This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          7srwcqAgSne3E68gT+b1/nRl4eSSVFaDv54/4L9uugc=
Subject key identifier:   FD:92:EB:F1:4A:99:51:B9:74:01:98:30:31:36:FA:1D:03:5B:AE:BD
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019BD7A219EC24793EBEFE1920AD376598CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          15FE
Signing time:             Mon 19 Jan 2026 19:01:23 +0000
Manifest this update:     Mon 19 Jan 2026 19:01:23 +0000
Manifest next update:     Tue 20 Jan 2026 19:01:23 +0000
Files and hashes:         1: 0KkzjJoUdmms8Cy-yXghKss_oLA.roa (hash: mgQUcNbwY7ms0YRzjkNyKBa0aaFMe997jnsK2dIjNiQ=)
                          2: 3fsO2B5vgNbgc1ylzCjmk4YwFY4.roa (hash: pH/jmnyRRRJWz/5uh87gHrIOJvcbi1U0X4XzPOTDOiU=)
                          3: 5UvdzILVHJWE0eYDXOH064SrAyc.roa (hash: pPOponYaHvS1hb6FWYB+9p4o/T0YW4X1pjbXTgk4m6I=)
                          4: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (hash: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno=)
                          5: 93YoVMIY7ylmcQEL3cvEgJj4oGw.roa (hash: ANftHE+2A3C6m0fWjR7K8HCo16o35LQbSpULE7tNKFI=)
                          6: CqxYYMvpUa_dBJO7-VsFWkXi0c8.roa (hash: +f6zrEF5HXbMRilxh7AXmSoErsjgcFAhD5nPlVuC2xo=)
                          7: DK1XJlLvGIlABfg3yMSUd-Eb7bI.roa (hash: VdJ4I4lgQaQqewChk8pQg1jLmRqjBk/Zm6SiIEvD6QU=)
                          8: EFI7XXeZ17ZBffn-Wfvsz9LcbO8.roa (hash: EbS1EZ23bqhn/fD3NbB82R2Gx/DZplinJXkjF/CHl78=)
                          9: EQ-EfFO_ZBBj99VscFnVb4fq07A.roa (hash: DY7PoRA98xpOY2HaDNBjw4bCPlr72zs8Ed5OmX/GYQk=)
                          10: FkspHalIwIkZCKpbSC02h5C66Zo.roa (hash: Akg2umi4Fv2YwTSn0H7MJVr1BR1ZOgtwB6Lgwj9jITc=)
                          11: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (hash: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk=)
                          12: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: eQpjWYf4GKqlQZLOHJqwgoK5yhPH3Am5MAvXin4HgOs=)
                          13: LmuTg5dDspbqRPTBIWwdfeiT78w.roa (hash: Sl44BhbHkcXiSVufKgwHC3fpJYG2caWsavUOUcQMMRY=)
                          14: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (hash: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8=)
                          15: OQtpXprjxRHSnuDGtbFRD3pTl94.roa (hash: tpn+zzvg1QWooSRqE2MLkFA+bMlho6X8Maf1/MfavB4=)
                          16: PUYBt3EvzWm6QM2OI0SM1D5m1qY.roa (hash: tkkFt1Gf0WZmv2nn4kPhqy9uMCNjjS6CTqfk578Y+hc=)
                          17: PvTMLSeb_nWvqEst2_x8g8RXxJQ.roa (hash: fvgJnmbIAKrjW+FiS4cGgxRqVaHYeBYKIzFTp6TGMiY=)
                          18: QUdCUlUsoCyZqN5f-O915_8oVao.roa (hash: JDFDPqp4VJZLhoSwLZjwMNZ+atwdl24icRpAGMXNUYQ=)
                          19: QzSn7_MvD-krfzVQr82060hV_uI.roa (hash: 6BxiAS1MqQVVxcupc1s9IZHFBYfQSIKRY5kWLrhudOY=)
                          20: SJrSIkNkCVFe6nfB0uQO_MeAu5Y.roa (hash: F5YlyVH6nJJVWDdy+znUqiWaL4/wtjIJh3etV+AoVuA=)
                          21: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (hash: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214=)
                          22: X1QUPUOF4tV54plhF2_u5LSjURI.roa (hash: clnxlY4CuaOzSpARYUZerQTWC9Y8i99sNzE5VhkafSQ=)
                          23: X6bKafUHkhkpou4OCxL8fuWQRK4.roa (hash: WoLzQ8S7RBA73Yq2Vk2wSQeggqTkifN1MdLrz3kjqRM=)
                          24: YhJKl7AH9KvyQ9rlDo_0amk0ptk.roa (hash: PIyIy62ey151jJrTV3rH4pTgvt8halTI4IYk/dvJ1HU=)
                          25: Z0AdFl_CwyfMQZLv3ZoD_aLvzkc.roa (hash: K3NNVdFjKnNzHLIoQrzWu15fZZcASrLzQF5r6/PQDHM=)
                          26: ZdCdDiaVYNNGWHk2giMF7Jc4Psc.roa (hash: dUO7JtaFhT894/XBSf1WeNvB2B7nOAigDkpa6ed99xk=)
                          27: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (hash: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4=)
                          28: bRCoZlZEjsn19N8iwX7NKYJdRec.roa (hash: I2feAPuCgVuFJtjAk2KKGQzm8rIoyJnoWIWWnGv1SZs=)
                          29: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (hash: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg=)
                          30: c_j3yg5BcCKfjWJSyLhPsoCl8fo.roa (hash: weVyx7PM+QIce0xZCK8Hvkau7tg9BgiipAufz6BRHN4=)
                          31: fDvTCb65T0NBgfyYMw8klNFzoZc.roa (hash: iBd2cBxyy2dAUeAKty88sfgipeeadpR8WNmR7CuYLUc=)
                          32: fVCgve75g5R98_-xURrB2xygaQo.roa (hash: 52RGA6SelKNk+dolsvrzXHbR/GGI/H7RTi0a7BsEzdA=)
                          33: f_FM5aYYFD8ySbs3-yt5otduaRM.roa (hash: lIl1eF0+KnIkUbSdLUIqNysQ5npLcyCf9ozlvmFKa8A=)
                          34: hG2m9zhj2oAi1CZYuqKEfm2OJwE.roa (hash: IvuSOBxaQjHsxy41UzNEtvNVsu+Q1Fkvr9KK8SxpSjQ=)
                          35: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (hash: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I=)
                          36: i_jDxQlns2GJJCWhsafnRSJG5lY.roa (hash: vKYc/VcYUEue/nd2jqUZ9dCra3lK9N+8hJAZzreyVfw=)
                          37: jlKOUasUa3u-JFxkn5nWNnzfPhQ.roa (hash: O/0o4/opctywwuKVoo/Apk7Kdx6pGh1wrVruR7K1RrM=)
                          38: kXw_F87vDYBM8LWj0kizss8a-Yc.roa (hash: 14DcTz8/BNnOXOqnb9wBGiZL6rOUzYIXPVXxKDQ+Oag=)
                          39: nwRskVFO7jVpgv0FgU_I-l_JL24.roa (hash: jE2BzVrznI2L2o690JEPpHV4meuzDSDEB31wOas8YwE=)
                          40: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (hash: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s=)
                          41: p40iuKxiw3-sHAL9jxdUpNkkeD4.roa (hash: uEdVEgA7C9Cn43awEqryuYQCQHKWlCvT8PCH2NnfOgc=)
                          42: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (hash: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A=)
                          43: vHJI_V1koWk_BvwK1njfPWWkxqM.roa (hash: jwRcQRvR6Az+iXcPkGYLsjnX2xgKxhjx3qipCyzt+oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d7:a2:19:ec:24:79:3e:be:fe:19:20:ad:37:65:98:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Jan 19 19:01:23 2026 GMT
            Not After : Jan 20 19:01:23 2026 GMT
        Subject: CN=fd92ebf14a9951b9740198303136fa1d035baebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:88:99:3f:d3:72:4a:23:7a:81:f9:82:be:
                    aa:a1:58:5d:fd:d1:0c:78:fb:d7:9f:88:0b:e1:9b:
                    d9:87:81:a9:b5:86:7a:97:da:2d:ed:28:3c:a4:6c:
                    bc:a2:4d:5e:60:76:a0:05:97:a1:dd:da:33:de:3c:
                    de:ea:d9:22:d8:af:e3:54:b0:15:26:cc:ec:8e:7f:
                    9d:52:b1:b5:f4:58:82:ac:d3:19:22:5e:1d:75:fb:
                    4b:b5:5d:2a:69:c8:db:6d:e2:be:46:e1:5a:68:47:
                    38:5c:bb:36:c0:4c:2c:d7:37:dc:93:5a:82:f2:8c:
                    d4:e7:88:54:7f:05:cf:e4:aa:ec:cf:aa:6f:a8:09:
                    24:69:24:e4:7d:05:fe:d3:82:da:c4:f2:28:9f:60:
                    ac:8d:0b:0a:6d:90:ee:dc:8f:0e:95:68:17:97:f0:
                    81:ad:ed:f5:38:7c:76:fe:d8:10:4f:09:e3:aa:3f:
                    7f:92:08:54:98:0c:e0:05:e5:27:3c:cd:d7:8c:2d:
                    ae:cb:18:98:94:98:9a:33:10:09:4e:75:51:2a:d8:
                    21:ee:e0:ac:bb:41:de:71:df:5e:b6:6c:7d:4d:81:
                    6d:0b:d6:20:43:25:3e:e4:df:a6:a2:1d:0b:03:d7:
                    e4:86:04:e5:e5:62:0d:3a:af:04:93:42:49:4e:e0:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:92:EB:F1:4A:99:51:B9:74:01:98:30:31:36:FA:1D:03:5B:AE:BD
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f3:86:fc:b6:b0:f2:ea:8f:7c:9f:c9:c3:db:28:be:9b:7f:
         09:10:72:50:da:cd:85:f4:40:ae:d2:d4:45:58:71:32:7e:a3:
         1c:52:90:e9:0a:bb:a5:20:f2:d8:57:06:0f:73:ac:2f:63:8b:
         aa:a5:70:53:46:1a:88:33:4d:c2:31:10:f5:e0:00:66:95:e6:
         7f:98:89:87:63:45:b5:e5:40:69:0a:ab:b9:cd:6c:d8:aa:09:
         3d:d2:c3:0c:fc:69:54:9b:ec:78:f5:c7:61:75:9d:ff:46:01:
         b3:60:82:b4:42:6b:f4:68:33:bb:7d:f8:71:f9:23:15:58:83:
         fc:ce:2e:bf:a3:a9:42:fb:a4:6e:a0:9f:8f:51:e5:c3:00:0f:
         d2:d1:c1:18:b2:5a:7e:77:72:be:8d:c2:3a:13:9e:7f:3e:1a:
         23:36:b6:6f:8b:9e:9e:68:8a:cf:a0:b1:c1:f8:e6:7d:b3:39:
         d5:66:f9:f5:98:11:33:01:ac:53:95:43:f4:c4:33:c9:8b:a7:
         b9:25:36:00:cf:3c:c6:f5:36:1f:0f:52:96:56:b5:62:3e:e9:
         bb:ec:89:5b:be:5c:64:d6:68:fc:79:a7:0c:df:50:23:42:b1:
         bb:2e:2d:77:cd:b9:4a:29:c8:f7:1f:01:81:ee:db:a5:5f:9c:
         ce:0f:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:00:15 2026 by rpki-client