This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          V8oE23zTGSLNiaH/wMuZ0FAd+eaOsh5AZ/4ND3QtBu4=
Subject key identifier:   D9:18:B9:F8:6D:7F:54:D6:26:0F:F5:A8:51:C1:32:E3:7D:5E:5C:01
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       019BFA648564267BFBB187F18B708B247336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          1810
Signing time:             Mon 26 Jan 2026 13:00:50 +0000
Manifest this update:     Mon 26 Jan 2026 13:00:50 +0000
Manifest next update:     Tue 27 Jan 2026 13:00:50 +0000
Files and hashes:         1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=)
                          2: 5EjWFnoaIA_ec9mseXZyDFMcQ_A.roa (hash: 6qzHpGrxdIjiu8z1NvLGeZSk8yFo48qK9MNsjEijr88=)
                          3: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=)
                          4: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=)
                          5: DsffUi0vviKbj6N3-1eID0Le5RQ.roa (hash: 1YA0KS7o6lebr91XZtj8rz008unRW2BLhJ6VFjJeeFg=)
                          6: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=)
                          7: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: qje7j8jHs3X5aAXYES8HHNQ4p0o2sbS59acfTJaBbZ8=)
                          8: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=)
                          9: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=)
                          10: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=)
                          11: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=)
                          12: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=)
                          13: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=)
                          14: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=)
                          15: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=)
                          16: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=)
                          17: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=)
                          18: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=)
                          19: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=)
                          20: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=)
                          21: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=)
                          22: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=)
                          23: jWoRYR9vyoo8wUHVWZfj1tYbQ0c.roa (hash: ki7rn/TPVckAv9oDK5QbYG54npDkl0kTyH1HzO1vxxw=)
                          24: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=)
                          25: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=)
                          26: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=)
                          27: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=)
                          28: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=)
                          29: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=)
                          30: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:64:85:64:26:7b:fb:b1:87:f1:8b:70:8b:24:73:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Jan 26 13:00:50 2026 GMT
            Not After : Jan 27 13:00:50 2026 GMT
        Subject: CN=d918b9f86d7f54d6260ff5a851c132e37d5e5c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:c3:b2:4a:77:2e:45:a6:95:03:cd:15:a6:
                    16:38:72:bf:13:b3:15:cb:83:b1:1e:d7:ee:d8:cd:
                    4c:00:47:3e:4b:bd:61:96:5f:74:4a:b2:54:fd:cd:
                    49:37:c3:18:32:04:ab:48:ff:b0:e7:e7:4f:8a:d4:
                    ca:eb:f0:16:86:72:82:82:c9:0a:b7:11:74:f5:4a:
                    8d:42:8d:ff:ad:65:b4:cb:f8:7a:41:7a:aa:06:9d:
                    6f:30:fa:53:df:e5:1c:08:e9:1f:f2:b0:af:11:77:
                    d9:43:3d:94:dd:c9:34:08:51:9a:31:98:ff:02:d4:
                    e6:5c:94:9b:45:84:ba:8b:1a:0a:c5:7c:fa:28:88:
                    9d:74:a8:9a:8c:4a:2c:f2:5c:07:b7:05:26:bd:ad:
                    3a:62:ba:c0:62:21:1a:4b:03:3e:66:b2:74:e9:77:
                    8a:ac:39:f6:6e:bf:1c:32:bd:df:03:c0:27:3d:70:
                    3d:0f:8a:76:70:2c:ae:59:97:8c:4e:ea:43:b4:ca:
                    94:4a:25:77:db:0e:a6:12:c9:1e:af:ba:67:a7:29:
                    ba:79:94:b7:b0:b8:e9:63:c3:df:64:8b:e3:a9:fb:
                    96:44:59:ca:5e:06:d4:4a:bc:f3:9e:e1:5b:2e:35:
                    ce:8e:c7:93:66:60:b1:5c:f3:00:43:0a:34:93:09:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:18:B9:F8:6D:7F:54:D6:26:0F:F5:A8:51:C1:32:E3:7D:5E:5C:01
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a0:b0:e2:1d:ee:28:93:c7:a2:da:46:24:b2:05:38:5a:d7:
         c6:83:20:f7:bd:64:c9:08:96:a0:e8:ca:e6:2c:18:4b:42:24:
         a9:ad:59:f2:23:fa:f0:f8:0f:38:ad:fc:68:08:5c:e5:8f:86:
         a5:2f:5a:59:58:43:dd:7f:54:ad:f1:5f:e7:54:05:3a:63:8d:
         a0:34:52:4d:07:14:77:fd:20:4b:47:14:60:c8:37:c1:e5:2b:
         c5:b5:dd:1b:73:2a:b1:f4:9b:72:d3:9e:25:94:ac:b7:f8:15:
         a7:da:18:2c:ba:b9:1c:cf:00:71:e6:e0:4e:5b:a5:94:90:be:
         15:5a:cb:d9:46:c5:95:52:d8:24:c4:53:51:a7:fd:d2:fe:92:
         97:f2:be:03:c1:2b:3d:ad:7e:a2:2e:48:42:f8:7b:59:4a:b9:
         ea:2f:af:d2:d0:b6:c4:ca:f0:9b:3a:d3:02:fc:ee:01:82:2a:
         ab:57:50:ad:19:86:c1:27:c8:7d:d1:60:e4:dc:51:d4:51:b4:
         bb:6b:0b:c2:01:16:2b:65:eb:8f:c6:97:46:b8:a2:de:d5:1d:
         e5:27:df:35:e4:b2:7d:64:96:0c:c0:c9:62:6f:be:8d:8e:3d:
         2e:60:76:b4:b7:27:60:5c:c0:d1:81:76:81:c7:e6:f1:ff:c4:
         50:b0:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:11:35 2026 by rpki-client