This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          AmIs5ujBEjcY6HssBESQfnLOjwqUl8T8r1LIhOpWcVs=
Subject key identifier:   B2:35:0B:33:12:99:36:0E:B4:F7:44:01:00:A5:58:55:DE:0C:70:EA
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019BD8EB86DA24F2463390A7820143591497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          06D4
Signing time:             Tue 20 Jan 2026 01:01:12 +0000
Manifest this update:     Tue 20 Jan 2026 01:01:12 +0000
Manifest next update:     Wed 21 Jan 2026 01:01:12 +0000
Files and hashes:         1: 0fOlVdIS1WEADHFx-rX9EuojXD0.roa (hash: HVN1Ks0lRzr25kk3tVqnsRKtbl6GiFv09oBIP/8lLHs=)
                          2: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=)
                          3: 2XEo4CV2Llsw1LO8UxL8ICFI_Ts.roa (hash: Gkxl6cgCKu5SSnDSK3cxhOt4JBhAs9jevpskTltEVbU=)
                          4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          6: BS5IPpy602b0P9LZT_8NLf8j87k.roa (hash: rFpHzyrk3W9kwB0GwSUlANwsnD6QKAwk516vFwL56UI=)
                          7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          8: EwPzuIXXAY5u8_S6Cn0AasfKr5Y.roa (hash: ZLQXJBiU/cJ5PgC0zxsFgBpflI2UY+bKrzKvcAF0V1M=)
                          9: FXvQDQwPZ6w7IA7uy_SwvwsPRG0.roa (hash: QDZpr4qVitG3+kt2R85IuLDTSoziPlMFgZqn6Zykrzw=)
                          10: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
                          11: GOanlWDUzk69YG0eCePJEpU9BnM.roa (hash: nrCNFfv+/Z1ic8g3j7yWk+DMZXSXMkw06k0jEv6zp3M=)
                          12: HX5f80duZbfz-iasKI8ZstuiDOE.roa (hash: F3S67PslnyiQwchIpW4wRDpOJwAA4P0KJ07r5fwGqG0=)
                          13: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          14: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          15: QRmycAO-pHfT7FsE99BsqZ0Jl18.roa (hash: pDVrAH7IIAQbYj9HezybCfvc4KXVjiS/nu2UCu/rDRY=)
                          16: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          17: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          18: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=)
                          19: XUG3gRFIK0zLDvFUgJTUWVf7hZY.roa (hash: Vo98Zl1NhOtmiCG2nhzLWKDUTIfziyqlxiwT69RALHA=)
                          20: ZjezsyQwp__S_-4bnAPJityXs-A.roa (hash: KtcE3154yrRhHpULPsbebKDxYlMS75i4aRoAd7gorN8=)
                          21: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          22: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: KKWL29SvTi3vF1Cepfxv+tMfQurnN0MMwJS7o0FUZls=)
                          23: h6QQ528Z7s7s1GSJ1qhrFb9Yg18.roa (hash: W51bGgmV1Q00x0gxca0kLqnlV5L62pIb8f8ybi2p/SU=)
                          24: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          25: k1KrcMQb6Hkdw-VGV4WrGbLUvfQ.roa (hash: VhQcrz/LnexThDFyx4qGQ98rvluKHexHj4W/UKXQy5g=)
                          26: kLlSZbzpmsYIvWwfO8jg_8rW4tQ.roa (hash: 12QL3G7J65T63O8QiRkOFH0drKrRxRKrU7LN/3R4Z+U=)
                          27: shgwIpHUjkTES4WuZvl4q6J14j4.roa (hash: K9w+6O3bog4NXLdj4nneOheN9As20p3zZapy86hUWMs=)
                          28: xcfdLGMwx73rBrDSPhMoi1zff7E.roa (hash: TfS9qHi0yMcUxCZA9A/YoEU+5Wx9ewWvK31z5A1/myQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 01:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d8:eb:86:da:24:f2:46:33:90:a7:82:01:43:59:14:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Jan 20 01:01:12 2026 GMT
            Not After : Jan 21 01:01:12 2026 GMT
        Subject: CN=b2350b331299360eb4f7440100a55855de0c70ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0c:30:43:11:42:dd:bb:25:10:bf:38:16:9e:
                    45:4e:e8:89:4f:9a:e4:e3:83:37:df:b7:57:88:23:
                    b5:c0:91:18:cd:99:36:e2:64:e3:5e:bb:de:85:e3:
                    90:54:40:bf:bc:ac:68:1e:b0:e1:27:4d:28:b0:89:
                    81:63:8e:84:40:3f:36:b8:28:85:af:76:cf:86:ad:
                    52:93:f4:6f:9b:ea:57:35:3b:78:ee:5d:ee:2d:d8:
                    cb:a9:da:5c:05:d7:8c:83:ca:45:08:92:37:8c:64:
                    3d:e6:72:66:be:7f:db:b9:c9:99:de:f8:cc:8c:ce:
                    6c:c3:9d:61:b8:cf:5d:cf:b3:56:1c:bd:d1:ff:4a:
                    24:79:fa:ee:24:44:cf:4d:b2:5e:f5:5d:1d:72:ed:
                    a2:35:3a:17:91:db:81:76:55:f8:b8:d8:b3:59:98:
                    e9:0e:dc:84:d7:0c:ea:05:f4:7b:28:f8:18:f2:07:
                    25:d9:4a:6c:d4:bc:da:4a:4a:1e:04:6e:32:73:dc:
                    68:db:eb:6e:c1:9c:3f:51:e6:b0:e7:01:9b:c3:57:
                    9f:f8:b9:aa:f4:4f:e4:1e:7a:ce:2e:40:c5:6f:56:
                    f4:6c:f5:cc:e2:70:cc:61:3b:1a:b2:bb:d4:6e:84:
                    97:68:aa:0e:e0:9d:ea:e1:fb:db:1c:0d:ea:91:a6:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:35:0B:33:12:99:36:0E:B4:F7:44:01:00:A5:58:55:DE:0C:70:EA
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:db:08:07:72:b2:f1:fe:14:2e:05:9a:b6:3d:93:26:e9:39:
         51:52:93:f7:0a:71:5f:4e:b3:7f:93:44:a8:9f:c5:4e:61:98:
         a7:cd:6a:27:04:ba:89:4d:6e:73:e3:b1:cd:79:48:c0:76:24:
         68:e0:b8:78:af:8e:bf:02:eb:3c:cc:94:6d:3c:e1:da:44:bd:
         34:20:e4:14:11:77:c7:a6:cb:f0:16:52:18:c4:9e:06:e4:12:
         51:79:0b:12:1f:51:29:fa:9f:6c:11:c6:28:c9:35:6e:4f:99:
         0d:5b:d3:31:6e:10:85:fb:05:ea:d0:f7:c3:0f:81:bd:93:b6:
         8a:bf:65:f3:37:0b:59:d3:03:76:49:cc:ee:fd:8e:f1:82:71:
         23:a8:c5:83:c1:2b:5f:d8:7e:aa:56:c9:45:50:13:e9:b5:67:
         05:40:b0:c2:9d:f9:90:aa:a7:24:da:41:78:c1:22:81:c3:13:
         24:7e:f5:aa:3d:5d:1f:fa:cc:6c:dc:4d:c2:7d:14:10:33:1a:
         9c:1c:ec:6d:17:af:74:99:70:88:f7:38:4d:9b:be:b9:fa:59:
         74:c4:df:1c:f7:2c:f4:73:35:7a:77:9c:55:d0:d2:eb:0d:45:
         08:09:a3:23:9f:a8:71:a7:47:e6:6c:a6:c8:f2:1d:8d:4e:26:
         f2:e4:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 10:45:44 2026 by rpki-client