This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File:                     8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier:          jKn+ejKtXhnAVnInuXugHZxGIjy6ZrcE2SGYgiqu+Lc=
Subject key identifier:   DE:8E:62:A6:72:EA:0B:FD:AD:EA:04:32:F1:2F:0F:28:75:56:62:4C
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer:       /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial:       019B3A589990E073E33B008517A9F419B2E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number:          0236
Signing time:             Sat 20 Dec 2025 06:00:43 +0000
Manifest this update:     Sat 20 Dec 2025 06:00:43 +0000
Manifest next update:     Sun 21 Dec 2025 06:00:43 +0000
Files and hashes:         1: 1--VJLLEqxUFNksnMGjzlf8EDFtQ.roa (hash: sFeqpTNRKdtfgCpWnfT6bNWQpLS/rgow0C1Miwb4XkU=)
                          2: 1-hUsPlIzEtJhCC0pbHHDrhKCahk.roa (hash: nnKWEvog8nqly+4eih/kCBgt7z2zMVviplbUKLh27tw=)
                          3: 1AUBGar-Dkm9IGeLOai4h81bTI4.roa (hash: HxWiw+GJIuNrrCIq+aNjmMHwMaeriM4XOrwvLx1NPNQ=)
                          4: 236LhhUxi4bM3CWFXv5ENeEDLw0.roa (hash: mXwa812L7Sgc5PaLadbZYWsB2jusWGtKQaaUXJX7ZCw=)
                          5: 3BuRgA8d-bVZ94RHjJWDyP66hAI.roa (hash: JyObWKJemQ9DI1DqgPGHC9xny6jFhDNgmUcIOlrrZYw=)
                          6: 7hJdeuyT_mVaBrzgOtc1Dm30EFs.roa (hash: gtTNnhHiPTNXI1jOW6J+oRJeenTaQDAxDrLO1XtYBB4=)
                          7: 7v8EaQuORaCogYfQLj5ZM03TJTM.roa (hash: ooPlkDHLnQfXu3fGjmpNDapzlwO5zeeeUgy5XtVR35Y=)
                          8: 8-UTSmmikIzDkpf0jL_kGGJPN4s.roa (hash: EBr/YhkCc/K1S8mfHokN1PL/lYcuifmD75ce6JBSUi8=)
                          9: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: s5LQs/o+JquSvClWLCCxRU7zgLr+JvZr1i6Ky5riKVM=)
                          10: BproHlk4urlzp1wKkDMTuoFk6XI.roa (hash: Dm3Dy7/qYQCM6CGcfmxUWY20PpQ2ZTGGOBbBYNw/wnM=)
                          11: CC06DZJy_5K-EBy1_ZOG76Wtt2w.roa (hash: Ybi8B7JCaA1BV8xmlyy0VocttdloPp1TCCWjsCBZ3Go=)
                          12: E9dRsKnEWKw-14p9ATuvWMjWpMo.roa (hash: F3tXjSzpKm3xokQtRzj7KSNvNVlitGKWwjzsBBwZNk8=)
                          13: FPruiLUTMX-KSIGzGXiAtReL9UQ.roa (hash: Wk0KyGIfNtjKx3lT9JRR8wbofyh3uLeYNTLY5fSCxEk=)
                          14: FYiHyPgalW68Z_EhtzXNrycJYmQ.roa (hash: /kNyoRlzhu//FM+fFB6FGSitspb0oA3HCBVl7Lwi280=)
                          15: IAY7u9goKLtNUmdAyCWW-XnJFxI.roa (hash: z73m7/5g89l7Psf1mtxQc0bz6J7LCg5JeU16OHI7t1I=)
                          16: JBElIeupN_wEvwcSAF5cDomvrlo.roa (hash: BT3hpqLCpVk2r0O2vUhPpQuvC1EKNbRpD65e7fDCXEA=)
                          17: KATLQR576QKJ2H55eDjgFkPGSy4.roa (hash: TJS3dcvnIANs+2B0g61dHZDCH25ipnkjR0I2/txxc+k=)
                          18: M0fKNX9eox7IfYviY6R2x-xMf2c.roa (hash: WceX7AoSR01eRzudZZJ4Z0nv86tj0IatfsrgtBXT4v0=)
                          19: NKwQkAuvf9XPj3AmUQ6FU2-ZaLU.roa (hash: a+QjCZZgfle5XUxuZw5fd1louVl08y58mFNbwvIbBSE=)
                          20: Q-OBGjb6oBDZXn0az_tHjhT317o.roa (hash: 955aOscnf+j7V/Y/zcZbXtZ0JZfV473pEcIFT2Lzb6s=)
                          21: S3Xg7QoYCUC07S3hR4Bx5R9JRo4.roa (hash: vxoxYbeFCQbgX/TU8Y4mFj1Y59bTFRY+JF3DT75ZxG4=)
                          22: SFCwzVZGOPxz2U_279Bo_Lpk5p4.roa (hash: 3lcOcn5PP3C5yhgR2l4546ZVFe6pe/TJ96LCBfVinmA=)
                          23: Zf7ZuHL7IUxtTYoRWgTNvbVJWFQ.roa (hash: U/rRWMyGwT0EJp3DsyTo8NtFud95po4EanrDciDb8V8=)
                          24: _QrNkSY6EnowAjHKxPgZcWd4kz4.roa (hash: VwUELk0e17e/TVuSpUJV3YaFJ4sMZrKz4thL57YxVHQ=)
                          25: _b8VyqTCk7JAbdUq1WSR3psKxic.roa (hash: Xw2IGuYjxgrC5h7G/5AbjS3s2fK9xrr0dS9O82wc8rY=)
                          26: cohdEXDzPpK1tPeOsjxWZZoy2kw.roa (hash: 2bds0nHUGtIa8S7dmK+K256GFklwRiA4VOfKja/NXL0=)
                          27: eAfR45iIOQ6IyEop9wM8TlKMRLw.roa (hash: cwj5q1OL5+sJz04oOK5MsbX7y3MfOtQ5tvlTvWhQCa4=)
                          28: eY_JP296K7EzeQzz7pAK-QdGDlQ.roa (hash: 1hHTZx8/SNOi0qtGbD1Ot8RFhJXoszWaqomhkHPhsC4=)
                          29: ernCjSgfEA9LWQZBNK3fGU5zttM.roa (hash: kY2/s5Yb8D1suuDatJMAprfVeeQqjI34qbiqCbluSaI=)
                          30: fLYW2onmm7pntVdn_NFikuJQ6oI.roa (hash: shKypXLxXWkzsX4KOVg1zCCoxO0UCMhAjdFLloK4LEk=)
                          31: gb7ZNrNCCSbmUu64yI_p2Td_ryY.roa (hash: Qahs8UxIAXs5YiBBp2E7+t7tlVXGy2a3LYlpO4lt3yM=)
                          32: h6-SfUxEZ2kBxfhWKdjK85GqAEA.roa (hash: g+CeuDpq1bzLG9uSPtmu/8MjAeGd2+GcQqRcvFy88jc=)
                          33: hdJD_veqQscEuHyTzVliTTRZYIk.roa (hash: qTP+6g/kCLToicqGR+3e68hnl0VGJCBVExBeIA/bFOs=)
                          34: jvpoTrK8_4-54LFnamVFN0Rvxkw.roa (hash: 9sm18Po8k3lNOXS81IduJpV4VijHut9tPDKg3wbowQo=)
                          35: mJg5-yk83oQM51KkbqBYbHixcrU.roa (hash: 5vdWsjquCkAIzmlRga/abDGAdDerH+rqhd68gtOvTB0=)
                          36: n1lT-m44-1cFxu2-HyaXVW6E93s.roa (hash: Db/yu14OiHjC1YOIfQjhx32jvoU3WcohshFPKla5Kdw=)
                          37: qaQUpfJ78ajLWnFqySa3J-O838E.roa (hash: nDdXmewTWVZu9YGc6WcCDXl+N5+kiqRv14ocIaCYN6M=)
                          38: tHsPWF72XzRu2q1rH237TJXDtnA.roa (hash: rc5J36H2+AWEry0jEpK/NY3Fgtgm2mLm6OZb3BjnmYQ=)
                          39: vAHwQcFMw1t4Bzyb8dqj65X42dQ.roa (hash: 7xiUtacwkiCjYN44H3r6SZATgzXzkj4cI+A2bkFG+nE=)
                          40: xNR2TH7qOvL89YUzm8tC_DyVzRM.roa (hash: zc7P10O5xpRwbPH+qYrp3N03fh3LNeueq58VSoil/R8=)
                          41: xjXafc7OvlG-kDkHajT6EA4vJF8.roa (hash: hseObSCchdgMez+v8i3rhFwbsdMc8bwm2J1L1murTis=)
                          42: zEgMXD8hilpX0ocRMnDjPOAbEd0.roa (hash: 6z1zOX6waPnbSnLgmKqf9u5nROVfgR5O9TDleO8nh+U=)
                          43: zohQitr-U9uY1-PzS6BGuITzYco.roa (hash: EbcpHCxRWSWNdJwx+cnTjKATaYJlKka6Y1LD7+SKHuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:58:99:90:e0:73:e3:3b:00:85:17:a9:f4:19:b2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
        Validity
            Not Before: Dec 20 06:00:43 2025 GMT
            Not After : Dec 21 06:00:43 2025 GMT
        Subject: CN=de8e62a672ea0bfdadea0432f12f0f287556624c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:10:32:21:f0:f4:f0:99:05:bc:f4:93:15:f7:
                    cf:b9:23:4f:ac:fb:05:c4:49:d2:62:34:54:a8:a8:
                    30:1b:95:92:b8:76:1a:b3:be:30:63:c1:8a:70:c8:
                    5a:84:03:4e:94:71:24:91:84:85:7d:9a:6f:db:95:
                    16:1c:25:ac:49:c0:c2:44:5f:42:e9:5e:2c:c4:3b:
                    b8:68:e5:2a:cd:32:d9:9b:c5:ac:ca:a9:57:cb:bb:
                    1a:13:d6:97:f9:de:95:b3:45:31:11:15:e4:f0:f7:
                    9f:e4:c0:e1:02:2a:e0:c3:03:f7:10:78:49:82:31:
                    86:39:87:82:0c:4e:ed:70:47:6a:ae:d7:14:a2:26:
                    d4:67:14:5a:8f:86:94:02:22:ae:fb:9e:0e:0a:f8:
                    1e:6c:8a:51:0b:c4:69:f8:5e:4d:89:58:1b:a2:0b:
                    41:60:1f:99:41:75:47:23:e9:34:37:d7:c8:52:89:
                    c6:5d:01:cd:ef:e1:92:c4:fb:22:43:8e:fe:f6:ed:
                    65:fe:27:af:70:c1:23:85:62:75:97:f9:25:a9:e9:
                    b2:01:33:04:a1:93:25:8a:2a:6c:b5:2f:8a:5c:dc:
                    33:13:d2:43:49:a7:4f:16:36:0c:8b:44:ac:08:f0:
                    98:5b:d5:56:d0:07:a8:4b:90:f6:ce:8e:0c:c3:d0:
                    65:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8E:62:A6:72:EA:0B:FD:AD:EA:04:32:F1:2F:0F:28:75:56:62:4C
            X509v3 Authority Key Identifier:
                keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:f2:17:df:df:e5:57:9b:fd:aa:c9:95:6f:80:ea:7a:62:
         79:7a:79:15:a9:b7:bc:b0:06:31:82:08:01:f6:2d:98:2b:85:
         20:18:69:28:7e:d8:96:f9:e4:9e:ec:5e:c9:6a:4e:09:b0:6d:
         a0:1a:ca:b2:2a:c9:ef:5a:c7:f2:c9:e9:9c:8c:85:5c:dc:46:
         9b:12:15:e6:d2:80:7c:c8:d6:f2:90:74:24:ee:fb:0b:6b:00:
         aa:44:66:4a:1e:ac:88:39:c3:7e:4a:f6:59:c4:c8:f8:c2:59:
         de:19:87:d8:ab:60:08:e9:cd:2a:2c:4c:0b:9f:5b:b4:a9:f1:
         3e:80:9c:a9:c5:40:6b:b4:40:41:0e:be:7c:89:d0:25:e1:d4:
         ab:61:e9:3b:39:15:6b:25:3a:a6:a7:9f:3b:db:e4:09:ce:73:
         84:4a:5f:4b:53:8c:c0:e6:f8:74:9e:04:ac:60:8c:cc:4a:a9:
         37:c3:61:06:11:ee:b8:17:5f:aa:a3:82:05:fa:da:58:0f:83:
         36:a6:97:f6:3e:bb:bf:8d:a4:0e:ce:1b:34:1d:db:90:31:a4:
         dc:4d:d8:70:73:31:02:73:d1:60:d6:81:5e:ff:8c:62:c0:3f:
         93:b0:68:54:28:90:54:f9:1a:03:a3:6d:70:a4:53:77:51:c0:
         a4:bc:11:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----