This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File:                     SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier:          2zeHGGLanbA28LzjndAGogzmLNx1w4uPO1iXkIqWb64=
Subject key identifier:   A9:38:1B:5C:1F:DF:83:FE:49:A3:3B:54:B4:96:06:41:D9:85:E7:61
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer:       /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial:       019B3AC6EC8A24E02C1EFAC50A448A70BE31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number:          08AB
Signing time:             Sat 20 Dec 2025 08:01:13 +0000
Manifest this update:     Sat 20 Dec 2025 08:01:13 +0000
Manifest next update:     Sun 21 Dec 2025 08:01:13 +0000
Files and hashes:         1: 1-EZfm36xDgODSAJSHjoDKqosl0A.roa (hash: YJXvTARkaZsNuPWx3R0tfgZi43JI9omATgYJzudFfVw=)
                          2: 3U2HMxedCVt6_kMIDQH--335xZ4.roa (hash: 88sss7mFD2sWeeU8HLQ5OArgZS/AoA8AY0GLqd56WLQ=)
                          3: 8wPWU2vG9yor96syg0xci6OMavk.roa (hash: 58okY/hMSnPqb+2am85BaYPbNkOmLTFbAoYMmjPkzSM=)
                          4: A8u38dlgw8e8wVBstLEUX0BIwKA.roa (hash: wMifdjJKZOKPZclZ2LTT2h1hBhv48+8C1YSb4m0Dn8w=)
                          5: AcDYJhONPbrOnDXucR_bbR1A5kg.roa (hash: 88oN9iWkRyRsEw49ibrN6cr6y4laodB6sXFL6B6zm+E=)
                          6: Cj1iRWtZaWr3CQT35mnwIkfqqYs.roa (hash: 9ZVHBVyd/Pk4UvvVMqUwxdLUlrLbgZ/V2ltofM5wDow=)
                          7: MjYi-LSjoIJQHulT2C8hiHI7HD8.roa (hash: dC5UZCibXUg9xVnIxopZdKZtoheRYoCMgnJyaeHGfKM=)
                          8: O442f9rKCameMmZGS2am4On1RJE.roa (hash: Tjn+0NJyIaKfDErYElD/Vnb1U5GiOqlQwXo7lUYpajU=)
                          9: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: lv03xtyAakwaKqIKpHq/d1enlWkjD8P/ECAxb4VDrSw=)
                          10: XhNIRKox72ceLxS-HicNdteAlnc.roa (hash: QNRbEve8iPmaf5PJ3d4wKSJFvAQJTgfZsNNYbZDbIlc=)
                          11: gcyVEfl2Y641X6JyrJ5gHsnWGHM.roa (hash: 4fScV3KfjcgkIMTXmX6XzXUXdZUkt2FHTuue2HpZKoE=)
                          12: i0xOZ9Jhra30YZPBjOHXbYaWfqk.roa (hash: 037VXUJZVI+mWu72PU8YPxD3JLA/Q6+4Wqo2f8ZWqyE=)
                          13: kTJsplmwURGCaPzG4ayo6wcNo7A.roa (hash: l/8qlEM8+mm6CRnvB68H+M19y+bDF0JqtLE1zP1nToE=)
                          14: oX3OGzwxfpoj75NeGxUgbWj5Nag.roa (hash: AUpPKp6STpZ3+I37dxgfx0DnwlKN78RdnPEKRCGUs1k=)
                          15: pSBQwLUPyYWO99fSCGOORj9giws.roa (hash: JkOzR+BpOFLVw+DBFx5vd7D/7xkaT2h6VtCqnTT04N4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:c6:ec:8a:24:e0:2c:1e:fa:c5:0a:44:8a:70:be:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
        Validity
            Not Before: Dec 20 08:01:13 2025 GMT
            Not After : Dec 21 08:01:13 2025 GMT
        Subject: CN=a9381b5c1fdf83fe49a33b54b4960641d985e761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:44:6a:a9:63:0a:f9:cc:4b:a9:5f:cb:72:
                    ce:96:45:0e:ec:a0:ab:e8:03:26:24:c3:5b:79:60:
                    ef:26:a2:19:3e:e3:ed:0e:ec:83:2e:d6:06:8b:f5:
                    ec:2b:31:46:eb:87:34:03:b3:f5:81:b3:a2:e6:27:
                    5b:c4:77:34:23:4c:ba:c9:c7:a5:b5:c6:72:ee:7a:
                    14:eb:33:f6:c4:d7:86:a3:3c:ff:d6:02:ac:a0:24:
                    45:71:c1:e6:ac:92:a8:dc:f9:25:6f:fa:61:69:0f:
                    7b:16:6f:4c:93:1f:56:26:b3:78:a5:90:19:17:cf:
                    b5:c9:b5:e5:99:ed:d1:5b:6b:e3:40:06:17:a5:59:
                    9b:7f:e2:5a:70:07:d0:21:bb:ad:06:24:0b:ee:af:
                    c8:0b:03:07:5e:83:c7:83:70:80:d1:90:92:e7:98:
                    87:74:af:3a:e8:23:eb:3f:f0:0b:96:45:05:a4:b9:
                    23:12:c9:5e:f7:fe:9a:fa:51:b9:a8:e6:c3:64:44:
                    66:d1:73:d3:50:a2:b3:93:75:b3:a2:5a:95:be:5d:
                    06:bc:5d:51:83:c2:eb:c8:0a:cd:0f:0b:78:b7:0a:
                    ed:5b:8e:50:6b:9f:fc:58:6e:5c:e6:72:f3:ef:64:
                    f7:6b:24:3a:87:94:22:10:9c:f7:da:9b:26:2a:16:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:38:1B:5C:1F:DF:83:FE:49:A3:3B:54:B4:96:06:41:D9:85:E7:61
            X509v3 Authority Key Identifier:
                keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:39:c7:e0:40:79:b1:81:54:ac:c5:a8:ee:92:46:37:3f:7a:
         85:15:88:07:6c:7b:58:77:23:37:32:db:18:e1:87:3e:a9:ec:
         a7:ef:f7:38:11:55:22:13:b5:f6:ba:63:95:cb:61:d5:4f:d1:
         39:ae:48:fb:20:ea:66:d6:c0:ef:4c:13:38:7e:2b:31:80:b2:
         e3:44:1b:1e:52:15:e9:f6:4a:45:3c:fb:43:03:05:cc:3a:c7:
         f0:82:c3:ce:b5:5f:d2:da:59:73:ae:89:4a:5b:c5:63:38:ca:
         c6:2a:02:f7:24:32:4b:60:e0:17:57:8a:3d:4f:dc:a6:5a:88:
         d5:6e:09:d4:74:59:4c:7d:1b:b7:0c:0f:9e:88:0c:c9:43:62:
         28:f6:b9:3a:73:0e:c3:d3:49:5b:be:e9:2f:43:7f:16:39:d3:
         e3:f5:2c:e1:fc:b2:b7:a3:da:08:1f:25:b9:d9:71:39:ec:4b:
         c0:e8:8a:4e:a9:f8:0c:e9:01:dc:be:0b:55:15:44:40:4c:c8:
         40:4b:00:60:2d:86:42:3b:a4:66:c5:a1:20:81:db:02:8d:3a:
         4c:e8:9d:b2:01:75:dd:49:65:25:31:3c:d2:ad:0c:09:f1:f1:
         c8:d4:a2:e8:c2:ec:e3:31:49:23:28:9c:26:1e:96:8c:07:38:
         c9:3c:ba:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6xuyKJOAsHvrFCkSKcL4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj
NjNlMjQwHhcNMjUxMjIwMDgwMTEzWhcNMjUxMjIxMDgwMTEzWjAzMTEwLwYDVQQD
EyhhOTM4MWI1YzFmZGY4M2ZlNDlhMzNiNTRiNDk2MDY0MWQ5ODVlNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOJEaqljCvnMS6lfy3LOlkUO7KCr
6AMmJMNbeWDvJqIZPuPtDuyDLtYGi/XsKzFG64c0A7P1gbOi5idbxHc0I0y6ycel
tcZy7noU6zP2xNeGozz/1gKsoCRFccHmrJKo3Pklb/phaQ97Fm9Mkx9WJrN4pZAZ
F8+1ybXlme3RW2vjQAYXpVmbf+JacAfQIbutBiQL7q/ICwMHXoPHg3CA0ZCS55iH
dK866CPrP/ALlkUFpLkjEsle9/6a+lG5qObDZERm0XPTUKKzk3WzolqVvl0GvF1R
g8LryArNDwt4twrtW45Qa5/8WG5c5nLz72T3ayQ6h5QiEJz32psmKhYvJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKk4G1wf34P+SaM7VLSWBkHZhedhMB8GA1UdIwQY
MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt
MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3
LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjnH4EB5
sYFUrMWo7pJGNz96hRWIB2x7WHcjNzLbGOGHPqnsp+/3OBFVIhO19rpjlcth1U/R
Oa5I+yDqZtbA70wTOH4rMYCy40QbHlIV6fZKRTz7QwMFzDrH8ILDzrVf0tpZc66J
SlvFYzjKxioC9yQyS2DgF1eKPU/cplqI1W4J1HRZTH0btwwPnogMyUNiKPa5OnMO
w9NJW77pL0N/FjnT4/Us4fyyt6PaCB8ludlxOexLwOiKTqn4DOkB3L4LVRVEQEzI
QEsAYC2GQjukZsWhIIHbAo06TOidsgF13UllJTE80q0MCfHxyNSi6MLs4zFJIyic
Jh6WjAc4yTy6cQ==
-----END CERTIFICATE-----