This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
File:                     TxQRLQXp2HYUnSd41I7aqjJNsKU.mft (raw, json)
Hash identifier:          3F8bfLl1a392Je8GydZ0W2U2AvXnJ8iJ0h7fbe7jP8I=
Subject key identifier:   04:93:7C:39:0C:E4:29:7F:DC:17:6F:3F:4D:A4:D7:F5:20:CB:DF:E6
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Certificate issuer:       /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial:       019BA1585C0022F3DCFBAB66863F1CEC379F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
Manifest number:          0AF2
Signing time:             Fri 09 Jan 2026 06:01:21 +0000
Manifest this update:     Fri 09 Jan 2026 06:01:21 +0000
Manifest next update:     Sat 10 Jan 2026 06:01:21 +0000
Files and hashes:         1: 1-3LZTEM0QeXlSWqpl-HShHsIpVg.roa (hash: Evo3h/Pref3pdTbiLRZns73z53q9WdlBpkAMaAvjsXQ=)
                          2: 3DC3kA6UpmGM3vUF15dvR1WNU24.roa (hash: bjns9AS5EKsgQlEUmAtovJpzNvMiGaM8W70y83exwDI=)
                          3: 3x8TbvtiuyCCqwuRqRJt63Eo_T0.roa (hash: kqIE8wf8LyGCyMr3ZW0b4tfq3V6yEIG3kLXi4uzXh08=)
                          4: 5W2yb0OTfr9uG0K_7DoW2_cp1fw.roa (hash: HItHiIMYtUNAKPJMroY3n9Q5dWaMLwwCORj1H4dodTI=)
                          5: 5p39TzNva2fnukXiYTOi-WQsdt4.roa (hash: TqDE+K5J4PgrKn0fAJgonURof5uxNWtro4QkZRRn1u8=)
                          6: 5vbGg1Xd22kLoWkxE-dExm6oaEM.roa (hash: Dpx34ONkkIDaVDagsCOTYK6cpPo0FTuJD0Kq1/5ewS0=)
                          7: 622jRVtwPhpwD9-lnyq9_mNkf9c.roa (hash: VLNc8YNmd0tu2Sp9JmeiUl8K/tZHbshmjGVWO9/Za8Y=)
                          8: 6dMncFxQ28-OzrSnRQJ1TsVhND4.roa (hash: A68BUnhZ2xp9jUeO2irY7vVRJ631W595Ogs1VPXnIiE=)
                          9: AzWehDl7hMVZSWyCpzCKVhG-94s.roa (hash: b83llwwDkcmO3eQefVARED+Y+AJ9nVbGytFniAACB94=)
                          10: BO8dksxb0UodsO941FmkndmDLrY.roa (hash: xRNTvmbX4mp3w5WS3nDttGaMxkSovUGGgIr0ecjOpag=)
                          11: DDdPvQ1-Zf2JUiDbzilsq5VWBDE.roa (hash: tu0mtsIeHr6xE2TAIhODxsQSnUfnxT+eLMkTQUaYwBY=)
                          12: DhUWeTD-XesEK0T1t7CcHgwZ-qg.roa (hash: ecff1GkMpn3ppfoBRosqF+QfsEsA07PpDKRTbJe018g=)
                          13: DkBgdHllLtaqpYXM-pvAef56JHY.roa (hash: tReyGStF+T4CVIKvmr7roP5yPhn13IvflNhWsJRhH6U=)
                          14: E6fg-FRtbKjFdn_unKTvTmZlXrQ.roa (hash: Sws1f/Om8n8a1Jn5U5oxhq8SEjBi2ZDPEl6OxahJH+Y=)
                          15: EDzOHvmgTp08ldhQC-7NBJuc5ps.roa (hash: RMpYBSlCbn1ExN4Baj2KgV3K1G/S0WCWXcm4SV/nTZA=)
                          16: EI-zrFST5hJnLBKDsxbsxc9S1w4.roa (hash: BlEwUvBSHYaYNb6xRzqKzC+DV8mSOKIdhmyEaHSeK6U=)
                          17: FBk5pvxocUnBx1R4fbxkMB5MN_M.roa (hash: RT0cUoD0F9HrC6Vnps+dNqOGf4JgSOfGMGYclvYXYBM=)
                          18: FCTAEpKosOVpnz_as_a6hW-vIEo.roa (hash: ceaY89VUsKMnjFtTHlz8NXIznaIC3GxC+vrM3A0S8Dc=)
                          19: Fjb-HLvqlGF0AN_O-A-GypeK7k8.roa (hash: FrPvHJWUZZzjMc1mhFtGSE6Mzsiu8fm8R+VB3RU1QZI=)
                          20: G9sDf9byfP-xIE0JrM4gcDTLusQ.roa (hash: wPtxo4SM20u3zc+gzf0hMpHMoaS8f0x78jXKfdDu4jk=)
                          21: IK9JbGwU_5OZ6FRgqAX6_xTKqek.roa (hash: pNfeA6OcLlvCvqXtplaX7lmN0HS19Wmgk/DEiFXtwOk=)
                          22: Izh1jH-eCVPGHaGjk3oCaRVcc6M.roa (hash: QkzkU0pkazcOWH9eciznS4uSLSkCh72j7AC1tqS+tK0=)
                          23: JJDPAskgUp2o2RpHKBF_CXroQLU.roa (hash: wdXFLxjEchT+58QLxNy3o9YWuwMcllorgBcJ37PiQWk=)
                          24: JuoiXl-zRXAF496Ph0s49z2FfBI.roa (hash: ezVuZmW881esuXICCa62I3vICBg9QHmRlBTzKyNpAFU=)
                          25: KHZ8aGd302KoSSPL_LPeiAmkwL4.roa (hash: x9TS06F9vVNyxAX9DeaKkkKfNNqsCnk4+pMjiScPXlQ=)
                          26: LedjmSRgd505IlMpWgqfKJRuEfs.roa (hash: aDpi1xD4UKYwpZ0U/JKYw4GcU9dqYxS8ccngs1oZdAs=)
                          27: LrCK0JNUB76KNtayOBkJ_dMifq8.roa (hash: QKvainYCr7djj3WCpdc5H4lJSPbUdIxikL2By9WSzzI=)
                          28: M11YDFyrrYAd20Im6jGVu-ZOEvs.roa (hash: nVTujTyk3hQyLUDNlAZDSu6fdniPAQJJNIW4jwxsnao=)
                          29: N5eRhzaeXlaEdJCyahfeMReXjV8.roa (hash: TCjuzElfdgti9pHcNAyHXYbNtKEYQgsENoGt75fBiA4=)
                          30: OdJJJkl_HyfDmTQV3KiZi3U8pXQ.roa (hash: o+RtwIxP+Mu7q1NdauSn3jMUeb6RmDj/Sl3v2mbppNE=)
                          31: QEiBKonEr0WMCMOfSrB_OWXiV2k.roa (hash: ATH9it6DQN25bd4ch/xqYxeTa8CfLwql6RGUAiLiWUA=)
                          32: QTwzzHohzZXtCev6GOQlH9AGXD4.roa (hash: 6wskNGBQ/KitO6IQVhrGA1LcyCUybdJv0Z00G25dcZM=)
                          33: Qu3Pum48VdyvamOYmyxpoA_xROI.roa (hash: 6lyjY2Y6SP5zzn6hVW/axYG2De9/GlBczFh4kmbFhhk=)
                          34: R3RDukJR0K6JC535ubkvmZkECrI.roa (hash: RyxC7ZdYj1JaiX+19XjvlREg3zHIivy1NWr1iap7sPI=)
                          35: RqNUzG5sVFgFhuXPz7phymCGBA8.roa (hash: BBcdtA9J6ILEoTYTtmSgspvQrQomna0Sar91C49wrPE=)
                          36: T8GaoE_DfQxcmm8WRlIfPhfk4EE.roa (hash: s7LvpGLjlfBNskeakGMH4QxOyFZBzZlTRwutqQXw8kQ=)
                          37: TsptNEOD2Wo0fVUqRpVwb_IktVU.roa (hash: 4DhfBdFfNZRkVgzUv82HoGY4p+PD1z9JUAGkFdPoArw=)
                          38: TxQRLQXp2HYUnSd41I7aqjJNsKU.crl (hash: I/e8fnsz2SpGeDOhpk4rACcJ/XhGGtUQ2I2S5wREtxw=)
                          39: Va6qgIICFLDDF-ldcp5oWQQn4Vc.roa (hash: V4RX79zYKPSWwkwL9WVK/v8sSSJ7303++Zn/yokgB8I=)
                          40: WI8JgSCZLHCL652joWkrWjzQORs.roa (hash: /BTJz8XvNdCruB8rGDg2zdl17z7E5xGPXsbQYwwUZjk=)
                          41: XqiRKaxBcNOZ6QrHfX2W_Daq8Jw.roa (hash: 9D1n2hS3XYjGY8GXXjerV9UuVCCe8aNpStKNFnwOrUc=)
                          42: _uw0u0maco_nT-qa0wrJJ9cCMaI.roa (hash: x1uzvfVKcoaLqunDUHywWJYEJF4EP54BKoqoiEdGyFk=)
                          43: ed-QcUr_hrRymrWRSLgcvYJz4FM.roa (hash: +1p18MTDfpVwGg+VuWUHhkr0c+kNyhl9Gs+jca1Vgx0=)
                          44: f9g6N-WN_LcuxwAVaQ5bJGz37Oo.roa (hash: zqCA1Kr6wR/xX4NYkfULL7DZa5hzAD9bYNPkklFNyzM=)
                          45: gPHVWaeKPuEaFASQpgPrARmdxD8.roa (hash: +vqro98N/pK4eYrxS4F0/SyXskx3EWjlAyarn4vrWYY=)
                          46: jYY-Tx5FLXwpnK6YvUJO98-X3H4.roa (hash: GiKHc9U3BSxL//MBFXfSv8EvjlpbfHl1wrK+Nnyt7yw=)
                          47: m8ID0gB2vpvaO0SqfOivDD6e-8Q.roa (hash: WOi6Lhxlm92bLPsxSuGyD5YQk0k4RFLyGTk9VGtyTMo=)
                          48: oRUZd3qfTPtV41gwBYIJYCDAy8M.roa (hash: EqJaiQQj26ddeFzY+g/7spAHgO86ZrQN/y0utB+gpgE=)
                          49: pbVVbu7JpESGKwzwia8ElZawHzc.roa (hash: uwCj+dSGBZ2ykQrbSisEPQ/BUimib2qcNZ07ThL9wbg=)
                          50: qMndKwMJzTR8aJXanNwSQJhSGPY.roa (hash: sGlomNIGgryvARhdDU6wj96UzT1VM2wK2Eig8ZM+e2o=)
                          51: umqGo5i2AYsiLk7r0R_uIeSqz6U.roa (hash: 2rk2hR71hY5JXFbTbQNYvli+OW1yUTXX6ihJlNq9qQw=)
                          52: wPJoX9mg9Rx23I8rtqbOPCLPc8I.roa (hash: l3l2Mdm57FIasg7/uh5sV1g7I+HzMew/LcAZyRbJPd4=)
                          53: xEEpxssTUACNtxcJWa-lEFPF94A.roa (hash: qd5bjqc8/7RByV9KuR4O2AGi0iofsxfAscJuS3BP9PA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a1:58:5c:00:22:f3:dc:fb:ab:66:86:3f:1c:ec:37:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
        Validity
            Not Before: Jan  9 06:01:21 2026 GMT
            Not After : Jan 10 06:01:21 2026 GMT
        Subject: CN=04937c390ce4297fdc176f3f4da4d7f520cbdfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:85:61:44:fb:b6:5f:29:92:21:42:40:a8:60:
                    51:8b:3f:c1:59:f4:3e:ea:00:4f:7c:a0:fb:21:11:
                    11:0d:51:47:0b:1b:77:66:f7:22:62:35:98:6b:df:
                    bc:ba:ae:05:13:8c:43:a5:6a:bc:6b:92:79:fa:83:
                    eb:7e:97:e3:d8:29:e4:66:29:d9:91:38:9a:ca:08:
                    cf:0e:8a:8f:11:87:8e:43:f2:ad:66:ee:76:e2:42:
                    a2:7c:22:6a:2b:68:9d:f8:42:6b:b0:ef:11:e9:bf:
                    c1:8c:84:d9:35:c3:92:1b:44:9b:27:d8:fb:13:87:
                    24:0f:2b:51:96:08:22:e1:10:d5:2b:39:80:2c:05:
                    2d:10:85:21:90:e1:de:b5:d5:8e:44:64:9e:9f:f4:
                    de:30:4f:67:f3:fd:46:60:70:b7:d6:99:02:0a:3d:
                    bd:29:60:0f:a7:26:8d:00:bc:25:73:13:53:e6:5e:
                    63:bf:3d:bc:d9:23:9f:de:0b:93:f9:93:51:f8:35:
                    66:94:ac:cf:56:5e:d9:e1:1b:33:35:1b:8a:24:9c:
                    9c:69:c2:28:2b:ab:65:33:14:79:d9:6e:ff:12:c8:
                    23:2e:e0:54:53:36:07:82:c6:7d:6c:66:22:8a:a5:
                    6c:dc:31:a4:29:d7:bf:41:0a:f9:01:24:e4:6e:b8:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:93:7C:39:0C:E4:29:7F:DC:17:6F:3F:4D:A4:D7:F5:20:CB:DF:E6
            X509v3 Authority Key Identifier:
                keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:f5:6b:4a:41:5e:34:a3:85:5c:be:02:ff:c9:c9:c2:8e:df:
         1f:5b:2c:a9:10:ec:42:e6:94:1f:3d:d3:d2:fd:a3:bf:57:55:
         f2:d5:10:0b:b2:64:da:99:b6:08:d9:9c:0b:64:57:39:3b:cd:
         87:5e:30:f8:7a:f3:19:9f:b4:44:18:12:22:16:28:59:a8:37:
         a7:58:7f:df:56:7f:d9:33:1a:d4:ac:45:89:53:d4:20:b6:90:
         cf:cf:db:38:24:34:e2:12:d7:bc:53:42:6b:86:47:32:78:c0:
         3b:da:71:3d:14:23:ce:c8:2b:b9:79:c0:ea:04:ba:86:ce:d3:
         0b:f2:73:38:45:47:d6:72:07:f9:61:ba:8f:dd:25:b7:8c:b2:
         f4:92:06:71:55:49:d1:97:f8:ea:59:88:40:17:60:57:0f:07:
         60:93:71:96:f3:02:da:38:41:f3:a6:03:11:b7:2f:7f:08:22:
         e3:57:84:73:8a:30:49:63:be:65:1f:b2:20:3f:ef:8f:58:e7:
         1e:ad:c3:b4:bd:4d:c0:e8:9d:3c:bc:cf:36:e4:a9:33:16:de:
         eb:7c:84:5d:1c:72:c9:fa:69:1b:e4:b5:ae:08:87:9b:68:65:
         13:00:ba:28:f9:6c:4d:81:c4:ea:f9:a3:7d:96:8f:44:3e:57:
         42:c1:3e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 11:31:55 2026 by rpki-client