This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
File:                     Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json)
Hash identifier:          MPoRHW/zNCUUx21+BaYxdjNh9HROwYRmM/MGwm7CaFQ=
Subject key identifier:   75:A0:5A:C7:51:B9:A3:2D:47:44:30:15:EF:26:8E:CF:AC:47:77:AB
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Certificate issuer:       /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial:       019BFC52D96939CEA84A1809F454ED1059CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
Manifest number:          1808
Signing time:             Mon 26 Jan 2026 22:00:46 +0000
Manifest this update:     Mon 26 Jan 2026 22:00:46 +0000
Manifest next update:     Tue 27 Jan 2026 22:00:46 +0000
Files and hashes:         1: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=)
                          2: 5xaOtvdRRcRbWJ7RO2zXZTBbzHo.roa (hash: jVjnXKJCmaM69ihXNF4Fvp6wlNMh49T6+g/No1R59Xw=)
                          3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=)
                          4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=)
                          5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=)
                          6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: EzadeHiuyNHSK6b6i4ODdHlaGXfgmBXsmAkT0y0DEe4=)
                          7: giCv_eoabdDGNQ76ze62UyFFjv8.roa (hash: CGWpYFajJaXhrm0XFaoEyMaeJXprNddmqt1FMrWwQoA=)
                          8: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=)
                          9: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=)
                          10: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=)
                          11: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:52:d9:69:39:ce:a8:4a:18:09:f4:54:ed:10:59:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
        Validity
            Not Before: Jan 26 22:00:46 2026 GMT
            Not After : Jan 27 22:00:46 2026 GMT
        Subject: CN=75a05ac751b9a32d47443015ef268ecfac4777ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:fa:4c:63:53:17:6b:04:0e:50:43:ca:f0:
                    43:2b:54:60:6e:69:1f:a9:52:c9:c3:7e:d8:ce:6e:
                    7e:fb:0c:1a:90:7a:ab:87:c3:c1:fd:fd:0b:79:1c:
                    6e:b7:41:52:2a:00:14:b2:a0:0f:d5:4a:77:6c:f1:
                    3b:c2:65:00:9e:4e:7a:19:8c:b4:12:3d:a9:3a:14:
                    c0:a8:24:37:a1:4e:95:c5:66:ee:21:74:f8:f8:db:
                    0a:57:5c:bb:d1:a4:69:1c:40:1c:e3:82:cb:0b:2b:
                    83:9d:75:50:09:27:5b:81:31:bf:7c:bf:a3:ee:49:
                    9d:6b:64:9b:cd:d7:a3:70:6a:71:c2:54:6c:85:75:
                    a1:8a:be:7b:a2:51:14:2c:76:b3:7e:1b:24:a3:5e:
                    83:87:3d:86:7b:94:31:6f:bb:f7:42:43:6a:69:1a:
                    5d:aa:ea:de:a4:2f:93:72:c3:1c:50:d6:c5:ef:17:
                    95:97:f1:9c:21:42:5d:ea:8f:3b:e1:6e:42:b1:41:
                    a4:01:dc:b2:be:dd:a6:e6:df:d3:42:53:f8:90:a8:
                    da:8a:62:a7:56:ff:a1:64:65:0b:e6:05:ce:70:63:
                    76:51:04:b3:8e:c1:ba:9e:94:07:81:fa:34:1c:9a:
                    1c:4a:22:f5:59:45:66:88:4b:00:b0:0b:23:b5:42:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A0:5A:C7:51:B9:A3:2D:47:44:30:15:EF:26:8E:CF:AC:47:77:AB
            X509v3 Authority Key Identifier:
                keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:75:ac:c8:a7:a7:fe:27:b6:06:a3:20:3a:1a:b6:85:6e:
         30:24:f1:75:39:9b:b3:97:88:c9:5e:5a:ff:1d:d5:6e:0b:ab:
         90:04:dc:c1:1c:41:02:b9:73:24:9d:7e:a9:e8:00:33:9c:3d:
         40:97:f8:15:57:f8:69:8b:33:72:04:14:e0:2d:67:f4:0d:4a:
         dd:24:09:f0:26:f9:47:4b:84:95:7c:5f:7b:e5:d1:b4:ba:65:
         c5:21:24:ab:43:a1:c2:de:7d:d2:e9:69:df:37:40:9f:ba:cd:
         e9:a8:f9:f5:f2:3f:b4:93:3d:cb:fc:0c:ce:14:59:d4:6d:19:
         fc:3f:17:ad:01:6a:02:f1:d9:ca:1b:d7:54:79:d6:54:ff:bb:
         f4:c6:e2:b4:56:a6:6f:d4:ec:77:88:d9:ef:9e:23:75:d5:40:
         b7:79:8d:5a:de:4f:57:64:4c:79:8e:ac:d9:12:f7:cb:ce:05:
         70:5d:0d:6c:6a:38:80:e4:bb:6c:55:85:c5:80:a5:00:eb:c4:
         fe:33:a8:be:1e:26:8e:34:30:fe:21:62:b5:79:0f:b9:57:69:
         09:61:a4:aa:3d:55:29:bb:f0:47:44:65:6d:0f:11:99:2f:81:
         5e:02:64:09:08:ed:dc:cd:8f:7a:05:74:fe:61:b7:47:ae:b3:
         73:47:75:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8UtlpOc6oShgJ9FTtEFnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz
NjliYTQwHhcNMjYwMTI2MjIwMDQ2WhcNMjYwMTI3MjIwMDQ2WjAzMTEwLwYDVQQD
Eyg3NWEwNWFjNzUxYjlhMzJkNDc0NDMwMTVlZjI2OGVjZmFjNDc3N2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBH6TGNTF2sEDlBDyvBDK1Rgbmkf
qVLJw37Yzm5++wwakHqrh8PB/f0LeRxut0FSKgAUsqAP1Up3bPE7wmUAnk56GYy0
Ej2pOhTAqCQ3oU6VxWbuIXT4+NsKV1y70aRpHEAc44LLCyuDnXVQCSdbgTG/fL+j
7kmda2SbzdejcGpxwlRshXWhir57olEULHazfhsko16Dhz2Ge5Qxb7v3QkNqaRpd
qurepC+TcsMcUNbF7xeVl/GcIUJd6o874W5CsUGkAdyyvt2m5t/TQlP4kKjaimKn
Vv+hZGUL5gXOcGN2UQSzjsG6npQHgfo0HJocSiL1WUVmiEsAsAsjtUI5rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWgWsdRuaMtR0QwFe8mjs+sR3erMB8GA1UdIwQY
MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt
ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj
LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzN1rMin
p/4ntgajIDoatoVuMCTxdTmbs5eIyV5a/x3VbgurkATcwRxBArlzJJ1+qegAM5w9
QJf4FVf4aYszcgQU4C1n9A1K3SQJ8Cb5R0uElXxfe+XRtLplxSEkq0Ohwt590ulp
3zdAn7rN6aj59fI/tJM9y/wMzhRZ1G0Z/D8XrQFqAvHZyhvXVHnWVP+79MbitFam
b9Tsd4jZ754jddVAt3mNWt5PV2RMeY6s2RL3y84FcF0NbGo4gOS7bFWFxYClAOvE
/jOovh4mjjQw/iFitXkPuVdpCWGkqj1VKbvwR0RlbQ8RmS+BXgJkCQjt3M2PegV0
/mG3R66zc0d1zg==
-----END CERTIFICATE-----
Generated at Tue Jan 27 05:02:37 2026 by rpki-client