This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          7FcrgaaHqwBblWviGesvFdhrXPeWYMRshRXOU+58PY8=
Subject key identifier:   85:DF:2D:52:FB:C9:CF:76:75:D6:A7:A0:8E:C4:6D:43:22:FB:F3:97
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019C0DB4B6E9B8A41AF3795A8F62B8A8FAA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          06F8
Signing time:             Fri 30 Jan 2026 07:01:12 +0000
Manifest this update:     Fri 30 Jan 2026 07:01:12 +0000
Manifest next update:     Sat 31 Jan 2026 07:01:12 +0000
Files and hashes:         1: 0fOlVdIS1WEADHFx-rX9EuojXD0.roa (hash: HVN1Ks0lRzr25kk3tVqnsRKtbl6GiFv09oBIP/8lLHs=)
                          2: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=)
                          3: 2XEo4CV2Llsw1LO8UxL8ICFI_Ts.roa (hash: Gkxl6cgCKu5SSnDSK3cxhOt4JBhAs9jevpskTltEVbU=)
                          4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          6: BS5IPpy602b0P9LZT_8NLf8j87k.roa (hash: rFpHzyrk3W9kwB0GwSUlANwsnD6QKAwk516vFwL56UI=)
                          7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          8: EwPzuIXXAY5u8_S6Cn0AasfKr5Y.roa (hash: ZLQXJBiU/cJ5PgC0zxsFgBpflI2UY+bKrzKvcAF0V1M=)
                          9: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
                          10: K-khbksQ-2sabX4zr3q8PxzSit0.roa (hash: xDFWiYoyDY13IMLCQNkMrZzkvNnytsrYJpcMXHkSwMs=)
                          11: KrdFE5qbZm0BsnHIJgKBhkCYfMg.roa (hash: yJaF+ZPQzdElslhHHeiCzNPSim47QJWyqmLoPAq0ci0=)
                          12: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          13: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          14: QRmycAO-pHfT7FsE99BsqZ0Jl18.roa (hash: pDVrAH7IIAQbYj9HezybCfvc4KXVjiS/nu2UCu/rDRY=)
                          15: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          16: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          17: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=)
                          18: ZjezsyQwp__S_-4bnAPJityXs-A.roa (hash: KtcE3154yrRhHpULPsbebKDxYlMS75i4aRoAd7gorN8=)
                          19: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          20: eqq6nM-gAQOF21nTNZ_FJI041fY.roa (hash: yriPMfIsnw3NNBGChv8TwuqQ+3OFssnNxB1PL6DgPI8=)
                          21: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: kDJWK3Zipv1tReQbemqU2kXK+NRxBVgFQGjYogYVw+s=)
                          22: h6QQ528Z7s7s1GSJ1qhrFb9Yg18.roa (hash: W51bGgmV1Q00x0gxca0kLqnlV5L62pIb8f8ybi2p/SU=)
                          23: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          24: kLlSZbzpmsYIvWwfO8jg_8rW4tQ.roa (hash: 12QL3G7J65T63O8QiRkOFH0drKrRxRKrU7LN/3R4Z+U=)
                          25: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          26: shgwIpHUjkTES4WuZvl4q6J14j4.roa (hash: K9w+6O3bog4NXLdj4nneOheN9As20p3zZapy86hUWMs=)
                          27: vVc0dc3EPpbjtPYJ7V6KKSauen4.roa (hash: VEIHXyWV1OWVxeQr4sCn2XxX8h2k7/LmQ/wEdaObUIE=)
                          28: xcfdLGMwx73rBrDSPhMoi1zff7E.roa (hash: TfS9qHi0yMcUxCZA9A/YoEU+5Wx9ewWvK31z5A1/myQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0d:b4:b6:e9:b8:a4:1a:f3:79:5a:8f:62:b8:a8:fa:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Jan 30 07:01:12 2026 GMT
            Not After : Jan 31 07:01:12 2026 GMT
        Subject: CN=85df2d52fbc9cf7675d6a7a08ec46d4322fbf397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:e0:5c:ab:53:dd:8d:1d:1f:b9:f5:91:30:
                    8e:e1:7b:3b:a1:e1:23:fc:6d:dc:1b:0b:18:ac:99:
                    f9:2b:58:3d:4c:10:45:e3:90:ce:ab:20:d6:9a:1f:
                    44:f2:37:38:bd:9c:96:9a:b0:c7:fa:f2:53:20:23:
                    e1:93:3c:cf:36:93:c6:19:2d:55:b9:24:3b:fa:96:
                    6b:e3:48:53:63:6e:c5:95:6c:e8:56:3c:94:c1:59:
                    68:a1:ee:c5:82:d5:9b:6b:aa:76:bd:a6:95:2f:81:
                    79:40:a4:eb:d5:7d:8a:4c:f3:cb:15:f4:a2:38:b5:
                    73:4a:c4:db:86:d4:a3:52:8d:1c:22:fb:cd:3a:9b:
                    ff:8d:d5:bf:64:98:4d:15:1f:27:8b:f8:7b:99:a5:
                    2e:28:ab:db:81:54:f9:14:52:5e:9c:46:42:dc:67:
                    d7:17:2c:6f:9b:72:28:7e:39:ad:fd:6e:5d:8c:ad:
                    d0:d5:f5:c1:4c:a4:7d:60:5d:02:75:c7:17:d2:31:
                    0d:4f:65:99:cf:06:f5:a5:fc:18:80:5f:8a:50:72:
                    3a:a8:66:3a:64:8e:6a:c9:fa:41:e7:44:ab:f5:bb:
                    9b:34:6a:89:1a:fe:11:2f:bc:91:b8:69:cc:bd:e7:
                    48:05:86:d8:d2:56:fb:48:60:13:af:05:25:07:89:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DF:2D:52:FB:C9:CF:76:75:D6:A7:A0:8E:C4:6D:43:22:FB:F3:97
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3b:54:04:ea:c8:80:a8:c1:dd:d9:5d:a8:fb:76:eb:0d:10:
         6d:1c:c4:2e:e0:39:d6:7e:0f:24:b9:ad:9d:2f:30:ce:fb:6f:
         2a:53:8c:d1:c4:3d:08:b8:de:68:ed:ec:a6:1e:c9:8a:9e:11:
         cc:ec:7f:ef:19:72:a6:91:ca:ad:b6:5f:e5:19:9f:82:fe:cb:
         3e:92:4f:66:3f:f4:dd:8d:1b:15:f4:10:9e:79:ad:eb:bc:d4:
         b0:05:a0:97:b4:7a:f3:db:d4:b4:39:2b:d2:d9:3d:0f:34:fb:
         61:85:b0:00:4a:36:c1:fc:81:e0:48:ba:4a:a0:87:8d:0c:b1:
         96:91:7b:1a:69:b7:14:02:46:ea:86:71:c2:94:13:32:42:a4:
         a5:a5:10:9f:b8:72:cb:e6:52:13:26:6a:2b:75:30:c5:d4:c7:
         08:c1:02:5a:a2:e7:64:9e:e8:85:9d:d2:34:7c:b0:31:b4:fb:
         50:39:f5:30:8d:0c:2e:c6:dc:b0:31:fe:33:cb:7a:8c:cc:6f:
         f8:a0:47:89:bd:df:6a:91:3c:4c:3e:e4:1b:4e:0f:ac:bb:d2:
         0a:06:4a:ce:a6:79:ad:b4:c1:0b:84:67:09:58:8f:b7:82:65:
         61:2c:93:df:ca:5b:69:57:03:a0:21:cc:7b:78:3b:00:cc:13:
         38:36:25:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwNtLbpuKQa83laj2K4qPqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwMTMwMDcwMTEyWhcNMjYwMTMxMDcwMTEyWjAzMTEwLwYDVQQD
Eyg4NWRmMmQ1MmZiYzljZjc2NzVkNmE3YTA4ZWM0NmQ0MzIyZmJmMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoDgXKtT3Y0dH7n1kTCO4Xs7oeEj
/G3cGwsYrJn5K1g9TBBF45DOqyDWmh9E8jc4vZyWmrDH+vJTICPhkzzPNpPGGS1V
uSQ7+pZr40hTY27FlWzoVjyUwVlooe7FgtWba6p2vaaVL4F5QKTr1X2KTPPLFfSi
OLVzSsTbhtSjUo0cIvvNOpv/jdW/ZJhNFR8ni/h7maUuKKvbgVT5FFJenEZC3GfX
Fyxvm3Iofjmt/W5djK3Q1fXBTKR9YF0CdccX0jENT2WZzwb1pfwYgF+KUHI6qGY6
ZI5qyfpB50Sr9bubNGqJGv4RL7yRuGnMvedIBYbY0lb7SGATrwUlB4mbJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXfLVL7yc92ddanoI7EbUMi+/OXMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDtUBOrI
gKjB3dldqPt26w0QbRzELuA51n4PJLmtnS8wzvtvKlOM0cQ9CLjeaO3sph7Jip4R
zOx/7xlyppHKrbZf5Rmfgv7LPpJPZj/03Y0bFfQQnnmt67zUsAWgl7R689vUtDkr
0tk9DzT7YYWwAEo2wfyB4Ei6SqCHjQyxlpF7Gmm3FAJG6oZxwpQTMkKkpaUQn7hy
y+ZSEyZqK3UwxdTHCMECWqLnZJ7ohZ3SNHywMbT7UDn1MI0MLsbcsDH+M8t6jMxv
+KBHib3fapE8TD7kG04PrLvSCgZKzqZ5rbTBC4RnCViPt4JlYSyT38pbaVcDoCHM
e3g7AMwTODYlag==
-----END CERTIFICATE-----
Generated at Fri Jan 30 08:45:54 2026 by rpki-client