This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
File:                     SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json)
Hash identifier:          1oWtl4FBF+2zYNz5mdYo6VBHzIkEZZ5SwpB8bKcCTi8=
Subject key identifier:   65:56:9E:FE:4E:E2:09:D5:CE:9E:7A:BA:0C:6C:D2:BF:2B:AE:C1:F3
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Certificate issuer:       /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial:       019BFB091F8FB7EFC341CD78EDC8B9426793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
Manifest number:          0D4C
Signing time:             Mon 26 Jan 2026 16:00:37 +0000
Manifest this update:     Mon 26 Jan 2026 16:00:37 +0000
Manifest next update:     Tue 27 Jan 2026 16:00:37 +0000
Files and hashes:         1: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (hash: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU=)
                          2: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (hash: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg=)
                          3: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (hash: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y=)
                          4: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (hash: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk=)
                          5: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (hash: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c=)
                          6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: VRChv2P5bMQQa4c8LJ9k+hgxpesaK9SZ99p51ycwsMc=)
                          7: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (hash: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM=)
                          8: YfIHk0vhXMsawbQpQSUx4NkqARo.roa (hash: jyjsv+8CT/zFqpfSyQvWtrC5fl6L+Qm0Q0VVf1vxxCM=)
                          9: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (hash: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs=)
                          10: g3ikyABmwYnsstzPEiwf1y3JZw4.roa (hash: iV6diY2/uvF2VPragiyPeS/YOKkeG7Rg1youKOMMysY=)
                          11: iRf_gs5n9xup496QtRtuInpoD-U.roa (hash: BDQw7Ot2/EiioII6Hz7qQJc1eJwtGMRxOvQFtmCg1xA=)
                          12: jteFQiK73wa6i4lrpiIPNofIe0U.roa (hash: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM=)
                          13: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (hash: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg=)
                          14: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (hash: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738=)
                          15: qJcccqDxWrdJegvnpo2s2Knlr7s.roa (hash: PcVnyenRgB6ckra0K+D+gtKFqypcoJpDoAUxyPbLxQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:09:1f:8f:b7:ef:c3:41:cd:78:ed:c8:b9:42:67:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
        Validity
            Not Before: Jan 26 16:00:37 2026 GMT
            Not After : Jan 27 16:00:37 2026 GMT
        Subject: CN=65569efe4ee209d5ce9e7aba0c6cd2bf2baec1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:72:5e:7a:6c:99:60:22:f0:ec:53:37:08:
                    f0:b2:8e:68:91:ae:23:24:c2:12:e1:bc:6e:92:b4:
                    32:50:e9:b9:6d:b2:fd:55:07:74:81:84:1d:4b:20:
                    db:51:d1:79:07:cb:4f:b2:5f:63:24:f0:02:10:22:
                    b7:74:21:0f:1e:46:64:3c:16:3f:dd:b3:c0:38:b3:
                    b7:b6:c6:ca:6a:55:f7:45:2b:15:f3:bd:e7:97:8f:
                    51:00:9a:32:44:f5:1d:26:e4:40:eb:88:a2:f7:fd:
                    d7:c8:bf:e1:53:f2:41:d1:bf:b3:2c:a6:6d:ba:b5:
                    f6:b5:57:b0:d7:5f:90:b8:09:76:b1:d0:a3:75:96:
                    13:d5:45:c4:fd:c3:e2:6f:8f:1a:c7:bc:c6:ff:c9:
                    13:ed:87:b8:83:80:48:0b:47:47:b7:ad:22:21:bf:
                    3d:47:81:72:00:9d:dc:5a:74:14:ca:99:dc:d7:c9:
                    b4:51:cb:f1:4d:4c:c7:15:45:59:4e:a3:14:2a:8e:
                    76:11:22:02:a4:cc:fb:24:92:2a:0a:dc:0f:f5:a9:
                    e2:1e:ea:7d:73:89:7d:ce:d2:b0:1b:39:cc:81:44:
                    f0:e7:bf:3c:dc:79:45:57:2c:74:b2:bf:d4:c7:7c:
                    e6:c3:40:be:db:0f:c9:31:91:d1:2d:c6:83:cb:6e:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:56:9E:FE:4E:E2:09:D5:CE:9E:7A:BA:0C:6C:D2:BF:2B:AE:C1:F3
            X509v3 Authority Key Identifier:
                keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c9:96:79:7d:25:6c:57:b5:c1:1c:03:fd:88:89:3f:94:0e:
         9a:f1:a0:8d:f2:38:95:64:21:7b:2e:f1:82:28:c4:80:14:9e:
         99:d6:a9:68:4b:eb:dc:4e:8e:1b:cb:fc:8b:29:83:77:9b:03:
         46:c7:74:94:e5:c6:91:d5:bf:b2:79:d6:de:1b:64:a0:d0:a8:
         16:08:d6:fc:f7:ed:9f:68:6f:69:66:63:c8:8e:88:d7:bb:55:
         cb:2e:02:13:3c:20:4b:5c:67:38:5f:ed:59:9f:59:af:44:ed:
         fa:c7:23:0c:1e:ef:89:7b:78:1d:4b:6d:5e:22:68:53:29:e7:
         e0:d0:02:36:d8:f7:d4:c1:36:05:67:71:0f:1e:d1:2b:e3:ec:
         55:82:83:c6:33:c1:69:52:4c:d6:a0:db:ea:d6:b4:7f:50:f3:
         97:0d:71:89:bd:65:cd:35:f7:03:8d:17:b6:29:aa:9c:65:c8:
         21:2a:47:8b:19:d9:f7:d9:9b:f2:a3:98:de:09:c7:00:10:f0:
         98:39:4f:2e:04:25:ce:ba:0e:7e:34:d7:be:0f:8c:27:b5:6c:
         a5:70:2f:b0:20:74:51:13:6b:66:3d:29:4d:c1:c2:2d:93:44:
         4f:a8:96:61:6a:43:88:1b:08:af:18:6c:29:71:b9:a5:cd:af:
         11:71:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:12:13 2026 by rpki-client