This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File:                     DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier:          WCrsmrBx143pw28h04XxssjXqRXlsjHAXqUnO9PXJeU=
Subject key identifier:   A2:FF:FF:A8:9E:0C:4E:87:9C:70:D9:12:E9:5C:0A:6D:2C:90:A7:1B
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer:       /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial:       019BDE7FA5DFF69D885342F5E6335C9C639E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number:          0E50
Signing time:             Wed 21 Jan 2026 03:01:06 +0000
Manifest this update:     Wed 21 Jan 2026 03:01:06 +0000
Manifest next update:     Thu 22 Jan 2026 03:01:06 +0000
Files and hashes:         1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=)
                          2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=)
                          3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=)
                          4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=)
                          5: 6N1zSrxGxEDRaS6C7FAY0zi6aj8.roa (hash: wABNoFQpTIXR9Gtm4VZ92qxhMckx3/pSEwXZyk3S22E=)
                          6: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=)
                          7: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=)
                          8: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=)
                          9: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: yKKLQ7ZIEmhxiNccBpNCi5R2qiDfND+qD67I8DIzU7A=)
                          10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=)
                          11: On4dn5XbiBS1Qg2b3q7FuPrKKPU.roa (hash: aFxUmAbMZfGMNEqIxTU//GiK2u8cv1a8L3zZwck32pU=)
                          12: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=)
                          13: PD0gL5wD6TzlMONcTVSL_nUPkTs.roa (hash: 8xeOKjdaOuRIzGTIRqsIoy0cuHcgqdyob05N8uzkaNU=)
                          14: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=)
                          15: ZJ5l37G_w-cxDfPyZbl3zgQo3cQ.roa (hash: C20FU6s1s6KfoQi2fZft6KPIUH4rHPObiarw/5VKljg=)
                          16: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=)
                          17: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=)
                          18: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=)
                          19: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=)
                          20: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=)
                          21: j7LtCmBQkrQBJnb_ZCt76IEDtVw.roa (hash: xzoT1lmtc0/rZsZSXDJS+I2wkN8O0eHPbcY9YaDshes=)
                          22: j7x8fbkRwMKStj5ClhgwLaeQkVs.roa (hash: 6lRnNTk9GDpCpdru3WxCTgGzGwqKwzzDgbtgNglJr4E=)
                          23: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=)
                          24: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=)
                          25: zR0iVYnP5N5Uny10sklHuoRT73Q.roa (hash: xsNsTM2wWzgme/iKg5rHQAWH9S6RXpdv7UkbK6mK4Kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:7f:a5:df:f6:9d:88:53:42:f5:e6:33:5c:9c:63:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
        Validity
            Not Before: Jan 21 03:01:06 2026 GMT
            Not After : Jan 22 03:01:06 2026 GMT
        Subject: CN=a2ffffa89e0c4e879c70d912e95c0a6d2c90a71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:6f:be:37:b8:20:ce:d6:08:12:8e:b9:6f:
                    37:54:39:68:4f:a4:25:46:aa:a9:5d:40:29:92:60:
                    39:af:8c:e2:0e:01:17:7f:e2:d0:28:0d:49:00:cb:
                    fb:e1:7b:8a:07:36:22:e1:3c:d5:4b:c8:bd:9b:3e:
                    21:4b:77:1e:55:b2:02:95:03:46:96:49:fe:12:62:
                    5b:68:ba:8c:22:ae:bc:30:01:56:20:67:fa:e9:ab:
                    4a:42:ed:83:96:a0:a3:47:a8:b8:b3:cb:b6:fe:2f:
                    2f:94:cf:7f:18:9e:90:38:c5:c4:d5:89:97:1f:8a:
                    c5:0a:2c:03:89:39:5c:a8:c6:7c:d3:69:67:0b:61:
                    31:a2:7f:f6:53:66:97:64:39:1a:17:e3:6d:68:2a:
                    5d:70:18:69:55:05:14:42:d2:1d:be:60:93:ed:72:
                    ca:5f:31:21:5a:2b:a4:6f:e4:0c:2d:90:d2:24:cd:
                    e0:2a:90:33:b6:40:f9:67:bb:4f:f8:00:a7:15:32:
                    f7:5d:54:59:66:23:8d:4b:9e:88:78:0e:f6:d4:db:
                    03:1c:50:d5:e5:d0:84:e4:c2:dc:b8:1a:67:2d:9d:
                    0b:13:99:4d:b7:44:4c:d7:03:5e:b6:18:1b:da:ee:
                    6c:a0:cf:89:b6:61:1a:08:38:6a:e0:d7:b0:c7:b8:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FF:FF:A8:9E:0C:4E:87:9C:70:D9:12:E9:5C:0A:6D:2C:90:A7:1B
            X509v3 Authority Key Identifier:
                keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5f:d3:dc:b1:af:af:c8:98:03:b7:99:1d:81:4b:c8:33:7e:
         b2:2f:8e:2e:dd:75:0c:90:1d:5f:1a:4b:f8:e8:bf:13:6d:d5:
         5a:4c:3b:2b:de:5d:3d:17:4c:60:96:39:44:9d:eb:6a:8b:1f:
         9a:4e:bc:0e:e1:75:a9:a0:42:1a:cd:9e:0b:0e:0d:40:de:9f:
         62:8d:82:55:7d:10:78:35:d2:c3:b6:da:f3:95:38:e3:65:91:
         57:33:89:95:ad:82:52:ca:84:d3:f7:16:01:75:0a:b6:c7:4d:
         8f:ca:45:e3:17:01:d6:b3:4f:fc:31:9f:92:e6:c1:9f:6f:f7:
         67:ab:7e:89:e2:2b:37:c7:05:c9:3b:f9:b7:37:7b:43:ef:28:
         f5:56:7f:4c:8a:9f:64:8f:fe:01:75:61:e8:ac:ee:c2:1c:cf:
         bb:2c:2d:de:6b:6c:1d:d5:0e:ad:19:1a:a7:70:2f:4e:b6:3c:
         16:65:07:2b:e2:8b:15:d0:b4:0d:9f:74:36:6b:7f:0e:78:01:
         80:1b:c5:49:62:04:ff:ea:e2:d7:9f:8f:47:64:5f:a2:53:62:
         7f:a3:7b:5f:5f:04:17:2d:c3:5f:53:59:fc:3a:31:65:56:a2:
         93:f5:ce:1f:09:61:74:63:a6:36:32:e1:1e:fc:62:51:7b:5b:
         2f:9e:f2:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvef6Xf9p2IU0L15jNcnGOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjYwMTIxMDMwMTA2WhcNMjYwMTIyMDMwMTA2WjAzMTEwLwYDVQQD
EyhhMmZmZmZhODllMGM0ZTg3OWM3MGQ5MTJlOTVjMGE2ZDJjOTBhNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeFvvje4IM7WCBKOuW83VDloT6Ql
RqqpXUApkmA5r4ziDgEXf+LQKA1JAMv74XuKBzYi4TzVS8i9mz4hS3ceVbIClQNG
lkn+EmJbaLqMIq68MAFWIGf66atKQu2DlqCjR6i4s8u2/i8vlM9/GJ6QOMXE1YmX
H4rFCiwDiTlcqMZ802lnC2Exon/2U2aXZDkaF+NtaCpdcBhpVQUUQtIdvmCT7XLK
XzEhWiukb+QMLZDSJM3gKpAztkD5Z7tP+ACnFTL3XVRZZiONS56IeA721NsDHFDV
5dCE5MLcuBpnLZ0LE5lNt0RM1wNethgb2u5soM+JtmEaCDhq4Newx7i+eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKL//6ieDE6HnHDZEulcCm0skKcbMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbV/T3LGv
r8iYA7eZHYFLyDN+si+OLt11DJAdXxpL+Oi/E23VWkw7K95dPRdMYJY5RJ3raosf
mk68DuF1qaBCGs2eCw4NQN6fYo2CVX0QeDXSw7ba85U442WRVzOJla2CUsqE0/cW
AXUKtsdNj8pF4xcB1rNP/DGfkubBn2/3Z6t+ieIrN8cFyTv5tzd7Q+8o9VZ/TIqf
ZI/+AXVh6KzuwhzPuywt3mtsHdUOrRkap3AvTrY8FmUHK+KLFdC0DZ90Nmt/DngB
gBvFSWIE/+ri15+PR2RfolNif6N7X18EFy3DX1NZ/DoxZVaik/XOHwlhdGOmNjLh
HvxiUXtbL57yMg==
-----END CERTIFICATE-----
Generated at Wed Jan 21 08:59:44 2026 by rpki-client