This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
File:                     C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json)
Hash identifier:          bevMOpUu4akMMva2GEzlZKO4qV/KkIGXHOgaYrYZ/EY=
Subject key identifier:   DE:E3:F5:48:91:BD:E7:DA:BC:73:45:71:EF:14:9D:0C:82:2B:61:A0
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Certificate issuer:       /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial:       019BDF251E2E6086CF5CA34E8C50002F5D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
Manifest number:          04DC
Signing time:             Wed 21 Jan 2026 06:01:50 +0000
Manifest this update:     Wed 21 Jan 2026 06:01:50 +0000
Manifest next update:     Thu 22 Jan 2026 06:01:50 +0000
Files and hashes:         1: 0rhF20B9J0l57DDXD5PI3Mlgck4.roa (hash: IsJTlAtlEK1wuKb/L+IEKig4AE4TBarY7Xe4bFwDMpI=)
                          2: 6A7Z4yaWiKfLJS4IZp2FohYa6Uw.roa (hash: YhYHdgtyXLrN6UK3gca5g/ETRBRMUucTWNMNaEy2z0k=)
                          3: 7M34N_8c18kwYN5DXzfuwEhrmZA.roa (hash: ldXuTTIrM9/cmADJD+iI7DaLo5yereXOVCE9PkpSmcA=)
                          4: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: /uM/i5Iv6yamR+VFgSEXUKwMqrVBjPRYq/swGcvZIxA=)
                          5: CX2-XqJbgxFtfbz1ZXOm-VfI4xk.roa (hash: zBpyaivrS8dLO7I1EYJl3tAX+exEI6hLkdP3m9an98o=)
                          6: CZDKIGwWhnI-INEGACnwv7AgaTg.roa (hash: dVa9P5hdVe5LY0y46KggHZSlq4Z8c9qXOpPcVSps3Is=)
                          7: CyAy99lvFfxEeefYC3YDjAbci7s.roa (hash: kbK1HAU7102mQpjWbsfSJZ2xs2+GlLtaq/XWg70vXxc=)
                          8: EqprGk5kowrimby1Je14qsse7Lo.roa (hash: LFHwUVenT9McibVbW2ZQmoL89oEmwzTC9qG4B4kc9jc=)
                          9: G3HN66IsyUqcyb4IdBzNqnOqqc0.roa (hash: sDJ2LPZQc8/0xG/uRBZ6QNwDRUd4YGJewkn7EWmexdg=)
                          10: GQ8G8-7vI6X_9ipMuVEkqHZe5E4.roa (hash: Q4GuX3aVEvIlMgK5veVPusvhLwaRKg/Xs093or8mHOo=)
                          11: JZWlbgGs77-K_lBvMrRD_aczpko.roa (hash: 7WDxDeue9uY3onqd6ZcYQ+v+RK9TTwQALQaKXD0UqfQ=)
                          12: KsFOJDttqy_VpUv2R0gz7Gxx5hY.roa (hash: YswPe/O5Azk6ROeO91VP12JoIIylqp2zfZQX3SqmIMA=)
                          13: LVNDdtLYnujMWbq0swLbShC0Y-g.roa (hash: 8HctQXfZBPB92/kv8TD0DdrdmIMzx8hg2wfACFjK79k=)
                          14: M-2rME5iw6DM-f47-QFFb7VzGFU.roa (hash: vtu0N2tgrIN8s3d7nrEfJQ8SnAhHAVxXwjju8rnYHgE=)
                          15: MWV90LWxUa-WUsz9LX9npKKVr3c.roa (hash: VJ3UQ6OcyZGRtcoJAmyUvcMKs1qQ6scCd0up5rRWI+s=)
                          16: MwvZOBj0s4qjbTXNydp_HEWBFGg.roa (hash: H3cu739yBXQz+abiITzDIfyl+CQIjQK1P9/7W80OXIc=)
                          17: NUC_LFMe2cNtzU5aCrIgV-H-cMA.roa (hash: NpATbiFrt9IYp6v1R73idi7OcNugJKN3KPoGaMp8IYk=)
                          18: NfntwoXD_O0scdxf60MFJ4QAEsM.roa (hash: fJxzALYVA6cDE1yHGT4WjIHIwKWY+JaHack97oaMMaY=)
                          19: QrZBpVrINYvtt8eQ3BUierAVaEo.roa (hash: otF3M+RO1u8J3AFXZCe+jAflY8Wg53WcaWXyGwSEsJ4=)
                          20: T9HYPrCqI1Lwx1ICx4gg3y9EaPs.roa (hash: 8WBx6rryQFW8qB2gn0UcoHoZSKFuIQe/bNKvBOdNkz0=)
                          21: TskIBboLcFBuqPn_MOgE03hfzQA.roa (hash: mdOwXyGLiZ3kiLeepuX9bG0ElkLvweofxQqMwNHkNZM=)
                          22: UJpCXx5oIh9hc9g8auJXqdNaBpc.roa (hash: zfnC57zmuYkrC5OEiIWpUIW8D69Vc8CmCbVPonz5g+A=)
                          23: ZLUEmByOiobrhmfNh__npJOjTZI.roa (hash: jsI1IQp+AglclYgjL62S68CLg27R4VrCqoouYs5JfJI=)
                          24: ZrBNPjEycZrANxNyVIzzzbkmbro.roa (hash: xRKEM4Adn5RZtYpllrg5Vg4AZHQgUo0g7tJdnV0uOgQ=)
                          25: _ryzMmjmSU7ZGAZCZXgl3zhi790.roa (hash: bcxS6uMI7fATL0M6h1j5zg3SrS8sl6NPvR5jNoM7/MA=)
                          26: adYPWxXEK-EyO-cYHcJ3jz8xmTk.roa (hash: 1Kwboaf94lcPqOMax8VtYSaq7bYuJ9QQ+t9XDkOoZZ8=)
                          27: bXvQDzztgR20YUmWOPJv3-d7kbs.roa (hash: Yu03wDPl98lP1gZjiDY9V7dBNvUsvmd/sPZMcHPqSFo=)
                          28: c--NfYyQ6E-hR59TJgivWxwrXVM.roa (hash: tL2NGDcvc+5rAS2b+OMbEZsDoupyJSLpPH625LDD0s8=)
                          29: dAQ6Yalce-mSw3JzJGnHTG3anHQ.roa (hash: 2mIrdQ1ciiXVimVbz20GsghWRPI8l/oYrrPopxaFDQg=)
                          30: ggAlU2FvvMVt8QnyY4zRaT2PLhk.roa (hash: SC4t7+i4rHmGw8cE2pQbNtpAxChfBbrVKnQs9mBdyuU=)
                          31: hZx6c939vE298FUQwwkrOAv6B6Q.roa (hash: LSd/7r0KJ4VgUY7Gw3QL0WCTt5PCLASbfDO+3RvzeGc=)
                          32: knNwFqOSUSmwnzIGTZTBkXny7vM.roa (hash: Xuq/XGETEu+nAPlO71gTOdaRVSzyfoQNkrNuyE5V+lc=)
                          33: n1rxwfyEu4ovtxs-PIPRbHD7WkE.roa (hash: I78sxSB0+1+LczQU4FM6Dhvmm31U8fYmSaTLfz+uB/Q=)
                          34: t1u2Kj146HTOnxMMmEJaATvs5Ig.roa (hash: QYOvdX36IlpkGRO8V/ydJ2DD58WF5UuPoJ4HyYXbCMo=)
                          35: t7vqBSGhovS4012cVOMWJBs1sqw.roa (hash: /XopIYi0JbnszG1jIAU2dDD3+WTYzo0tSbwoFenxjUc=)
                          36: xTZJJpGpeUxMY5LeQXBMUN19dnA.roa (hash: HbnsCO3ZsmJagmIfOuDUR7M7F04yDmonV5hrdy2TpFM=)
                          37: zB1uc6k_qAdWt66X8InqZqHDntM.roa (hash: hWYMua5mstmbOSm8yc4WQRkHL7pc/tOGsprl+gVmDkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 06:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:df:25:1e:2e:60:86:cf:5c:a3:4e:8c:50:00:2f:5d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
        Validity
            Not Before: Jan 21 06:01:50 2026 GMT
            Not After : Jan 22 06:01:50 2026 GMT
        Subject: CN=dee3f54891bde7dabc734571ef149d0c822b61a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:19:ae:f2:4b:d0:40:8b:e5:bb:dd:b4:4e:
                    91:5c:ce:dc:dc:0d:48:0d:26:2f:74:10:8c:56:8b:
                    70:2c:63:0d:a2:01:b3:f2:6a:7e:2a:34:7d:73:39:
                    48:10:53:06:22:62:e0:33:a2:ea:ab:d4:7d:77:57:
                    09:e8:99:7c:99:10:94:1c:7a:03:30:cc:8e:9e:71:
                    5d:ba:48:8b:18:ca:e7:e3:16:c2:58:84:30:d6:47:
                    b8:a6:9a:19:d4:ad:7c:56:be:25:cf:ab:97:91:67:
                    7c:c9:e9:6f:6a:6f:f5:e3:4f:29:28:ad:3c:88:ac:
                    a0:88:1f:fa:b2:71:ff:8d:b2:7b:e8:b2:87:3d:0a:
                    b6:75:b3:d7:0c:16:67:95:80:48:5d:89:95:85:ea:
                    de:2c:1c:57:3c:a3:7a:e8:eb:9e:bb:91:6e:93:78:
                    ca:6f:f7:20:de:4f:7e:55:14:be:8c:92:c4:d5:55:
                    db:83:5e:f5:db:d6:7d:1a:6e:74:6e:42:f7:e6:09:
                    e1:01:6d:82:15:7f:e0:89:6a:32:bf:f8:ba:fa:f2:
                    da:33:80:f8:b1:03:52:f6:55:2a:71:df:a1:ef:6f:
                    d6:3d:8e:90:48:b8:15:96:ec:5a:f0:f6:e8:60:15:
                    af:d9:95:ba:75:e8:a1:a1:00:aa:38:1a:dc:f1:36:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E3:F5:48:91:BD:E7:DA:BC:73:45:71:EF:14:9D:0C:82:2B:61:A0
            X509v3 Authority Key Identifier:
                keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bd:ae:c9:09:3d:d4:d9:be:ce:25:08:af:7d:84:83:69:36:
         ac:1b:e3:4e:bd:3a:3d:c2:1e:ed:e2:58:89:41:9f:90:27:3f:
         5d:11:42:d0:85:a5:e0:90:d6:c9:7c:84:06:84:7b:e9:ee:9d:
         55:06:2f:13:ae:69:8d:5c:26:14:76:8d:d1:86:ce:3b:a9:67:
         92:17:98:f2:82:aa:5c:81:21:24:0a:7b:25:62:bc:83:98:5a:
         78:59:20:b5:ff:fa:82:6a:40:26:1d:a1:6c:30:5d:7e:bf:70:
         70:df:1d:81:5b:c5:72:9d:01:dc:99:4c:5b:47:a8:4d:90:f7:
         41:da:42:5b:4d:e5:2a:3c:a3:ee:b0:5d:c1:bf:84:5b:d0:14:
         1f:bb:16:8c:e4:9b:56:36:13:6f:fe:c5:e3:d0:64:ba:7e:46:
         15:ed:54:ca:f6:c8:a3:e7:85:96:2a:5b:0e:8c:4b:20:ff:bc:
         0a:57:46:de:2b:f8:1c:ad:87:5b:84:05:a6:84:20:0b:b7:1c:
         70:ec:05:f5:21:f5:d5:79:33:0d:60:8f:8d:7a:d5:eb:db:33:
         8e:d6:61:20:a7:63:53:c7:19:33:06:96:95:d1:35:38:9b:3f:
         01:2a:3a:db:a4:58:26:42:82:50:f3:96:b1:53:9c:44:3d:58:
         41:99:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:10:10 2026 by rpki-client