This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
File:                     dTm3oSNBeqcZMllGqong8wqwygk.mft (raw, json)
Hash identifier:          52zZYnXhU0oS+Zde18XaAs61e77/niMukUd0M72ex1c=
Subject key identifier:   16:B0:3B:0F:11:11:85:76:D9:8F:0A:62:CF:2A:F8:CC:C9:69:F7:C6
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Certificate issuer:       /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial:       019BFBE54A89ABE9E6A911F580ACBF40E923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
Manifest number:          17FC
Signing time:             Mon 26 Jan 2026 20:01:06 +0000
Manifest this update:     Mon 26 Jan 2026 20:01:06 +0000
Manifest next update:     Tue 27 Jan 2026 20:01:06 +0000
Files and hashes:         1: 0ZCplUocK0t7bDn-aV_dYdEIf1g.roa (hash: PhCo67AThImAAICRbSKmw/MtJm7M6upTm1QEQIqyWmM=)
                          2: 7sVlthbHEZHYrJEkSNmKqTiGTGU.roa (hash: 9pR0VQnrEJxcV1nhe8EuJeaucG1M2LQN/bD3SKHmkOU=)
                          3: 9CTzlnPFvIq3T_H5OTBDue8Fp_Y.roa (hash: /64m6pcbXCI/USW9luQgRTop6wq7w1tWU4vkxTTIED0=)
                          4: C7OQreXH5XPqxZsAOPw_HJpsGo0.roa (hash: TIki96X5dEnDUKJ64GkJeMNjvAD8ackJDsoMX6jTIHg=)
                          5: LiUFUxV8XWhTT5shfLiGfbuAMOw.roa (hash: aRDwRFjTPvq4k8j5/tgsgvtEF8G8MKbtJY2pyhjrrzI=)
                          6: OJGqgIdJ01gO1owrgbmqcY2GptM.roa (hash: /ZtVL1w4/auWCjNxmR/FovsgC3ZVYneYdjY7NZYxZZc=)
                          7: dTm3oSNBeqcZMllGqong8wqwygk.crl (hash: AurGwSGjVISXWDMbUZwYK2++Uabeclf67bdJspw/1pM=)
                          8: fHozs5tMz7kIjrLoS5xjOq0Zfcc.roa (hash: mgxi+ZbD7+yz67tvJMbZDZV/reH5WuncejcL1UkrxoM=)
                          9: kD04CUjg_MqICR0s9XTXa_0lsjE.roa (hash: GhUHdSAXykY7wB/NoCCZCZI/ZAtHhgLcQXX44IHbUsI=)
                          10: pUfEfBxJJ0L_zUfIbchL9AjuyKs.roa (hash: qokHZUKiXCUHjKAfZnVejSkgfD1BBB0fdWuxvKIwBrU=)
                          11: r5srZe-xUm0Yd0akgceKp5wi398.roa (hash: fg/QInXk+zpCLixKR8FC3dEYblIzWioFCagp25roJXU=)
                          12: rUQ-48pTHXQnGwITDjHNDmYKStU.roa (hash: 5rjqV6UMpYstWovN2+CGxz0WLz8A3h2zK9p4XttXPdQ=)
                          13: wonfwrKeB1K76TqPsMaqoDKooXU.roa (hash: SEBH6WAA2Az371IGZKWSIV+f6pZndD0Bpz9/N1ofv9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:e5:4a:89:ab:e9:e6:a9:11:f5:80:ac:bf:40:e9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
        Validity
            Not Before: Jan 26 20:01:06 2026 GMT
            Not After : Jan 27 20:01:06 2026 GMT
        Subject: CN=16b03b0f11118576d98f0a62cf2af8ccc969f7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:5d:9c:13:c0:d9:99:60:06:64:1a:ab:18:
                    bd:49:03:0e:1c:ec:59:02:49:2e:b9:85:cd:9e:d5:
                    4e:0e:84:8b:85:1b:2c:8c:4d:16:82:45:7e:0f:77:
                    33:18:21:4d:fb:31:d1:c6:db:80:41:85:18:c4:6c:
                    97:db:18:c1:7d:8d:79:2f:49:c7:83:7e:87:40:e3:
                    19:0d:5d:45:b5:23:97:04:e3:76:b1:ca:ba:14:6a:
                    82:be:72:f9:8b:41:96:88:bb:aa:0c:5a:46:e6:00:
                    13:fc:b6:58:0f:f2:3f:13:4e:40:de:93:3d:2f:de:
                    00:63:58:c3:80:40:c4:3d:b3:31:d1:ff:7a:9c:1f:
                    7a:0d:57:fc:04:df:79:21:52:f6:8d:51:d4:b1:be:
                    d0:a3:1b:ad:65:3d:09:2d:61:4e:d5:73:c8:f6:32:
                    bf:e4:44:d7:f4:df:0f:de:17:93:f7:a4:71:de:bf:
                    e7:22:18:21:85:1a:3b:29:e3:30:5d:1e:6d:30:e0:
                    2b:27:58:aa:92:29:38:31:c9:77:80:cc:3e:d9:53:
                    6b:45:f0:d9:9b:b6:41:2b:14:65:93:db:e7:51:4c:
                    cc:e5:45:fe:38:4c:d7:39:c8:21:3d:22:cd:c9:76:
                    1f:d2:0d:44:e3:a4:fd:21:d5:fa:96:8d:a6:d1:ff:
                    55:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B0:3B:0F:11:11:85:76:D9:8F:0A:62:CF:2A:F8:CC:C9:69:F7:C6
            X509v3 Authority Key Identifier:
                keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:36:92:54:eb:61:13:c6:15:1d:0c:12:e3:b5:ea:8a:b3:38:
         46:41:05:79:06:0c:21:9a:f1:09:b8:66:bb:13:1e:c4:0e:6c:
         96:9e:e7:32:0c:b7:b3:ff:67:06:4e:80:b9:41:b7:7f:fa:4c:
         21:c2:f7:87:99:fc:92:51:d8:0e:43:8d:1e:43:4a:d7:33:86:
         1b:16:1a:0e:bb:da:df:05:31:d5:7d:22:c0:78:75:5c:4f:b7:
         e5:8d:c7:15:43:13:7e:40:59:b7:aa:7c:e2:40:15:65:9a:ab:
         3d:cf:18:38:5f:47:e5:0b:23:c2:70:35:c4:54:09:65:c9:06:
         58:44:df:43:f6:92:97:c3:1e:b9:b1:e8:2c:1a:ce:7f:6b:48:
         79:a3:83:6c:de:f4:fb:7e:39:67:bc:ed:35:08:35:31:a7:7d:
         11:5f:fa:0e:d2:03:a8:9c:9c:85:e2:5b:a4:4b:3f:10:e4:be:
         7d:35:52:21:a2:ff:e2:66:2c:80:bd:4c:7f:67:52:38:0e:c4:
         5d:c8:ec:65:ce:f1:68:fd:1c:7e:9d:d9:1d:cc:f7:13:29:80:
         65:9c:aa:83:26:65:cc:b7:a1:47:54:0c:80:69:ec:0e:6b:59:
         f5:f1:fd:81:69:fd:9e:be:99:6c:08:c5:05:58:45:06:bd:02:
         85:ed:bb:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv75UqJq+nmqRH1gKy/QOkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi
MGNhMDkwHhcNMjYwMTI2MjAwMTA2WhcNMjYwMTI3MjAwMTA2WjAzMTEwLwYDVQQD
EygxNmIwM2IwZjExMTE4NTc2ZDk4ZjBhNjJjZjJhZjhjY2M5NjlmN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W9dnBPA2ZlgBmQaqxi9SQMOHOxZ
AkkuuYXNntVODoSLhRssjE0WgkV+D3czGCFN+zHRxtuAQYUYxGyX2xjBfY15L0nH
g36HQOMZDV1FtSOXBON2scq6FGqCvnL5i0GWiLuqDFpG5gAT/LZYD/I/E05A3pM9
L94AY1jDgEDEPbMx0f96nB96DVf8BN95IVL2jVHUsb7QoxutZT0JLWFO1XPI9jK/
5ETX9N8P3heT96Rx3r/nIhghhRo7KeMwXR5tMOArJ1iqkik4Mcl3gMw+2VNrRfDZ
m7ZBKxRlk9vnUUzM5UX+OEzXOcghPSLNyXYf0g1E46T9IdX6lo2m0f9VEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBawOw8REYV22Y8KYs8q+MzJaffGMB8GA1UdIwQY
MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzaSVOth
E8YVHQwS47XqirM4RkEFeQYMIZrxCbhmuxMexA5slp7nMgy3s/9nBk6AuUG3f/pM
IcL3h5n8klHYDkONHkNK1zOGGxYaDrva3wUx1X0iwHh1XE+35Y3HFUMTfkBZt6p8
4kAVZZqrPc8YOF9H5QsjwnA1xFQJZckGWETfQ/aSl8MeubHoLBrOf2tIeaODbN70
+345Z7ztNQg1Mad9EV/6DtIDqJycheJbpEs/EOS+fTVSIaL/4mYsgL1Mf2dSOA7E
XcjsZc7xaP0cfp3ZHcz3EymAZZyqgyZlzLehR1QMgGnsDmtZ9fH9gWn9nr6ZbAjF
BVhFBr0Che27UQ==
-----END CERTIFICATE-----
Generated at Tue Jan 27 04:16:05 2026 by rpki-client