This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          xc2s+s8iPxWN7YEr2RKR6Uq34s/ro0W8wAVd+rbnplU=
Subject key identifier:   CA:95:3E:68:5C:F8:F8:CB:AF:0F:9C:D4:84:70:A8:35:02:4E:3B:EE
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019B8ACFB75E9E4566444698118A6AF81C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          06A8
Signing time:             Sun 04 Jan 2026 21:00:27 +0000
Manifest this update:     Sun 04 Jan 2026 21:00:27 +0000
Manifest next update:     Mon 05 Jan 2026 21:00:27 +0000
Files and hashes:         1: 0V1rxWbJ3rovK14RpAmhja-a3TE.roa (hash: B9iCZqIprR18UvvB8mGulDcs0GRqq1thHy0g6nFtgL4=)
                          2: 0fOlVdIS1WEADHFx-rX9EuojXD0.roa (hash: HVN1Ks0lRzr25kk3tVqnsRKtbl6GiFv09oBIP/8lLHs=)
                          3: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=)
                          4: 2XEo4CV2Llsw1LO8UxL8ICFI_Ts.roa (hash: Gkxl6cgCKu5SSnDSK3cxhOt4JBhAs9jevpskTltEVbU=)
                          5: 4-75SqKybK6_eeP2dIZh56LuVjs.roa (hash: uDRIV5xJtyJLjYz1uVVuFgg/7FAFgTx2RSpRb7N8B64=)
                          6: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          7: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          8: BS5IPpy602b0P9LZT_8NLf8j87k.roa (hash: rFpHzyrk3W9kwB0GwSUlANwsnD6QKAwk516vFwL56UI=)
                          9: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          10: EwPzuIXXAY5u8_S6Cn0AasfKr5Y.roa (hash: ZLQXJBiU/cJ5PgC0zxsFgBpflI2UY+bKrzKvcAF0V1M=)
                          11: FXvQDQwPZ6w7IA7uy_SwvwsPRG0.roa (hash: QDZpr4qVitG3+kt2R85IuLDTSoziPlMFgZqn6Zykrzw=)
                          12: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
                          13: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          14: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          15: QRmycAO-pHfT7FsE99BsqZ0Jl18.roa (hash: pDVrAH7IIAQbYj9HezybCfvc4KXVjiS/nu2UCu/rDRY=)
                          16: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          17: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          18: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=)
                          19: XUG3gRFIK0zLDvFUgJTUWVf7hZY.roa (hash: Vo98Zl1NhOtmiCG2nhzLWKDUTIfziyqlxiwT69RALHA=)
                          20: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          21: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: c8ujjcDjYIrggPtnEC04KjSYqdOWfjg2gTcFQr9rNeE=)
                          22: h6QQ528Z7s7s1GSJ1qhrFb9Yg18.roa (hash: W51bGgmV1Q00x0gxca0kLqnlV5L62pIb8f8ybi2p/SU=)
                          23: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          24: kLlSZbzpmsYIvWwfO8jg_8rW4tQ.roa (hash: 12QL3G7J65T63O8QiRkOFH0drKrRxRKrU7LN/3R4Z+U=)
                          25: shgwIpHUjkTES4WuZvl4q6J14j4.roa (hash: K9w+6O3bog4NXLdj4nneOheN9As20p3zZapy86hUWMs=)
                          26: tlltT0fGg69zxvoXysrxkaP5qpY.roa (hash: xSyTxN8Bm/QsKReeKiONMB7jEfAnFU712QnJD99La+M=)
                          27: xUTAvhZT3dts-fjc8vz1O07_wOw.roa (hash: h+vleUOgXNI2ZWvKECnbZP2FffRv0MU5HGxcpzWRKGM=)
                          28: xcfdLGMwx73rBrDSPhMoi1zff7E.roa (hash: TfS9qHi0yMcUxCZA9A/YoEU+5Wx9ewWvK31z5A1/myQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Jan 2026 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8a:cf:b7:5e:9e:45:66:44:46:98:11:8a:6a:f8:1c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Jan  4 21:00:27 2026 GMT
            Not After : Jan  5 21:00:27 2026 GMT
        Subject: CN=ca953e685cf8f8cbaf0f9cd48470a835024e3bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4d:f8:ff:02:e5:72:3f:18:cc:cb:70:ca:ee:
                    21:de:a0:ca:6a:e4:8a:50:79:c0:f4:de:d2:bc:84:
                    fe:5a:d7:bf:27:5a:3f:db:fd:6c:64:67:aa:d6:94:
                    9c:d1:c7:64:07:bd:dd:ac:a8:ec:4e:fa:9b:1a:4e:
                    75:92:74:66:fd:99:10:b3:72:fb:97:d0:37:fa:a5:
                    41:08:12:31:04:b3:f7:c0:94:19:45:8f:eb:95:87:
                    ae:b1:4a:12:14:b3:6a:28:87:62:94:4d:6b:3d:2e:
                    10:1e:87:45:17:04:01:4e:85:82:1c:a6:ec:d5:eb:
                    e4:e6:ee:52:a8:7b:67:af:e0:27:7b:1f:6c:18:28:
                    91:18:d6:9f:1b:da:6e:16:21:39:15:42:c6:83:01:
                    46:ba:b9:37:51:d0:d2:f0:72:22:21:e9:0a:c8:34:
                    da:ba:f5:df:43:e2:9d:92:4e:43:6f:20:0d:dd:0a:
                    7c:50:16:4d:b1:e7:11:8d:f6:ff:c2:54:64:f7:20:
                    49:9a:d2:98:61:3d:29:dd:98:dd:52:18:33:2f:db:
                    3e:d7:76:ad:32:77:5a:40:c3:c5:ef:9b:8e:fd:ab:
                    ee:85:9d:21:db:84:9d:71:fb:ab:0f:34:f6:07:32:
                    c4:91:16:f4:88:d5:80:7c:a1:94:04:65:35:76:1c:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:95:3E:68:5C:F8:F8:CB:AF:0F:9C:D4:84:70:A8:35:02:4E:3B:EE
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3f:99:9f:ce:67:dd:01:41:07:09:3b:87:cb:e7:9d:91:83:
         f4:28:0d:d4:92:dd:55:84:51:6f:95:4a:02:af:c6:22:6c:dc:
         59:c5:cb:59:bf:e0:bd:b7:5b:c3:92:64:13:8f:72:49:2b:fa:
         46:52:54:21:09:6e:b8:28:37:13:07:2f:2c:cf:11:a1:02:22:
         89:b3:be:c4:8d:9b:a0:cc:34:64:c9:f8:ce:10:7a:9a:7d:e1:
         12:d0:64:99:49:70:0e:bf:41:dc:8b:c2:e6:48:66:dd:c0:a1:
         b2:48:f3:4e:8a:98:40:30:b1:2c:45:31:bd:1d:fc:c7:85:a2:
         11:d4:c6:97:96:4c:bd:37:26:94:63:78:a3:c7:2a:bf:1a:30:
         ba:78:5a:07:a6:94:57:c4:1f:50:5f:57:ac:f0:e2:66:1f:98:
         e3:d9:83:0d:b6:06:8c:ba:29:f3:40:94:6f:f1:4e:0a:89:bc:
         c4:52:fa:01:61:90:47:22:41:8b:29:7e:52:20:9e:58:1b:c2:
         cb:8a:d4:46:7d:1f:b3:d0:24:46:89:e3:37:ba:d3:13:fb:d3:
         ae:63:36:5f:f3:d6:3a:0e:c2:b4:fb:a9:bd:d6:3c:8c:cf:61:
         b2:ae:eb:21:a1:b5:ee:e1:d4:92:91:4c:aa:c3:d9:8f:7a:33:
         a2:38:89:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuKz7denkVmREaYEYpq+ByCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwMTA0MjEwMDI3WhcNMjYwMTA1MjEwMDI3WjAzMTEwLwYDVQQD
EyhjYTk1M2U2ODVjZjhmOGNiYWYwZjljZDQ4NDcwYTgzNTAyNGUzYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk034/wLlcj8YzMtwyu4h3qDKauSK
UHnA9N7SvIT+Wte/J1o/2/1sZGeq1pSc0cdkB73drKjsTvqbGk51knRm/ZkQs3L7
l9A3+qVBCBIxBLP3wJQZRY/rlYeusUoSFLNqKIdilE1rPS4QHodFFwQBToWCHKbs
1evk5u5SqHtnr+Anex9sGCiRGNafG9puFiE5FULGgwFGurk3UdDS8HIiIekKyDTa
uvXfQ+Kdkk5DbyAN3Qp8UBZNsecRjfb/wlRk9yBJmtKYYT0p3ZjdUhgzL9s+13at
MndaQMPF75uO/avuhZ0h24SdcfurDzT2BzLEkRb0iNWAfKGUBGU1dhwAXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqVPmhc+PjLrw+c1IRwqDUCTjvuMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuz+Zn85n
3QFBBwk7h8vnnZGD9CgN1JLdVYRRb5VKAq/GImzcWcXLWb/gvbdbw5JkE49ySSv6
RlJUIQluuCg3EwcvLM8RoQIiibO+xI2boMw0ZMn4zhB6mn3hEtBkmUlwDr9B3IvC
5khm3cChskjzToqYQDCxLEUxvR38x4WiEdTGl5ZMvTcmlGN4o8cqvxowunhaB6aU
V8QfUF9XrPDiZh+Y49mDDbYGjLop80CUb/FOCom8xFL6AWGQRyJBiyl+UiCeWBvC
y4rURn0fs9AkRonjN7rTE/vTrmM2X/PWOg7CtPupvdY8jM9hsq7rIaG17uHUkpFM
qsPZj3ozojiJ7w==
-----END CERTIFICATE-----
Generated at Mon Jan 5 06:54:40 2026 by rpki-client