This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
File:                     mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json)
Hash identifier:          u4qV5W4ObbwfTGSKOyDIja1z9tQZOR4zaW5JiDkZ7fY=
Subject key identifier:   41:C1:F7:A3:C1:6A:CD:8B:DC:C5:39:FD:08:82:63:A3:2F:AB:9A:5B
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Certificate issuer:       /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial:       019C0A795ADB7632B2BED02407D421D60917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
Manifest number:          18D1
Signing time:             Thu 29 Jan 2026 15:57:31 +0000
Manifest this update:     Thu 29 Jan 2026 15:57:31 +0000
Manifest next update:     Fri 30 Jan 2026 15:57:31 +0000
Files and hashes:         1: 24yTeoHm2S0e42hQd6pPb3p9WpA.roa (hash: SUER5+YzbJ6nTSR1xjZZzU5AI9UiRQpopAGrfukxUW4=)
                          2: 3CGZIVaMujDI-qPAVVJCeNgj9f8.roa (hash: 3hJZkvi3raf9DrBNutU2L8h8l7a18nJTxl78KmZVdF8=)
                          3: 50zWtLjzrrHoza7TturnnWNCqLY.roa (hash: R1mg70BKhEBsT87VpVLGsevEAeUkVGDh49Hy8IvF5SI=)
                          4: 71Udwj_4kHr3rTwC_IL-C92FWPU.roa (hash: gbqsECvxqM5JI8YdnSe5GI/1R0+U6pp7SZ+Ocej//Wg=)
                          5: 7GU4Y4P9Br5BP3vnQm6r4NbdmiY.roa (hash: T5JYoSroIQY9FOipwEvAznscFdBeZt20TDUAB2miqmI=)
                          6: 8aHn1xycIl8uTaXnjg-XWCFbSk0.roa (hash: KiEvyNKijFvNGgguxkes7RVZlreMURdJezWxI3ce/0o=)
                          7: 9sF1jixqL9hKqMRyWL5XaGpT7Pc.roa (hash: DizidAYQS5ZwrXI/9g8YwAagIVsjFjTthHLQ6Upp2AA=)
                          8: CPdAgn0YhbFKocwZd4-APX61bUw.roa (hash: djd+r7ZqwEklTqQOI8ryrTFFYip0lZHBtxrB2V9t9jU=)
                          9: FSp7lSgJfORHGyVIwbo6oqSmnr8.roa (hash: jRqSN5nnq2Rvc3iHBf6rA/Su9B2gTxHNLzFvQoyNsxE=)
                          10: J6Yf-XEMdU1hAP8gTvORqXsiwfg.roa (hash: tuKG0Q/K/MazD1Ebb2lHBYiAhITNLHJRfLKALl+W1X8=)
                          11: KfqVkTkqnmoPhL5oJS5g13WidJI.roa (hash: QmfHVkr3ykcD5JWpsMGcti3WuJANdLbEdzcIBfArih0=)
                          12: LjZELjHFHpQjW_RGCYAWYdOwuEk.roa (hash: miUsj9skbON+HdmFykkq0l9qbx4QSaaWVI8PedFyeh0=)
                          13: OLBZTITff03kskRP4LpK8WHvPtk.roa (hash: y2lhnkyQwNUV9L6O43shAmJ3sOeqtfRXBvshymUjsgc=)
                          14: OpSSn7VpxO11fryivwBvANnIEvU.roa (hash: UbKXGtEdDAkgDWoFDIUwKw+X7uSsRhvGaUyhumxLj+A=)
                          15: PQiV9k5ZmpUkK_hQjS5oXv_CcDA.roa (hash: lSUNE4Fr66y8JXc+3fYqx9YAjtA+f99ByjEpd4kBkSc=)
                          16: PmmKQCH4vWIiNzOH68DJj1VWGd4.roa (hash: 76cgbunifbJBRSTwrJrVj76+hbpV0Ehgh3MDEWxbXCM=)
                          17: TlYPjord0mp0MJMcUmmnTdWvQzw.roa (hash: WSh/TfZU/1YiXMl/Tu5MDHumZx0oLhr8lAdqVF0L/6E=)
                          18: UjUhAtTa-HzdbQHtOeMvw9Bn4CA.roa (hash: FjgR0zp3zCRj1zvG4u+/IBFrZS0qlQTo4uO0eWz+gcI=)
                          19: WTKoWWB90SKzANQsqVX8mgeTR5o.roa (hash: a2tURJf08zfaWHMEmDfP4vkTP1SrHxX+U3kkJ9RC68o=)
                          20: WWu8F3fTeKxkoAs-Mg16JLzG5h0.roa (hash: cTjKhIJvmmIv1NQvFzuTNf8mXV9k2oei30S49l2AUWU=)
                          21: XYx6Pt5BOyf6Vobsmx54b6trupg.roa (hash: FE5uMi/NC5PmKMfpBRKu1EyYAdA7ONuPIeMZGJFjc0Y=)
                          22: XjK7K5pFc5s0i0Yj9WRzq3s6Q_s.roa (hash: Aog9/K0L6bQI83BA2JvjqEnZuwWaCymXvS47tzQ05B0=)
                          23: YSXWV8q-EvD0M2DrmYNHbrzE3Q0.roa (hash: nbwxvgL2zn/AIlkMUp+RUvXzoHDBudCHof0xSUGlYMQ=)
                          24: _cdc7mtrN2pcb5OE7ig1oz33LKU.roa (hash: Zmdncbz3cfd7dp+nPBAwlH29jlm6I7HTw5i+rzzfBRI=)
                          25: _t6wIiysABeKcuzVW24u5ajYADU.roa (hash: 6EqeSIlvHufo3qj6O3uSbA7U6nO0xRsokQ5NP0Lmu4U=)
                          26: awoG0vqbuXcZ0fW3Pyzb8qRWzRU.roa (hash: LBPWSggxFCfyXwT2FtM03BRPgZtweIKDgXvWge4aP/g=)
                          27: dB9swCFOSWNPmBMrvHldamJSjMo.roa (hash: 8ZwY2aDHtJ/fXAdeF79U4iahz8aOcQV9VBZBfwnviv8=)
                          28: gfi-rQmWj6vCyD9Y7Mqln0dRKmE.roa (hash: zAq+qSGR0FkUUdU8iVk1vqOP1LS8V4zoEEGbXPTnhRs=)
                          29: i9m60f0agbDQcuxvOKyFPSYJ9E0.roa (hash: PhdEiYDxfPiNuWDQSpU1KHaY+OIi/NCnZKWJxc7Quv0=)
                          30: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: I/TDsSm3UqZCX3i9jxPVDl+mZ1HgWIgkCWn2Gr3sOA0=)
                          31: pKPc_FKfkUgxY_AIoiItWUHy89Y.roa (hash: QqItoelsJ2U103hLYt++ivyHBi7lFYPL98TQuBCi1o4=)
                          32: qmDw0fgm0JJTFJTsz3Yq-NgZXN0.roa (hash: SIDdhGIPSJJ1g1rrl3FX9NgXExOO7VQsjD9ivDcJ05E=)
                          33: wJ_on4ke6oZxChgu1SxnITQidH8.roa (hash: 57jA4HWinH5NYKXKx8WCI3JhQMBTXI2tQwC7DHjJPTE=)
                          34: wUz3ZngY2K9P4uctqnluQwfLk0k.roa (hash: bdLA4z9qB+bSS/IEmWkQYJlwk4Qk/YYRg4G9s9Dunpo=)
                          35: xcWX6DznqEW4C71zJpWJN-QrPDQ.roa (hash: +1l0sVjd17+Z7nheyNBVU+fgNJqvceCmb4/QNIBVEUI=)
                          36: yiLVsbADVDXui_boxoqOjd-MYts.roa (hash: ldOTvOuRJ82dkbygN6dHc/4TIF5bK0Nko09kMPj8TWU=)
                          37: zRTotKVWrti2hz-M4NRpNGRIUBM.roa (hash: drdrrvfovx7gW4WJjUvbskkmL0a3nwfWPkD6SHpFoog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0a:79:5a:db:76:32:b2:be:d0:24:07:d4:21:d6:09:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
        Validity
            Not Before: Jan 29 15:57:31 2026 GMT
            Not After : Jan 30 15:57:31 2026 GMT
        Subject: CN=41c1f7a3c16acd8bdcc539fd088263a32fab9a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:4e:30:12:3d:6b:b4:fb:50:e9:f8:a4:73:
                    f7:7f:77:33:d7:ba:b1:a1:ce:87:a5:9c:98:28:7f:
                    f1:af:a3:61:3c:a3:c3:d1:6c:e2:1d:86:49:b4:98:
                    fb:bd:ca:81:d8:96:70:d6:0c:26:4a:0a:b0:32:96:
                    de:37:28:9d:cc:07:c9:e1:58:97:56:3a:b6:2d:5c:
                    5e:40:d6:3e:12:1d:c5:9c:f7:cb:cb:48:c2:82:b0:
                    0f:1c:a8:28:44:63:af:18:91:60:7e:0a:e9:45:4a:
                    cc:a6:c0:d6:20:3e:02:65:51:d6:00:d6:01:65:d0:
                    5f:d7:55:0f:a5:4c:5f:60:04:b3:06:16:91:1d:05:
                    ae:06:b2:01:9c:d8:6e:2a:89:8e:f3:a2:15:81:ef:
                    a1:8e:fc:79:e4:f7:cf:4e:a4:4e:cb:ad:8a:9d:7c:
                    39:a6:7c:0a:89:01:9a:cc:f6:a5:fd:6f:61:6b:6d:
                    56:2c:bb:11:01:62:be:5d:1e:70:b1:79:ef:a0:83:
                    59:a3:a0:d9:7c:1c:95:2f:1d:7d:ad:ad:4d:4c:13:
                    6f:1f:ce:f3:09:0b:8b:b8:b5:0e:ad:13:60:39:72:
                    08:a6:18:f2:a2:8f:b6:10:b5:1c:44:8c:10:bc:2d:
                    4d:c3:14:8e:3c:67:9c:56:9c:21:c9:24:c9:7e:95:
                    9a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C1:F7:A3:C1:6A:CD:8B:DC:C5:39:FD:08:82:63:A3:2F:AB:9A:5B
            X509v3 Authority Key Identifier:
                keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e7:19:d2:75:7c:fd:26:e3:51:fe:5b:ed:67:42:39:78:f4:
         04:bd:1a:d5:45:e6:eb:8f:65:e3:49:76:95:85:60:05:f1:ab:
         18:35:60:20:37:7a:d5:c6:c3:48:d9:05:1e:3e:3b:c1:95:e7:
         f9:19:e3:57:04:a5:d2:c8:09:24:c3:90:bc:3c:31:0f:68:a8:
         00:20:9e:90:ef:63:2c:1c:a6:4c:54:d5:ae:14:e5:e1:9d:9c:
         41:9e:ee:7f:9e:38:4d:50:90:25:4b:16:0c:3a:14:f0:0d:40:
         34:7f:e8:9b:75:3f:e4:c3:90:67:70:4f:18:d0:17:8f:25:f0:
         d1:96:1c:a9:d8:00:a3:f9:54:f3:ca:79:77:9c:df:92:1d:53:
         4b:62:bf:e8:90:e4:fe:39:76:aa:0d:ea:9d:93:61:8f:2e:7f:
         ea:78:98:c8:09:46:25:59:4e:f6:8c:21:35:10:dc:91:e4:c0:
         05:7b:60:11:31:e9:7f:91:9e:1b:cf:0e:c2:af:59:e6:d1:06:
         10:ae:28:52:81:c5:50:13:e3:1b:c9:04:ad:4e:67:c6:35:81:
         93:c5:01:cc:96:b7:8e:27:f5:d7:29:36:8d:26:3a:a3:3d:37:
         08:c8:85:b3:ec:46:df:d5:62:41:5d:61:12:f7:df:91:99:64:
         c4:02:f1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----