This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          NHetdKltWvoFkhkhWGRo/s4jnhhzGpPW6YVAUN20qgo=
Subject key identifier:   8A:D1:0D:DD:D3:FF:98:61:62:A3:FA:3D:68:28:8B:23:DD:B8:81:A1
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019BD6FDE89DD500C2DDD17E48DACDF8DAB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          197C
Signing time:             Mon 19 Jan 2026 16:02:02 +0000
Manifest this update:     Mon 19 Jan 2026 16:02:02 +0000
Manifest next update:     Tue 20 Jan 2026 16:02:02 +0000
Files and hashes:         1: 0_sA20PwpvlNaZkMADnVSmGAkR8.roa (hash: 6wh9b6GmF3z8gD+E8s8//e7R/HdUNKvFyQY2ioew+40=)
                          2: 1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa (hash: cuvojjHdfFWhgViYfrdABCjH/GrYxt90mUjKR3SVJe0=)
                          3: 2seAXHyzsjxKcx9vONA5t8NDpKo.roa (hash: Ss780hXc9q/xSZtDwQf9FFDagk9C3ewnlo2owJwuyeM=)
                          4: 36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa (hash: XmKDOfpv97+OK9767hQierWSri2mDMDLUz/VmA73yaE=)
                          5: 4aREn_htEzwNxW4Z_ze_U1SiWgg.roa (hash: 0wIkVh4NUPk/fqAOYTqdE+f13v3Gj6K5bPbVYoinhdk=)
                          6: 6bD6h1-onzkXBaAZM1hqhF9Bb2c.roa (hash: giCx0eVX291Dreg5SkuFj7Pkk9gcu9uSackcOGQwEUA=)
                          7: 7CU_Saf57sM-1yN004kvK8zmk90.roa (hash: 5bpO+sXcLPXisvn+5cMGZDrHN6oZNZR0ne9tf2cns+o=)
                          8: 9fkLcboDV5K8RkYKhccms358mIY.roa (hash: pbdhIi6MiVydNKAR2SbpSVV5HF+j7v+gpPuq/bft7UU=)
                          9: 9zHOxpyIXqRlDC726eMkIL_3in8.roa (hash: 5IwHDdTrqf8yPsGKKg1ULI3+RzopP4UflBbqS3upMps=)
                          10: EKCNCx3V2xF3VclZ7utIL40yaPg.roa (hash: K7KWgqrfq6YXduizKcr7xnLXbTxGjXC/k7/Tint9RHg=)
                          11: EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa (hash: hIZTV4maC/yVAgh1G3bbgkey5mVA7V6TvYPLh5uDEMk=)
                          12: ES1lahPFgcwTztwXyOfhZ5VVmvc.roa (hash: Ew+ImBSHPbFzPIU+4Pej0vRiFBv0R3uwB1KeV4mUWqo=)
                          13: Em7pM6LssXKO1GMawm5HobIjg0w.roa (hash: DbDxVhfNZgsFuUXgnBHHjMTFBOymplRBN3L8VW1JUTQ=)
                          14: FZKmtD-UKaibZ9zRkcn0AXz38jQ.roa (hash: lcged29v8IqNvfygirrGZPjQSlChjxHF9bRH0GjQsG4=)
                          15: G9XCoEEqmG6F8jKDbOEtKOEenMg.roa (hash: /j0h0z4BCzWyDUNUJ7Q+TvpGPHpbsnL1Xrpb74f78/8=)
                          16: HBxIhJQTEPlpkLB0ZPYkHZSJiik.roa (hash: eG6f7ib9tGK1jAHCC+qT2jC4Ebjo/wZvqFlp98jpIUQ=)
                          17: IKE4CLlQcBFlE9ScVAvy_idMxEU.roa (hash: 6gmHjXx4JLDJRUdc8fU3OlLmdxkf8KNQJpv3y9A2lUo=)
                          18: Ia3WxJ4E9TqR5H8goAOL2URQgII.roa (hash: c7Sq9aBefC9FbsCEReCs8PjML6m8fkyaIUcwK37ZNC4=)
                          19: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: cTcazGX9y8cSsn3ucnVLjTSXwGmyyRnWqdYXADUStSw=)
                          20: RGQPe1T8MeyQWsW4Fl1KwDODHYQ.roa (hash: oslfuWjZo2gABJUOk5sP8W0ctRygM1qKyUjzPS91gOA=)
                          21: RL2hMxLt8_7tP_oSaX71ZrVeYlU.roa (hash: WuW+kAVdi/p0IrSzhb4fa25p/RWfxuiBYYZTZl8qcwE=)
                          22: TY2edwLnnLqH5l1j4TBXgICCA8k.roa (hash: VYYAHhSRkyTo4Cm2JG0elCOvcEdrtRIUUl7ZbUK1FNs=)
                          23: XpZ5Lgqrcb8hh-ESR5GkV2cLlYk.roa (hash: gjwnOftX6s/jpe8bXicWK/CMaY8kCk+g+/5+gZ8Raxk=)
                          24: YGHRshzP7E3xrzqnk97S3WYr9W8.roa (hash: 95Dgw4ivjEo5sVG3WVF9wjEoITYvVf6my/+W1sj4/iM=)
                          25: ZhgFo8vJjypW853FGea_-uf50hg.roa (hash: WtV1iHQCdff6PMY3ugAhRxvlGjCUXcNcn2CkTq861BY=)
                          26: aUPHv82Bqhuun81grUdJW_UVgLM.roa (hash: GC6ehY/pZwrw30U0AFJsHvq5vW5Icu4QsaWDm7j6VFo=)
                          27: d7fttKbQaEBMM4pWwcBEUFN5DTA.roa (hash: Kr1gRui3uolObyy8BSptmtAQfNotYsTnJEgGbLvOibk=)
                          28: fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa (hash: OpfPA+dHb1RUv8oJj/SuD/47PIzkgKxK97TBT0p1+UY=)
                          29: h8WHPE-DLjC-fOR5gMRdseFV3jc.roa (hash: YQ88sWnqWVrNelZLFoTBX4eB7iIKZuZNquUMZZMKO9E=)
                          30: ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa (hash: A6u9y5FYE7PBQc9qb3iiT8u1JhXp3QhjdHb1npZ1D9U=)
                          31: l6SM6ptT76dYR0t29i5gSk-UFyA.roa (hash: Opm4hqwU9LDFmKQW44d/WAHM+r1NrW68F7x/ZNHRjrc=)
                          32: n_65L3iBhAS8nTX_oI-jDuomJaI.roa (hash: oelUgRW5esSmGJ/6JOEyZ16/FbXRtDOw4ZL4wVs4j4o=)
                          33: ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa (hash: cCjtDCQeEswQW7ARKMVR+Qsmady+QzPg4SnlqpKDtiU=)
                          34: pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa (hash: 4wKIdMhhOpixinv3B0GRH4iqbq2UNr/kEqwKvFPfjxQ=)
                          35: qgnJ6rleR1BLD9l4jRYO4wkNgPA.roa (hash: B+h7D3nmEJYVvQZsDHrV2hBfqxIy+VQ4OQ8EgALC36k=)
                          36: sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa (hash: +woHvnKUvjlFOtldAvZbs9Ud6X9DPUWePpuRt9RpD6g=)
                          37: totemjld6kSUSAOsfxrB5I4cA20.roa (hash: kkFG6tpw3ltBlQqcrCwhTlI44EpzS3lf+yVUh05dYgM=)
                          38: uG2s2RZS4rlCLvYv5d0LRKF25KE.roa (hash: 11Qjv+Obpp8wz3r1eAnLIYMRHJ0o7ALLZxGFpcwmIVE=)
                          39: yAfSs3t-avJ35nOve-CJuiZ7-ho.roa (hash: gipYf09Mg+lZZ79yPz1ymuBTYnjsvP1+FOOgVHdC5z8=)
                          40: ygJihJoEFTH2yDRR0Sl-jcxqC0Q.roa (hash: 8ZQ1qiEiuvsIkgBswJAnf3eGUcB29l0qukHGlnRR4w8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:fd:e8:9d:d5:00:c2:dd:d1:7e:48:da:cd:f8:da:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jan 19 16:02:02 2026 GMT
            Not After : Jan 20 16:02:02 2026 GMT
        Subject: CN=8ad10dddd3ff986162a3fa3d68288b23ddb881a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:07:85:32:1c:15:be:b5:ff:7f:c7:60:3b:
                    a9:3c:59:b4:d8:31:d5:8f:08:54:1d:10:8b:cc:b0:
                    6e:0b:e0:79:7c:01:fa:5f:3d:41:51:6a:6d:f9:08:
                    50:b6:f6:de:9b:a5:04:80:19:f9:e3:df:90:cd:ff:
                    3b:18:90:ef:eb:5b:c1:b1:8f:c6:55:3a:c8:4f:9a:
                    98:24:fe:dc:b7:8b:bd:09:0a:94:f0:7a:1f:da:74:
                    6e:c3:50:70:10:10:31:a9:dd:a5:06:20:7e:75:6c:
                    50:45:25:7f:31:3d:df:3f:5c:53:ea:1a:af:bc:a6:
                    8b:fc:40:3a:a8:6a:67:41:2a:2b:f8:70:83:43:8f:
                    73:51:66:0b:1d:a8:0f:65:36:7f:ea:a7:8f:8e:70:
                    11:59:fe:cd:d4:4c:68:38:33:8d:d1:be:60:71:2e:
                    63:9a:6d:92:a7:32:f6:95:b4:13:5a:3d:71:7b:7d:
                    f2:22:99:d6:8f:c6:f2:85:71:62:91:30:73:a3:b9:
                    3e:0f:44:b5:a1:86:21:85:36:de:04:98:16:e5:d4:
                    dd:53:bb:26:1c:2b:cf:bf:e6:fe:3f:10:33:aa:ce:
                    28:d8:3f:60:db:36:24:93:e6:2b:1b:03:5b:44:08:
                    ee:7e:1f:69:68:82:e8:35:e6:dc:ec:60:ab:00:24:
                    4d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D1:0D:DD:D3:FF:98:61:62:A3:FA:3D:68:28:8B:23:DD:B8:81:A1
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6d:87:f7:09:aa:e1:44:1f:30:9a:72:6a:4a:31:e4:21:a5:
         b4:aa:d1:ee:c0:e2:41:b0:67:a6:8a:d5:8b:34:f7:4d:45:c3:
         b5:28:e9:7f:18:29:f9:57:88:23:0b:8d:40:53:36:32:be:8c:
         1b:46:1a:4a:a2:12:dc:1e:eb:92:2f:87:8c:8e:9d:7a:68:8a:
         68:d6:52:cf:79:ee:31:e7:17:63:72:74:62:f0:37:4f:82:bf:
         62:97:3c:65:e3:2c:86:ba:ad:7d:0b:32:18:c9:bc:40:98:e8:
         05:6e:01:81:42:0b:9e:91:1e:12:0a:84:24:ba:21:d1:ce:44:
         8b:07:c8:e0:8b:91:5b:3a:fc:66:05:db:53:21:57:c6:50:f9:
         34:71:c4:55:98:44:53:5a:94:6d:60:91:2d:77:cb:6e:0f:5e:
         96:83:0d:d6:39:f3:c9:ae:0d:d9:64:e4:eb:fb:98:13:99:9b:
         b1:b1:9b:70:5c:9b:c6:3f:4b:14:6d:63:6c:de:8a:e7:7b:0c:
         48:ab:cc:f2:03:1a:49:48:84:63:0d:a8:6d:36:5d:37:d1:f3:
         b3:44:c9:cb:13:61:a3:3d:16:35:33:a9:fe:a7:61:6a:4b:08:
         e0:ea:3a:36:06:82:d1:4a:bf:ca:51:22:c4:bc:59:c9:9e:11:
         1d:e7:50:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----