This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
File:                     I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json)
Hash identifier:          XcAc2AH00MEdOQlvP8oRx7syzUXjHHa26+YvHU52TAU=
Subject key identifier:   74:84:EF:92:BD:4B:7A:36:93:5C:D6:11:03:8D:9F:05:72:8C:52:61
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Certificate issuer:       /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial:       019BDEED5A38C36214CC6F4C198FEDDA19E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
Manifest number:          159C
Signing time:             Wed 21 Jan 2026 05:00:55 +0000
Manifest this update:     Wed 21 Jan 2026 05:00:55 +0000
Manifest next update:     Thu 22 Jan 2026 05:00:55 +0000
Files and hashes:         1: 5izoM-ae0viPYeMa8vG_OMdcCFM.roa (hash: TwuLhMgA2SHR4gXSc9/RCEg/7dBujziBPA56lp4yzpw=)
                          2: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=)
                          3: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=)
                          4: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=)
                          5: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: Gv6fp5hA82hi+3Lwft7Rhe2gIDhmQ6CQudc7hv1eiFk=)
                          6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=)
                          7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=)
                          8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=)
                          9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=)
                          10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=)
                          11: qJOi4zVPIJeiBz6kzCUQLpwMngk.roa (hash: vqduf5OrqJ9boER+M0PF82VqTnPYijX9elPDZEa03wo=)
                          12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=)
                          13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=)
                          14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:ed:5a:38:c3:62:14:cc:6f:4c:19:8f:ed:da:19:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
        Validity
            Not Before: Jan 21 05:00:55 2026 GMT
            Not After : Jan 22 05:00:55 2026 GMT
        Subject: CN=7484ef92bd4b7a36935cd611038d9f05728c5261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:1e:ae:bf:aa:0c:93:07:5b:9f:1e:ce:7b:
                    c1:a9:91:1b:0d:1e:43:b4:36:83:d5:b2:b3:91:cf:
                    fc:7d:46:47:15:55:7e:69:19:d2:cd:71:34:89:d4:
                    a8:7d:3c:d8:e0:b9:2e:b9:68:1d:93:07:01:53:fb:
                    96:0f:8c:d5:b5:97:04:9c:cc:b5:dc:df:e0:79:77:
                    be:c4:1b:bd:8c:90:bb:39:b1:a1:9c:47:85:f1:7a:
                    ac:3d:ae:2e:90:cb:85:a2:a7:e5:a7:88:c0:95:9a:
                    c0:07:b1:94:1d:cb:1d:b7:00:dc:2a:72:cb:7c:07:
                    eb:17:e5:7e:73:3a:68:c6:ab:ff:68:5c:66:0d:68:
                    df:e7:34:2b:ee:23:64:33:6d:aa:3d:02:5e:9d:f4:
                    99:f5:c5:a5:98:1f:94:19:77:6c:55:c0:fb:5f:ce:
                    ff:51:ce:72:5c:76:7e:77:76:0e:5f:5b:3d:53:cf:
                    ab:5d:4e:1f:de:5f:e1:07:09:31:4d:23:36:45:fe:
                    1a:f0:ed:fc:b6:ff:b2:82:49:2a:12:3a:d1:07:fe:
                    7d:55:49:c9:72:19:6e:db:01:c2:b8:9f:7a:9d:f4:
                    91:12:c2:72:17:81:57:86:18:06:c2:1d:44:17:9f:
                    12:65:9c:b7:4c:17:bc:8a:2f:0f:41:e3:61:9c:d9:
                    44:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:84:EF:92:BD:4B:7A:36:93:5C:D6:11:03:8D:9F:05:72:8C:52:61
            X509v3 Authority Key Identifier:
                keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:48:86:58:cd:a8:8d:ea:ad:94:77:8d:d9:1e:97:7d:99:10:
         30:2f:b1:27:09:e1:6d:a4:59:29:09:e0:ee:b0:73:5a:81:3e:
         bc:41:d2:a3:47:68:cd:fc:77:4c:18:f6:43:0c:09:c5:fd:d9:
         d8:56:86:b3:ff:e7:75:ff:18:a7:fa:4f:b1:22:1c:5e:2f:1f:
         51:af:b6:42:8c:7e:f1:ec:84:2b:ad:e1:c3:1a:87:96:42:e5:
         84:92:04:df:3e:a1:ca:68:8b:aa:18:13:d4:9c:d7:ff:e4:b5:
         7f:62:ea:d3:d6:3a:59:22:57:70:6e:ac:49:e1:9e:67:af:9b:
         70:a3:01:e7:06:e7:da:77:83:42:67:36:e8:ff:b2:58:93:c1:
         82:10:d2:3f:69:a7:bc:cd:40:46:71:d6:5a:f8:0c:5a:a4:80:
         dd:d9:cb:1e:76:aa:96:52:6c:76:25:97:54:5f:6a:c6:38:bc:
         f0:7f:41:5d:11:f2:6e:30:f7:47:38:f7:8b:9f:22:16:1d:21:
         0b:ae:e0:ba:de:34:7a:f4:e3:af:f5:88:fa:d2:39:d3:d5:c2:
         41:4c:0a:ac:2e:04:e9:e3:a5:c2:2e:11:90:d0:ee:26:b3:ea:
         f8:8e:c9:9c:26:5e:70:41:3e:9e:c6:d7:7c:4f:ec:e3:7b:aa:
         36:f9:49:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:58:26 2026 by rpki-client