This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
File:                     ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json)
Hash identifier:          XE5cdh/rfLEqIg+syElwfyxO/nsjQg6/og1QTNa6eEo=
Subject key identifier:   3D:87:4E:E8:74:5D:05:E8:27:B0:A5:B8:94:90:76:AD:F8:60:FB:7B
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       019BE6A6E4D64CA9C129BB5EEC49F06DBDC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
Manifest number:          1907
Signing time:             Thu 22 Jan 2026 17:00:55 +0000
Manifest this update:     Thu 22 Jan 2026 17:00:55 +0000
Manifest next update:     Fri 23 Jan 2026 17:00:55 +0000
Files and hashes:         1: 1-2pZvryUL199VhDsA9f5P27aCPA.roa (hash: FGkVhAPSJYMA6MbGwxMfe6PH3NdLLv3lzi017/rvj9M=)
                          2: 1-FBx6ZH5B0jbU_AnDHCUNaycO4s.roa (hash: u5eV4Uv1MiiJKh19sA1D3lrEkUoskPq0E06VtKGTPQ0=)
                          3: 3ojXaYtiYuy-7iogw6i2G3C6X6I.roa (hash: QbBWWIS8DVdo15a6EV0oz4pvQIl10yagzOCuUWNFAr4=)
                          4: 8ytmRdbaYIK-p0argiKofaoScHY.roa (hash: NzZjhETEPOV9qOe2iCOKukIBBkV+9EAmc6ndeYhO0Yg=)
                          5: 9_cNflmMqGmXtLc9sI5jl1QlQaM.roa (hash: WaSwh01afw0+7AltVHO2SZoKM+p5egBh/VFl1fJY0VA=)
                          6: BAXDlRr4hsZOEW_53viwbbS5xzI.roa (hash: gMocBTTYk/YSixcQRlGi2Xf0s9GjCcV7bqy4EjzuHxo=)
                          7: BN3uTsvLVfLQEFEGegnn9TgGMCc.roa (hash: odMOUTahv8T8UIit5Zs817beNixUhfCh509OUC0pTXM=)
                          8: DBzsUU7BGHocClctL1mvbSIgvxQ.roa (hash: tB5Bok9ukggl6ccJHOzcEVQMglS5kVaS/x4d71htp3M=)
                          9: DR3Bz7Oan3i6vgko-GvHhPb-Px0.roa (hash: fLmSqodUAGL/yoED3chUFJFBL41B6P99W79IRZINO/g=)
                          10: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: UKjyJ2rQl8xuaGJcfi5YdHg4TXQ9zjEnp00LRfS3QYc=)
                          11: FjJlBk4vljCVJZoKSfMPflAcx1I.roa (hash: 1SIsNHfnj1y+m+lEm8o9zgu9QiQbTkBbHwe1/ESIdkw=)
                          12: FsjSFfK1sV6Cz6fjIUlD72cszvQ.roa (hash: DXUUgReqIaf7155cKacK5xPHHnjU+k6nsvsDjDh462M=)
                          13: JL-UHyqoCb8Ew4gbD-5WcC0R8F4.roa (hash: 8+Vk3FqrokPt9r0HiOl2MxSp8d+zuH53tc4nHpxPu78=)
                          14: Mq91aHgILLYinYVbGX30JTicK2Y.roa (hash: awH0fZT5nCVQDV/n2dA6uOcYfxt3myd+QXH8nt5Ehzs=)
                          15: NAvPU3PvWk2BT8zglyKAPm42uoo.roa (hash: 1bUbDIdnIXubMQt2eslQ/ZroPi0FRkjK8z9itzf2nhI=)
                          16: RG7rOxM8Ma6H0vB0Nnbvb7QSb7o.roa (hash: 9oIF71M4azDz9Rp+FJePfIdA+qSKXEhe8fe/V/zE+yU=)
                          17: RtdT3axTfmWPymViBZqZaqZKpVY.roa (hash: xtwwjn7DzhN5b7BbjlImOVuCLYyjwLWW/osFbNbKEZQ=)
                          18: SudU71UvkOpYbLyB5oHg2RyZNWM.roa (hash: xefx53ev5gZHT0Koi4CdtQgqvR9rIS+NoeeLgTHek6k=)
                          19: YGpB4J28Bf5NHoYTSr4mFJQaBlA.roa (hash: 3JFwMa2Ti1yTw1Xq6RCOz5frDtvKldeHr5rO5JZfbrM=)
                          20: Z_w4aPulJHpP1k4S12nmqYPNDKU.roa (hash: iK5E7nGl49/OpF7LyhdmSl2uhfb3R0xz5hjbEmccmrc=)
                          21: _gqR0WwGA3glTlyF8yiHIFlb8dE.roa (hash: mFyXN2DxlKKJyDR5JPAfUo4hQrC8BxOn6sp6aAgxtac=)
                          22: kUSxd1B8AxZq-RVoBSLSqa7QXIk.roa (hash: t+qukMxzE/OHfBy8j/pvykT6K/D5uPcDEid5KQapwrk=)
                          23: lTPOzMZpg6OdVupew9ZjU2_lpvE.roa (hash: ZPbvR2hjypfPkQpNeYSZpOXKwwYAVSdHPl7WM1QQ/xU=)
                          24: nBrSGr2-FoI2a-yweJfRkdzUduA.roa (hash: KFZmWMvcLzeRKdgM+H0v2yfy68uGB6YoYjKW+8/osrA=)
                          25: pF6WBbamDqigpwnYyY54RICcftY.roa (hash: ygHT0Xa9Cg9CYX3EOU9uQc00YLGDZAbjxPnyMu8NUAE=)
                          26: pQOstsuFb4QqjECPQsyJ_C3WeD0.roa (hash: YhRNa/iZVKW2njLjDXYtKuyq+avbwnWSww/n3FopXKk=)
                          27: qehqqDaLvfGapcYu35gg8njdQ84.roa (hash: YPLOkpy5OjMzs5AXbxjYvdLVfqkHQrfn1XIRF6xrJPM=)
                          28: sGL0IpkAAnhvKoGAh5UWQwRpfVM.roa (hash: mpibMWOyOdzjLVDF60aD5dDfWs60rSKxiTiv1sDZLv8=)
                          29: v2VfTa7zgDDUSueW5M0x4B_McRo.roa (hash: S+YGBrBrvZW9pavreBXFebt4/41gIio3hTT0WdcvbWU=)
                          30: x8G1Yoeg0YCKEaI62w0nGtjOEuM.roa (hash: N+Vr1Wpn9wUw6j07nAIbueMPkuP8xWs0XtxciVf3414=)
                          31: xIOC3VBcNkaYbwTvKdiQIDZCC-E.roa (hash: Aq6WzdNa5Rp6JDX1lh3pj2VNERsuDSUsj+9vXWfoI2o=)
                          32: zRdC35WnIEnCYZCT4j5E7N7_rTw.roa (hash: saGXDkc1jAe459cl7aek9nzHiI4TpSoOXSkoCxsiBNU=)
                          33: zSjt2n8Du85SIQ2nFoqjP0LKqnM.roa (hash: JgDetX79XvAiL2bru5KwKSmri65awsy3GneK31+NYx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 16:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e6:a6:e4:d6:4c:a9:c1:29:bb:5e:ec:49:f0:6d:bd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: Jan 22 17:00:55 2026 GMT
            Not After : Jan 23 17:00:55 2026 GMT
        Subject: CN=3d874ee8745d05e827b0a5b8949076adf860fb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:e7:70:5d:17:54:79:f2:29:4b:b9:38:fa:
                    94:40:fe:f6:ca:4f:f1:75:be:a3:a0:fd:11:da:50:
                    30:cc:2c:6f:52:f4:d0:d2:0e:32:e9:e0:cb:ee:44:
                    b1:7b:13:24:99:bb:02:04:88:a6:ab:8d:c3:2f:0d:
                    ed:e6:97:b4:e7:02:3f:37:65:82:58:c5:7e:45:91:
                    38:b1:0b:9b:c1:87:60:e2:25:53:ee:5e:66:17:7b:
                    f1:ce:ef:52:e6:e3:36:9e:cd:97:5c:bb:06:77:96:
                    8d:86:38:a6:0b:dd:ed:0c:98:f9:26:27:5f:88:d8:
                    7d:7b:78:23:23:07:9b:e9:3a:d7:4f:30:93:05:78:
                    4f:5c:12:2c:f8:24:e6:d4:b8:f7:68:77:f6:fc:b5:
                    16:4e:e6:3a:91:cc:ad:c7:f5:7a:73:f5:9a:3d:be:
                    9b:42:7b:b9:de:04:81:de:fd:3f:91:a6:fe:bb:8d:
                    f4:a6:13:f7:77:d7:93:2c:8a:fd:ff:47:8c:ce:a7:
                    6c:6e:27:69:ef:1f:0b:e5:34:33:90:0e:02:cc:ac:
                    bb:ad:f9:2d:54:c5:4a:36:66:0e:ed:48:99:f5:2c:
                    44:92:d5:fa:32:64:fc:38:9e:32:56:6f:39:bf:7c:
                    ef:ae:75:f7:49:67:0b:6e:5d:02:ec:55:20:c6:77:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:87:4E:E8:74:5D:05:E8:27:B0:A5:B8:94:90:76:AD:F8:60:FB:7B
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fe:29:fe:ef:7a:c9:d5:73:a3:08:61:86:fa:d0:73:65:0b:
         ee:a1:29:a9:d1:ce:05:e1:63:65:b5:2a:b5:43:c5:6f:55:23:
         ec:e4:17:22:17:7f:8a:bb:cd:46:5f:18:65:82:75:88:0d:b6:
         ab:14:09:34:e9:1d:ee:fb:6e:6d:39:e9:7e:5e:42:e1:c6:35:
         3b:c9:cc:16:9b:e1:6f:77:fb:9e:ff:c9:d8:de:d6:61:83:a9:
         4e:48:c1:e5:9b:e2:58:c6:c1:e6:3d:e2:56:4a:54:8e:6b:a7:
         66:69:8f:29:16:30:4c:26:41:e5:4b:bf:9f:91:ee:f7:1a:e6:
         b9:49:7e:b4:b2:f7:00:d5:b4:df:6e:3f:9c:60:d1:a1:9b:de:
         f5:b3:9b:c8:f4:7c:d9:99:87:02:4e:df:9c:26:71:a7:4a:3d:
         79:26:ce:a6:2a:fc:40:f1:0a:bc:37:e2:94:49:00:f8:04:17:
         28:ef:6a:f3:3b:b6:6a:6d:ae:74:0b:81:70:2e:e4:5f:27:13:
         c3:56:d4:dc:5e:d0:91:28:9c:45:ef:d9:a3:5f:88:df:05:7a:
         67:b4:dc:6b:2a:64:76:75:26:c6:86:c2:30:49:14:67:85:a3:
         f1:ee:d2:fc:ae:76:23:76:45:a2:8a:3e:5f:51:4c:df:a7:81:
         04:d3:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 23:07:22 2026 by rpki-client