This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File:                     DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier:          UKgra6oE2IrYLKemiPhbDlPpd3EywzwPdrZ8TyL/Xas=
Subject key identifier:   96:E1:B5:48:D2:11:55:01:69:DB:73:7E:09:28:9D:33:DA:0B:E6:40
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer:       /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial:       019BEDF290079C5C1CD823091F411A3F0567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number:          0E58
Signing time:             Sat 24 Jan 2026 03:00:55 +0000
Manifest this update:     Sat 24 Jan 2026 03:00:55 +0000
Manifest next update:     Sun 25 Jan 2026 03:00:55 +0000
Files and hashes:         1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=)
                          2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=)
                          3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=)
                          4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=)
                          5: 6N1zSrxGxEDRaS6C7FAY0zi6aj8.roa (hash: wABNoFQpTIXR9Gtm4VZ92qxhMckx3/pSEwXZyk3S22E=)
                          6: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=)
                          7: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=)
                          8: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=)
                          9: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: Cg9HJHXdEZUxIzaNgcIb1/DJEh1XgXV5EI8lbRrge88=)
                          10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=)
                          11: On4dn5XbiBS1Qg2b3q7FuPrKKPU.roa (hash: aFxUmAbMZfGMNEqIxTU//GiK2u8cv1a8L3zZwck32pU=)
                          12: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=)
                          13: PD0gL5wD6TzlMONcTVSL_nUPkTs.roa (hash: 8xeOKjdaOuRIzGTIRqsIoy0cuHcgqdyob05N8uzkaNU=)
                          14: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=)
                          15: ZJ5l37G_w-cxDfPyZbl3zgQo3cQ.roa (hash: C20FU6s1s6KfoQi2fZft6KPIUH4rHPObiarw/5VKljg=)
                          16: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=)
                          17: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=)
                          18: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=)
                          19: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=)
                          20: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=)
                          21: j7LtCmBQkrQBJnb_ZCt76IEDtVw.roa (hash: xzoT1lmtc0/rZsZSXDJS+I2wkN8O0eHPbcY9YaDshes=)
                          22: j7x8fbkRwMKStj5ClhgwLaeQkVs.roa (hash: 6lRnNTk9GDpCpdru3WxCTgGzGwqKwzzDgbtgNglJr4E=)
                          23: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=)
                          24: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=)
                          25: zR0iVYnP5N5Uny10sklHuoRT73Q.roa (hash: xsNsTM2wWzgme/iKg5rHQAWH9S6RXpdv7UkbK6mK4Kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 23:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ed:f2:90:07:9c:5c:1c:d8:23:09:1f:41:1a:3f:05:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
        Validity
            Not Before: Jan 24 03:00:55 2026 GMT
            Not After : Jan 25 03:00:55 2026 GMT
        Subject: CN=96e1b548d211550169db737e09289d33da0be640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:08:b0:dc:66:ec:e9:50:55:67:e7:a0:d6:4b:
                    61:03:11:55:82:17:8d:dd:55:3b:7f:c9:2e:e6:fa:
                    36:fb:c7:4b:05:77:aa:58:21:2c:22:cc:10:4b:6c:
                    94:27:fd:43:ee:a4:15:eb:88:b1:6b:b7:f9:fa:2c:
                    94:4b:26:84:3f:4a:68:b3:cd:c8:c3:81:7d:0d:73:
                    ac:74:2b:2e:8b:54:8b:32:a5:d3:a3:d9:3a:83:58:
                    9c:38:32:0b:a4:d5:a0:40:86:56:73:2e:1a:94:9e:
                    13:18:d5:23:5d:05:16:f3:36:6d:4c:01:ae:7b:5b:
                    7b:cd:52:b0:73:1f:a3:b1:f1:3f:d0:fc:75:82:3a:
                    73:63:e6:76:0a:35:c0:4d:b5:3e:4f:3e:64:79:64:
                    4d:fe:0d:9f:67:19:fc:55:d9:7b:f5:f1:a7:e1:99:
                    ee:ea:c4:58:51:37:3c:23:04:13:56:23:a4:ab:aa:
                    b1:2d:ec:24:2d:20:50:64:55:84:69:ca:4c:36:01:
                    83:4b:b5:6b:49:89:84:42:3c:75:19:5a:09:51:59:
                    d2:31:04:64:1b:8d:c9:1c:1e:72:03:39:e9:e7:c9:
                    2f:e9:9b:0f:43:1f:24:11:47:e9:66:b5:a3:46:c3:
                    b9:30:f3:49:75:82:0b:0d:b1:8d:4c:6a:58:87:00:
                    be:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E1:B5:48:D2:11:55:01:69:DB:73:7E:09:28:9D:33:DA:0B:E6:40
            X509v3 Authority Key Identifier:
                keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6d:13:a9:ad:ba:cd:af:bf:a8:8c:92:52:79:c5:21:d7:5a:
         0b:61:d6:16:1e:f6:ad:8d:8f:5b:c5:0f:30:01:6d:d5:5f:2f:
         e1:c9:b0:2d:81:a7:a6:1e:18:82:a8:16:92:52:20:2e:bd:4c:
         2c:58:a3:6d:e7:c2:58:a6:fa:da:33:ab:f4:13:ce:32:57:ca:
         81:68:ac:12:31:3f:3f:a6:9f:78:f3:0e:65:53:ab:c8:13:18:
         0e:96:52:08:6b:4d:63:1d:14:2e:bb:72:16:f3:ad:80:5e:2a:
         c6:65:f9:77:22:5d:60:b3:1a:b3:61:35:74:af:b9:92:c0:a2:
         02:0e:be:4f:1b:c7:00:5d:c4:2d:aa:2b:8d:93:1e:e0:ef:a5:
         d3:c8:a6:b8:8f:e5:f8:1f:f2:cb:32:5e:a9:b4:3c:cd:bf:77:
         07:15:a2:57:2d:84:2a:5f:f9:22:13:bd:6f:4f:fb:20:08:ac:
         d4:ee:99:cd:1a:d2:47:a8:f0:0c:92:e2:e4:ef:bb:79:2b:aa:
         23:2a:aa:d7:02:aa:4e:b0:7d:bf:a3:79:80:e4:f0:3a:ee:02:
         28:32:07:a0:20:fc:b0:a0:01:ee:7c:58:8b:75:e4:ba:ea:a6:
         ee:f6:e3:db:c4:50:ca:bd:b5:0b:ba:8e:72:6a:0e:94:29:b3:
         1f:e0:82:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 09:10:19 2026 by rpki-client