This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          hebTT1lMKW0LFlif+1Ur9nHuQzK52KqubM/OJgJZTKc=
Subject key identifier:   37:6D:3D:8B:FE:78:1D:6A:0C:E2:41:0D:A7:84:5C:71:AB:51:D0:E3
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       019BCF0CBE0BD587FFB68FA4AB715406F6DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          17EE
Signing time:             Sun 18 Jan 2026 03:01:17 +0000
Manifest this update:     Sun 18 Jan 2026 03:01:17 +0000
Manifest next update:     Mon 19 Jan 2026 03:01:17 +0000
Files and hashes:         1: 1Jxi3AriRg31UMXbMH3OPiY-5HA.roa (hash: 3Mxy5Zs+xxbHjoz6LYDQ1mtzuO64bgmhPoqFp9H+W6U=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: AohCBK3pJ3DPfFeROYvM4om/8A/IfVUTuDv0xcwwgeQ=)
                          3: SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa (hash: sS4G3ab1K8SPkh8ckCRuErQYvrEjmRohAAhZp3pf6ig=)
                          4: eBZ7AmSoNEvuFIsVSaKIFPergtc.roa (hash: bJyd01nfZd9XumL2AfymHRJRduJs4cP6QwBEo8jMpBk=)
                          5: ltPyLrCgtlMllsCXQ4dfSV5n1sg.roa (hash: /beWoLO2qLG+iVsq1LgAGcDTFDHTDeaWmY9kyyThHj0=)
                          6: mJmloBqH1ccv7pf7_dE3WxThQ58.roa (hash: L0vhterDlOQyvmoADd6+0joQnbdSLqt2I9Yyqwk+Dl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 03:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:cf:0c:be:0b:d5:87:ff:b6:8f:a4:ab:71:54:06:f6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: Jan 18 03:01:17 2026 GMT
            Not After : Jan 19 03:01:17 2026 GMT
        Subject: CN=376d3d8bfe781d6a0ce2410da7845c71ab51d0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:6d:c2:28:5c:cd:16:37:2e:69:4f:a1:ef:
                    3d:f7:e4:b3:00:69:b8:4b:68:ae:0e:f2:2b:b8:66:
                    b3:f9:80:40:94:d9:31:80:8a:d0:02:9c:bd:5d:a5:
                    6d:93:bc:a6:92:ea:61:0d:0e:be:64:21:d2:5c:44:
                    ec:9b:ed:94:3e:bd:c9:c5:a7:72:ab:53:01:0e:19:
                    7e:91:90:1f:81:dc:59:1d:6b:57:52:af:13:65:4a:
                    16:92:41:67:75:62:38:a9:6a:31:a2:3d:70:98:fb:
                    12:d4:ec:89:50:e5:2d:8e:26:be:0d:db:74:45:82:
                    1b:a7:54:ce:0b:69:66:de:ae:23:6c:68:f1:54:3f:
                    46:d2:05:33:61:12:b1:b1:aa:42:28:c1:ba:ce:ce:
                    78:1f:99:f5:8e:fb:ed:25:77:82:f6:96:bc:94:75:
                    57:30:6f:23:61:1b:62:dc:9d:96:d7:d6:eb:0e:b8:
                    01:40:f0:95:97:4f:3c:2d:c6:d5:b8:20:91:33:e8:
                    fc:d0:00:3b:dc:8a:71:81:07:83:58:c4:c3:60:af:
                    e2:31:a3:ae:ed:c6:64:cf:38:54:18:e4:cb:23:15:
                    be:a2:14:6a:74:43:9a:57:cf:61:2a:2b:53:5a:54:
                    55:36:28:e3:c1:14:86:03:0b:ce:07:92:d1:91:3c:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6D:3D:8B:FE:78:1D:6A:0C:E2:41:0D:A7:84:5C:71:AB:51:D0:E3
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:24:a7:dd:5a:4f:6b:82:a2:2f:54:43:0b:a3:66:9d:44:63:
         08:a4:d0:03:b2:2f:5c:ee:fd:59:11:3a:e7:dd:ff:3e:00:52:
         73:a8:31:59:11:52:e3:93:91:6c:19:67:0c:e9:e7:ff:61:c8:
         e6:f8:d2:fc:72:0a:70:67:ce:3f:f4:f0:fe:d1:23:f8:55:bb:
         b2:cc:5e:7b:69:1f:96:92:83:2b:96:40:90:44:a3:db:2f:c7:
         12:f4:6b:dd:a9:6a:cd:f0:a1:61:e0:41:d3:e2:2f:0d:ea:3d:
         d9:8c:0a:2a:14:a8:ce:88:d8:96:2c:53:50:ca:3e:37:3e:18:
         e1:11:69:a4:16:8f:1d:47:9b:22:fa:bb:14:2e:8b:18:cb:02:
         e8:26:9a:54:a0:9d:22:6b:02:1b:ab:49:4a:a5:c2:ba:cf:74:
         47:72:b2:e3:6e:b4:37:91:f0:0c:06:d2:7f:88:ca:4c:2f:1f:
         ca:37:18:2a:2c:e8:8f:00:4b:a0:b8:f5:74:c4:12:17:4f:1e:
         91:a9:a5:27:cd:db:22:51:52:4f:5c:cb:2b:d8:9a:46:58:88:
         b4:c9:a5:67:ca:3b:57:cd:02:86:49:cd:b0:aa:1c:11:62:3c:
         fc:68:8f:d0:8d:3d:bc:da:8f:f8:75:c1:38:f1:3d:84:10:0b:
         0d:1e:95:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvPDL4L1Yf/to+kq3FUBvbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2
YWEzMmUwHhcNMjYwMTE4MDMwMTE3WhcNMjYwMTE5MDMwMTE3WjAzMTEwLwYDVQQD
EygzNzZkM2Q4YmZlNzgxZDZhMGNlMjQxMGRhNzg0NWM3MWFiNTFkMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGJtwihczRY3LmlPoe899+SzAGm4
S2iuDvIruGaz+YBAlNkxgIrQApy9XaVtk7ymkuphDQ6+ZCHSXETsm+2UPr3Jxady
q1MBDhl+kZAfgdxZHWtXUq8TZUoWkkFndWI4qWoxoj1wmPsS1OyJUOUtjia+Ddt0
RYIbp1TOC2lm3q4jbGjxVD9G0gUzYRKxsapCKMG6zs54H5n1jvvtJXeC9pa8lHVX
MG8jYRti3J2W19brDrgBQPCVl088LcbVuCCRM+j80AA73IpxgQeDWMTDYK/iMaOu
7cZkzzhUGOTLIxW+ohRqdEOaV89hKitTWlRVNijjwRSGAwvOB5LRkTx5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdtPYv+eB1qDOJBDaeEXHGrUdDjMB8GA1UdIwQY
MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt
YjBiYWQxOGYwMmQwLzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw
LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSSn3VpP
a4KiL1RDC6NmnURjCKTQA7IvXO79WRE6593/PgBSc6gxWRFS45ORbBlnDOnn/2HI
5vjS/HIKcGfOP/Tw/tEj+FW7ssxee2kflpKDK5ZAkESj2y/HEvRr3alqzfChYeBB
0+IvDeo92YwKKhSozojYlixTUMo+Nz4Y4RFppBaPHUebIvq7FC6LGMsC6CaaVKCd
ImsCG6tJSqXCus90R3Ky4260N5HwDAbSf4jKTC8fyjcYKizojwBLoLj1dMQSF08e
kamlJ83bIlFST1zLK9iaRliItMmlZ8o7V80ChknNsKocEWI8/GiP0I09vNqP+HXB
OPE9hBALDR6VIQ==
-----END CERTIFICATE-----
Generated at Sun Jan 18 12:07:54 2026 by rpki-client