)
                          25: Ywm1jYc0iwGuAB63sRGCNirYSf4.roa (hash: r1HsrQz41mTN+65j1uhqS2AuuYL14Zx4+m/FTWRASv4=)
                          26: aQXWpkeo8CYBrBnYK0PT1cWdHCk.roa (hash: JF3VKXhZgLXaADeU/i5/1vCJwGFlrS9omLotINcIakY=)
                          27: biZIWkN3do83nCL4GcgvnTOKqEI.roa (hash: C7QSBlbd7LRHpMATyfH1mxp6DG7K5WX31EKCXaPNBU0=)
                          28: bujGm6GH7mncfnxw5jTViL-bAwE.roa (hash: p2zIVwjY93QiNgpvPIwoy5vB+KV3M+ELyrgfIsjTSIs=)
                          29: hBV1lora2TRWVIDjfS5RTXSSC-w.roa (hash: ZFsMk9BOGX+QUOlHkhTwmMr1ntoiOz88gyQ0q6nWnI0=)
                          30: igGBFD8kNEyp0oLcDRQiMdpWqUg.roa (hash: JBfHKzIq0hybb3YSwoXuYc0ak5WjhrecAhw46dVwLpA=)
                          31: n0D7QgHWZsopO1EgFVVvK-P6Dwo.roa (hash: 1Tdg8cemFUBIoV4egYbYb5wLjUFGRRBY2gDNWEAljR4=)
                          32: n74OnOk2cupPxqpmEGxm3X6NJi0.roa (hash: 4IFl5DFKU9Rz9OqnMogOy+LZtMk2c06yHfw/g7OpLv4=)
                          33: nE4q77HuE9eMvcYlJ0VXC5AQzH4.roa (hash: xhWHmf0Wl/9mSIPxWksh0jgqlzI8er3WRgeIRoZRvn0=)
                          34: nq598Y-mH7WXt-wp7oTFReqn5JI.roa (hash: Lm1lMb1JelLgN0kxz8OzEijA9ElHx0kaIfvRfFoPkz8=)
                          35: rDFkTX5m2EO34s7P6mELh2PpTv8.roa (hash: tZ+O4/AWsb0SLsjDMIyQ8MdUzk2kAVytgwYcD7IQjCo=)
                          36: rcDj_gzVqEGnWxyFh2uHR9qUtN4.roa (hash: vMZLTAcjN1T2lc6mDfUwyn2YTO5QFTYoYEhTJHBI/0s=)
                          37: sIt3F6ds6E5Cw-7IGWGY_E58vEs.roa (hash: Sbu/A4tPhb/YMsWEmB4prBnkedMa/77cZPz9BrDKBSg=)
                          38: s_sfe0PwpYYFQ6HtLR5YzbGsYe8.roa (hash: Q4EHED4zem9TjQrfPSu31rh8tUnEGOxod/kov3RZEgM=)
                          39: sc5esKExOPd9MvtDyHiUo5axTto.roa (hash: T21z00EGEhOOCwVKI7S6BwJd+ujtp85ADOaPIJ5A1Tk=)
                          40: tBCiClZ01i6bRTFcoV9J9olvPiQ.roa (hash: F04EUBkZe5J5GkXs7KwkzKr7Lxa3zzkxl/rd7ozso6E=)
                          41: uLID9O7nU2pNtz7HGdAH46WS7JM.roa (hash: oYgEaY31SpEl7BoKtZCP9Lzuu9kwt/rbH0ExUKFH0PU=)
                          42: uxnZYNa8d97ZTb_0yY6HvXc3zYY.roa (hash: Uc2FRxSyDw4WWufpEWvzn7eMEVoT2cdYyXigSL+3Mr8=)
                          43: v-xNq330WdoiiPlZjkVxav1Azgs.roa (hash: 5Gfb2PYZTagtc6GTH7GCkVgOxZ7Twxzj2kExG39tIfs=)
                          44: y4Vx9Qkt31hnDWKRDzjTPFqJDKw.roa (hash: pJac98NKx2lAtwRM2cZV4ynaL5asMJypxmM9yqZe034=)
                          45: yh9ccliyxEcC6Avn1oCQoSv62L0.roa (hash: +3+0y4CEemTmWkaSTewyd3AcJUzmmij1RdzS9B5WjYY=)
                          46: zo1EB5eOu--ZgkCTUFK4z2eLIIU.roa (hash: GOnyByd/Nh/dSSCTb9OFvngxMy/STifQEOgflC9UV2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:a2:35:0e:e7:e0:34:67:2b:06:ba:ee:87:1b:95:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Dec 20 12:00:44 2025 GMT
            Not After : Dec 21 12:00:44 2025 GMT
        Subject: CN=7c14b8d789ee394cdd3356451653713a2c96c7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:54:59:14:36:c0:d0:db:21:60:f1:96:9b:cf:
                    eb:7b:9d:f1:ad:d6:87:cc:35:a1:b0:62:7e:aa:a6:
                    34:e7:f6:db:f2:14:fb:42:76:62:a4:f4:ae:35:a5:
                    81:00:ab:de:0a:80:44:f2:8b:35:00:71:6f:4d:9d:
                    de:6b:aa:17:83:52:ce:68:ba:23:dc:fe:61:83:8c:
                    b6:0a:03:6e:46:53:35:b2:51:41:5e:3d:19:fe:0e:
                    4c:a7:c0:26:4c:e5:23:92:54:ea:d6:a7:26:c2:ea:
                    4c:57:18:e7:53:21:7b:ba:eb:f5:7f:82:20:8d:55:
                    08:87:7e:3a:da:30:52:0a:64:b0:9e:86:54:5a:60:
                    30:f9:56:2f:d1:e4:48:ff:ed:48:5f:58:ba:64:f8:
                    2e:57:7c:db:49:70:74:35:9f:8c:c3:f3:35:48:25:
                    7f:6b:6e:15:5c:2a:52:52:92:c6:8a:a4:92:98:b6:
                    83:4b:2d:bb:05:ae:dd:9e:e8:2e:9d:a2:c2:7a:53:
                    61:4f:10:1d:bd:cd:30:76:a5:d4:8f:d5:00:36:f0:
                    c2:99:c4:7b:16:30:9a:78:a4:c6:6c:e6:db:c1:b7:
                    ee:50:2c:61:9d:3d:ce:19:9e:c7:db:ac:d8:ac:c9:
                    85:45:74:d8:fb:e2:53:38:b2:ec:39:7d:43:96:16:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:14:B8:D7:89:EE:39:4C:DD:33:56:45:16:53:71:3A:2C:96:C7:CB
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:19:aa:37:fe:30:27:8c:bf:d2:2d:1d:a7:9e:64:d0:f7:41:
         3d:13:8b:7c:ac:52:39:cf:d1:26:35:58:67:a4:65:e0:1d:66:
         77:53:fd:38:47:a4:a4:9a:3a:7c:97:01:07:6d:c5:c9:d7:cd:
         81:3e:0b:3d:ae:44:ab:40:79:c0:77:ad:60:91:b5:30:1a:bc:
         11:d0:ef:a0:09:58:8d:51:ad:7d:51:e1:aa:fb:bd:b5:67:c0:
         c7:88:87:55:37:84:3e:8f:93:de:7c:ce:a7:98:e9:94:79:8c:
         98:50:e8:76:66:23:68:4e:42:c5:8b:cf:47:4a:29:df:09:42:
         fc:23:7e:39:9b:df:09:c7:a4:6c:6a:1b:d0:1b:3a:fe:6c:b4:
         cd:ea:38:a6:6c:d6:07:d9:a5:7f:6e:5d:b4:2b:6c:7e:50:d5:
         e4:5c:40:6d:ad:b2:25:80:bd:51:99:ed:b6:4f:9f:ba:8a:fb:
         21:66:da:24:35:a9:26:cf:3a:ad:f6:d9:fb:62:f3:6a:70:e7:
         4e:29:a4:78:fe:1c:bc:c7:8c:a4:ae:f5:65:11:78:b4:ed:79:
         5f:21:55:b8:e2:a8:6b:12:67:af:96:5e:a1:05:f9:dd:a8:1f:
         1a:01:12:23:de:6d:d6:13:7d:97:41:55:a7:c2:40:c5:b7:9f:
         c2:14:ba:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----