This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
File:                     xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json)
Hash identifier:          uRJHM6EAg5czZ+KNBq+tnDsINdJyIp/UYjLrX090Kuw=
Subject key identifier:   9E:25:FF:78:4D:68:0A:5F:58:3E:AD:0F:BC:D6:3E:71:1E:00:2B:C5
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       019BFC5354FC7D6466CADD60FCE45F8E2D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
Manifest number:          1805
Signing time:             Mon 26 Jan 2026 22:01:17 +0000
Manifest this update:     Mon 26 Jan 2026 22:01:17 +0000
Manifest next update:     Tue 27 Jan 2026 22:01:17 +0000
Files and hashes:         1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=)
                          2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=)
                          3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=)
                          4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=)
                          5: 9tVl0OudtWaiiEvwscrGSSX56jU.roa (hash: th1F5H92mnPFNJ3P0FMgp4iOub0klsX+xg8MmiRJg5A=)
                          6: AyulhXyOhP2buicHYb4PF6awarA.roa (hash: o1jB5gIRXTUngRxBAxg2DTNhVQcSy127ziFioxQ1PVM=)
                          7: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=)
                          8: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=)
                          9: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=)
                          10: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=)
                          11: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=)
                          12: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=)
                          13: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=)
                          14: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=)
                          15: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=)
                          16: XSRfDKJB1vWxhWr5_nnhi8kY_Ro.roa (hash: vbcx865viaCEEplLJzs5WTHypNQpAu7A3ivTLIG9UFw=)
                          17: XUBXC0DROf8_aCxS_neH8O6J0e4.roa (hash: /C5B3L/2hO5EvNBmbIy9wgx/1sbjdRkGMDg2OXb+bOM=)
                          18: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=)
                          19: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=)
                          20: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=)
                          21: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=)
                          22: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=)
                          23: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=)
                          24: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=)
                          25: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=)
                          26: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=)
                          27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=)
                          28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=)
                          29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=)
                          30: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=)
                          31: r5EQFD61hWzkJjB7v7Y30uUhewc.roa (hash: 6ypgI1gg3G9f0KTPTcY2gQYHH5FXI074w6M2BK68aUs=)
                          32: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=)
                          33: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=)
                          34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: mCre7AFj63oU4X3fDjUi4mhGWuCstV8eldkn2KIWQ1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:53:54:fc:7d:64:66:ca:dd:60:fc:e4:5f:8e:2d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Jan 26 22:01:17 2026 GMT
            Not After : Jan 27 22:01:17 2026 GMT
        Subject: CN=9e25ff784d680a5f583ead0fbcd63e711e002bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:53:0c:f4:32:1b:bf:20:6e:87:3e:20:c5:08:
                    14:5a:83:de:38:f8:f7:4c:02:fb:1d:ea:2b:d1:e7:
                    5e:a9:ae:7a:3a:4f:ce:76:76:63:6b:d2:f2:fe:86:
                    ab:07:e0:ea:d3:6f:b4:f6:70:70:fd:11:43:73:12:
                    bd:0f:24:55:17:43:00:5b:6a:5d:fa:1f:05:af:e7:
                    67:f6:df:11:a7:ac:3a:70:04:be:aa:02:1f:7d:1a:
                    a2:d0:28:ec:f4:1d:99:67:ba:cf:b6:c5:d0:d4:78:
                    00:e9:2d:62:f6:17:d1:f9:e9:70:0d:83:47:a4:8c:
                    12:32:73:19:4f:9c:c2:55:0d:59:13:7b:a4:b6:41:
                    7b:cf:38:ef:66:bb:8d:8b:0f:13:15:04:57:af:13:
                    66:5f:80:af:92:d1:f8:ea:f5:34:23:f2:74:bd:08:
                    1d:af:21:0b:1c:59:59:1c:7f:1c:d3:4e:92:d9:f7:
                    90:aa:27:37:76:0e:94:27:46:87:50:a2:eb:ce:51:
                    0e:9d:af:75:e2:1a:54:d4:f8:bf:29:f5:48:c7:c7:
                    3b:1a:6c:2f:eb:09:ad:71:d3:17:2f:ac:d7:03:9f:
                    23:06:5d:d6:2d:b5:06:dc:87:2e:48:3f:10:b8:1b:
                    eb:ef:cc:5a:15:d7:72:35:7f:3b:d8:4c:aa:73:14:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:25:FF:78:4D:68:0A:5F:58:3E:AD:0F:BC:D6:3E:71:1E:00:2B:C5
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f8:68:03:7b:90:04:66:d6:da:2b:ee:7b:1a:14:fc:e2:c0:
         d1:29:e7:1b:13:e9:65:17:39:8d:b9:3b:ae:2b:54:91:84:30:
         f7:93:35:3e:c0:73:7a:7d:1d:fb:07:23:8a:eb:77:76:2e:83:
         40:53:db:7b:c8:d2:94:6d:38:2b:d4:c1:07:01:bf:da:58:45:
         4c:30:e7:19:78:75:d1:56:6f:90:10:4b:e2:fd:43:26:ba:f9:
         57:b0:35:cd:26:7b:9f:e8:6e:16:de:0e:cf:51:55:8c:18:f0:
         f8:7e:03:ed:01:7a:26:94:90:df:47:49:47:86:15:ba:13:82:
         bd:c8:24:d0:9b:a2:a9:1a:8d:d4:00:ac:40:5c:de:e4:78:fd:
         f0:90:cf:d5:c2:20:d0:59:f6:58:3a:91:32:d0:e3:de:97:a8:
         4d:1e:41:5d:87:ca:7c:dd:49:58:b6:eb:df:2e:e4:9d:04:c6:
         22:cb:b2:af:63:d6:7a:19:19:3c:40:0a:cc:a5:17:ea:22:66:
         b8:0d:e3:d8:56:d6:2e:21:4a:21:e5:2b:9b:10:ff:9d:eb:4e:
         96:6e:6c:1b:44:bf:58:c8:66:69:e5:5e:a6:fc:8a:cf:87:e6:
         dc:0d:aa:2e:46:d3:e0:4b:86:97:c7:40:26:c5:5a:d4:77:9a:
         da:36:3e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:19:17 2026 by rpki-client