This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          ANpanwbnOmMLDQgivDkYeVHH0yQeEKj0mnzNNiHcyys=
Subject key identifier:   B6:AC:D0:5A:E0:B3:82:1F:B9:2C:72:1C:6F:BB:33:A3:58:77:23:F3
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       019BE06DBFFECB0D9F2AB82592E3191BB059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          0C15
Signing time:             Wed 21 Jan 2026 12:00:47 +0000
Manifest this update:     Wed 21 Jan 2026 12:00:47 +0000
Manifest next update:     Thu 22 Jan 2026 12:00:47 +0000
Files and hashes:         1: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (hash: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI=)
                          2: 1xyHsYNUFoJ-pAioaST7r-4iNoY.roa (hash: wxDqW3rd3N4FjlubcyoVvj1qY2eHpaWt4iZm04KnwmU=)
                          3: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (hash: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo=)
                          4: ArZg-qm8lEntEril04_eQVh-D58.roa (hash: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU=)
                          5: B7mKkJOQIDMNFDDRLxnggLv2QZ0.roa (hash: Mi1l3jAauhlk+iIu6HPrxpd0H99Ta8USVmSJWxkvFOc=)
                          6: FcpBxzBs-mUGpJZGFFeEKOoVc84.roa (hash: DdKbCIauyMh+ERMZDyRdDWbQHa/GNAQTeKFJAN9XkKI=)
                          7: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: DH9TCfqiSX+BfijEy9ualE3tOEmKAaQAyDZy46dxq8M=)
                          8: HEBMMFCN8-2lBFekdiQRcYWnvrg.roa (hash: snCaNhSPR2tWzl8KWki9lG1jT29WpUoT1k50wbz95JE=)
                          9: IPb5d35plrMJG2iIT309KL2lmj0.roa (hash: KRvF/nchRUjNO7qEjTuRMT/eoA6wApPgVHaxY0nL3kc=)
                          10: O7Gej2bS_5hKcBi8mcz3JmNEOSw.roa (hash: h9gK6E3GHEkt+S79YiKfgPJlXrJcrfRQGLu5O6pt61U=)
                          11: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (hash: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg=)
                          12: TzcrPtQyygSQdE_9ZpW0U258FWA.roa (hash: XHB179G1NkuoxHUDA2RIeIaiHXV5LoFis8B7rN9rC4w=)
                          13: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (hash: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg=)
                          14: gp1wlgGo5vivn7gfDRwXZtwctws.roa (hash: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E=)
                          15: h-YKHLBpdlMPlGTD2x8ny3EBvoE.roa (hash: kaocMh2GRL2VpSQbIazDPnOu2/38Foo0BooOmaJVLx8=)
                          16: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (hash: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY=)
                          17: jTk2ghaEMDC7CYJ_QaO8Kuls2VI.roa (hash: wXuTm3VvMxF7Fy+o/HgTRq0XIiaxh+LU1Nqi3XYzQ+w=)
                          18: la8gZB1qceC66CXnaIMpn1d6kfk.roa (hash: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4=)
                          19: rpVmcRWK9Zhy_VaIn_bvOzXSQ6k.roa (hash: ZuY1ZDdDENsieUHmA5f7BeysqfqkQXy2jQwGzKSjHsE=)
                          20: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (hash: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ=)
                          21: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (hash: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw=)
                          22: xJPb4f4rCehz8TLUSv0N6n8_MiE.roa (hash: MEW0AHLyPDoZAygBiCZTzYIaCJijNL4VVMa21hRooaY=)
                          23: zrpx2qONMlsehUMBf0ui700KaQs.roa (hash: rQCz92YTBiLjMsPmrkI3y1kzmH/U/hqwcfTTPZ9f40I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:6d:bf:fe:cb:0d:9f:2a:b8:25:92:e3:19:1b:b0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Jan 21 12:00:47 2026 GMT
            Not After : Jan 22 12:00:47 2026 GMT
        Subject: CN=b6acd05ae0b3821fb92c721c6fbb33a3587723f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:43:4a:af:88:1d:25:be:c5:a8:ed:20:1d:
                    c6:b9:a1:13:22:1c:3c:c7:de:57:6c:af:aa:ce:ca:
                    ca:03:41:4c:78:ea:bd:88:06:12:31:3c:7d:87:29:
                    c4:b8:42:1e:13:c5:2c:be:b1:32:05:66:1d:22:77:
                    02:6b:cc:be:21:e7:22:7f:82:a1:a6:d8:de:d2:17:
                    1f:cc:68:75:8f:10:b4:6e:6b:26:7d:89:7c:e6:26:
                    b8:a7:e9:2f:15:83:c4:33:5d:21:4b:d3:7d:74:e2:
                    79:ad:8f:83:5a:3f:99:2b:b2:62:1c:99:76:ab:1d:
                    61:16:5d:1c:48:fc:65:f6:a6:a6:91:67:af:a1:51:
                    84:04:5f:92:a8:58:3a:aa:10:0c:60:b8:f4:13:82:
                    50:32:7f:fd:20:71:d1:f5:35:88:c8:7f:24:cf:f2:
                    f6:e9:56:2b:b9:9c:66:4d:28:63:4d:45:86:8e:c3:
                    a1:c0:62:44:9c:00:b6:31:44:47:e3:bd:e7:c8:99:
                    1c:6e:08:4f:4a:4a:9d:5c:83:51:b4:5f:e5:52:dc:
                    93:5b:5c:4b:ca:c7:30:b2:81:ce:fb:45:6d:ba:14:
                    40:c0:bf:5b:0d:f8:d1:de:2b:af:4e:47:cf:32:7a:
                    2d:d4:d3:50:ab:45:a1:e5:30:e9:fe:67:d6:d7:96:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AC:D0:5A:E0:B3:82:1F:B9:2C:72:1C:6F:BB:33:A3:58:77:23:F3
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d2:81:bf:d7:46:ee:84:de:f6:22:e3:ef:26:cd:36:4e:05:
         79:b9:fc:e6:71:51:83:f0:e5:87:2c:2c:43:e0:53:11:04:77:
         68:31:8c:08:31:c8:ae:1b:be:c8:ef:c5:a1:89:a6:dc:ad:dd:
         97:bb:02:ad:55:af:9d:72:4e:12:ac:27:56:a3:40:52:1e:e2:
         93:85:49:67:50:77:87:a5:86:a7:2e:1e:12:80:db:89:22:c7:
         04:b2:c5:98:9d:f7:8e:ff:9e:cc:f4:ec:89:3a:6a:17:21:99:
         92:15:d0:e3:9a:15:8c:16:07:dd:77:8d:2d:23:59:a4:4f:a1:
         47:1c:66:7e:5f:c4:fb:e8:8d:2c:63:fb:ce:03:93:dd:83:13:
         11:90:12:1c:72:3a:cd:e1:e7:d2:37:88:b5:39:9b:7f:51:69:
         35:50:95:6d:9f:c6:d7:36:a7:1a:b2:f7:bf:bf:8e:75:33:d9:
         71:9f:86:f6:cd:a7:88:d0:a2:c3:52:44:f5:f4:7e:7d:c5:0a:
         dc:f0:36:16:bd:50:a6:b2:d8:b5:d8:db:0d:4b:58:55:9d:12:
         40:20:43:f1:7d:c9:5b:e2:41:19:32:d6:2c:f6:1e:13:50:dd:
         17:cd:ae:f5:a5:2f:61:6b:74:1e:26:3c:81:40:91:24:1b:5d:
         c5:eb:7d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:00:36 2026 by rpki-client