This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
File:                     1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json)
Hash identifier:          YGkvF02zE8ppjgT2T10VOQXg1OL5s6fQYGAbNsht0CY=
Subject key identifier:   A2:DB:59:BC:DC:B8:AD:CB:8E:45:96:A3:7F:32:46:DA:01:94:CB:04
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       019BFA2DA330FB8A8D78EDF1EFE5C9C7D6BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
Manifest number:          1479
Signing time:             Mon 26 Jan 2026 12:00:53 +0000
Manifest this update:     Mon 26 Jan 2026 12:00:53 +0000
Manifest next update:     Tue 27 Jan 2026 12:00:53 +0000
Files and hashes:         1: 0d15hs6sBv8GAk_2g2RAoPYnZOM.roa (hash: cp2Vja5rdBd1gVNgqx+IsAve8keQHohaILdxUqT1jek=)
                          2: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=)
                          3: 12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa (hash: mN467/7GywnhA1L7FMjs4ZJkbmIwDxnvQEUBR43WDpM=)
                          4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: /Ejz8XrHKp/pYaOEXOfbgy+xYHiBHyL7pxYunQ7u6Eo=)
                          5: 31L-LvSHaspOtk8u9hAsfR8dgGM.roa (hash: aJ3rT7AREc3SlEOe4wTEu/JmolCehQfGhFsoaKSPn1Q=)
                          6: 4wB5Vx3J3kyGcFmVM0hOKa-agUU.roa (hash: QUMFn2JOAzkbZ6gtP+0O9ijRO/p8JgNTBxbAEdtK4V0=)
                          7: 69XHjm7-yIbeLCUNviEuBo92-TM.roa (hash: APoWjNu0LQYujI/yA31MFn1n87SnZbSJrgLE5wdw/7c=)
                          8: 8XkVNhQzJTRinlrUY9NMe-jgS4A.roa (hash: G+utkMfL+L6vdlEWdaNJIG/k/Ibg5tyzOCFT4hFaX5c=)
                          9: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=)
                          10: DPcoyqmJ-ibKgBXQhldGarXkL9k.roa (hash: yqjMHYnxu0/ljepDij0QNQ+cIeV7Y0MQ0KsJKwUmcN4=)
                          11: GvCaLEMtreWe0TE7iBl-Fn1BAQU.roa (hash: Orxttow5nHsbqOjaRE9vUN+mw4qCsQAWnb1ehA7+MP0=)
                          12: KRv87T4ZM2FUirwnB1dhL3l-Kd0.roa (hash: Vl+l0xUb4tTixNYLTovd1bUz+nc7mehkSAFw6cLldSs=)
                          13: KjU7AhX4TXwLfXgV9g1-DLGZ-ow.roa (hash: 8fFeEgCYH2bhEXhV+TAiSzfZgOwytdn0mLWLmsulag8=)
                          14: LM2AbLevwiE39LnUn6Ua-ua_m1g.roa (hash: aIq23Y6GvCxjX7yzAOcX2fozTD46rJch3BTbtCtTolQ=)
                          15: LW-Nr4DdzqfE18c6cx5vJVdZBNQ.roa (hash: XeELswB81bZv/aY/RKoGhPbhNZf9ucQXRTWcsIAYyWM=)
                          16: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=)
                          17: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=)
                          18: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=)
                          19: Scp2nM5P7b3JtI-qLRoRM-zY2DQ.roa (hash: ReY7U0Hu+rWmNt1KbWijPc8uks4szEsfEvUJpvT89z4=)
                          20: SgqvO9qBL1fWo3aBJRZpGp4K-S0.roa (hash: BHxiE3ULzbcJ44lDjqkW1hve5g/jINED6rwFK00YXx0=)
                          21: UDKnq7i5-1LxNA79DLap5_xnYXc.roa (hash: bwIftxc9q93hJ4E3ViMd2jP3yU+krx5QdkO9T9zGDn4=)
                          22: UHmvQQUwZ_7wZ81XNf5pNZZZxWY.roa (hash: HYwI8Es6qaDvbLWGoybNvvtN04TE4QCWnT3UgDe1WLM=)
                          23: UNh9HBTbmAczkdMFcByOEAYWU0Y.roa (hash: W4lijVHAWghHFrkC7iuPEmv32YE3H28oL8DpFRFvg/c=)
                          24: VpkvFneYkZtrOlTcXNEDLOTuiBo.roa (hash: U1TXZP+P+R9Rot4yDqY1QfFe+byKf+8Ah3pd3njTY4Q=)
                          25: WSvHFGzj7Vgob_0_S9OtU-eYECo.roa (hash: wV4wq5Kwh3/1RV581fA5ENpc2zmKMDZQlEmeVs08398=)
                          26: YXqFBM3Wgxl248Uckf87jL9-Y10.roa (hash: R/aH1v+NPoF+QYmVFlQRN2Ii0gntVyI3TwXZnW5icOc=)
                          27: YaOfJgRLouGx6tole4Xd3URpTRI.roa (hash: iNqNR/rlJQ3emWR1ZSYN26bQpkUgaYYux6SlwS0SDiA=)
                          28: ZUzp4nG8b_8duILz9z67tKXG2-Y.roa (hash: 5pvftRh2C60fmYF1NRG6tbQYcfk3SxCSFl7LYSO0W7g=)
                          29: ZnDZ3THvpz_YPmkdCKWJkIytQc8.roa (hash: l2f5rqMmluOxA2njyi5sVPThn4rwssZmSYySxc1db4k=)
                          30: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=)
                          31: c7thoplx3OQK7vl8T15zxackpgg.roa (hash: k14m5OGCxEc7HJWVEEBuSsRBwvea6AhQA7ALcS9VWv0=)
                          32: dca88p-eNfR0RjuTT48u3qYdsU4.roa (hash: LkTWX4mzrSibQMirmPorFtvVIp4ZsztyLfP+2xn0pJE=)
                          33: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=)
                          34: fKoGmparJHlozAcZTA3yAU4ZJcg.roa (hash: 60cR3HY+vUpddXNenTUdu1Z2bcSowrKZj1dsz2XqYPY=)
                          35: fzXSzzRGH69X9HG_DPX1UIdlnMc.roa (hash: 5e/q/Of0/VbRaI+58tUil5lHG2B8yQNHwFd7IDN7AnA=)
                          36: kNJMaiQra48kkAcS5nD8aUCkAUE.roa (hash: 1S7dp0PoTIGw4gY4Z0LJ+wyYCHhInf5Fee8utleWUao=)
                          37: nOZiS9ipdCo86_2swgfQMd065RY.roa (hash: 284FGn82DHerRbpzHLbn3Hc5ZwaGcd6vcd6k3JnrdOM=)
                          38: nkZpmEXSrCrxAHAiDLwZtC54dBQ.roa (hash: 0qFI3aej4VghLslWDYSHoQqlJwbEz29HxX1cVRGubNw=)
                          39: pdZA2Upbo20SiB6twFM6g6dgdjs.roa (hash: 4X8F+Ie2CbjgYhGjsVZ9426UZ/EHnHL6NX3krPUDwCs=)
                          40: rfIN427V9zPCMZ-z5PwfYOKvWvE.roa (hash: /rLACCeghRFqZopyBKHtIJ9ZVC/Uf5aLpLTNEVJcleE=)
                          41: rx5FrArsEh1Pd7b0NgJ2Xd6ltaE.roa (hash: e1BXfn+1OHZJUEKq2u7HgsMulbmjg22+GP7JrrmxT/4=)
                          42: sbLArHFCdDYFp-yc45bbnWWHLZk.roa (hash: 50x3swjFzea0ZMQjb8qdEs7d3Kpvn0F3/nLybrYDPSY=)
                          43: tsW17cExldWKQOsmoSu7CzC3TsU.roa (hash: kaSKKVjmW0k6rthJ1U6bxZ/OsgU+B2Z01KcEBlJgG/k=)
                          44: v0WTRVyIOMbnSSTHqyRygXScgPU.roa (hash: AwqC2DBh8s09B6HD8Dw/C/8pvsrZMaYsxFJg6FacTeA=)
                          45: xqMMWefGU2vgougCenjCqg2IdD4.roa (hash: APHG/lLqSBGaeSFETUTuI3S0WLItY759pWaUuQxJdnA=)
                          46: z88SnKsP5pvSo6qR47qZ1pWeSD0.roa (hash: oetmktJllcCOEDyCyKgeosdoCyMncQj+BUuqs+6CrFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2d:a3:30:fb:8a:8d:78:ed:f1:ef:e5:c9:c7:d6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Jan 26 12:00:53 2026 GMT
            Not After : Jan 27 12:00:53 2026 GMT
        Subject: CN=a2db59bcdcb8adcb8e4596a37f3246da0194cb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:4b:8f:1c:a3:15:f0:ce:94:f0:b0:40:f2:
                    18:93:2d:20:b4:e1:f7:c6:3f:a5:ee:27:97:d4:03:
                    30:fa:9d:39:fd:55:6b:e3:30:71:cf:fe:98:4e:54:
                    eb:6b:46:dc:2e:97:59:c6:f3:82:ac:61:29:e1:67:
                    26:02:1f:5b:71:09:64:5f:f3:5d:89:c0:b5:1a:3d:
                    70:37:ac:ad:be:23:fb:2b:e9:48:57:ee:45:21:5c:
                    a1:64:0b:d2:d9:bb:7f:40:9e:3b:dc:c6:bb:5f:2b:
                    fb:4b:69:12:9a:2d:79:64:6a:99:d4:a4:db:aa:00:
                    90:5c:84:84:1a:61:13:76:b3:c9:de:66:4c:a5:57:
                    17:cc:11:c4:9e:57:6c:4e:1d:f4:9a:f5:ad:30:f1:
                    3c:95:03:f8:30:31:2d:2d:43:2a:eb:fa:0a:81:42:
                    f6:eb:ac:47:20:b2:cd:9d:14:14:f0:8c:f8:d0:e4:
                    f2:bb:33:f2:86:1b:55:17:47:d6:32:63:67:82:d7:
                    c9:8c:bf:d7:23:76:8f:78:b8:be:5a:79:ce:d2:ed:
                    f3:fd:95:d1:14:f3:a2:62:a0:85:03:47:05:70:d0:
                    00:3b:da:bd:c1:e6:0c:8b:34:f9:96:77:9d:22:87:
                    7b:94:b7:ee:6b:c0:ba:f1:39:d3:9c:d3:aa:7c:6d:
                    11:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DB:59:BC:DC:B8:AD:CB:8E:45:96:A3:7F:32:46:DA:01:94:CB:04
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:93:b9:eb:a3:65:18:55:60:cd:45:60:45:ff:f9:f6:a2:5a:
         89:5d:e3:04:09:c6:62:dd:cf:45:26:2a:31:c7:b5:a8:b9:cf:
         97:68:80:fa:83:dd:c1:bb:07:9b:9f:99:9e:85:5d:86:ab:d4:
         73:e8:5b:68:5d:67:26:13:dd:a1:89:c2:74:6b:02:96:aa:40:
         3b:ff:b4:9b:9c:1a:4c:46:0a:73:fa:2f:e1:ee:19:4a:7f:39:
         64:44:51:00:3a:46:6d:04:27:3c:82:38:5a:b7:d6:77:a9:7b:
         5f:9b:f4:29:48:fa:e4:4b:a4:d8:07:f2:87:6c:ae:d3:3e:33:
         d8:08:ef:b0:9d:7f:47:11:d4:95:aa:3e:52:63:27:5b:c4:89:
         6f:1d:a1:f8:ec:03:ee:23:ad:05:4d:e8:e3:4b:30:36:6d:2e:
         ae:e7:2b:7c:ba:25:77:36:ba:5c:db:42:db:24:3f:ab:28:4c:
         a7:13:3e:f0:7f:1e:2e:5d:29:ae:d0:1d:6a:be:d7:7d:fd:6c:
         5e:4c:32:79:b7:21:0b:ef:19:cf:70:fd:a1:84:6d:f6:df:21:
         1f:b6:3b:98:98:42:da:71:f8:d5:57:19:35:c9:39:b4:0c:8a:
         fd:92:f3:ad:3d:7b:4d:94:ed:89:47:ef:c4:0d:f5:c9:cf:da:
         9b:01:4d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6LaMw+4qNeO3x7+XJx9a9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjYwMTI2MTIwMDUzWhcNMjYwMTI3MTIwMDUzWjAzMTEwLwYDVQQD
EyhhMmRiNTliY2RjYjhhZGNiOGU0NTk2YTM3ZjMyNDZkYTAxOTRjYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1lLjxyjFfDOlPCwQPIYky0gtOH3
xj+l7ieX1AMw+p05/VVr4zBxz/6YTlTra0bcLpdZxvOCrGEp4WcmAh9bcQlkX/Nd
icC1Gj1wN6ytviP7K+lIV+5FIVyhZAvS2bt/QJ473Ma7Xyv7S2kSmi15ZGqZ1KTb
qgCQXISEGmETdrPJ3mZMpVcXzBHEnldsTh30mvWtMPE8lQP4MDEtLUMq6/oKgUL2
66xHILLNnRQU8Iz40OTyuzPyhhtVF0fWMmNngtfJjL/XI3aPeLi+WnnO0u3z/ZXR
FPOiYqCFA0cFcNAAO9q9weYMizT5lnedIod7lLfua8C68TnTnNOqfG0RTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLbWbzcuK3LjkWWo38yRtoBlMsEMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5O566Nl
GFVgzUVgRf/59qJaiV3jBAnGYt3PRSYqMce1qLnPl2iA+oPdwbsHm5+ZnoVdhqvU
c+hbaF1nJhPdoYnCdGsClqpAO/+0m5waTEYKc/ov4e4ZSn85ZERRADpGbQQnPII4
WrfWd6l7X5v0KUj65Euk2Afyh2yu0z4z2AjvsJ1/RxHUlao+UmMnW8SJbx2h+OwD
7iOtBU3o40swNm0urucrfLoldza6XNtC2yQ/qyhMpxM+8H8eLl0prtAdar7Xff1s
XkwyebchC+8Zz3D9oYRt9t8hH7Y7mJhC2nH41VcZNck5tAyK/ZLzrT17TZTtiUfv
xA31yc/amwFNqw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 19:23:20 2026 by rpki-client