This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File:                     Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier:          6qt8L1qZnOX+A1v1lpC4vBbNo34bpuFWlVFxn9MP1SI=
Subject key identifier:   24:44:18:D5:1F:8F:4B:4C:E2:19:0E:68:91:6D:3E:36:34:1A:0E:59
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       019C0F6C7C77946313B8C8D1D6201548437D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number:          0C1E
Signing time:             Fri 30 Jan 2026 15:01:33 +0000
Manifest this update:     Fri 30 Jan 2026 15:01:33 +0000
Manifest next update:     Sat 31 Jan 2026 15:01:33 +0000
Files and hashes:         1: 0SKuPZPHgx0DuZsSA5jf1vAaZOQ.roa (hash: oJFIU8Cu0N2S9/wG/IfXoDuZ2TzeSG92c58fXMAz65w=)
                          2: 1WFcAkubK0j9tuvoOEpKw8rrMZc.roa (hash: US4FVafwO24GeaH/vI2owb0qrhh125+5+tzixj9zkLg=)
                          3: 4YDvutSU0UmPrwnDFoLiKufwEY8.roa (hash: zJVa6p9/6hu2WbxRpiJdGV1n058lDV+uyqxwOAwNowA=)
                          4: 4hgz4QMM31Dnzsk16v76ApMHw1Q.roa (hash: uTIYHBVMNL1a8dqc59Xavlk6v2XFQUwkIp5IXWbQIxQ=)
                          5: 6CzQRMn6GnwsVxYiA_23IYKMeoo.roa (hash: yTq5lptLiZc3PV2A2cnpwYQvB925u7nVJPs/y3zGz+4=)
                          6: 7H2mFDg6qfXpVYnxbXn0fEFWELs.roa (hash: J9Hxga4uilgUHWboi+rXmCtEsrXocnGU8yxF/NAwyo4=)
                          7: 7xz9ZtbXj7qhOrWl1asjKBlzz1o.roa (hash: al7m3r3hlQECrtwI9lRqdu9jwLTy7M0zSKzMUXGbBvQ=)
                          8: 8c8fo4MttyJv5SLRbDdRYu1xnic.roa (hash: 1vjbMqaT77+AxTSiKxSoxcqnrNY36Cpct9YPE7m/ttQ=)
                          9: 8cSFy7Ko1nag59SAcofvgS4Nnmg.roa (hash: IveoawDTw5t/FsiNYzrV2ir2XqSXTfIr+SxjBonLcNI=)
                          10: 93Dd5LlqoQp6iKYdx6lcOcDR9oc.roa (hash: AJlYL2EFP/0kQaoDXjXnYGJqco+B4D+CiQvUKCb/WIw=)
                          11: 9w8n7TtHePHsLOfepkD5dQlDWpY.roa (hash: QNQ16n2FmGQi82u0p2e9PUzGlGzw6yfmOHXwlBjHsbQ=)
                          12: DPy9szbNMOQKof88htrB5gYXHg8.roa (hash: KpMcLwZt2U9k9KODAobx45vqz6G1VYYTX/rJeTqqTFA=)
                          13: HcULhPVBvVigoye4t6FA-KQWO9w.roa (hash: hAIwfnXvBlSldAfdYYWFGxIbO3wQO108WhCVpchVN6Y=)
                          14: LwRV0I5aAABSv2rkP0tPW4FRNzs.roa (hash: koEQn+aNjm6TSUwuZfgQBvNwwQjzXH0iVoRIHsH/lmI=)
                          15: Om-Yq1ZGRM1IIUjBT3G8r_WH3vI.roa (hash: NbN2DC3J+/IORMxUWXp73u1pYhmDVgIteGSJjaWkIyM=)
                          16: OwtGWChxCNtRyJj6ElbibxId-aQ.roa (hash: ka/36kkAkjg2s/fwE4e37YvaQAs87ErAmYuEuoZciXg=)
                          17: PCm2Il224mWbxHMgp2-whFWp5Y8.roa (hash: li5I0uPh7E9cKNVsRWXspiiKnjbCYQjxIQb8POSntgc=)
                          18: PCzr-8pfKu6Wr6hFTTQ8eQU8TPI.roa (hash: UsJVbDBJ3BYi/wLg7BLlATz/hycpIsDhQ1LAnNbDRWA=)
                          19: QJmnWjrF5SckYqXHMQVWx6L7kxc.roa (hash: ZzvvSvqGh3FCeEYQX83Fju97+ka1cm0UIM/Bcb7Vjew=)
                          20: RUng57NMoW7ac1B2TzLtvUsBHXs.roa (hash: bXdd060UNM819brDZVY/MNr90jZYyXFvlUoD/+9CalA=)
                          21: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: HJdqQqxtvIl+mt1pOxrzElGn1HG3w6O7jED2IqdzDIQ=)
                          22: TDJgGMkZLrZ81GbvZCeAhhBMKFY.roa (hash: 6e5HzejThUKP+KfqmBRD2KB/4LGOct53fiIiefsSVx0=)
                          23: Un_KUA4UW3mBwqWIrQ2hRgrwqJ8.roa (hash: H+8IU6Ec/C7W0gUzGWdPCX/2d2iav4ezOCEab5gRvr0=)
                          24: W_BCOjmAdkWfODZ7bvZ_1VEo820.roa (hash: aAqSVSwbC6esRzER14YmpKx6m+Lo1g184jMJRY9Bonc=)
                          25: Wx6ujnx5V9SmWdGZ7fl6JX-A-ik.roa (hash: myAFROxX49mA8li5Tx07MgNtYqh4WpPg6VTHZGCCys8=)
                          26: Y9-xxrcFnsxDZauuv568t-PFy6A.roa (hash: xIyIZR1hVpjqPtioz/biAZM6H7ey8FMbjIcIVI3aaQQ=)
                          27: _F5w43RHV6dx3R_wQAV5wzUAHzc.roa (hash: BxgPa91m82H9cRlL0aKlQX+98I+Jq5YFGlS8SucX+mo=)
                          28: _IfucW-In1l5Fz3tjcTrBT7FS9I.roa (hash: 0d3RCOf/PgnlqbIN8XSmRiR9HJQfbIKvyOIHy7stdzo=)
                          29: djSIdX2gTX0MCxSL5llsn6i5hhM.roa (hash: fcqxImDjDHGTSuae1yCoZlPJZwU1d5hw+ezJF6PZbRg=)
                          30: eIpleKuOfZq1bPfCT2L77KdKRYg.roa (hash: czjz3eTpWUJaPaJtmnQVcyeyF+Dq4AtmQioUJnZMjK8=)
                          31: eSFc-jrx02A_dWByF1qGRiDKKWw.roa (hash: I6Kx+g6HRJvl92E2ZUTTlvthedWJjMU1Cjwr0YGI0s8=)
                          32: e_F7Xbi0XqAy8Omhy8vQyDQa9No.roa (hash: oE2eMUbGUqjLN7domDF+Is0SbYEsjgkb9FJzi5XwtZw=)
                          33: eiaI1-hJNAgrmp0gE_umAxWn1sI.roa (hash: 0+nXI30Kx9KhbtXb4L+JY50O7XiXe8UjeNblohyYrj0=)
                          34: epL-6pVwzhIEf7qPG0idZwvRAaU.roa (hash: PUOL+WHkVofoMPu8K9ZuIn3mIvtNQi0EbJERGXzRSaU=)
                          35: epUEByvctUQFdD6x8uykLVw28K4.roa (hash: mbKHV+YI3RW2KrL8/aMhBlFmfvhswGZcacqDnNW/6l8=)
                          36: g5P1CePj7Ig3Woj5axzABAMb-Fs.roa (hash: /SHldXpCq9rbN+oRz89QqyP1fUqetjOkr2DsYsUd4t8=)
                          37: h-GPzjeo3pqIKqWAgrNe1kVp3Xw.roa (hash: VkUy1q7rwk/bJY0kmudHR01ERlqKVDpha+69blCqd7w=)
                          38: lapBDQIlIdDm8E4XnEd-bMW2ILQ.roa (hash: MgQdaG1666kHidH2vRjUNtiAJVGqpfkJRhC7xtWbkDs=)
                          39: ljJZC2hEpJ5Azrtf0iqlzINfN74.roa (hash: 5Q5VXrZNXtx66LR6yEa6nurEugsz3hLaJZcfv1xig+w=)
                          40: oBbHZskBgePxfPA6yXAa9qsZaJ4.roa (hash: HMrh2dCkL1N2+YwCmiHFoho2RWsT9N7Z2PNHtiVeXho=)
                          41: ou98WwPXDlrEW3eM0KZKlXxPjU0.roa (hash: e6aNXSypQBdMmCLoYi3x6Uu9rY0X9chBD/3LiPy1/5c=)
                          42: p8Afz0hXr_5silmw3LjpZ3x1GfM.asa (hash: 5OPpwFJMorWxPyS59iXBcUhwjWueAreQnRw6UYRc7Ag=)
                          43: pcwBdWeogQWKGBKaJvlkeUygt1Y.roa (hash: FyjOSrsEYcBQx6MNH4viXYO5bDrfzFXdgEpostcNkrE=)
                          44: sMjP0DwIRUv_f7qQQgRGf3HaTWA.roa (hash: DgS24JG1c/l8UCWAl1zW8utqR4YjdbEUYY2s38b7VVE=)
                          45: siv7eihEdKW_ap7AUDG7_39jUmI.roa (hash: WFYLo+dkgFW4+MbeoyoZaYOFmKk3TOwdJdQSzSoQ9SE=)
                          46: tbVX_nBTaE5VNov1rsfXFt2f7SU.roa (hash: rfYnZjKJQ0wuXUnU3TmEpEijE4Fpnxn/YL0Ur1YiogQ=)
                          47: urL4Mc4DykB_e6TYmMEoYhi2954.roa (hash: gfx7b8/If2mHd3qPOzceO0clF1lE+PE3Ji80UoFnGp0=)
                          48: v28XBIDcOIWawnqoBUd5lqyUYxk.roa (hash: WxydDKnqf++ZAuoc5GMUeeHtdm5DstgCBzp6r96AGOg=)
                          49: xRZUDhx7ihJfUObQvwoPd_wjCIE.roa (hash: CaizEiyOxtBDcQtuUG7hvPJywCQ5SLbLXz2o0r0E2ec=)
                          50: ySNwW6swWEy9g206lS3TF8Hot7Y.roa (hash: 2G2m7gXWJPeDJ1CaSCcPPIj5TE8F3VNFo+mX4zQe6WU=)
                          51: za88ND0OSXOKBDkHlXDSgAc0j-o.roa (hash: 3SNDrnhjIHUyQtYp1P1Obkb/xEBrgav3aCIr/q2YN6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0f:6c:7c:77:94:63:13:b8:c8:d1:d6:20:15:48:43:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Jan 30 15:01:33 2026 GMT
            Not After : Jan 31 15:01:33 2026 GMT
        Subject: CN=244418d51f8f4b4ce2190e68916d3e36341a0e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5d:38:c1:5e:98:dd:3c:9b:0e:0f:28:f6:01:
                    e8:1b:32:9e:53:33:2e:c9:8b:81:65:aa:a7:bb:ce:
                    e5:12:f8:34:89:bc:84:66:a8:d2:8e:96:05:7a:2e:
                    fb:33:cd:11:04:a8:a4:77:b9:28:1b:c0:b1:eb:b5:
                    f8:18:2d:e0:f6:c2:5c:f8:e0:2a:57:b8:8d:f1:9e:
                    c9:2b:4e:b2:e2:ed:89:22:c7:05:f9:36:91:0d:01:
                    43:dc:0e:3b:a8:cb:46:c8:77:39:4f:e8:a6:19:15:
                    4e:4c:12:6e:8b:3b:35:a0:39:8a:0b:99:6c:a3:26:
                    5d:9d:46:31:ba:10:a0:c6:88:ce:b4:dc:42:ab:8d:
                    a2:c2:d0:08:1b:f4:69:58:6d:76:da:ce:b5:32:9a:
                    6d:ed:5c:cc:32:db:47:7e:19:38:79:03:2b:a9:8d:
                    f5:f8:b3:b9:ef:32:bb:51:4f:71:1d:78:8f:df:1a:
                    c8:7d:27:83:0b:8c:ae:45:14:ea:b9:69:63:ed:eb:
                    24:0e:4f:61:87:37:7c:64:21:75:35:50:36:3b:f2:
                    f6:ce:c7:21:9b:fc:6a:75:d4:f3:8f:22:da:a6:0d:
                    d8:d3:a2:6c:69:d8:87:cd:c1:9e:c0:ba:bb:8d:e0:
                    59:34:aa:1a:db:d1:8a:71:04:7c:d3:12:a6:7f:9b:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:44:18:D5:1F:8F:4B:4C:E2:19:0E:68:91:6D:3E:36:34:1A:0E:59
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:47:ff:8d:f9:84:b4:50:7e:bd:3a:0e:19:10:c9:a4:66:
         bb:a4:3a:2b:dd:f2:fd:9e:1e:3f:49:15:96:db:ad:36:82:e5:
         a2:6b:98:29:71:27:f8:e5:40:3c:46:31:c6:b0:b7:18:9f:fa:
         27:98:c9:7a:eb:d6:ee:bd:66:bb:6b:2c:78:3d:af:de:27:48:
         2e:4b:96:b4:1a:19:cf:b7:fa:63:64:da:a5:1d:82:66:92:6d:
         0f:19:ae:d8:e0:14:a2:c8:70:86:06:3c:86:74:90:e3:2f:fe:
         ea:dc:c8:98:ae:46:78:9d:1e:e5:bc:b8:80:9e:76:65:3d:c9:
         44:ea:82:ad:9f:0e:42:7a:1d:78:cf:a6:06:54:c4:2b:2a:96:
         c9:a6:3a:dc:75:15:5f:7f:59:88:98:15:5f:51:d1:2a:d9:7d:
         27:c6:62:76:ce:45:46:43:1d:56:f5:a6:72:a0:80:b0:61:a3:
         97:dd:1f:88:52:72:43:3e:81:ac:32:62:76:35:1e:15:ea:5b:
         b0:75:91:bb:3f:ae:16:50:65:a7:b4:a5:64:ef:48:03:5a:be:
         cd:ba:19:63:08:4b:52:27:ce:33:57:8b:53:01:52:c6:75:08:
         fe:db:df:28:3c:44:8d:39:70:f3:17:7f:98:6b:e3:02:df:6a:
         db:78:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----