This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          e5uQf3co9dHD+E5Z3o5+o9EhRtlp94GLcLZt2sP0G3k=
Subject key identifier:   BC:29:C5:66:E3:6D:01:9E:35:77:F0:6C:10:B3:DC:1B:26:3A:0C:09
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       019BFB40B98C251099FF3A471E9A4E1F84BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          0DFC
Signing time:             Mon 26 Jan 2026 17:01:21 +0000
Manifest this update:     Mon 26 Jan 2026 17:01:21 +0000
Manifest next update:     Tue 27 Jan 2026 17:01:21 +0000
Files and hashes:         1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=)
                          2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=)
                          3: 6PnH-I0v0o7AGL6ifiGT8peyJ0k.roa (hash: tFSqOOC1Lg0SA1A3rDQWgBL5K2qm5q+QWpyCruQ1mJU=)
                          4: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=)
                          5: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=)
                          6: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=)
                          7: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=)
                          8: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=)
                          9: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=)
                          10: Le82C6pXnzW7IxXdGJLWL7-aOrU.roa (hash: QElIq8TT7E1GaFXwqMBgfp+5OsT2hRS1zDV8eeFQVmg=)
                          11: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=)
                          12: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=)
                          13: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=)
                          14: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=)
                          15: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=)
                          16: WThqBVbVDEY5Hhy8yzc2FIOqKaQ.roa (hash: IRJB4vL3WJmKrmN2uWCtCKuTvMKm8OG48njPdr9TRHU=)
                          17: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=)
                          18: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=)
                          19: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=)
                          20: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=)
                          21: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=)
                          22: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=)
                          23: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=)
                          24: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=)
                          25: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: +L1gnvy7MVQZqBArT7vGvAxaS5QvhPiHKUGp7QFKpWE=)
                          26: jCkE9hjop9AAI9KGHrAu9Oj7LNI.roa (hash: YqzUoI4bHyTW6BYWw7GMg/Wlqugt8gZRXRL0jSMxthQ=)
                          27: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=)
                          28: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=)
                          29: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=)
                          30: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=)
                          31: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=)
                          32: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=)
                          33: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=)
                          34: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=)
                          35: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=)
                          36: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=)
                          37: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=)
                          38: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:b9:8c:25:10:99:ff:3a:47:1e:9a:4e:1f:84:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Jan 26 17:01:21 2026 GMT
            Not After : Jan 27 17:01:21 2026 GMT
        Subject: CN=bc29c566e36d019e3577f06c10b3dc1b263a0c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:da:57:36:3e:02:81:e1:f2:69:69:38:cc:19:
                    7f:b2:d3:00:c3:aa:d8:e9:13:a6:01:0d:03:1a:c2:
                    cb:90:ff:ba:3a:96:6e:c2:b4:ce:f0:1c:d5:be:f3:
                    8c:2d:69:b8:8b:3b:96:a6:b1:21:1d:eb:52:56:45:
                    a3:99:a9:e3:26:40:b3:64:e0:d9:de:08:2b:14:28:
                    0c:ac:1c:d2:c3:00:c7:3d:c3:3a:66:06:25:96:7a:
                    02:27:2a:c6:b5:9f:60:40:9b:3f:e8:57:b7:4b:66:
                    df:6d:7a:71:b2:5b:39:a9:8b:80:5f:68:3a:b7:80:
                    07:0f:41:96:dd:d4:df:6c:11:9e:b8:62:52:2f:a7:
                    e0:7a:b3:85:25:ff:d2:f8:c7:7d:07:39:f9:b4:c0:
                    12:5b:1c:3c:6e:94:31:80:71:aa:54:b2:2b:01:df:
                    8f:76:2b:f7:0b:d8:0e:20:6f:39:2c:0b:16:76:df:
                    bd:c0:29:07:df:75:0f:88:01:ff:42:ff:2c:14:7a:
                    fa:3a:4c:c2:57:5c:48:75:39:bc:4c:fb:2c:ea:dc:
                    79:57:ef:95:56:c7:7a:35:3f:f6:1c:6c:c2:59:08:
                    58:d8:40:6e:92:1a:16:6f:5a:fe:09:a3:fc:d7:21:
                    c8:94:4a:01:07:ec:c1:8b:3e:bf:a8:18:20:63:00:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:29:C5:66:E3:6D:01:9E:35:77:F0:6C:10:B3:DC:1B:26:3A:0C:09
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c7:64:c1:3c:b1:e7:e4:b6:89:45:91:3a:04:28:0b:b9:30:
         ec:ee:84:d3:4d:d9:f0:45:a5:c6:6e:0d:f4:b7:5e:e1:a4:e7:
         56:c6:af:a1:55:c2:14:a2:ee:d3:da:1c:b9:c5:ed:64:e8:ac:
         c7:1a:48:59:e1:79:56:be:dc:da:82:12:a7:2b:6e:b1:60:5b:
         f5:39:87:ed:77:21:e6:b5:3e:0d:39:dc:1c:c9:23:9c:5f:ef:
         27:19:ca:3c:f7:8c:74:df:8f:fe:78:bd:4f:d2:33:29:57:e2:
         3c:a2:8a:9d:ca:b5:7d:67:a5:98:e0:9c:3c:44:bd:45:50:58:
         5f:a7:f0:31:72:7b:1e:5d:b9:92:9a:23:8a:65:91:4a:cf:5a:
         2b:16:e0:dd:f9:38:31:a2:0c:ac:c5:d5:6c:fa:44:00:79:36:
         4a:d0:82:88:ba:aa:47:3b:cb:41:42:0b:55:8e:eb:51:10:43:
         d2:9f:e8:60:e8:8e:4d:1e:03:bd:b6:78:fc:d0:a2:74:81:33:
         4e:30:1a:39:1e:cb:9e:a3:0b:47:d6:29:7a:3d:a9:59:d5:8f:
         a3:f3:f3:fd:e3:71:ba:e3:1a:f0:67:30:d0:8d:d0:d0:7c:3d:
         30:b6:40:2f:97:b7:e6:5f:1c:7d:20:2c:78:57:09:fe:ef:2d:
         e2:9f:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----