This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File:                     l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier:          wkML0dfMi0K+AY8wW/FZ3uUMw4gKQYMBZuvsmmfLpyE=
Subject key identifier:   E5:F1:37:F4:24:71:C9:91:A5:F2:CE:51:4B:22:61:81:FF:F2:82:1B
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       019BFCF87AD939AB1BE37FA4D07C4B3834C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number:          15E6
Signing time:             Tue 27 Jan 2026 01:01:41 +0000
Manifest this update:     Tue 27 Jan 2026 01:01:41 +0000
Manifest next update:     Wed 28 Jan 2026 01:01:41 +0000
Files and hashes:         1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=)
                          2: A_tEVik7EkSJhTC7T2FJIfD4hWE.asa (hash: 68EPop8TjMmm4peaii/vw95NHeqqlpJpXRJzZBSJs7g=)
                          3: DdZL2Ei2USqI1D8JQatISOxbCY0.roa (hash: A+x4OgPFDFV1yfcXqtt93yKXONOhfjjQIV2HOaMfwnQ=)
                          4: H2Gc0qKN46gAjUldVFBNpV93Xk4.asa (hash: KSarBkAjc6GXQsV+kmM1pcYpqDoYggEF4OpcfqU5XxI=)
                          5: HOso74W1VokYtKvyq7cUzsjtneE.asa (hash: XkgHTIUgOHbFT9e9eq8+M1TVv1ndaqq7zAajOmv3wN8=)
                          6: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=)
                          7: RatTcANG4U3IM7MOV2hXua2pFMs.asa (hash: USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=)
                          8: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=)
                          9: b-VQSWuLpLV93gdEDV9Lftl-uXw.asa (hash: Em1YerFm1QMulEXhz/0NYeLEV5IMD8Fh+85COdjHx64=)
                          10: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=)
                          11: cszYTkQVDcY76z8Av8ncweFdHcQ.asa (hash: xNxgKjmWZqB0F8LoHh9M3iOQxo1YlNVcpRWSs0jkU1w=)
                          12: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (hash: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII=)
                          13: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=)
                          14: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: Wh2pu8PCQY3rwGcOzSzxBgItu825v2wkaRfyf0yt5a4=)
                          15: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=)
                          16: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=)
                          17: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=)
                          18: zdQE3nljteAvytR7FrZorPU0jyc.asa (hash: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:f8:7a:d9:39:ab:1b:e3:7f:a4:d0:7c:4b:38:34:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: Jan 27 01:01:41 2026 GMT
            Not After : Jan 28 01:01:41 2026 GMT
        Subject: CN=e5f137f42471c991a5f2ce514b226181fff2821b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:96:fa:2a:ae:a3:3c:58:f7:3a:1e:36:47:45:
                    86:62:2a:9a:de:71:6c:47:db:6e:37:c3:de:ca:10:
                    0e:38:0f:6e:6b:ce:97:13:c4:46:0b:d9:3e:ca:75:
                    4b:55:df:a2:f1:5e:37:7c:ed:45:08:a0:6e:aa:49:
                    79:bf:b9:fe:e0:ca:c2:31:cb:f0:dc:a1:50:1c:e3:
                    1a:4c:e3:4e:cb:73:17:45:8b:71:86:c9:4e:36:e7:
                    ad:40:0f:a7:dd:a0:3b:86:c8:08:dc:17:1b:54:f5:
                    89:2b:7f:52:6b:25:75:0c:6f:26:65:0c:63:60:aa:
                    5d:09:69:33:e3:08:c4:23:0d:0a:81:78:92:f0:3d:
                    25:20:d8:69:1e:b3:f6:08:2f:e0:33:48:cb:0d:99:
                    03:c6:45:96:3b:0a:bc:86:e6:2b:13:05:bc:2c:6b:
                    f4:f8:3e:23:5e:2b:5a:d5:6a:37:07:19:d1:a6:66:
                    a0:9a:d1:75:10:89:47:70:7e:cb:2e:77:75:4d:7a:
                    2d:47:cd:ba:60:7e:fc:93:6b:7e:7b:69:ed:fb:28:
                    84:d4:b0:66:4a:3f:98:05:bd:be:d8:f9:c6:c1:0c:
                    d7:50:60:4e:17:3c:d6:7c:d7:ba:27:45:eb:59:f8:
                    23:00:7d:33:c1:60:d6:f1:88:b2:30:9f:9e:1e:d0:
                    4a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F1:37:F4:24:71:C9:91:A5:F2:CE:51:4B:22:61:81:FF:F2:82:1B
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7e:69:c5:6f:d0:9b:fd:ce:79:ec:d7:09:9a:02:08:84:3b:
         a7:37:7f:b3:f4:5f:94:53:07:3e:cc:6c:f5:49:48:b4:e8:c0:
         ae:70:5e:87:05:2d:0e:aa:79:74:62:b0:36:51:8c:fb:51:83:
         b8:d8:83:9b:d0:a8:2b:ac:a4:51:26:b7:a5:c3:3f:ee:ce:ea:
         81:6e:1e:7c:f3:1a:a3:71:06:19:bb:1e:e8:12:c3:7e:e5:19:
         da:6a:32:0c:76:96:c3:b7:a1:8a:09:65:da:a6:c0:2a:6d:fb:
         9a:16:72:1f:f8:87:11:bd:e0:79:79:91:2b:af:6b:d4:59:24:
         f8:b6:e4:90:d3:3e:aa:75:d9:e9:00:d9:09:37:df:1d:4c:5d:
         ab:d8:bc:41:52:5e:7e:12:c7:2e:c7:a8:e0:11:ed:a3:36:cf:
         74:46:a1:03:73:66:d5:01:c4:93:58:ab:75:62:a6:b2:7c:a4:
         39:10:29:76:ac:07:66:f5:5e:0a:58:6d:9c:54:43:98:55:5b:
         a3:5a:d1:d1:c3:62:76:19:97:6d:2e:d2:fb:77:7b:32:1b:ce:
         a0:b7:d3:4f:fc:f8:a7:e8:af:92:0e:65:cb:f4:06:74:56:cd:
         71:8e:35:90:18:62:39:c1:ee:3e:7e:88:1d:af:d2:52:e5:3f:
         8c:00:40:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8+HrZOasb43+k0HxLODTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi
NjMwYmYwHhcNMjYwMTI3MDEwMTQxWhcNMjYwMTI4MDEwMTQxWjAzMTEwLwYDVQQD
EyhlNWYxMzdmNDI0NzFjOTkxYTVmMmNlNTE0YjIyNjE4MWZmZjI4MjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Jb6Kq6jPFj3Oh42R0WGYiqa3nFs
R9tuN8PeyhAOOA9ua86XE8RGC9k+ynVLVd+i8V43fO1FCKBuqkl5v7n+4MrCMcvw
3KFQHOMaTONOy3MXRYtxhslONuetQA+n3aA7hsgI3BcbVPWJK39SayV1DG8mZQxj
YKpdCWkz4wjEIw0KgXiS8D0lINhpHrP2CC/gM0jLDZkDxkWWOwq8huYrEwW8LGv0
+D4jXita1Wo3BxnRpmagmtF1EIlHcH7LLnd1TXotR826YH78k2t+e2nt+yiE1LBm
Sj+YBb2+2PnGwQzXUGBOFzzWfNe6J0XrWfgjAH0zwWDW8YiyMJ+eHtBK8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXxN/QkccmRpfLOUUsiYYH/8oIbMB8GA1UdIwQY
MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt
MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy
LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOH5pxW/Q
m/3OeezXCZoCCIQ7pzd/s/RflFMHPsxs9UlItOjArnBehwUtDqp5dGKwNlGM+1GD
uNiDm9CoK6ykUSa3pcM/7s7qgW4efPMao3EGGbse6BLDfuUZ2moyDHaWw7ehigll
2qbAKm37mhZyH/iHEb3geXmRK69r1Fkk+LbkkNM+qnXZ6QDZCTffHUxdq9i8QVJe
fhLHLseo4BHtozbPdEahA3Nm1QHEk1irdWKmsnykORApdqwHZvVeClhtnFRDmFVb
o1rR0cNidhmXbS7S+3d7MhvOoLfTT/z4p+ivkg5ly/QGdFbNcY41kBhiOcHuPn6I
Ha/SUuU/jABA8w==
-----END CERTIFICATE-----
Generated at Tue Jan 27 07:17:24 2026 by rpki-client