This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File:                     zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier:          tG0uzSxFHuYcrW4Ps7FEInBOjvzk7bXFb/A2ApC0A6Q=
Subject key identifier:   29:83:48:BB:D1:E0:1E:EB:5B:55:27:19:D6:17:9C:90:BD:51:22:6C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       019B36457B321A2580F7A22E6AB0603022EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number:          14CD
Signing time:             Fri 19 Dec 2025 11:01:21 +0000
Manifest this update:     Fri 19 Dec 2025 11:01:21 +0000
Manifest next update:     Sat 20 Dec 2025 11:01:21 +0000
Files and hashes:         1: 08PIServFYDaJgzE1Tv12X6XY58.roa (hash: dQLCMB30niktc0gPuNH+lrW711hzl9qGVDR0YgMTxfI=)
                          2: 0Ry4NdXZ6HSZfXpnlF4lTl30iXY.roa (hash: p83Umogvc+YuBZePLrggWd7M/c1sFHt2HTKsOBLpp78=)
                          3: 2yRk6SsZyzxd97urdmhc8NDfCuM.roa (hash: aBtxwiV85yKOVZA6goNJCJM1LR9KIwykly7UnkM0oEA=)
                          4: 5v_vrW0HvoruhQZTNV_0b8Xqqto.roa (hash: GLURXBU690UhI1Gmf5xLttGeyafmzBhy8dobKw1u4ZA=)
                          5: 67_iqcd-jnhgApAKTC6d4bs5Qro.roa (hash: e8mI5oDqjL7eXb9pexw5mS8lQPn8bQBHzfmgkkeV8Wg=)
                          6: 7FPmotCR-R9wzv_XbMtnjpG5dwQ.roa (hash: wZrYOUuRAIwSPFEINw7jG0Anj/wWBpx6jCtbZE+QjZE=)
                          7: 7Vg026GilsAdwwmReGqAOt7uEBk.roa (hash: o2eCEEPEnYtuReTatMEMg5W6/8oDYNB6JVy+I8yx6Gk=)
                          8: 7ZaGyEnc0PzjbLmcCjoBHoUEk-o.roa (hash: Q9epmobCRWEP4QS/HRqGknlGIFOq7xuwq89WgKxRa8Y=)
                          9: 9MPbywuqNktfB0f4ONx5i7D-9RY.roa (hash: XUIyXra42zTdha5ZBSTyRYrhlv/tQGKMTfMGyuOTNh4=)
                          10: 9X4NbzOONT_zL9f7V32Lk3r2UPc.roa (hash: ePj/TJrlBihPQ55mW/QDsw9mwXJbpJXSQABPJ3xbBZw=)
                          11: A5l3o6XbhGvF5USL_QEb6eeQe6Y.roa (hash: qbMsyG64j/YQECtVy/l1ZckwMXYgmRnjYsG1XUGE8QM=)
                          12: AP_6Goo6fEz7oQb-achec-XNy_8.roa (hash: W7s4reaaA4EkIYrdv3BL+KbYCgasAyomE4TDjgFPn9w=)
                          13: BFKw7-MX6eGQOqY5TssnirGAqBA.roa (hash: bS60KLTdWaNaRicQcYXzs/obcsxKZL5GUEz81rYkH/0=)
                          14: BUewB9_NvYJ85g8W4DMrlK3_tQg.roa (hash: KfdE/hwU8BwH3XdQnS1AEI6YsQvLec/S3fA+jD/NPmI=)
                          15: CKlFzis5ddR6idDvEBBrH0Xa6vo.roa (hash: czH8er4Hjx+q0WmCslCOyi041nxgXD53Afz3H8wneHo=)
                          16: DNKfYMLP9Xm_WjVzpKO7q84QzXw.roa (hash: 5tBAqqFCun3qMuyt3hnlLRBwJNJimso2u+1bTRY1BKk=)
                          17: DYOadUqHfb_PNZxu1cy5_hpkSBg.roa (hash: eEYETNPErMqebmlIAobMItUoKYgLHkCgaVCrZRnsjrA=)
                          18: Eb4uZNoTbis1micT3DbIc1dFyVM.roa (hash: X06D1xSu11QrvyPBrnBSLd/VAdyx1W8OhbHMY9Tus+g=)
                          19: EqHLuk1cCxicxIqrHgHfPVu2AsI.roa (hash: jTt4fC0OpOSrlOKthxVRS05mx+wfzh6t7wCVTnxG5GM=)
                          20: HIs8gXkWglqK6h5HttT5g6ZscjQ.roa (hash: 62MV/05+NTayLaIGgqj1zPgwSKJk/DQXvlIx2C2uMXk=)
                          21: Ib2hhYG2nUdEscebvksfl1aiTI0.roa (hash: O/JyCkL3w1q8mp/+DgNgJGHvzzuk9VXiIMCNR+QLoOY=)
                          22: Iz6s_leBualQ5imcY5zIa71R0KI.roa (hash: T8yyK+8ZKDwOzRR5jc3tNtonTD4CKYsOcncUcdr1ajQ=)
                          23: JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa (hash: NQzzAQc28osxjZT05mQhRtDuQ1pY2Seb4Ooc5Ebd8mE=)
                          24: K42vHM1Y31hkoh1eY_MCD3Phd2g.roa (hash: 10MJflr8WaH9nBqOosM69cUHwjn7LcR8ExGlOShDPI0=)
                          25: LGFAazBBdLZYkcpdEXoB99ym1Q8.roa (hash: /mAXnxGLWns/xdENk8P9coOl/pg4zzGpxWls2He6518=)
                          26: LtbBjOx_hJolvH_RVCG_bLfXxFE.roa (hash: aDMsbWlPq04kYD/9xZ5j12OT+fpd9/fPTH0UbEVWOEo=)
                          27: MOJEU5OiSmgt_dqOtEzktEJbSMA.roa (hash: rMGIQ3RFsr4DEYaqV6jp3wNTqUtoguOSEfloYNNvmi4=)
                          28: NqEDSyCU-4MS42jFZzpvAT-HI8I.roa (hash: 9FbUsU13J/GmaYBC86KZ74ejALBebmKkz0F4iRu7cz4=)
                          29: Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa (hash: t0XpRWtsKgAoA32Sc2xutvn6pHyDdFXpsGXl09aN/so=)
                          30: Pcba8QNq05Onyt8c9PChrOeDwkk.roa (hash: 1zhirneHsYlEsC5JAw7XhZDInFj824D/W2vvSSXKLa8=)
                          31: QHyMXzRpY79TSI5ErCSD6tj6Ocw.roa (hash: BWQGmwoOMlvewCbObDq4CJcmSEL6GFX//gAeLk6lb8w=)
                          32: QWF8iPmkcL6NOooL8tPM7IMPoUo.roa (hash: bzBipE6wAO2T/yEjaOJi1+OmhaU74b59cVPkctxln9Y=)
                          33: RK1O-a2mHIy_nQ5roRSHFEMArKI.roa (hash: UJRbqwcH/HImxZn6bg73LlWy7wN6vSCErzYOKPapKao=)
                          34: TNteXfpLnFPIyzeTl7EjsNtmv5k.roa (hash: UbIodLuN+491e86JIaxo1Lb8oH9rQ25TZeyreDYmwhw=)
                          35: UFM7V0QaEQk5iMcLePQNtrCnBuU.roa (hash: 1KCm2LnslOt1Go2n1GlY4KXw/ywbLjggHVGzM3KYrZI=)
                          36: YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa (hash: J8Rp1qTd7tJrcIRX+iFAqIHutCvAtC+awBrqesiPa+o=)
                          37: Ya5-h2ETMjyWDhCB2tvxKRLAqsQ.roa (hash: coLWeAGOhf5VNkz6Fd+O+ZH/zyRAc6w/wTvM49zi9Dc=)
                          38: ZMIpjzhJjoRrwfwWR4Eg02S5swQ.roa (hash: Y3cv/AKvcAV9CtpBid+Ox0AoU1x0IW4ZhWyaCypKBDQ=)
                          39: _dcJgLvUvSMsukmLo-EaOfxcN5U.roa (hash: uI3m28aVm/tyt4XjnhomVIxLqAW8QPK2Lb2lUn22Vp4=)
                          40: bjRr7IWjofFhY5UaTK36gjVTmJw.roa (hash: 8Uet42He0JUZ3FcDIiHrwMRWDjvtV5w/CbqK7W2EWwk=)
                          41: cXPwDKdKoIuZQCWcD1H6lct9eH8.roa (hash: TVE7Gc6adZMsubybixe+sQ/OeGr4yJ0ymZcYr+WulwU=)
                          42: chbVlzcWSFykj4rKm8-p8fjB_as.roa (hash: BFYzg89bv90dUCygtVu4jl5yAElZjXQf5CiCJkIcML4=)
                          43: dPsJh8so_OGOeB6OrHXBmVF-xTo.roa (hash: 7DuEegpyE/v8O0DAqoZg3ItwVVZDZ3DbZy0QXCDbpJA=)
                          44: eg20MWLn5BnzbPm-JB9g3jwd7Ik.roa (hash: XZYTz30xSkWfeR5v/o3m5U51K3z6T9Ox5jbcOv8+FtI=)
                          45: exmOhRi-6QM5QMwrvTDO0PpHlU8.roa (hash: 4Qp1/ibvMkLGC74o2WsGwKqLvwHH0XDSfh5c29oEHq0=)
                          46: i7v5xES7KqnGKp2XIwwDykdC--8.roa (hash: rS/YCxhUDao1PlYvZQnFkxfAD6XCRjF8yjNd2Cjxs+0=)
                          47: j5Qii8CZN_qp-4ccXtc7LD97-tY.roa (hash: ngeZ8nTSt/nDCbtXdxmIMpyWVPp5DgtOQvP/5mpQVcQ=)
                          48: j8MXOx7IAf2KSqCp-jaAVv0pzxg.roa (hash: E8aLYB6SNTmeAHTqRh2dAkdFRmjbWJTPYcFub4aB9Jg=)
                          49: jP2hUUSq-SoUvjctKqakxy0FX-0.roa (hash: 34H49knyzEOR0dcgwXPPlFWFIVptz1A9kV7rvxjIzXE=)
                          50: n8KrkCOeu372DfA7gb7CXyt4MkA.roa (hash: m6YplWM+G0Bt8JF0DAD2p3UhAQO9YK+EkRMI1CUMIoE=)
                          51: nIzC6awjA7_y1vLiscg-NRhvbds.roa (hash: 6T78Tu5by6VMvsB9uTgSy1rBgEymtWKPvocz26uGATU=)
                          52: sw-YdJtO7LqDRDnxiy4Ot9H11mg.roa (hash: x7kfkuvHS2v5S0oP4sdYGQmb6qEX7ZB8cPgf3bWxfMI=)
                          53: tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa (hash: egvgSWXbD00pKRV+iN4rWc5kDKElUDp5sYulqSPLc0c=)
                          54: uWfHgBN_fUuSZSwrLJm4yP6GS9Q.roa (hash: +A1T+WhnOHYIEIZ7mEVu1afaFwmjRRKYqLMFQ3ckAmE=)
                          55: uhUfOemLlSizJlvnI4iZXIRsvD4.roa (hash: VkvlIs3PMisicDeiEnRW3SF8FPJpEZKckV5h24sjnkw=)
                          56: ulVKP7JCGC0iMQQVoFCQANnsK_A.roa (hash: egX7sPcPukmP8iY1HfS1GniheclkfAu1QyMIehiLHfg=)
                          57: xT_QNbaEsHShNwPnlOG7D27KR6I.roa (hash: Mw/4548MeQOvs37HbuZ+A8sJj11JYohArvbf7TjnWpk=)
                          58: zApogsM3wQj9narTfcznfWq1dXo.roa (hash: 1tg1q8PEOxBvvA0QAQP8MTd3rfrMbFvAfVfpg3Is4go=)
                          59: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: HP/0LEAjXnU1voOnFSz7pz2inkBCqqbIv+Dtlfwjxi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:45:7b:32:1a:25:80:f7:a2:2e:6a:b0:60:30:22:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Dec 19 11:01:21 2025 GMT
            Not After : Dec 20 11:01:21 2025 GMT
        Subject: CN=298348bbd1e01eeb5b552719d6179c90bd51226c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:45:03:92:76:25:e2:01:15:d9:18:dd:f2:24:
                    45:e6:0d:53:22:92:ce:01:c6:e5:89:32:70:57:b0:
                    fb:0a:df:fb:38:f9:9c:92:74:eb:40:f0:1b:3a:75:
                    38:ad:bb:62:f7:4c:8b:71:5f:7b:a2:a5:b6:b3:64:
                    04:33:cd:9c:ef:73:04:03:b1:1d:fd:6e:a4:da:2d:
                    01:0e:93:75:b1:ac:93:78:08:52:d5:af:01:06:a4:
                    c1:d7:1f:84:57:76:4f:7f:3e:dc:d2:e9:34:d3:ae:
                    ea:ad:23:b6:c7:4a:0d:41:a9:7b:ec:6c:30:25:4f:
                    e1:61:48:32:48:c0:4f:d1:27:e5:90:21:59:fa:8f:
                    cb:67:2b:d1:19:63:42:78:20:9c:8e:1d:14:a5:19:
                    c8:7a:9a:25:63:8d:ac:ff:61:d2:c1:5b:c4:17:0d:
                    07:5d:9b:48:02:ed:6c:de:f0:d0:37:12:60:33:c3:
                    85:5d:9c:9e:fe:1c:63:00:c1:05:ad:45:3f:3a:64:
                    b9:7a:75:36:02:1d:8d:21:98:5c:15:f4:05:3e:29:
                    21:e4:13:24:a4:2c:da:31:e0:94:3a:b8:a2:0a:1b:
                    6b:e0:22:90:2b:9f:19:34:3c:5a:27:d0:80:be:55:
                    1b:42:92:aa:27:43:81:38:4c:d7:78:a4:d0:72:d0:
                    07:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:83:48:BB:D1:E0:1E:EB:5B:55:27:19:D6:17:9C:90:BD:51:22:6C
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6e:5f:52:2d:b0:7c:60:1b:5e:39:cc:a2:63:44:fd:ef:30:
         09:b2:06:1f:be:35:a8:40:47:45:9c:a7:d7:f3:1e:21:27:c5:
         8f:32:f5:c2:c8:2b:99:59:a4:ba:39:02:ee:eb:21:26:21:b7:
         64:08:08:e7:a6:48:51:13:d8:39:60:0e:d1:dc:64:34:81:7f:
         d3:65:54:ae:b2:0e:75:b2:0f:9a:4f:67:3c:9b:86:3c:05:94:
         a1:e7:87:d8:29:1b:3e:66:15:80:cb:a2:8d:65:ae:34:8e:90:
         ad:73:41:8d:d6:dc:23:fd:b7:c6:a0:fc:47:91:ea:a4:d4:d0:
         04:cc:ba:48:80:46:91:57:09:98:78:07:06:67:8e:03:bf:d0:
         8a:b1:39:25:91:1a:79:62:a9:9c:81:1f:48:2a:dd:37:95:ae:
         3f:93:83:02:f7:45:d6:a9:4f:a4:0d:8f:18:94:4d:d0:ad:ee:
         f8:c2:a4:62:8e:87:fc:88:2c:24:cb:91:5e:30:4b:56:5a:21:
         66:f9:d4:39:c2:32:d1:07:20:6e:33:66:83:c0:f5:61:d4:9d:
         15:88:b5:09:35:00:ed:71:99:48:01:6e:89:c0:e8:31:5d:e1:
         9c:ec:aa:13:15:22:01:70:26:0a:5c:46:6b:45:e2:b6:ad:30:
         e9:e2:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:41:38 2025 by rpki-client