This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
File:                     v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json)
Hash identifier:          rFEp2RNp2g3WtPEdLhf3PbbNXorwPCgC7zWOg+mXJBw=
Subject key identifier:   D6:18:92:0D:63:43:F7:9E:CD:EE:3D:ED:C7:BF:BD:E8:D5:08:FF:52
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Certificate issuer:       /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial:       019BDE11DE7FABE0A82482181D3D2D88EE08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
Manifest number:          14A3
Signing time:             Wed 21 Jan 2026 01:01:11 +0000
Manifest this update:     Wed 21 Jan 2026 01:01:11 +0000
Manifest next update:     Thu 22 Jan 2026 01:01:11 +0000
Files and hashes:         1: 0kXS2WjCCmGHS0asFcjHjq0ESdA.roa (hash: NcRJslp6Cst9ywqKbBrXM4eKGnOe3QAwekOYiXZ066c=)
                          2: 2j9VUbHTcDA1b90rifQ58Inn2f8.roa (hash: Lgs88tbxXG61dcN+ofeHaAXMJYWju9945L7ezP0hATg=)
                          3: 35-RC4YDZpErq0qZEtlrtSl4SMw.roa (hash: FOYizqXKHMLapyQGMwFyEz9qVvs69XW13Uh469YQNIU=)
                          4: 3Ye3xRBKt2yjTYFdIHKyVc2s6PE.roa (hash: oezTDWmK3WHr002ir1Ptu9iTniHZPY5ga3z38ge9bZ0=)
                          5: 5ydN7m0EV0XPPM7hhtoPeHHLVX8.roa (hash: gqBf1pgqFhh7rC/j0y4ZMSZVouaA/LSU94XZbddNY9U=)
                          6: 81eHHbv2rPJYI93isZ476W6B7zM.roa (hash: rilqDOE3ousOR3KDCOC0oQFrfowQVUhBVFfyKLTOWP8=)
                          7: EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa (hash: 5I3dde4Z0pGqorT+Es4EH70Wh9X5Be4WVxahJvSkgLw=)
                          8: J1a1Sf8sCSoFu29heJeSu7Y_gBg.roa (hash: QVYHX56w9P4lNMlTgCpotmWMy2RCR/bz3vm88VxlYRk=)
                          9: JFQGAOGdlBoIozV3Kg-vDWtfVao.roa (hash: Z1+P9csIB0WjKmg8chhTuD4xrRsrTBYnir8esGAQC6M=)
                          10: K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa (hash: 4AJJT3KGPCqJR4OBHfMLmZzKwbu+xSqi/JOf68BFrzw=)
                          11: Lnwh91F-Y3oGbzapesKSQKh5khY.roa (hash: fViq177JlHqZD4IZxEVipAykPN+uot8OXNoz0m9fnZk=)
                          12: MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa (hash: 0v7DpVyOb9ZenfEj+uZlG8WAK7SkWOmPeuDGZI04ctc=)
                          13: MorRi-vslYP9hnHqziII34LBIfw.roa (hash: CIMjlR7v2eM4nTZ1oFVRk9hQ2LQU98LPD9awiwz9zSM=)
                          14: Nq8PoFO8FLqJKOQgUZV2jF5UqZI.roa (hash: oUSIvk6c2wK0Ghd3NBd+GqAzgT8NlNIUgVJ3tPrMvmw=)
                          15: PY9DCNlwLD7ejVBXpUKsZjzW_qs.roa (hash: WsUPkIgFvWT/RRRySu92Di42VU11w6gI/VSIsfWKIOw=)
                          16: PhoOeARfKz43CH2Oxv0MjSWRe_A.roa (hash: Y13i/Rsbc8Mu3++DPIgSQIrWVJySh+6kie5zdNCvv1s=)
                          17: WZWGYo1-x5iiMmTQB8f7pscBQ5Q.roa (hash: IhIWhgnItgwnoOUYHAHgKAbDJ1m2IH1w4DFw6ZTXRMU=)
                          18: YFKE_2_y1TuWr9IZX6ehzMIJwQw.roa (hash: frhzV5oZPaW+5HEAEtK0fcMNCl6GJAvLM0KbJvhre70=)
                          19: _eLosOoEd8yDU_N8Qvcrlr44u1s.roa (hash: 7dNJprnXNblqOmi4KvjwoY4AaJL/D5R6qT8hf0u15fk=)
                          20: a5rLSoc8xep_3EFrBqKONw5BV9g.roa (hash: wgRuAEEqRo/PsbK5uE/DgJQuGCNr2HxH/clUxs7bOKg=)
                          21: cxZr5WeEEoSi7bJFnkDYNQkLsRI.roa (hash: ohg/2w/+ciG+gSkKwemx/D24YI9eJ3bhnC/JUnNespU=)
                          22: dS2Ew5TyZLKBb0t_vYeqxiQO914.roa (hash: 18YsiLmffOrQgrZYM/cJ3pecwTIq4UqOgR0InUb+7Dg=)
                          23: e4QufroyVWdWI18YSP-xE5y8nsQ.roa (hash: D8HQMrEwK3oNuQ0az3Yjngy1UMsE6uMPy+4eRKXzeeY=)
                          24: f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa (hash: YnhL3R6TQw9jOlB6ezNd4A83xIKsm64Z7pwt9aESzIw=)
                          25: fRtALlJ0nNQI9-pQ_-VUmgfvyPA.roa (hash: YMK7JCMFleT3cdvAbWrw7szd/wGp+4EJrd0iiHOFdYE=)
                          26: gWgAGHArAQssrrGXIRyn4VHTFXU.roa (hash: B6SPcVHep6hBRDtoMqsctR3R17FHDgKNs8lCIVE2720=)
                          27: hAT6y915VSkQC4qoBvBKOJ1u2x4.roa (hash: GJlH71N2PjMEPIaWcmF1Ia3pgXKWnWw9eHvlamX8RaE=)
                          28: lnIWKuH9_Xj6iXnCaTEv-E3_2PA.roa (hash: O9/yt4Tff0A42sm3r+4IQVcRNeLSXvNozIpYDFnhUhI=)
                          29: r7ByOLP3MeukbZSE4fAZ0_Bq3eo.roa (hash: iX2pbv1iuv/av89qGOeBay93zJ5dvcN9GC/EDL+toP4=)
                          30: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: VPJkoJc6E/kHzhgltxaD9FAGMhHukel4uiRzoqzTgmk=)
                          31: xLbUmwIKAG_hq46rdVqCiU-4wNc.roa (hash: tXjq+fVjfcyoL7b8379ZMM1qSHk6qsmaUnzVQcbBkoE=)
                          32: zSbJ_zmLsvnYD4Tj3NdHFOYhGs0.roa (hash: DJQ4yfm4mN/el8pVTO9ZIBKqMkmNeH54/xwSWHyykMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:11:de:7f:ab:e0:a8:24:82:18:1d:3d:2d:88:ee:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
        Validity
            Not Before: Jan 21 01:01:11 2026 GMT
            Not After : Jan 22 01:01:11 2026 GMT
        Subject: CN=d618920d6343f79ecdee3dedc7bfbde8d508ff52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:5a:3d:6a:f9:ec:e7:66:38:f7:d5:c4:9f:
                    e8:c4:3b:47:d3:b5:16:02:cb:4d:2a:65:4c:f8:c5:
                    31:61:15:e4:14:da:b6:9c:3c:b4:99:58:9d:b6:5b:
                    f9:fa:1d:2b:af:1c:94:4c:9a:fa:fe:7e:18:a3:39:
                    f2:50:8b:2c:c2:2a:c4:95:b7:24:fc:26:a7:9b:ac:
                    42:6e:a8:27:24:76:34:a1:fa:20:e5:26:74:0d:9f:
                    56:1f:7e:64:0f:67:10:95:a6:6c:1d:72:90:60:9b:
                    90:e4:64:cf:bd:97:8c:be:53:9b:dd:c2:39:5f:d8:
                    5f:86:4f:4a:89:25:e7:87:d6:30:ce:22:79:f0:5a:
                    23:24:8c:f4:2a:da:b2:3f:3a:1e:34:cb:80:0a:bd:
                    f2:5a:9f:be:86:b8:4f:ca:77:c7:0d:ab:96:17:5f:
                    8a:f1:f9:c6:20:c6:bc:4f:bb:0c:68:55:34:57:a2:
                    7e:69:e0:6b:43:f9:2c:89:f2:c3:b6:e6:56:6d:4e:
                    ae:0a:76:2a:e4:60:92:bf:1b:8c:99:2a:a6:17:80:
                    b4:0c:b7:64:c5:9c:27:14:b2:61:e1:94:33:ec:55:
                    a4:d7:a6:0b:3f:55:36:e9:10:68:06:2c:8d:49:0f:
                    59:bb:5f:b2:41:6b:0b:4d:00:26:c8:78:23:31:f6:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:18:92:0D:63:43:F7:9E:CD:EE:3D:ED:C7:BF:BD:E8:D5:08:FF:52
            X509v3 Authority Key Identifier:
                keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9b:99:36:d5:a3:e0:09:ff:af:60:04:d1:c0:bd:06:34:56:
         b9:fe:1c:f6:dd:52:da:5b:bf:26:88:19:04:e2:2e:23:07:e4:
         35:c6:b5:70:1c:01:15:20:62:29:42:2c:2f:d5:fd:c9:db:47:
         7a:48:c6:c8:4f:0d:fb:49:5a:c1:e7:69:4c:50:17:65:9b:4c:
         3c:63:75:2d:45:86:06:28:81:d2:e1:92:48:61:62:53:6b:b7:
         b6:a1:c7:14:45:bb:20:50:34:67:3a:d4:79:e3:eb:92:23:af:
         7f:38:f0:10:43:93:2c:c2:b3:d7:59:c0:f4:40:c7:81:8b:56:
         73:7a:c2:b4:19:51:14:8e:62:88:ab:7e:4b:14:0e:a4:ec:42:
         3d:33:9f:6d:7a:c9:94:62:ea:43:18:65:c1:84:81:75:d1:58:
         36:52:f4:5a:b4:f6:10:4a:cf:dc:34:4c:c6:9f:1b:10:ff:70:
         ac:cd:b9:0e:09:2c:31:e5:6d:5b:cf:50:32:91:ef:71:36:32:
         04:2f:59:22:c7:3f:27:bc:18:19:c4:14:19:86:9f:2a:ae:b7:
         d3:ae:83:0f:00:67:38:28:70:ff:b0:ab:c2:59:81:12:d8:fb:
         62:e2:4c:c6:44:3b:29:44:40:7e:f0:12:9c:2e:0f:44:0c:79:
         3e:d2:b8:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZveEd5/q+CoJIIYHT0tiO4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYwMTIxMDEwMTExWhcNMjYwMTIyMDEwMTExWjAzMTEwLwYDVQQD
EyhkNjE4OTIwZDYzNDNmNzllY2RlZTNkZWRjN2JmYmRlOGQ1MDhmZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxFaPWr57OdmOPfVxJ/oxDtH07UW
AstNKmVM+MUxYRXkFNq2nDy0mVidtlv5+h0rrxyUTJr6/n4YoznyUIsswirElbck
/Canm6xCbqgnJHY0ofog5SZ0DZ9WH35kD2cQlaZsHXKQYJuQ5GTPvZeMvlOb3cI5
X9hfhk9KiSXnh9YwziJ58FojJIz0KtqyPzoeNMuACr3yWp++hrhPynfHDauWF1+K
8fnGIMa8T7sMaFU0V6J+aeBrQ/ksifLDtuZWbU6uCnYq5GCSvxuMmSqmF4C0DLdk
xZwnFLJh4ZQz7FWk16YLP1U26RBoBiyNSQ9Zu1+yQWsLTQAmyHgjMfZKSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYYkg1jQ/eeze497ce/vejVCP9SMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpuZNtWj
4An/r2AE0cC9BjRWuf4c9t1S2lu/JogZBOIuIwfkNca1cBwBFSBiKUIsL9X9ydtH
ekjGyE8N+0lawedpTFAXZZtMPGN1LUWGBiiB0uGSSGFiU2u3tqHHFEW7IFA0ZzrU
eePrkiOvfzjwEEOTLMKz11nA9EDHgYtWc3rCtBlRFI5iiKt+SxQOpOxCPTOfbXrJ
lGLqQxhlwYSBddFYNlL0WrT2EErP3DRMxp8bEP9wrM25DgksMeVtW89QMpHvcTYy
BC9ZIsc/J7wYGcQUGYafKq63066DDwBnOChw/7CrwlmBEtj7YuJMxkQ7KURAfvAS
nC4PRAx5PtK4IA==
-----END CERTIFICATE-----
Generated at Wed Jan 21 05:00:35 2026 by rpki-client