This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          kXgYD2b+X1wS0UHFqnrV0jMxu9e+KgNhWDSsxnCh+0g=
Subject key identifier:   EC:53:54:DA:FA:A4:86:56:27:80:D9:8E:59:5F:4B:E3:6B:18:E9:58
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       019BDFC9CF262BFB289FA447C72279382D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          1883
Signing time:             Wed 21 Jan 2026 09:01:43 +0000
Manifest this update:     Wed 21 Jan 2026 09:01:43 +0000
Manifest next update:     Thu 22 Jan 2026 09:01:43 +0000
Files and hashes:         1: 1-sDtsx1EMme_ngzlHFFVHxn1GbM.roa (hash: YLpNQq2JWNqBFzY5wTwhQbzICZTjW6U3MS8vPk443Mo=)
                          2: 3v5keHAqK4zqhQB_uQznSph1Diw.roa (hash: jCOl+4ngxgebTeflrMMZ3kTPxa3cepM3MbMRipIrhQc=)
                          3: 5B318zH8NOu9OBi_TuoXg4_JM2k.roa (hash: KdWhEJLnniiRDILznsehxHC1zHSWP6KdhnB/WWL1Hi4=)
                          4: 6dJJQaLsf-pJV9GESFzivPI_ry0.roa (hash: m4MRzFt8TKcOFXczGZjYk0il1r1Oq6foVjuEdpP4OLQ=)
                          5: DJFcihK3KyDMA5inHd8qVc8pMd8.roa (hash: 7aHvIhUD1Pwu4HtX5DwhI19v0UPceOldhZKd58QrEWA=)
                          6: D_g2kJlELMuoefn2HH3Y2o0l5YQ.roa (hash: dyiFDNNm4intjG5QxyjFGbaTlhBNt77Zx7ofZH6deL8=)
                          7: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: AnMdlIucegTHOt75FEHqpA59VBC8T4H4u0xG93vpgfE=)
                          8: J_Cjuoz4DtLmBi0WfCgJgRq21wk.roa (hash: fA4gjnSI4d76aMPIiYbqAlxasjqqD9PxHceAqm4716Q=)
                          9: N7wIAVShGLQyli3xNuOZyqJnQO4.roa (hash: AgMVywaJAsy8gUEhbniXUCBpJabLSJ38CmQWxUFEkEI=)
                          10: NkUv8tT-ajiDpIriTdTmg1rESxQ.roa (hash: seqVba1oO6/3hfFI32i0NdWB9EI7RH+MCROkDPZc0ZY=)
                          11: OfJWGzh3EJhJDnotwpPBu62vy1g.roa (hash: MhO2XX5OLieGQFxwEuA3XpaP5smjhsn06HFUwLnfiN4=)
                          12: TVQnbaL3VCztBv4q7ycrZZTOHOc.roa (hash: bC6KDiPDLB7pjAOZ1rB1QtdHfKPoray7E8FKc5HGj+g=)
                          13: VYh_4SSdywWTFGOHOndKmWsl6so.roa (hash: Ikb4E10le1ue8RPiBMWpsjNGBjPCnExNmxi0KBAgKM4=)
                          14: X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa (hash: SE7pkhcUNXRDeV5ZRqQnZ58B47F0LyM4s+/68mhkYxQ=)
                          15: Y1yA1kANJJobRTA5Qtcz2GHMcvU.roa (hash: 66D+EjpZVtKquzTZECn2wfEp4pESBEx3bLq+hPnG8HI=)
                          16: ZUVBQ1r4rM0fNpL1kCVZVyDtAbg.roa (hash: XutBjsWzeDRqYrHe3w88udQRKf0KrHbNkeI/S0YKKn0=)
                          17: _-TiV1qoAPPw8SPSrMcBVzTznwE.roa (hash: Pvgk+aRssPeQ+g6cPNxNpBek3/VhtaCOTsYLRLNNB4o=)
                          18: dxo24NAWy8p1m5MAZSvGymiEUY4.roa (hash: 7VqVZBdxevM4HgdNCCGnVCUjB06a91AHxuxhr9+MQqM=)
                          19: eQ4-ZIb4TKyKtqkQiCmvfHTuVxg.roa (hash: 3JVffmd7aGtX/3AO2YgxeAh6xylwcQTf14sQ9sPkm/g=)
                          20: k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa (hash: 5Ng2eom8lxcHR5nDEgtd/5I+6rVuKWoiMkhVtoQFVJM=)
                          21: kdw1-tHkNLYRNNm82dVYo2800EY.roa (hash: XNpeXsK3ii0TUySxPOEOyCSQ4r7TJIfM5e7YmPFrHxs=)
                          22: mrh0y_ObvDXVw_6YS_au-VzRPaA.roa (hash: doqouYnXlAtVY/2YlaJMN33MBRnapyWoXbfp5rb59mU=)
                          23: pA1ysw7euEwsawBt3WsvgzNCTVc.roa (hash: IHFmvwJcfsynVr/cn/JAzWiobBCXWx/OYDSpOIF4AC0=)
                          24: sZwcv6uk9UwR_63DSdfqrxSLwN0.roa (hash: DP++FAhaLrNuZX1u6e8EfH/SH18/oRgnim2vKo4+8QQ=)
                          25: shFmXFepoVkoPuQaH7iwNirZ3XU.roa (hash: jDkMxVrrv2BYtLq4CSplaeMuVqAXK6DpU5S2779dHHY=)
                          26: tuh9bTDNsuijEEF_1hjMDBzb60Y.roa (hash: NaMz9HaNco8VZFC2aGISUfFdhyLdNpp7L/OREqXeFJg=)
                          27: uX4xjA4a9NlDQbfRFcZwVkyWUus.roa (hash: f6MBYwHAEYsVkFoRtsJQxmJ3Dq5gG+hbXJYYbrTiM9Y=)
                          28: v1HTLFJCs5Ua6altnuNbzMS6M68.roa (hash: hP6DlGZ7oCEXWze3wji21g4MSy29EOBBfOBBgyLS7UE=)
                          29: vcKGcg7yfm5OJBRmK9UMG7YPxlE.roa (hash: lC2nvLTapMxLzuBLLcR7m2BlyD8SVIXqzMfLdXwZD5U=)
                          30: vuRjeq6Hw4CRVKhaZ9mJU5QQ-8w.roa (hash: IY4BrewFqRlekR75+D0bMoN40ONA0lrT3ykyZO92GIg=)
                          31: wDFzlPwsNs0v_IQaT4j_896eKWU.roa (hash: h8DXXObKKEymdsZZeHWI8jT1TyiZNQftSi9uTSDfXyU=)
                          32: wJhBirIGDG5CpWVFPtacVacZOVI.roa (hash: 3n/bwQkmOj6Btxw1bOnJ8wdv1zKEZOjjavJjnLqf2ys=)
                          33: yV7jKZqczgrPDGRpe_5ykccZCz0.roa (hash: CXmYu488BCna3Chnev81BlIc+TedhSwGv5Tq+LkVCsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:df:c9:cf:26:2b:fb:28:9f:a4:47:c7:22:79:38:2d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Jan 21 09:01:43 2026 GMT
            Not After : Jan 22 09:01:43 2026 GMT
        Subject: CN=ec5354dafaa486562780d98e595f4be36b18e958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c9:74:d2:89:ca:65:cf:79:d7:46:c3:34:28:
                    84:36:38:45:a7:ac:34:f2:04:a1:84:3b:a0:ca:01:
                    7e:83:90:1a:3a:f1:8f:b0:0e:6b:7d:32:c1:76:34:
                    c9:2a:c1:d0:f9:e6:53:64:60:a6:77:eb:86:d7:e1:
                    9f:c7:9f:64:93:b0:99:b2:09:28:17:db:4d:3b:71:
                    b5:95:56:14:be:b9:b6:7a:32:05:72:42:8c:e4:c1:
                    7b:70:e8:03:3e:53:61:7c:d2:46:2c:f1:f9:1d:18:
                    cd:0b:3d:57:b3:10:c5:27:c4:f5:32:9e:da:a6:fa:
                    93:a5:14:9e:0d:8c:e5:b1:e0:20:7c:db:d7:40:dc:
                    ae:5e:d8:b6:ef:cb:35:c7:9a:f0:c2:7b:a1:5f:aa:
                    31:39:f4:5b:74:85:7d:92:40:35:46:73:7a:77:59:
                    0f:53:5f:b2:8f:72:70:66:9c:96:e7:0c:80:0f:6d:
                    0e:85:a9:45:17:d8:91:2f:a8:fb:d8:cf:bf:2d:3d:
                    ab:4e:af:52:e4:1b:0c:98:1f:fc:2d:da:15:dc:03:
                    36:6f:49:17:c4:b7:fa:43:ac:b3:62:40:d6:04:83:
                    e3:fd:c6:6b:a5:bb:9e:fc:84:d3:78:59:6a:ca:a0:
                    85:84:11:b0:80:58:e0:7b:9f:a8:79:bb:de:cf:63:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:53:54:DA:FA:A4:86:56:27:80:D9:8E:59:5F:4B:E3:6B:18:E9:58
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:26:b4:65:cf:e8:c0:ae:b3:94:6f:f2:05:e2:0d:75:0d:5d:
         da:34:fe:f7:66:0e:26:b1:11:db:be:43:a8:5c:3b:b2:0c:34:
         40:37:66:16:56:35:f9:30:c2:c1:73:7a:1a:07:12:38:1a:1f:
         0c:8d:31:e6:4c:6d:2b:06:45:77:7f:02:91:d0:5f:99:ff:42:
         b9:3f:a2:08:4a:ad:31:36:6d:b8:1c:83:e3:19:ec:a1:7e:18:
         13:12:3d:7f:0f:62:d9:fa:ad:49:23:ac:13:32:26:ee:ec:69:
         39:f6:a6:71:3f:c8:ee:1d:f6:d8:c4:4c:62:22:8f:c1:33:bd:
         7c:cd:bb:7a:71:29:ae:a1:62:06:93:89:99:b8:72:9c:d7:48:
         6e:36:d7:96:a1:5f:62:de:f4:87:b8:ad:29:79:75:e3:53:bb:
         3d:10:3d:aa:bc:6b:10:57:e6:c2:06:a3:9d:51:4e:67:dd:6c:
         31:0f:1a:ae:b0:47:7a:58:87:78:2c:3e:fe:82:e6:62:9d:a9:
         e8:1d:8a:08:e0:4f:6b:39:3b:ee:e3:0a:98:00:5f:e2:de:90:
         9a:5a:b6:02:91:13:ec:a5:7b:44:7a:7c:72:0e:d4:74:99:3c:
         dc:b0:2d:03:28:e2:60:63:d4:83:42:b5:ea:4d:a3:d4:3d:ee:
         db:94:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 11:27:11 2026 by rpki-client